last executing test programs: 1m10.964212329s ago: executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1m10.556350334s ago: executing program 0: syz_mount_image$bcachefs(&(0x7f00000004c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2c17e02fd1bda9ada273e501291f1b7006f10052a3605ecf816b92a1c7736efc2c32a87e428f17a71174476ef1548b28ac14b69a77541ed7c48a578deb07c2d36d6102e3140227a1dc6003f69df7f0118a2389bb6f9cafb8b57116aea9c27fccc25ec740abbe8e20a256892cce545aea3a9b1bcfad93f03a1d232b335715f6ac8e54460ea407e79bffa96b1fbfddefc76b497b3a5c39e924694c465efb59eba1f2ac1c257564f25035e26253a4", @ANYRES64, @ANYRES64, @ANYRESOCT], 0x1, 0x5d9f, &(0x7f0000005dc0)="$eJzs3X1wXWeZGPBz7r2yZMuOZWOIHDuOQgzU2QacuEkxu9QqXShQQ4yDk+Cs1zaJDF4c2/gjTuxt89UNaaAdzySzSZPS8SYM3enstGG8bcquO2NCCDvsTCaG8gebfm2m0D/KZj2LHajNoB1J50j3Hp33nKt7rhwHfr8Z6eo9eu7zvs+57/mUdBUBAADwK+HF39v/+scv++B3Hhg5e++H/+TO+6P++vjyvjRgIHm8+40aIbNp1XfPt7yyvY3B8cfsvLj0T5e8PvDg+o89svZD3932Z4uGV6wcueFrx2986MHn3//z5x9/cn1ZP+l8unqqHf9VHEUrfnj88Ye+9eeXji2Lx/qPB+6LFi2KF39jUZxJsfpcFEV3TI6z9ZvHz67ZMfZ4/xd7W5YvzCQx33+19SXz7MjWTz998nPD3zo+tHfNj89cv+e+qZC4r2k+RdEl25qf3xNF0dzkY0w62wbTJyePG6Iomtf0vPeWjOuqNsd/TaC9PHmckzz2l+RJv39lpt1ocxyNzGNvm8/rVG2W82dl1192ZzRb0jovSR6fSx6vnmGeevoRR7U4akwOf1c8NUeiptctjuLxud032a6Nt6PJdpRtx5l2LdOu92TqGu83WbH1OG5dnsZllqe740ay/MrmfXWOjYHlS5PHvmRD/VnajrJfTOif9sVUHVHTuE5fqIkRUAtse+nyyeElL0Z/sqw/XjztOaM50u+d/vb2za/94PBzA4FxxM/GSf64o/zDI0+d/OqtJ5YOhvJvqyX5ax3lf7H+0rmvnBmcH8x/NM1f7yj/pl/86OEHbjq0JLh+Tqfrp9FR/pVfmn/k7KGNvUOh/MfS/H0d5b9hy4q1l585eFdw/KvT9TO3o/zff3TV+S1Hv34imD9K88/rKP8rTz2zvL70sVPB/CfT9dPfUf6b1zyx7qPLHnwyuP5fTvMv6Cj/5lMPbdv79AurgvNzQ7p+BjrKf27d9149P7D+mdC+Mz52oY+wAL9c3pKcYz2ctDu9zqyq6XrhiaHGxDnf/ORjQTc7yoibrl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFOPrftPn29uv+P/3bXp1H9esbORtHsbURRHUfRafaKdLp8TRfHcKIr2H9i+78DO3Z8Z+p09B/ft3r5raPuBoZHdB/bdM/T3/u7QvpG9u7bfM/bd1desmXje4vFsUbQ4vnzaWEZHR0ejKBpqXpb29wcfefb/b3rybz4VRavf+r0VjWA97/nvr35wSc7njHh4dMO/uf7Rw3P+z8KJBQPJuAZC4xpoXZaOoH/45b/4wHM/GBvX24rG9fhLt/x1y4DGF0zlSdR6o9r4F73xvNxxTI56ajzj66uxY+eukdXl6zcOrN93vfDHZ/7j3Zv+5cT67QvW0eb6HVurjdFHfvLAu+77wMj7LuLXvWx9N5UwPr50/fUl6/uSpK5LAnXVAnXdNfTK6X/1H/7rV+6LVjd+csX0vsvq6kkmQE+8tK1+0x7mxYtaYvuS+PQVT5/3ngN37n3P/nsOX7Pzzu2fGfnMyO41a65fe+2aa69bu+Y946VPfO5a/Wn/72qz/vlJpvnxstz1ll2a9nvF+Od6lAw7fWj6olVP1D/xmFnPaXi26v7ke/3x4mm5RnOk3zv97e2bX/vB4edCW1787ESPc6MFE4/x8kDkrswT65MDzuv/wmyXe36/b1f6ub3tsmxcZfNqbFzl86p5RAX7sZeuevgnT3/hX9/Wxv6iKXR8fOk4541tLtdGTdvt9HWVV1cbr89w3nq4/Zp9f3zPzs1Hy/bnza9M8+eMeHj0fy+PP3Zw/1/sm1hwQY6XzQPq8Hg5Oeqp8Yyvr77k9bhY129vVE/q6s8d18b46fe/684TvzY5vjlzoru3Hziw79qJz2/Wuv5yzsIlO+9fdvm0uq6b+Fy2378i087b7/c07+5r+fWV7fez/UzF5+cbyrT7o3pHx4lNv/jRugduOrQkeJw43e5x4ndbWvWKx4laYHt/5G++PPT6bZ98vWw+3bh/2b1Lcj5nyxse/fof/fq177vlpg9NLJjl/dBPamO7neYBdbgfmhx1Mp50fY3vh667QPvTNup4417nlg0xHh694mvvvPn82c9/YmJB2fqdjM5bv2vK9/P1QF239bx90aM/Xvb27s3f/Vt/etW7582/MPO37de9L1m/fYH1OznqZDz15vX77tv37Lpjon3xnrdN6C25/kmPO/vvOfy57bt2jezb315d7R5P036ya7nT42l69FhcUlf6ek3VNXtftLO+2t3e0vHfkcnR6fYGkJo6LsxpWZ7df6b3/VZcEm169xe++VI8NHG87Nb91rSfyzIH5k7vt5ZdJ7090269TmpETXVPmH6dNP6UsuukbD9l10lXZdrl1zEP51YSev16kiNv3n3TzHgbYxlC82MwyT+YtNPzzRXvjq6vP/eOj8TD7c2Pds+n037+TmYFdXo+XTY/Vkb54+r2/Hhn5knlr/fR3JH1BV6Pstd7ZUui0dEK1+UPj12XDwRGnV6X90dxR/mHR546+dVbTywN5t9WS/LXOsr/Yv2lc185Mzg/mP9omr/RUf6VX5p/5Oyhjb3B/MfS9dPXUf4btqxYe/mZg3cF869Oxz+3o/zff3TV+S1Hv34imD9K8/d3lP/mNU+s++iyB58M5n85TvoZ23aj6PjZNTsm2vH4/ay+pnH0tIwryrbjTLuWadeb27WJn/VOdlCP49blaVxmeVpHI1l+ZdMY82wKLE+32r5kw/5Z2o6yXxQvT3dP6bhOB44/F0qt6dwjb3nZ/cluee2Hg3/Q3E5//p/Ogd7GxGt3XWZ9lR0/snvvNF/w52+BWxhl5wvTf/42r6Pt75WnnlleX/rYqeB91ZPt3lfd29KaV3Jftep4g/uLk+n+tNr+aDCU/+U0f7XjQTB/cjwom2fvyLRL51lPfn9l8yx7ntIfLeio7s2nHtq29+kXVgXn2YaJDb58nj3W0lpQOs+q/Vw6OM+ejbuyPoL5N3TnvCY4z5LzmrJ5dnWmXX2etZ6Pfix5vDsT35/cIZ5p3efWfe/V8wPrnwnOs2PtzrM/bGkNlM6zaue3wddp8vy2m+fnU7dsp87P39znn2/Y+WHy49zZOj/cGFg+0/PD/mlfTNURvRnPDwP7GQAo8p1H7vm/ze30+j89dqfX/9/MPK/qdWX296FS3bquDOY/1p3rleB56uT1ymxfb832efbsXm/N/n32N/d5/OzfF5rd60rXIUk7yn4xwXUIAABvhCv/3Zd/s7mdXv9P/t5b8vf/L6TtzPNd5wbyX7Dr3Nm+T+I6Ojd/l36/ovw+2Gzfp3IfwH2Acu4DAAD8cti6Y9/IyP69228f2bpz984Dk8t7xq+cpv+e6t9PHjdk8pT9/nRe/LyC+E8E87eO572B+JDG+O+8RtGnb//sdVvvGLlrpvWH+iurPy++qP7s9UWo/rWB+JCq9Yf6K6s/L76o/puC+VvH875AfEjV+kP9ldWfF19U/yeD+VvH8+uB+JCq9Yf6K6s/L76o/uzfg4Xq/41AfEjV+kP9ldWfF19U/83B/K3jeX8gPqRq/aH+yurPiy+q/5Zg/tbx/INAfEjV+kP9ldWfF19U/63B/K3jWReID6laf6i/svrz4ovq/1Qwf+t4hgPxIVXrD/VXVn9efFH9m4P5W8fzDwPxIVXrD/VXVn9efFH9twXzt47nA4H4kKr1h/orqz8vvqj+3wrmbx3PPwrEh1StP9RfWf158UX1bwnmbx3PbwbiQ6rWH+ovv/5GYT1F9f92MH/reD4YiA+pWn+ov7LXPy++qP6twfyt4/lQID6kav2h/srqz4svqH/aj1pC9f/j5HFbfrfTVK0/1F9x/T258UWv//Zg/tbxfDgQH1K1/lB/Za9/XnxR/Z8O5m8dz0cC8SFV6w/1V1Z/XnxR/bcH87eO56OB+JCq9Yf6K6s/L76o/uz7HYbq/yeB+JCq9Yf6K6s/L76o/pFg/tbxrA/Eh1StP9RfWf158UX17wjmz3/fgGx8SNX6Q/2V1Z8XX1T/Z4L5W8fz8UB8SNX6Q/2V1Z8XX1T/Z4P5W8dzYyA+pGr9of7K6s+LL6p/ZzB/63g2BOJDZlT//e33V1Z/XnxR/b8TzN86nk8E4kOqvv6h/srqz4svqv9zwfyt49kYiA9pRI1K9Yf6K6s/L76o/l3B/K3juSkQH1L19Q/1V1Z/XnxR/XcG87eO55OB+JCq9Yf6K6s/L76o/t3B/K3j2RSID6laf6i/svrz4ovq3xPM3zqemwPxIVXrD/VXVn9efFH9e4P5W8dzSyA+pGr9of7K6s+LL6r/88H8reO5NRAfUrX+UH9l9efFF9W/L5i/dTyfCsSHVK0/1F9Z/XnxRfXvD+ZvHc/mQHxI1fpD/ZXVnxdfVP+BYP7W8dwWiA+pWn+ov7L68+KL6j8YzN86nt8KxIdUrT/UX1n9efFF9d8VzN86ni2B+JCq9Yf6K6s/L76o/kPB/K3j+e1AfEjV+kP9ldWfF19Uf/Z9IEP1bw3Eh0zWf2DfyMjWg3vv2H5gZOvuPXeM7N96aN/OAwdGkhO1qn9XFv67oDf4D1ko1LJ9TEySnbv3j+ybvv+eWzh/m+dENP5nT3MnHuO3tRWffdvrTmfNxTLfe6JG4fq6LNNemPzseGHg/Wiz8WnaZeNfTH8/2my3jZL3cS3bP2X7D+2f4oL4vP1raH9Wdvyb8f6vdH73FdafXdyb/GFfb/zWtuKjgv/v1t58rfZ3p8H5+nJ78zX7vutl8zUbP9P52l9xvmb7D82nWkF80flQu/N1cyA+1f78jIP15s2rmf6fwTTtjP7PYObTNB38L4P2t4dqf0ce3B6SQZdtD9m/4y7bHrLxM90e5lbcHrL9l20PefFF18ftbg+3BOJD2p8P1d63IDgfVrc3H7L/x6psPmTjZzof+irOh2z/ZfMhL77ofmG78+GTgfh2tT8/qr2vSHB+bGtvfmT/n0TZ/MjGz3R+xBXnR7b/svmRF1/085R258cnAvGpluPnjv3jF/U7t+/aeTjzCxgDyfHzjT4ezvZxOYpu+evop7/xlz+b+JSMozZtHGXnE3FmHIuSkSwK/d/DwLhv/2//ftM3f/6FL0fR6rfWl4fHPTXkqU8Z8fDo4ntXfvXWt536wNj4a4Xjn4xM/29xyf87zsan9TR27dl/4Nd27Dm4u93fuCqWvh9KbbI9S++Hkiyst/n+JqG/J5jp+5v0TPvi4tT2+5sA/JJYeOzZBc3t9P3/0uPRYLLvm5vsANPl7Z9nV3t/veB59tH2zrNXZestOc/Oxqf1tnueXat4np3tv+w8Oy++6Pf22j3P/nggfqZa58nYBBmfHyNbD+3Z1/w7cbP9f2u7P97Z/T++1cc3u+/b2Kn2xz+77ws5++Of3f8DPPvjn93/89ypC3a9lLxZZNn7R5ZdR4X+Ln2m11Fzpn1xcXIdBQAXv3+x74f/trmdXv8nV7GT1/9fTNr1Lvc/29dRs31dOdvnyW/+99+f3esg1wMFnV0EXA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5PvD//lfvtHc7m0Mjj+++Hv7X//4ZR/8zgMjZ+/98J/cef+lf7rk9YEH13/skbUf+u62P1s0vGLlyA1fO37jQw8+//6fP//4k+tLOxqYeLg6afZFUfxXcRSt+OHxxx/61p9fOrYsHus/HrgvWrQoXvyNRXEmw+pzURTdMTnO1m8eP7tmx9jj/V/sbVm+MJMkW1fUX0/H0zLO6O7SingT6kvm2ZGtn3765OeGv3V8aO+aH5+5fs99UyFxX9N8iqJLtjU/vyeKornJx5h0tg2mT04eN0RRNK/pee8tGddVbY7/mkB7efI4J3nsL8mTfv/KTLvR5jgamcfeNp/Xqdos58/Krr/szmi2pHVekjw+lzxePcM89fQjjmpx1Jgc/q54ao5ETa9bHMXjc7tvsl0bb0eT7SjbjjPtWqZd78nUNd5vsmLrcdy6PI3LLE93x41k+ZXN++ocGwPLlyaPfcmG+rO0HWW/mNA/7YupOqKmcZ2+UBMjoBbY9tLlk8NLXoz+ZFl/vHjac0ZzpN87/e3tm1/7weHnBgLjiJ+Nk/xxR/mHR546+dVbTywdDOXfVkvy1zrK/2L9pXNfOTM4P5j/aJq/3lH+Tb/40cMP3HRoSXD9nE7XT6Oj/Cu/NP/I2UMbe4dC+Y+l+fs6yn/DlhVrLz9z8K7g+Fen62duR/m//+iq81uOfv1EMH+U5p/XUf5XnnpmeX3pY6eC+U+m66e/o/w3r3li3UeXPfhkcP2/nOZf0FH+zace2rb36RdWBefnhnT9DHSU/9y67716fmD9M6F9Z3zsQh9hAX65vCU5x3o4aXd6nVlV0/XCE0ONiXO++cnHgm52lBE3XbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDIntH6web2qyceufGz/2vr/2jEURQHnjOaI/1efc7w8FAH41j5pflHzh7a2Ju2x/oe7CAPAAAAMN2yV77w+eZ2eh1eS9px1BcNRofiudGy3Oen9wiWpa24dXn2HsLcqciu5Kl1KU+9S3kaXckzEGV1Op45XcrT26U8fSV5+qL28swtzFNrezzzupSnv0t55ncpz4Iu5bmkS3kWdilPdsvodB4u6lKexV3K85Yu5VnSpTxv7STP0PQ8b+vSeC7tUp7sPeWZzsMFSeRloTzjX9RL8zTi+uQ38u6np/1cXrGf/jb7yd6zn2k/c9vs56qK/fS12c87K/YTt9nPqszzajPsp1bSTzpv7w7Vk7banP/3dCnP4S7lOdKlPL/bpTz/tEt5/lmX8txbMU+x7Nkq8Kvk95+/+o+a2+n1f0/SjqOBqLdxXTQv2eNk7wKke5Arxj9PP96FdkhpvuWZ5T1l+QK7rDTfFTMdX/YGQibf2wvzNaZdr+bkazTnW9mlfAAAADAT//zckZYfzU2//h+MehtLJq9f35F5fun1ek9+v2m+q7uUDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4W3btNUausnwA+Ht2Zmfmv1y6kLZM6W3T9k8hhF5oagQVJk0kwQhbxJZLQ9YKC9uwtNBtgVZNEYxtNsGgxQu3DxYkhhCBhKRB1wQDSvxgY4MYLq4LK4EvRJDegKJjZvec3bOzM+wySmv19ws5c55znud93nNISJ6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85/vj9//2bDoe7Ott7xro6A9RqPxTU7mG5F4mVyq1NbCPd55be+VfX9q6O4krvfPZBhYCAAAAxnn8vBmnp+NkDk9G7ygUQj67NOSj3Ji6YvwdoBjHTa3Dv3MWheWZ3f9/YVRqGopPjk4aU1eI6wpxnInrerZsvX5td3fnxk/wpNKn+jmq9xOFMPT5Ys6JYdWi7c/sidqGn6NlgudoiusWb7rhxsU9W7aete6Gtdd1Xte5ftmy5ecsXbb07HOWLb52XXfnkuFjyE+wXgihNPa9TPAvEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjoBtv939rXQ82Nfb3jXQ0d8ShRDVqSnXkNzL5Eqltgb28cp9D87KzLh7bxJXeuezDSwEAAAAjPOrx2ecn46TOTwZvaNQCPlsLmTCjKF43mhqNoRyObm+oOr6kdg7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZO072P7ndDzY19veNdDRf1wUQlSnplxDci+TK5XaGtjH6mU/Ov8LM++4N4krvYsNrAMAAACM98LpzXek42QOb4rjKBRCMcwPzdGMMXXJt4FTq9arzkvWmT3JvOpvB/Xy5k8y77RJ5p0xQd7F8e+tAQAAAI49V7T+bnU6Tub/5jiOQmvIZ4shE8cTzfHJd4G5VXlJ/UTzfVI/r079RHN/Ul899wMAAMD/srPefOLDdDx+/i+GfLYwMn9P9Pf0i+JffycHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr59cELf5GOB/t627sGOvozUQhRnZpyDcm9TK5UamtgH6v+8caO2y+9ZWoSV3rnsw0sBAAAAIzzaO7Tt6TjZA5PRu8oFEI+2xKaw3FDc/9ruSlT131z5uwQQmkoIZcLt67dtGnj2cPHJO9L0a7PLbyh78xxeUuHj0f+SQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH/Vskd2rknHg3297V0DHf3/F4UQ1akp15Dcy+RKpbYG9vHCzjMOX3XXU31JXOldbGAdAAAAYLxZ3U//JR0nc3gy+0ehEIohF3Jh+lCcnvUrmqrWq/fNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjv0bNl6/Vru7s7Nzpx4sTJyMnR/i8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtPx8/ffeTseDfb3tXQMd/YUohKhOTbmG5F4mVyq1NbCPT10155zZ+zffnMSV3sUG1gEAAADGW/PW5v3pOJnDk9k/CoVQDM2hOUyL4/GG5v/WI7FbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaJobolD+mE5ZebR3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwSDry46r50PNjX29410NF/QhRCVKemXENyL5Mrldoa2MeVe7/9lRt3PXtGEld657MNLAQAAACM0/zmi19Nx8kcnozeUSiEfHZWyIdZ8ZXusQtEmSSx5neB0bqvjynLTLpuR9WOh3dWiL9DFEb2GYY+O4zW3fWRdcX4alPr5N4TAAAAHMum7bj4G+k4mf+b4zgKrSGfnZaaq28cU98y6Tn+7jF1J0y67qdj6lonqPs3vBIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEF3rnzulHQ82Nfb3jXQ0R9FIUR1aso1JPcyuVKprYF9lDrve/rhy/tmJHGld7GBdQAAAIDxLn2j8N10nMzhyewfhUIohtnhxDB7aO4PrWPrk7zjSr9/ecXul64IYcn05+dk6/b74Z7L3g6HPvvae8OHoTCEprFJTSFMiftFdfpd/YdHVj3z4fYHQlgyLTOrfr/RVqOHKlGpfPK2BQ9fPn3virrLAAAAwDGt8OCBn6TjZP5PJuootIZ8dn3d+T/Jq8z/zfH5hPN/e8/MbVPjY/wFoKqiqTXu11SnX++7D7QdXPPlg5X5//k5hZH/V+D0+WPz063Sx6pvDlGpPPeJ01YfPnDTJcMXkv6ZOv3XNM87aedbM+cl/Qvx9WvCZPuHqv49HYfmL2o5/oKx/UMIbbX6//jCx99fde+7Vwz3r/++F/9p8PNTw4YfFLqT4/CV8f1X3r9859bc61PG9o/q9F/47JP7H7t11Z3Vz39qtlb/8ccqla7Zcu++2xfetqLz3FT/pjr9b2575Z3v/OyXD1X675vbMtJ/4Uc8/4T998zfsW/X9nvWjH3/pVr9rz5r45Nb1l15V/Xzt1QtnH7z6eP49//qrOiizT0vb6y+BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGzreOyDQ+l4sK+3vWugo78pCiGqU1OuIbmXyZVKbR/VsJyvefk3mT0fPLS/eHwSV3oXP/bTAAAAALVcsuLV69JxMocns38UCqEYciEXWobm/pO3LXj48ul7V4TW+H78m+3e0LPpzGs3bF5/zZF+BAAAAGACu857f0U6Tub/bBxHoTXkswtCczz/r7x/+c6tudenJPN/CGHoz/3Za9d1dy4JI98JejoOzV/UcvwFSV4m/i1U8hZdvaE7/kyQrPvUo59Zeu5ll47kN6Xzzx7Nm/vEaasPH7jpkpp5y0bzXp0VXbS55+WNqX2WRvKWjub17rt94W0rOs9NniOKfwvx8yR5e+bv2Ldr+z1rkrym+LclXg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOGk9/7+tXQ82Nfb3jXQ0R8yIUR1aso1JPcyuVKprYF9fHD+84OHW7/4YBJXeuezDSwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NdPiJRlHAfw55kZ29ExmzXB3bJFyYtCICxJHsK99IfYSoyiBGmLtktFQpSRh9SlRaqDUGDoRTQ6F3uQysMmaVEQWXSITgV1qtjDrsQaFTv7vLMzr77s9oYS8vnA8MzvmXm+83ufeebVBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/tcd+vKfWWffU+lrjuddeuPDATXd9cXB05tV7P3ruwNqP11xojg3f//q2u78Z+bx3aGDj6NYPJh4cHztz559njhwdXvSDXp4fNqeyHkL8LYYw8PPEkfGzX66dm4tznx+b+0Nvb1z9SW/MJWyZDSE81e6z+8WJmcGn58YDb3QvuyEXkr+u0Khm/cxrdvfLtaWeztm+x588MfnM0NmJ9XsGf52+/fn9C2+J9Y7zFMKqkc71y0IIy9NjTk8a+7LFadwRQljRse6ORfq6dYn931ZQr0vjdWlsLJKTvb4hV9eW2EctN/YscV1ZlSucn5ffv/zN6ErJrnNVGk+lcfO/zKlmjxgqMdTa7T8bF85I6PjeYoits11v15VWHdp1yNcxV1dydXVZ7rpan5s2thpj93z2vtx8djuupfkNnffqy9hZMN+fxnr6of6R1SH/ZF7jkicL1xE6+pq6WgejQKXgt5fNt9tLX0YjzTXi6kvW/H0Z2WtTnz2x6/fvXznVLOgjvh9TfiyVPzR6bPK9R0/39xXlj1RSfqVU/rnqV7PvTvetLMw/nOVXS+U//Ncvhw4+tHdN4f5MZftTK5W/8c2V+2b27uxZX5R/PMuvl8rfuntg2y3TL75U2P+WbH+Wl8r/7q1NF3cf/vB0YX7I8leUyv/h2Ml11f63zxfmT2b70yiV/8jgO9vvu3nsaOH+f53lX18qf9f58ZE9Jz7dVHg+d2T70yyVP7v9258uNodPFt074/Gr/S8swLXlxvR/rEOpLvt35n/1D/t1iAIACARRFMGod/DYHtegwmA2vgebt86PXpij7s3XzvWfjx4l2gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuFQAA//9SnmSb") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m6.851141957s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x5}) 1m6.520919943s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1m4.908271949s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000008000100fcff00001400fdff"], 0x40) 1m4.746537244s ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = gettid() sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xfd}, 0x0) 1m4.674678613s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) 1m4.58273798s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x0, @local}], 0x20) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000040)="b3", 0x1}], 0x1}], 0x1, 0x0) 1m4.429030327s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000bc40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='%', 0x1}, {&(0x7f0000000100)="1ccb3aaca175c1887c846477e4ab0bde", 0x10}, {0x0}], 0x3}}], 0x1, 0x0) 1m4.316615864s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) 1m4.286699939s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x24, 0xd, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x24}}, 0x0) 1m4.166823479s ago: executing program 1: syz_mount_image$bcachefs(&(0x7f00000004c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2c17e02fd1bda9ada273e501291f1b7006f10052a3605ecf816b92a1c7736efc2c32a87e428f17a71174476ef1548b28ac14b69a77541ed7c48a578deb07c2d36d6102e3140227a1dc6003f69df7f0118a2389bb6f9cafb8b57116aea9c27fccc25ec740abbe8e20a256892cce545aea3a9b1bcfad93f03a1d232b335715f6ac8e54460ea407e79bffa96b1fbfddefc76b497b3a5c39e924694c465efb59eba1f2ac1c257564f25035e26253a4", @ANYRES64, @ANYRES64, @ANYRESOCT], 0x1, 0x5d9f, &(0x7f0000005dc0)="$eJzs3X1wXWeZGPBz7r2yZMuOZWOIHDuOQgzU2QacuEkxu9QqXShQQ4yDk+Cs1zaJDF4c2/gjTuxt89UNaaAdzySzSZPS8SYM3enstGG8bcquO2NCCDvsTCaG8gebfm2m0D/KZj2LHajNoB1J50j3Hp33nKt7rhwHfr8Z6eo9eu7zvs+57/mUdBUBAADwK+HF39v/+scv++B3Hhg5e++H/+TO+6P++vjyvjRgIHm8+40aIbNp1XfPt7yyvY3B8cfsvLj0T5e8PvDg+o89svZD3932Z4uGV6wcueFrx2986MHn3//z5x9/cn1ZP+l8unqqHf9VHEUrfnj88Ye+9eeXji2Lx/qPB+6LFi2KF39jUZxJsfpcFEV3TI6z9ZvHz67ZMfZ4/xd7W5YvzCQx33+19SXz7MjWTz998nPD3zo+tHfNj89cv+e+qZC4r2k+RdEl25qf3xNF0dzkY0w62wbTJyePG6Iomtf0vPeWjOuqNsd/TaC9PHmckzz2l+RJv39lpt1ocxyNzGNvm8/rVG2W82dl1192ZzRb0jovSR6fSx6vnmGeevoRR7U4akwOf1c8NUeiptctjuLxud032a6Nt6PJdpRtx5l2LdOu92TqGu83WbH1OG5dnsZllqe740ay/MrmfXWOjYHlS5PHvmRD/VnajrJfTOif9sVUHVHTuE5fqIkRUAtse+nyyeElL0Z/sqw/XjztOaM50u+d/vb2za/94PBzA4FxxM/GSf64o/zDI0+d/OqtJ5YOhvJvqyX5ax3lf7H+0rmvnBmcH8x/NM1f7yj/pl/86OEHbjq0JLh+Tqfrp9FR/pVfmn/k7KGNvUOh/MfS/H0d5b9hy4q1l585eFdw/KvT9TO3o/zff3TV+S1Hv34imD9K88/rKP8rTz2zvL70sVPB/CfT9dPfUf6b1zyx7qPLHnwyuP5fTvMv6Cj/5lMPbdv79AurgvNzQ7p+BjrKf27d9149P7D+mdC+Mz52oY+wAL9c3pKcYz2ctDu9zqyq6XrhiaHGxDnf/ORjQTc7yoibrl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFOPrftPn29uv+P/3bXp1H9esbORtHsbURRHUfRafaKdLp8TRfHcKIr2H9i+78DO3Z8Z+p09B/ft3r5raPuBoZHdB/bdM/T3/u7QvpG9u7bfM/bd1desmXje4vFsUbQ4vnzaWEZHR0ejKBpqXpb29wcfefb/b3rybz4VRavf+r0VjWA97/nvr35wSc7njHh4dMO/uf7Rw3P+z8KJBQPJuAZC4xpoXZaOoH/45b/4wHM/GBvX24rG9fhLt/x1y4DGF0zlSdR6o9r4F73xvNxxTI56ajzj66uxY+eukdXl6zcOrN93vfDHZ/7j3Zv+5cT67QvW0eb6HVurjdFHfvLAu+77wMj7LuLXvWx9N5UwPr50/fUl6/uSpK5LAnXVAnXdNfTK6X/1H/7rV+6LVjd+csX0vsvq6kkmQE+8tK1+0x7mxYtaYvuS+PQVT5/3ngN37n3P/nsOX7Pzzu2fGfnMyO41a65fe+2aa69bu+Y946VPfO5a/Wn/72qz/vlJpvnxstz1ll2a9nvF+Od6lAw7fWj6olVP1D/xmFnPaXi26v7ke/3x4mm5RnOk3zv97e2bX/vB4edCW1787ESPc6MFE4/x8kDkrswT65MDzuv/wmyXe36/b1f6ub3tsmxcZfNqbFzl86p5RAX7sZeuevgnT3/hX9/Wxv6iKXR8fOk4541tLtdGTdvt9HWVV1cbr89w3nq4/Zp9f3zPzs1Hy/bnza9M8+eMeHj0fy+PP3Zw/1/sm1hwQY6XzQPq8Hg5Oeqp8Yyvr77k9bhY129vVE/q6s8d18b46fe/684TvzY5vjlzoru3Hziw79qJz2/Wuv5yzsIlO+9fdvm0uq6b+Fy2378i087b7/c07+5r+fWV7fez/UzF5+cbyrT7o3pHx4lNv/jRugduOrQkeJw43e5x4ndbWvWKx4laYHt/5G++PPT6bZ98vWw+3bh/2b1Lcj5nyxse/fof/fq177vlpg9NLJjl/dBPamO7neYBdbgfmhx1Mp50fY3vh667QPvTNup4417nlg0xHh694mvvvPn82c9/YmJB2fqdjM5bv2vK9/P1QF239bx90aM/Xvb27s3f/Vt/etW7582/MPO37de9L1m/fYH1OznqZDz15vX77tv37Lpjon3xnrdN6C25/kmPO/vvOfy57bt2jezb315d7R5P036ya7nT42l69FhcUlf6ek3VNXtftLO+2t3e0vHfkcnR6fYGkJo6LsxpWZ7df6b3/VZcEm169xe++VI8NHG87Nb91rSfyzIH5k7vt5ZdJ7090269TmpETXVPmH6dNP6UsuukbD9l10lXZdrl1zEP51YSev16kiNv3n3TzHgbYxlC82MwyT+YtNPzzRXvjq6vP/eOj8TD7c2Pds+n037+TmYFdXo+XTY/Vkb54+r2/Hhn5knlr/fR3JH1BV6Pstd7ZUui0dEK1+UPj12XDwRGnV6X90dxR/mHR546+dVbTywN5t9WS/LXOsr/Yv2lc185Mzg/mP9omr/RUf6VX5p/5Oyhjb3B/MfS9dPXUf4btqxYe/mZg3cF869Oxz+3o/zff3TV+S1Hv34imD9K8/d3lP/mNU+s++iyB58M5n85TvoZ23aj6PjZNTsm2vH4/ay+pnH0tIwryrbjTLuWadeb27WJn/VOdlCP49blaVxmeVpHI1l+ZdMY82wKLE+32r5kw/5Z2o6yXxQvT3dP6bhOB44/F0qt6dwjb3nZ/cluee2Hg3/Q3E5//p/Ogd7GxGt3XWZ9lR0/snvvNF/w52+BWxhl5wvTf/42r6Pt75WnnlleX/rYqeB91ZPt3lfd29KaV3Jftep4g/uLk+n+tNr+aDCU/+U0f7XjQTB/cjwom2fvyLRL51lPfn9l8yx7ntIfLeio7s2nHtq29+kXVgXn2YaJDb58nj3W0lpQOs+q/Vw6OM+ejbuyPoL5N3TnvCY4z5LzmrJ5dnWmXX2etZ6Pfix5vDsT35/cIZ5p3efWfe/V8wPrnwnOs2PtzrM/bGkNlM6zaue3wddp8vy2m+fnU7dsp87P39znn2/Y+WHy49zZOj/cGFg+0/PD/mlfTNURvRnPDwP7GQAo8p1H7vm/ze30+j89dqfX/9/MPK/qdWX296FS3bquDOY/1p3rleB56uT1ymxfb832efbsXm/N/n32N/d5/OzfF5rd60rXIUk7yn4xwXUIAABvhCv/3Zd/s7mdXv9P/t5b8vf/L6TtzPNd5wbyX7Dr3Nm+T+I6Ojd/l36/ovw+2Gzfp3IfwH2Acu4DAAD8cti6Y9/IyP69228f2bpz984Dk8t7xq+cpv+e6t9PHjdk8pT9/nRe/LyC+E8E87eO572B+JDG+O+8RtGnb//sdVvvGLlrpvWH+iurPy++qP7s9UWo/rWB+JCq9Yf6K6s/L76o/puC+VvH875AfEjV+kP9ldWfF19U/yeD+VvH8+uB+JCq9Yf6K6s/L76o/uzfg4Xq/41AfEjV+kP9ldWfF19U/83B/K3jeX8gPqRq/aH+yurPiy+q/5Zg/tbx/INAfEjV+kP9ldWfF19U/63B/K3jWReID6laf6i/svrz4ovq/1Qwf+t4hgPxIVXrD/VXVn9efFH9m4P5W8fzDwPxIVXrD/VXVn9efFH9twXzt47nA4H4kKr1h/orqz8vvqj+3wrmbx3PPwrEh1StP9RfWf158UX1bwnmbx3PbwbiQ6rWH+ovv/5GYT1F9f92MH/reD4YiA+pWn+ov7LXPy++qP6twfyt4/lQID6kav2h/srqz4svqH/aj1pC9f/j5HFbfrfTVK0/1F9x/T258UWv//Zg/tbxfDgQH1K1/lB/Za9/XnxR/Z8O5m8dz0cC8SFV6w/1V1Z/XnxR/bcH87eO56OB+JCq9Yf6K6s/L76o/uz7HYbq/yeB+JCq9Yf6K6s/L76o/pFg/tbxrA/Eh1StP9RfWf158UX17wjmz3/fgGx8SNX6Q/2V1Z8XX1T/Z4L5W8fz8UB8SNX6Q/2V1Z8XX1T/Z4P5W8dzYyA+pGr9of7K6s+LL6p/ZzB/63g2BOJDZlT//e33V1Z/XnxR/b8TzN86nk8E4kOqvv6h/srqz4svqv9zwfyt49kYiA9pRI1K9Yf6K6s/L76o/l3B/K3juSkQH1L19Q/1V1Z/XnxR/XcG87eO55OB+JCq9Yf6K6s/L76o/t3B/K3j2RSID6laf6i/svrz4ovq3xPM3zqemwPxIVXrD/VXVn9efFH9e4P5W8dzSyA+pGr9of7K6s+LL6r/88H8reO5NRAfUrX+UH9l9efFF9W/L5i/dTyfCsSHVK0/1F9Z/XnxRfXvD+ZvHc/mQHxI1fpD/ZXVnxdfVP+BYP7W8dwWiA+pWn+ov7L68+KL6j8YzN86nt8KxIdUrT/UX1n9efFF9d8VzN86ni2B+JCq9Yf6K6s/L76o/kPB/K3j+e1AfEjV+kP9ldWfF19Uf/Z9IEP1bw3Eh0zWf2DfyMjWg3vv2H5gZOvuPXeM7N96aN/OAwdGkhO1qn9XFv67oDf4D1ko1LJ9TEySnbv3j+ybvv+eWzh/m+dENP5nT3MnHuO3tRWffdvrTmfNxTLfe6JG4fq6LNNemPzseGHg/Wiz8WnaZeNfTH8/2my3jZL3cS3bP2X7D+2f4oL4vP1raH9Wdvyb8f6vdH73FdafXdyb/GFfb/zWtuKjgv/v1t58rfZ3p8H5+nJ78zX7vutl8zUbP9P52l9xvmb7D82nWkF80flQu/N1cyA+1f78jIP15s2rmf6fwTTtjP7PYObTNB38L4P2t4dqf0ce3B6SQZdtD9m/4y7bHrLxM90e5lbcHrL9l20PefFF18ftbg+3BOJD2p8P1d63IDgfVrc3H7L/x6psPmTjZzof+irOh2z/ZfMhL77ofmG78+GTgfh2tT8/qr2vSHB+bGtvfmT/n0TZ/MjGz3R+xBXnR7b/svmRF1/085R258cnAvGpluPnjv3jF/U7t+/aeTjzCxgDyfHzjT4ezvZxOYpu+evop7/xlz+b+JSMozZtHGXnE3FmHIuSkSwK/d/DwLhv/2//ftM3f/6FL0fR6rfWl4fHPTXkqU8Z8fDo4ntXfvXWt536wNj4a4Xjn4xM/29xyf87zsan9TR27dl/4Nd27Dm4u93fuCqWvh9KbbI9S++Hkiyst/n+JqG/J5jp+5v0TPvi4tT2+5sA/JJYeOzZBc3t9P3/0uPRYLLvm5vsANPl7Z9nV3t/veB59tH2zrNXZestOc/Oxqf1tnueXat4np3tv+w8Oy++6Pf22j3P/nggfqZa58nYBBmfHyNbD+3Z1/w7cbP9f2u7P97Z/T++1cc3u+/b2Kn2xz+77ws5++Of3f8DPPvjn93/89ypC3a9lLxZZNn7R5ZdR4X+Ln2m11Fzpn1xcXIdBQAXv3+x74f/trmdXv8nV7GT1/9fTNr1Lvc/29dRs31dOdvnyW/+99+f3esg1wMFnV0EXA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5PvD//lfvtHc7m0Mjj+++Hv7X//4ZR/8zgMjZ+/98J/cef+lf7rk9YEH13/skbUf+u62P1s0vGLlyA1fO37jQw8+//6fP//4k+tLOxqYeLg6afZFUfxXcRSt+OHxxx/61p9fOrYsHus/HrgvWrQoXvyNRXEmw+pzURTdMTnO1m8eP7tmx9jj/V/sbVm+MJMkW1fUX0/H0zLO6O7SingT6kvm2ZGtn3765OeGv3V8aO+aH5+5fs99UyFxX9N8iqJLtjU/vyeKornJx5h0tg2mT04eN0RRNK/pee8tGddVbY7/mkB7efI4J3nsL8mTfv/KTLvR5jgamcfeNp/Xqdos58/Krr/szmi2pHVekjw+lzxePcM89fQjjmpx1Jgc/q54ao5ETa9bHMXjc7tvsl0bb0eT7SjbjjPtWqZd78nUNd5vsmLrcdy6PI3LLE93x41k+ZXN++ocGwPLlyaPfcmG+rO0HWW/mNA/7YupOqKmcZ2+UBMjoBbY9tLlk8NLXoz+ZFl/vHjac0ZzpN87/e3tm1/7weHnBgLjiJ+Nk/xxR/mHR546+dVbTywdDOXfVkvy1zrK/2L9pXNfOTM4P5j/aJq/3lH+Tb/40cMP3HRoSXD9nE7XT6Oj/Cu/NP/I2UMbe4dC+Y+l+fs6yn/DlhVrLz9z8K7g+Fen62duR/m//+iq81uOfv1EMH+U5p/XUf5XnnpmeX3pY6eC+U+m66e/o/w3r3li3UeXPfhkcP2/nOZf0FH+zace2rb36RdWBefnhnT9DHSU/9y67716fmD9M6F9Z3zsQh9hAX65vCU5x3o4aXd6nVlV0/XCE0ONiXO++cnHgm52lBE3XbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDIntH6web2qyceufGz/2vr/2jEURQHnjOaI/1efc7w8FAH41j5pflHzh7a2Ju2x/oe7CAPAAAAMN2yV77w+eZ2eh1eS9px1BcNRofiudGy3Oen9wiWpa24dXn2HsLcqciu5Kl1KU+9S3kaXckzEGV1Op45XcrT26U8fSV5+qL28swtzFNrezzzupSnv0t55ncpz4Iu5bmkS3kWdilPdsvodB4u6lKexV3K85Yu5VnSpTxv7STP0PQ8b+vSeC7tUp7sPeWZzsMFSeRloTzjX9RL8zTi+uQ38u6np/1cXrGf/jb7yd6zn2k/c9vs56qK/fS12c87K/YTt9nPqszzajPsp1bSTzpv7w7Vk7banP/3dCnP4S7lOdKlPL/bpTz/tEt5/lmX8txbMU+x7Nkq8Kvk95+/+o+a2+n1f0/SjqOBqLdxXTQv2eNk7wKke5Arxj9PP96FdkhpvuWZ5T1l+QK7rDTfFTMdX/YGQibf2wvzNaZdr+bkazTnW9mlfAAAADAT//zckZYfzU2//h+MehtLJq9f35F5fun1ek9+v2m+q7uUDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4W3btNUausnwA+Ht2Zmfmv1y6kLZM6W3T9k8hhF5oagQVJk0kwQhbxJZLQ9YKC9uwtNBtgVZNEYxtNsGgxQu3DxYkhhCBhKRB1wQDSvxgY4MYLq4LK4EvRJDegKJjZvec3bOzM+wySmv19ws5c55znud93nNISJ6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85/vj9//2bDoe7Ott7xro6A9RqPxTU7mG5F4mVyq1NbCPd55be+VfX9q6O4krvfPZBhYCAAAAxnn8vBmnp+NkDk9G7ygUQj67NOSj3Ji6YvwdoBjHTa3Dv3MWheWZ3f9/YVRqGopPjk4aU1eI6wpxnInrerZsvX5td3fnxk/wpNKn+jmq9xOFMPT5Ys6JYdWi7c/sidqGn6NlgudoiusWb7rhxsU9W7aete6Gtdd1Xte5ftmy5ecsXbb07HOWLb52XXfnkuFjyE+wXgihNPa9TPAvEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjoBtv939rXQ82Nfb3jXQ0d8ShRDVqSnXkNzL5Eqltgb28cp9D87KzLh7bxJXeuezDSwEAAAAjPOrx2ecn46TOTwZvaNQCPlsLmTCjKF43mhqNoRyObm+oOr6kdg7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZO072P7ndDzY19veNdDRf1wUQlSnplxDci+TK5XaGtjH6mU/Ov8LM++4N4krvYsNrAMAAACM98LpzXek42QOb4rjKBRCMcwPzdGMMXXJt4FTq9arzkvWmT3JvOpvB/Xy5k8y77RJ5p0xQd7F8e+tAQAAAI49V7T+bnU6Tub/5jiOQmvIZ4shE8cTzfHJd4G5VXlJ/UTzfVI/r079RHN/Ul899wMAAMD/srPefOLDdDx+/i+GfLYwMn9P9Pf0i+JffycHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr59cELf5GOB/t627sGOvozUQhRnZpyDcm9TK5UamtgH6v+8caO2y+9ZWoSV3rnsw0sBAAAAIzzaO7Tt6TjZA5PRu8oFEI+2xKaw3FDc/9ruSlT131z5uwQQmkoIZcLt67dtGnj2cPHJO9L0a7PLbyh78xxeUuHj0f+SQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH/Vskd2rknHg3297V0DHf3/F4UQ1akp15Dcy+RKpbYG9vHCzjMOX3XXU31JXOldbGAdAAAAYLxZ3U//JR0nc3gy+0ehEIohF3Jh+lCcnvUrmqrWq/fNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjv0bNl6/Vru7s7Nzpx4sTJyMnR/i8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtPx8/ffeTseDfb3tXQMd/YUohKhOTbmG5F4mVyq1NbCPT10155zZ+zffnMSV3sUG1gEAAADGW/PW5v3pOJnDk9k/CoVQDM2hOUyL4/GG5v/WI7FbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaJobolD+mE5ZebR3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwSDry46r50PNjX29410NF/QhRCVKemXENyL5Mrldoa2MeVe7/9lRt3PXtGEld657MNLAQAAACM0/zmi19Nx8kcnozeUSiEfHZWyIdZ8ZXusQtEmSSx5neB0bqvjynLTLpuR9WOh3dWiL9DFEb2GYY+O4zW3fWRdcX4alPr5N4TAAAAHMum7bj4G+k4mf+b4zgKrSGfnZaaq28cU98y6Tn+7jF1J0y67qdj6lonqPs3vBIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEF3rnzulHQ82Nfb3jXQ0R9FIUR1aso1JPcyuVKprYF9lDrve/rhy/tmJHGld7GBdQAAAIDxLn2j8N10nMzhyewfhUIohtnhxDB7aO4PrWPrk7zjSr9/ecXul64IYcn05+dk6/b74Z7L3g6HPvvae8OHoTCEprFJTSFMiftFdfpd/YdHVj3z4fYHQlgyLTOrfr/RVqOHKlGpfPK2BQ9fPn3virrLAAAAwDGt8OCBn6TjZP5PJuootIZ8dn3d+T/Jq8z/zfH5hPN/e8/MbVPjY/wFoKqiqTXu11SnX++7D7QdXPPlg5X5//k5hZH/V+D0+WPz063Sx6pvDlGpPPeJ01YfPnDTJcMXkv6ZOv3XNM87aedbM+cl/Qvx9WvCZPuHqv49HYfmL2o5/oKx/UMIbbX6//jCx99fde+7Vwz3r/++F/9p8PNTw4YfFLqT4/CV8f1X3r9859bc61PG9o/q9F/47JP7H7t11Z3Vz39qtlb/8ccqla7Zcu++2xfetqLz3FT/pjr9b2575Z3v/OyXD1X675vbMtJ/4Uc8/4T998zfsW/X9nvWjH3/pVr9rz5r45Nb1l15V/Xzt1QtnH7z6eP49//qrOiizT0vb6y+BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGzreOyDQ+l4sK+3vWugo78pCiGqU1OuIbmXyZVKbR/VsJyvefk3mT0fPLS/eHwSV3oXP/bTAAAAALVcsuLV69JxMocns38UCqEYciEXWobm/pO3LXj48ul7V4TW+H78m+3e0LPpzGs3bF5/zZF+BAAAAGACu857f0U6Tub/bBxHoTXkswtCczz/r7x/+c6tudenJPN/CGHoz/3Za9d1dy4JI98JejoOzV/UcvwFSV4m/i1U8hZdvaE7/kyQrPvUo59Zeu5ll47kN6Xzzx7Nm/vEaasPH7jpkpp5y0bzXp0VXbS55+WNqX2WRvKWjub17rt94W0rOs9NniOKfwvx8yR5e+bv2Ldr+z1rkrym+LclXg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOGk9/7+tXQ82Nfb3jXQ0R8yIUR1aso1JPcyuVKprYF9fHD+84OHW7/4YBJXeuezDSwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NdPiJRlHAfw55kZ29ExmzXB3bJFyYtCICxJHsK99IfYSoyiBGmLtktFQpSRh9SlRaqDUGDoRTQ6F3uQysMmaVEQWXSITgV1qtjDrsQaFTv7vLMzr77s9oYS8vnA8MzvmXm+83ufeebVBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/tcd+vKfWWffU+lrjuddeuPDATXd9cXB05tV7P3ruwNqP11xojg3f//q2u78Z+bx3aGDj6NYPJh4cHztz559njhwdXvSDXp4fNqeyHkL8LYYw8PPEkfGzX66dm4tznx+b+0Nvb1z9SW/MJWyZDSE81e6z+8WJmcGn58YDb3QvuyEXkr+u0Khm/cxrdvfLtaWeztm+x588MfnM0NmJ9XsGf52+/fn9C2+J9Y7zFMKqkc71y0IIy9NjTk8a+7LFadwRQljRse6ORfq6dYn931ZQr0vjdWlsLJKTvb4hV9eW2EctN/YscV1ZlSucn5ffv/zN6ErJrnNVGk+lcfO/zKlmjxgqMdTa7T8bF85I6PjeYoits11v15VWHdp1yNcxV1dydXVZ7rpan5s2thpj93z2vtx8djuupfkNnffqy9hZMN+fxnr6of6R1SH/ZF7jkicL1xE6+pq6WgejQKXgt5fNt9tLX0YjzTXi6kvW/H0Z2WtTnz2x6/fvXznVLOgjvh9TfiyVPzR6bPK9R0/39xXlj1RSfqVU/rnqV7PvTvetLMw/nOVXS+U//Ncvhw4+tHdN4f5MZftTK5W/8c2V+2b27uxZX5R/PMuvl8rfuntg2y3TL75U2P+WbH+Wl8r/7q1NF3cf/vB0YX7I8leUyv/h2Ml11f63zxfmT2b70yiV/8jgO9vvu3nsaOH+f53lX18qf9f58ZE9Jz7dVHg+d2T70yyVP7v9258uNodPFt074/Gr/S8swLXlxvR/rEOpLvt35n/1D/t1iAIACARRFMGod/DYHtegwmA2vgebt86PXpij7s3XzvWfjx4l2gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuFQAA//9SnmSb") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m3.724131935s ago: executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x509}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.970274404s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002"], 0x34}, 0x1, 0x40030000000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f00000001c0)={0x1, &(0x7f0000000080)="6730e1cce342d2d8fe5581aec43dc40f3d495654919c5306924f3cc044d5d80cada649c96c315971c8b3b113b923aef03cacb85a35ebd259a4b1bc11e599affb891bf92793874e68e75a5cd1ac65528ce8403a75e0228ba8549cbdd6a38ca9e6b7070bb92b2841298c462e7f815ef964c2f03ea0530405f4847283c4a00747a478094c948a93fc745ff0e150fdd119a16a64e4cb0565bcf9123efaa18d0029acb6fac5de4a54876b787041de0934c117859bbed34e"}) socket(0x25, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000180)={@local, @local, @void, {@generic={0x8863, "8c96450a3b5b"}}}, 0x0) write$rfkill(r5, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xfd}, 0x8) 59.968957595s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) 33.285069435s ago: executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0x4148, 0x0) 33.162217454s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={r2, 0x0, 0x1, "cd"}, 0x9) 33.14157934s ago: executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x0, 0xfffffffc}, {}, {0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095000000000000000842d6873aada8afa8bbff1b39bd9b5476967f0c9fb5793fb3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400100, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000140)='\'*@+)\\$-,:\x00', 0x0) r2 = socket$inet(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x0, 0x210, 0x138, 0x380, 0x0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x48}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) keyctl$join(0x1, 0x0) r3 = userfaultfd(0x80001) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000140, 0x0, 0x0, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"]}, 0x108) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 32.631214067s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, 0x0, 0x31c467c443849ffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3e8, 0x178, 0x178, 0x3e8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0xc, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a372cc540a830", 0xd}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000640)="d5345033e80d7ff02c718ac9f3a41106ebcb60fb407954da9f6076fc50cacb0e4e26c2a67200186552", 0x29}, {&(0x7f0000000540)="14f4b7f928ddec8eef19a645cbd1ca1c44f58174a7ce1f84169305564a7a3edd839d5bf8c69d582bdb", 0x29}, {&(0x7f0000001740)="1f127ffe2d7ca16aed89ab90f1d41b27469e22823dddfb5b31", 0x19}, {&(0x7f00000017c0)="46db3e19ce1a26b491cd83b959551e3e325c41657b62ef800a36f3fa8db2fcb2a887", 0x22}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001c40)="aa1b895acae9510937460c4cea988e493bf436e400be4374bbe63e4116f8d3f6f5ec", 0x22}, {&(0x7f0000001c80)="d5bef22d20e418c1f7f7cd0010709b9e47303ff0fe6c5b8994fbb6d6ff8790d8fb5db6", 0xfffffdac}], 0x2}}], 0x3, 0x8010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) 32.162499248s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x53) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 32.109497465s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14f9bade", @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703836332c636f6465706167653d6d616363656e746575726f2c6469725f756d61736b3d30303030303030303030303030303030303030303030352c747970653db088b4f12c00"], 0x1, 0x2fe, &(0x7f0000000240)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0800b25207e004"], 0x14}}, 0x20014000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000e0ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32], 0x0, 0x91bb, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x6, 0x8, 0xfffffffe}, 0x10}, 0x90) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000600)={0x7, 0x47, 0x1}, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) getpid() r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TIOCCONS(r4, 0x541d) 31.367010013s ago: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 31.333416004s ago: executing program 4: r0 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 30.248188845s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 30.172503899s ago: executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=00000000000000000000000,decompose,nls=cp932,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c0000000000000b9c00000030303030303030c8f71132e94930303030342c00"], 0x20, 0x6de, &(0x7f0000000840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 30.09475477s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) 30.022586175s ago: executing program 3: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd87) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8100000000000000}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x81}, {}, {}, @raw32={[0x0, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0xd5}, 0x81}}], 0x38) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x1, 0xffff, 0xc6c, 0x3242, r1, 0x1ec3, '\x00', 0x0, r1, 0x5, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) 29.228043149s ago: executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x509}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.313912611s ago: executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[], 0x5, 0x2d5, &(0x7f0000000200)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) 0s ago: executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): 2][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.256996][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.274723][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.295984][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.305231][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.314640][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.325859][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.339122][ T4477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.350490][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.364192][ T4477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.377281][ T5130] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.386576][ T5130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.398166][ T4477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.408536][ T4477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.116910][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 81.165118][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 81.302704][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 81.363994][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 81.525489][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.536335][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.550382][ T5110] bridge_slave_0: entered allmulticast mode [ 81.563107][ T5110] bridge_slave_0: entered promiscuous mode [ 81.583543][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.595501][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.606218][ T5110] bridge_slave_1: entered allmulticast mode [ 81.615224][ T5110] bridge_slave_1: entered promiscuous mode [ 81.623132][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.632484][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.641968][ T5107] bridge_slave_0: entered allmulticast mode [ 81.654188][ T5107] bridge_slave_0: entered promiscuous mode [ 81.692256][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 81.726550][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.745554][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.753675][ T5107] bridge_slave_1: entered allmulticast mode [ 81.762291][ T5107] bridge_slave_1: entered promiscuous mode [ 81.876278][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.903967][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.915163][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.924622][ T5108] bridge_slave_0: entered allmulticast mode [ 81.935247][ T5108] bridge_slave_0: entered promiscuous mode [ 81.953214][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.963171][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.973193][ T5108] bridge_slave_1: entered allmulticast mode [ 81.986424][ T5108] bridge_slave_1: entered promiscuous mode [ 82.016015][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.051107][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.122080][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.200639][ T5110] team0: Port device team_slave_0 added [ 82.224959][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.234066][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.242614][ T5109] bridge_slave_0: entered allmulticast mode [ 82.259292][ T5109] bridge_slave_0: entered promiscuous mode [ 82.280455][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.299164][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.352587][ T5110] team0: Port device team_slave_1 added [ 82.369296][ T5112] Bluetooth: hci3: command tx timeout [ 82.417763][ T5107] team0: Port device team_slave_0 added [ 82.436062][ T5112] Bluetooth: hci1: command tx timeout [ 82.436086][ T5121] Bluetooth: hci2: command tx timeout [ 82.436506][ T5121] Bluetooth: hci0: command tx timeout [ 82.450699][ T5107] team0: Port device team_slave_1 added [ 82.473310][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.491770][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.513497][ T5109] bridge_slave_1: entered allmulticast mode [ 82.525298][ T5121] Bluetooth: hci4: command tx timeout [ 82.541750][ T5109] bridge_slave_1: entered promiscuous mode [ 82.746987][ T5108] team0: Port device team_slave_0 added [ 82.764136][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.783966][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.794555][ T5119] bridge_slave_0: entered allmulticast mode [ 82.812091][ T5119] bridge_slave_0: entered promiscuous mode [ 82.829923][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.838309][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.846854][ T5119] bridge_slave_1: entered allmulticast mode [ 82.856270][ T5119] bridge_slave_1: entered promiscuous mode [ 82.865088][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.876088][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.909517][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.953068][ T5108] team0: Port device team_slave_1 added [ 82.983694][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.991669][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.026592][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.050682][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.058501][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.092436][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.108246][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.128278][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.191505][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.202808][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.239286][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.307437][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.357796][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.371226][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.405665][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.441160][ T5110] hsr_slave_0: entered promiscuous mode [ 83.449013][ T5110] hsr_slave_1: entered promiscuous mode [ 83.459799][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.494315][ T5109] team0: Port device team_slave_0 added [ 83.505742][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.514563][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.547372][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.643634][ T5109] team0: Port device team_slave_1 added [ 83.709666][ T5119] team0: Port device team_slave_0 added [ 83.724615][ T5119] team0: Port device team_slave_1 added [ 83.779928][ T5107] hsr_slave_0: entered promiscuous mode [ 83.789279][ T5107] hsr_slave_1: entered promiscuous mode [ 83.799823][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.810948][ T5107] Cannot create hsr debugfs directory [ 83.832193][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.845842][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.880928][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.950937][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.963895][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.994935][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.020930][ T5108] hsr_slave_0: entered promiscuous mode [ 84.030377][ T5108] hsr_slave_1: entered promiscuous mode [ 84.038742][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.048534][ T5108] Cannot create hsr debugfs directory [ 84.091781][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.099091][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.129212][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.145310][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.153716][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.186948][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.389707][ T5109] hsr_slave_0: entered promiscuous mode [ 84.399864][ T5109] hsr_slave_1: entered promiscuous mode [ 84.407257][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.416681][ T5109] Cannot create hsr debugfs directory [ 84.434035][ T5121] Bluetooth: hci3: command tx timeout [ 84.514485][ T5130] Bluetooth: hci1: command tx timeout [ 84.514518][ T5112] Bluetooth: hci2: command tx timeout [ 84.522396][ T5121] Bluetooth: hci0: command tx timeout [ 84.569379][ T5119] hsr_slave_0: entered promiscuous mode [ 84.577530][ T5119] hsr_slave_1: entered promiscuous mode [ 84.585637][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.594478][ T5121] Bluetooth: hci4: command tx timeout [ 84.595605][ T5119] Cannot create hsr debugfs directory [ 84.962188][ T5110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.975786][ T5110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.004369][ T5110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.019293][ T5110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.105550][ T5107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.123382][ T5107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.150140][ T5107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.173292][ T5107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.261297][ T5108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.304322][ T5108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.339346][ T5108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.351065][ T5108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.464886][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.477241][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.489902][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.500570][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.575373][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.707342][ T5109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.723623][ T5109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.752170][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.771237][ T5109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.809143][ T5109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.830856][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.841595][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.880873][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.893067][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.900274][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.920725][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.978123][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.016237][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.049186][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.056458][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.068422][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.075663][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.119636][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.127002][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.220105][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.227451][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.267736][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 86.267753][ T29] audit: type=1400 audit(1719108577.755:115): avc: denied { sys_module } for pid=5110 comm="syz-executor.4" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.410539][ T5108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.422234][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.460523][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.514895][ T5121] Bluetooth: hci3: command tx timeout [ 86.537368][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.576461][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.583661][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.598558][ T5121] Bluetooth: hci2: command tx timeout [ 86.600656][ T5112] Bluetooth: hci0: command tx timeout [ 86.604048][ T5130] Bluetooth: hci1: command tx timeout [ 86.641935][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.649237][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.674741][ T5112] Bluetooth: hci4: command tx timeout [ 86.694279][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.793656][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.852931][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.918611][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.925873][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.006823][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.014083][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.039321][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.223045][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.401166][ T784] cfg80211: failed to load regulatory.db [ 87.432335][ T5108] veth0_vlan: entered promiscuous mode [ 87.499059][ T5107] veth0_vlan: entered promiscuous mode [ 87.516266][ T5108] veth1_vlan: entered promiscuous mode [ 87.577038][ T5107] veth1_vlan: entered promiscuous mode [ 87.591154][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.668677][ T5110] veth0_vlan: entered promiscuous mode [ 87.706198][ T5108] veth0_macvtap: entered promiscuous mode [ 87.721677][ T5108] veth1_macvtap: entered promiscuous mode [ 87.731719][ T5110] veth1_vlan: entered promiscuous mode [ 87.816188][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.827314][ T5110] veth0_macvtap: entered promiscuous mode [ 87.840576][ T5110] veth1_macvtap: entered promiscuous mode [ 87.850617][ T5107] veth0_macvtap: entered promiscuous mode [ 87.902654][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.922305][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.934294][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.946923][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.968651][ T5107] veth1_macvtap: entered promiscuous mode [ 87.982839][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.996375][ T5110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.007126][ T5110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016626][ T5110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.025548][ T5110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.046053][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.056725][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.069218][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.082314][ T5108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.092255][ T5108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.101221][ T5108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.111488][ T5108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.126184][ T5119] veth0_vlan: entered promiscuous mode [ 88.179465][ T5119] veth1_vlan: entered promiscuous mode [ 88.201012][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.212296][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.222374][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.233284][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.246314][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.291099][ T5109] veth0_vlan: entered promiscuous mode [ 88.303467][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.319934][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.330357][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.341186][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.352530][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.396290][ T5107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.405349][ T5107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.414314][ T5107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.423709][ T5107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.460843][ T5109] veth1_vlan: entered promiscuous mode [ 88.572952][ T5119] veth0_macvtap: entered promiscuous mode [ 88.594315][ T5112] Bluetooth: hci3: command tx timeout [ 88.636795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.646010][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.665876][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.667914][ T5119] veth1_macvtap: entered promiscuous mode [ 88.681641][ T5112] Bluetooth: hci0: command tx timeout [ 88.682640][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.687247][ T5112] Bluetooth: hci2: command tx timeout [ 88.687303][ T5112] Bluetooth: hci1: command tx timeout [ 88.754188][ T5121] Bluetooth: hci4: command tx timeout [ 88.783280][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.795493][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.807393][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.812760][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.826613][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.837418][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.847337][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.858021][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.870037][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.881616][ T5109] veth0_macvtap: entered promiscuous mode [ 88.919935][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.930675][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.940955][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.951477][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.963058][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.974219][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.986144][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.000400][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.009204][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.018527][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.031835][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.050179][ T29] audit: type=1400 audit(1719108580.535:116): avc: denied { mounton } for pid=5110 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.076718][ T29] audit: type=1400 audit(1719108580.535:117): avc: denied { mount } for pid=5110 comm="syz-executor.4" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.140603][ T5109] veth1_macvtap: entered promiscuous mode [ 89.149844][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.164062][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.180053][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.197657][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.263922][ T29] audit: type=1400 audit(1719108580.745:118): avc: denied { read write } for pid=5110 comm="syz-executor.4" name="loop4" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.342493][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.372484][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.382179][ T29] audit: type=1400 audit(1719108580.745:119): avc: denied { open } for pid=5110 comm="syz-executor.4" path="/dev/loop4" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.388294][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.414980][ T29] audit: type=1400 audit(1719108580.745:120): avc: denied { ioctl } for pid=5110 comm="syz-executor.4" path="/dev/loop4" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.442609][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.465282][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.480944][ T29] audit: type=1400 audit(1719108580.935:121): avc: denied { create } for pid=5196 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.487735][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.513685][ T29] audit: type=1400 audit(1719108580.955:122): avc: denied { write } for pid=5196 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.521304][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.545675][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.568460][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.604840][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.612694][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.640228][ T29] audit: type=1400 audit(1719108581.125:123): avc: denied { map_create } for pid=5198 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.688044][ T29] audit: type=1400 audit(1719108581.155:124): avc: denied { prog_load } for pid=5198 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.712877][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.731567][ T5202] loop4: detected capacity change from 0 to 512 [ 89.735508][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.754311][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.771304][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.786380][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.804497][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.815397][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.818188][ T5202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.828748][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.841528][ T5202] ext4 filesystem being mounted at /root/syzkaller-testdir3331820460/syzkaller.PrLOSm/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.860811][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.899250][ T5109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.911672][ T5109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.917199][ T5202] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 89.925962][ T5109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.940349][ T5109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.998819][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.012679][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.208204][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.230999][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.480960][ T5216] trusted_key: encrypted_key: master key parameter is missing [ 90.495121][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.502962][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.685399][ T5219] loop0: detected capacity change from 0 to 16 [ 90.740190][ T5219] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.790381][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.832137][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.911477][ T5110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.100335][ T5225] loop3: detected capacity change from 0 to 8 [ 91.135453][ T5225] ======================================================= [ 91.135453][ T5225] WARNING: The mand mount option has been deprecated and [ 91.135453][ T5225] and is ignored by this kernel. Remove the mand [ 91.135453][ T5225] option from the mount to silence this warning. [ 91.135453][ T5225] ======================================================= [ 91.336709][ T5231] loop4: detected capacity change from 0 to 2048 [ 91.375569][ T5231] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881 [ 91.495789][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 91.495808][ T29] audit: type=1400 audit(1719108582.985:148): avc: denied { mount } for pid=5229 comm="syz-executor.4" name="/" dev="loop4" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 91.552585][ T5234] loop1: detected capacity change from 0 to 4096 [ 91.702451][ T5241] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.748742][ T29] audit: type=1400 audit(1719108583.225:149): avc: denied { write } for pid=5232 comm="syz-executor.1" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 91.968114][ T29] audit: type=1400 audit(1719108583.285:150): avc: denied { map_read map_write } for pid=5232 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.996138][ T5245] loop2: detected capacity change from 0 to 2048 [ 92.017464][ T29] audit: type=1400 audit(1719108583.295:151): avc: denied { write } for pid=5232 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.055915][ T29] audit: type=1400 audit(1719108583.295:152): avc: denied { add_name } for pid=5232 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.118121][ T5245] loop2: p2 p3 < > p4 < p5 > [ 92.156638][ T5245] loop2: partition table partially beyond EOD, truncated [ 92.182600][ T29] audit: type=1400 audit(1719108583.315:153): avc: denied { create } for pid=5232 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.205413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 92.214100][ T5245] loop2: p2 start 33028 is beyond EOD, truncated [ 92.252921][ T5245] loop2: p3 start 4284160 is beyond EOD, truncated [ 92.304839][ T29] audit: type=1400 audit(1719108583.325:154): avc: denied { associate } for pid=5232 comm="syz-executor.1" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.374894][ T5245] loop2: p5 start 33028 is beyond EOD, truncated [ 92.381340][ T29] audit: type=1400 audit(1719108583.395:155): avc: denied { create } for pid=5232 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.462778][ T29] audit: type=1400 audit(1719108583.435:156): avc: denied { read append open } for pid=5232 comm="syz-executor.1" path="/root/syzkaller-testdir3157931179/syzkaller.zXfBae/4/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.663037][ T29] audit: type=1400 audit(1719108583.435:157): avc: denied { unmount } for pid=5110 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 92.696484][ T5255] loop0: detected capacity change from 0 to 128 [ 93.147065][ T5262] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.190847][ T5262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.574578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.862523][ T5281] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 93.883211][ T5279] loop2: detected capacity change from 0 to 512 [ 93.907026][ T25] IPVS: starting estimator thread 0... [ 93.961067][ T5279] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 94.044326][ T5282] IPVS: using max 32 ests per chain, 76800 per kthread [ 94.070073][ T5281] loop4: detected capacity change from 0 to 256 [ 94.284767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.059680][ T5281] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777' [ 95.244323][ T5114] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.460448][ T5293] Bluetooth: MGMT ver 1.22 [ 95.502123][ T5114] usb 3-1: Using ep0 maxpacket: 8 [ 95.553043][ T5114] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 95.564041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.614744][ T5114] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 95.624230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.702488][ T5114] usb 3-1: config 0 has no interface number 0 [ 95.747100][ T5114] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 82, changing to 10 [ 95.811998][ T5114] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1703, setting to 1024 [ 95.867172][ T5114] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.928228][ T5114] usb 3-1: config 0 interface 52 has no altsetting 0 [ 95.976845][ T5114] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 96.039420][ T5114] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 96.044729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.095028][ T5114] usb 3-1: Product: syz [ 96.118107][ T5114] usb 3-1: SerialNumber: syz [ 96.188430][ T5114] usb 3-1: config 0 descriptor?? [ 96.369610][ T5314] loop0: detected capacity change from 0 to 256 [ 96.416433][ T5313] loop3: detected capacity change from 0 to 512 [ 96.432051][ T5314] FAT-fs (loop0): Unrecognized mount option "shortnae=lower" or missing value [ 96.458513][ T5114] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input5 [ 96.538537][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.605718][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 96.605736][ T29] audit: type=1400 audit(1719108588.095:273): avc: denied { read } for pid=4518 comm="acpid" name="mouse1" dev="devtmpfs" ino=2335 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.678291][ T5313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.767985][ T29] audit: type=1400 audit(1719108588.095:274): avc: denied { open } for pid=4518 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2335 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.803608][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 96.803678][ T5114] usb 3-1: USB disconnect, device number 2 [ 96.896746][ T29] audit: type=1400 audit(1719108588.095:275): avc: denied { ioctl } for pid=4518 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2335 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.931841][ T29] audit: type=1400 audit(1719108588.215:276): avc: denied { create } for pid=5306 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.129389][ T29] audit: type=1400 audit(1719108588.615:277): avc: denied { connect } for pid=5321 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.172630][ T29] audit: type=1400 audit(1719108588.645:278): avc: denied { bind } for pid=5321 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.226449][ T29] audit: type=1400 audit(1719108588.645:279): avc: denied { write } for pid=5321 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.249902][ T29] audit: type=1400 audit(1719108588.695:280): avc: denied { getopt } for pid=5321 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.253803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.314425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.394361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.457306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.518090][ T29] audit: type=1400 audit(1719108589.005:281): avc: denied { setopt } for pid=5326 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.541894][ T5330] loop1: detected capacity change from 0 to 64 [ 97.644903][ T29] audit: type=1400 audit(1719108589.015:282): avc: denied { ioctl } for pid=5326 comm="syz-executor.0" path="socket:[8341]" dev="sockfs" ino=8341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.012665][ T5335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.144973][ T5119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.263252][ T5348] loop4: detected capacity change from 0 to 1024 [ 99.365749][ T5237] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 99.470679][ T5353] syz-executor.1: attempt to access beyond end of device [ 99.470679][ T5353] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 99.537731][ T5354] ubi0: attaching mtd0 [ 99.819675][ T5353] syz-executor.1: attempt to access beyond end of device [ 99.819675][ T5353] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 99.973805][ T5354] ubi0: scanning is finished [ 100.152955][ T5354] ubi0: empty MTD device detected [ 100.154191][ T5353] syz-executor.1: attempt to access beyond end of device [ 100.154191][ T5353] loop1: rw=34817, sector=76, nr_sectors = 4 limit=64 [ 100.235358][ T5361] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 100.349028][ T5351] loop0: detected capacity change from 0 to 256 [ 100.367936][ T5351] exfat: Bad value for 'uid' [ 100.403981][ T5356] Bluetooth: MGMT ver 1.22 [ 100.702629][ T5354] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.722644][ T5354] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.730119][ T5354] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.740475][ T5354] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 100.754179][ T5354] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.760984][ T5354] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.773978][ T5354] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 917517171 [ 100.787761][ T5354] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.803980][ T5366] ubi0: background thread "ubi_bgt0d" started, PID 5366 [ 101.103146][ T5376] process 'syz-executor.3' launched './file1' with NULL argv: empty string added [ 102.344437][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.361264][ T5391] loop0: detected capacity change from 0 to 512 [ 102.407149][ T5389] loop4: detected capacity change from 0 to 2048 [ 102.481371][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.641345][ T5394] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.696535][ T5398] loop2: detected capacity change from 0 to 512 [ 102.753446][ T5398] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 102.854061][ T5237] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 102.881351][ T5396] loop3: detected capacity change from 0 to 4096 [ 102.962400][ T5399] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.152325][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 103.152339][ T29] audit: type=1400 audit(1719108594.635:303): avc: denied { create } for pid=5395 comm="syz-executor.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.211922][ T5108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.243877][ T29] audit: type=1800 audit(1719108594.715:304): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 103.267231][ T5111] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.307601][ T29] audit: type=1804 audit(1719108594.715:305): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1253945743/syzkaller.Q4jw66/13/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 103.356330][ T29] audit: type=1400 audit(1719108594.765:306): avc: denied { ioctl } for pid=5395 comm="syz-executor.3" path="/root/syzkaller-testdir1253945743/syzkaller.Q4jw66/13/file0/bus" dev="loop3" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.494023][ T5111] usb 3-1: Using ep0 maxpacket: 8 [ 103.512042][ T5111] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 103.526905][ T5111] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 103.583056][ T5111] usb 3-1: config 0 has no interface number 0 [ 103.603130][ T5111] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 82, changing to 10 [ 103.640424][ T5111] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1703, setting to 1024 [ 103.652242][ T5111] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.701239][ T5111] usb 3-1: config 0 interface 52 has no altsetting 0 [ 103.738082][ T5111] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 103.750242][ T5111] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 103.781021][ T5111] usb 3-1: Product: syz [ 103.786253][ T5111] usb 3-1: SerialNumber: syz [ 103.820569][ T5111] usb 3-1: config 0 descriptor?? [ 104.088970][ T5111] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input6 [ 104.244134][ T5164] IPVS: starting estimator thread 0... [ 104.393995][ T5414] IPVS: using max 20 ests per chain, 48000 per kthread [ 104.455746][ T5165] usb 3-1: USB disconnect, device number 3 [ 105.056829][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.277524][ T5431] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 105.581316][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.684641][ T5441] bond0: (slave bond_slave_0): Releasing backup interface [ 105.979016][ T5454] loop3: detected capacity change from 0 to 512 [ 106.012899][ T29] audit: type=1400 audit(1719108597.495:307): avc: denied { ioctl } for pid=5452 comm="syz-executor.4" path="/dev/video5" dev="devtmpfs" ino=855 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 106.121904][ T5454] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: special inode unallocated [ 106.154400][ T5454] EXT4-fs (loop3): get root inode failed [ 106.191761][ T5454] EXT4-fs (loop3): mount failed [ 106.394760][ T5463] loop4: detected capacity change from 0 to 128 [ 106.835119][ T29] audit: type=1400 audit(1719108598.325:308): avc: denied { create } for pid=5461 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.977371][ T29] audit: type=1400 audit(1719108598.435:309): avc: denied { bind } for pid=5461 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.000317][ T29] audit: type=1400 audit(1719108598.465:310): avc: denied { listen } for pid=5461 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.034029][ T29] audit: type=1400 audit(1719108598.515:311): avc: denied { accept } for pid=5461 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.193111][ T5467] loop0: detected capacity change from 0 to 4096 [ 107.207506][ T29] audit: type=1400 audit(1719108598.555:312): avc: denied { write } for pid=5423 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.324402][ T5471] loop2: detected capacity change from 0 to 16 [ 107.345015][ T5471] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.386542][ T5467] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.473355][ T5467] ntfs3: loop0: Failed to load $LogFile (-22). [ 108.161571][ T5488] loop2: detected capacity change from 0 to 4096 [ 108.260005][ T5502] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.359338][ T5507] loop4: detected capacity change from 0 to 1024 [ 108.485587][ T5504] fscrypt (sda1, inode 1965): Unsupported encryption modes (contents 5, filenames 60) [ 108.505231][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 108.505249][ T29] audit: type=1800 audit(1719108599.995:327): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 109.012005][ T29] audit: type=1400 audit(1719108600.055:328): avc: denied { create } for pid=5509 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.158797][ T29] audit: type=1804 audit(1719108600.505:329): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4277453084/syzkaller.p8fjfI/16/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 109.918130][ T29] audit: type=1400 audit(1719108601.395:330): avc: denied { accept } for pid=5509 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.447851][ T5521] loop4: detected capacity change from 0 to 4096 [ 110.594642][ T5521] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 110.621352][ T5521] ntfs3: loop4: Failed to load $LogFile (-22). [ 110.791651][ T29] audit: type=1800 audit(1719108602.275:331): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 110.933918][ T29] audit: type=1804 audit(1719108602.395:332): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4277453084/syzkaller.p8fjfI/17/bus" dev="sda1" ino=1966 res=1 errno=0 [ 111.057112][ T29] audit: type=1400 audit(1719108602.505:333): avc: denied { bind } for pid=5535 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.122588][ T5504] loop0: detected capacity change from 0 to 4096 [ 111.153380][ T29] audit: type=1400 audit(1719108602.505:334): avc: denied { name_bind } for pid=5535 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 111.196995][ T5504] NILFS (loop0): invalid segment: Checksum error in segment payload [ 111.226157][ T5504] NILFS (loop0): trying rollback from an earlier position [ 111.244312][ T29] audit: type=1400 audit(1719108602.505:335): avc: denied { node_bind } for pid=5535 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 111.332649][ T29] audit: type=1400 audit(1719108602.545:336): avc: denied { listen } for pid=5535 comm="syz-executor.3" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.385186][ T5504] NILFS (loop0): recovery complete [ 111.403280][ T5548] loop4: detected capacity change from 0 to 64 [ 111.420485][ T5551] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.436169][ T5548] hfs: invalid gid -1 [ 111.452730][ T5549] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 111.454621][ T5548] hfs: unable to parse mount options [ 111.470305][ T5549] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 111.552307][ T5553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27750 sclass=netlink_route_socket pid=5553 comm=syz-executor.3 [ 111.642632][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.682814][ T5553] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 112.804666][ T5553] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 112.924281][ T5563] ubi: mtd0 is already attached to ubi0 [ 113.008305][ T5564] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 113.469596][ T5576] loop4: detected capacity change from 0 to 256 [ 114.034473][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 114.034502][ T29] audit: type=1400 audit(1719108605.045:349): avc: denied { create } for pid=5571 comm="syz-executor.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.667333][ T5576] exfat: Deprecated parameter 'namecase' [ 116.753074][ T29] audit: type=1400 audit(1719108605.055:350): avc: denied { map } for pid=5571 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.917422][ T5576] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 116.976297][ T29] audit: type=1400 audit(1719108605.055:351): avc: denied { read write } for pid=5571 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.103161][ T29] audit: type=1400 audit(1719108605.595:352): avc: denied { block_suspend } for pid=5571 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.181917][ T29] audit: type=1400 audit(1719108608.265:353): avc: denied { map } for pid=5572 comm="syz-executor.0" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.266973][ T5593] loop2: detected capacity change from 0 to 64 [ 117.320463][ T5594] loop3: detected capacity change from 0 to 8 [ 117.329206][ T5593] hfs: invalid gid -1 [ 117.355018][ T5593] hfs: unable to parse mount options [ 117.370580][ T5594] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾' [ 118.629506][ T5601] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 118.637817][ T5601] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 118.719015][ T5603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27750 sclass=netlink_route_socket pid=5603 comm=syz-executor.0 [ 118.819844][ T5603] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 118.844877][ T5606] loop4: detected capacity change from 0 to 256 [ 118.898602][ T5603] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 118.933957][ T5607] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 118.946243][ T5606] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 119.161631][ T29] audit: type=1400 audit(1719108610.645:354): avc: denied { mounton } for pid=5605 comm="syz-executor.4" path="/root/syzkaller-testdir3331820460/syzkaller.PrLOSm/31/file0/file0" dev="loop4" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.256002][ T29] audit: type=1400 audit(1719108610.675:355): avc: denied { mount } for pid=5605 comm="syz-executor.4" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.326828][ T5611] loop0: detected capacity change from 0 to 512 [ 119.372391][ T5611] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.416190][ T5611] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 119.432071][ T29] audit: type=1400 audit(1719108610.915:356): avc: denied { unmount } for pid=5110 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.480359][ T5611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 119.495281][ T5611] System zones: 1-12 [ 119.515965][ T29] audit: type=1400 audit(1719108610.985:357): avc: denied { remove_name } for pid=5110 comm="syz-executor.4" name="file0" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.609114][ T5611] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 119.623872][ T29] audit: type=1400 audit(1719108611.005:358): avc: denied { unlink } for pid=5110 comm="syz-executor.4" name="file0" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.697514][ T29] audit: type=1400 audit(1719108611.075:359): avc: denied { rmdir } for pid=5110 comm="syz-executor.4" name="file0" dev="loop4" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.753666][ T5611] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 119.783157][ T5611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.885692][ T29] audit: type=1400 audit(1719108611.365:360): avc: denied { read write } for pid=5613 comm="syz-executor.2" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.966224][ T29] audit: type=1400 audit(1719108611.365:361): avc: denied { open } for pid=5613 comm="syz-executor.2" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.996947][ T29] audit: type=1400 audit(1719108611.455:362): avc: denied { setopt } for pid=5613 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.020906][ T29] audit: type=1400 audit(1719108611.455:363): avc: denied { write } for pid=5613 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.365774][ T1042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.627117][ T5108] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor.0: path /root/syzkaller-testdir2592627188/syzkaller.gPDNJF/26/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 120.688292][ T1042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.729372][ T5108] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 120.825151][ T5108] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor.0: path /root/syzkaller-testdir2592627188/syzkaller.gPDNJF/26/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 120.865219][ T5108] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 120.961220][ T1042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.982449][ T5108] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor.0: path /root/syzkaller-testdir2592627188/syzkaller.gPDNJF/26/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 121.109123][ T5108] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 121.216258][ T5108] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor.0: path /root/syzkaller-testdir2592627188/syzkaller.gPDNJF/26/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 121.256909][ T1042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.296030][ T5620] loop1: detected capacity change from 0 to 32768 [ 121.335659][ T5108] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 121.480613][ T5108] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor.0: path /root/syzkaller-testdir2592627188/syzkaller.gPDNJF/26/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 121.513619][ T5108] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 121.790821][ T5640] loop2: detected capacity change from 0 to 64 [ 121.848216][ T1042] bridge_slave_1: left allmulticast mode [ 121.896528][ T1042] bridge_slave_1: left promiscuous mode [ 121.903960][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.932954][ T5640] hfs: keylen 9474 too large [ 121.943279][ T5620] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 121.990358][ T5620] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 122.018768][ T5640] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 122.027022][ T5640] hfs: get root inode failed [ 122.070918][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.071744][ T1042] bridge_slave_0: left allmulticast mode [ 122.092592][ T5112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.104797][ T5649] loop3: detected capacity change from 0 to 64 [ 122.127698][ T5112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.150129][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.164229][ T5112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.178759][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.213846][ T1042] bridge_slave_0: left promiscuous mode [ 122.219591][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.254052][ T5237] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.325315][ T5620] bcachefs (loop1): alloc_read... done [ 122.331665][ T5620] bcachefs (loop1): stripes_read... done [ 122.338690][ T5620] bcachefs (loop1): snapshots_read... done [ 122.367058][ T5620] bcachefs (loop1): journal_replay... done [ 122.409652][ T5620] bcachefs (loop1): resume_logged_ops... done [ 122.433479][ T5620] bcachefs (loop1): going read-write [ 122.586583][ T5620] bcachefs (loop1): done starting filesystem [ 122.795810][ T5658] syz-executor.3: attempt to access beyond end of device [ 122.795810][ T5658] loop3: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 122.858980][ T5658] syz-executor.3: attempt to access beyond end of device [ 122.858980][ T5658] loop3: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 122.886305][ T5658] syz-executor.3: attempt to access beyond end of device [ 122.886305][ T5658] loop3: rw=34817, sector=76, nr_sectors = 4 limit=64 [ 123.030502][ T5620] syz-executor.1 (5620) used greatest stack depth: 21184 bytes left [ 123.133147][ T5107] bcachefs (loop1): shutting down [ 123.169957][ T5107] bcachefs (loop1): going read-only [ 123.180728][ T5107] bcachefs (loop1): finished waiting for writes to stop [ 123.236237][ T5107] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 123.312934][ T5107] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 123.343422][ T5107] bcachefs (loop1): shutdown complete, journal seq 13 [ 123.351721][ T5107] bcachefs (loop1): marking filesystem clean [ 123.490369][ T5107] bcachefs (loop1): shutdown complete [ 124.279187][ T5121] Bluetooth: hci3: command tx timeout [ 124.315053][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.332686][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.352559][ T1042] bond0 (unregistering): Released all slaves [ 124.404358][ T5678] loop3: detected capacity change from 0 to 512 [ 124.418516][ T5678] EXT4-fs: Ignoring removed nobh option [ 124.426651][ T5678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.465502][ T5678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.495736][ T5678] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 124.690939][ T5678] loop3: detected capacity change from 0 to 2048 [ 124.691118][ T5677] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.857035][ T5108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.660689][ T1042] hsr_slave_0: left promiscuous mode [ 125.716953][ T1042] hsr_slave_1: left promiscuous mode [ 125.769663][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.775982][ T5703] loop1: detected capacity change from 0 to 512 [ 125.787039][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.795359][ T5703] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 125.827335][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.863869][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.070945][ T1042] veth1_macvtap: left promiscuous mode [ 126.367810][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 126.375562][ T5121] Bluetooth: hci3: command tx timeout [ 126.375578][ T29] audit: type=1400 audit(1719108617.715:392): avc: denied { create } for pid=5701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.577455][ T29] audit: type=1400 audit(1719108617.725:393): avc: denied { connect } for pid=5701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.598944][ T1042] veth0_macvtap: left promiscuous mode [ 126.647981][ T1042] veth1_vlan: left promiscuous mode [ 126.653583][ T1042] veth0_vlan: left promiscuous mode [ 126.656870][ T29] audit: type=1400 audit(1719108617.775:394): avc: denied { write } for pid=5701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.752444][ T5712] loop3: detected capacity change from 0 to 2048 [ 126.903212][ T5712] loop3: p3 < > p4 < > [ 126.911488][ T5712] loop3: partition table partially beyond EOD, truncated [ 126.958112][ T5712] loop3: p3 start 4284289 is beyond EOD, truncated [ 126.969624][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.979894][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.996547][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.015970][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.027677][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.039742][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.071913][ T4533] loop3: p3 < > p4 < > [ 127.093172][ T4533] loop3: partition table partially beyond EOD, truncated [ 127.113118][ T4533] loop3: p3 start 4284289 is beyond EOD, truncated [ 127.250472][ T5237] udevd[5237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 127.311803][ T5237] udevd[5237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 127.512784][ T5734] loop1: detected capacity change from 0 to 512 [ 127.531590][ T5734] EXT4-fs: Ignoring removed nobh option [ 127.552113][ T5734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.581023][ T5734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.612498][ T5734] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 127.810987][ T5740] loop3: detected capacity change from 0 to 8 [ 127.830323][ T5740] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾' [ 127.842639][ T5734] loop1: detected capacity change from 0 to 2048 [ 127.889299][ T5237] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 128.503863][ T5121] Bluetooth: hci3: command tx timeout [ 129.077147][ T5121] Bluetooth: hci1: command tx timeout [ 129.093235][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 129.157603][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 129.183404][ T29] audit: type=1400 audit(1719108620.665:395): avc: denied { create } for pid=5743 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.381353][ T5745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5745 comm=syz-executor.3 [ 129.400344][ T5745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5745 comm=syz-executor.3 [ 129.423402][ T29] audit: type=1400 audit(1719108620.905:396): avc: denied { audit_write } for pid=5743 comm="syz-executor.3" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.857794][ T5733] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.881485][ T29] audit: type=1400 audit(1719108621.365:397): avc: denied { search } for pid=4515 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.604038][ T5121] Bluetooth: hci3: command tx timeout [ 131.196193][ T5121] Bluetooth: hci1: command tx timeout [ 131.397459][ T5648] chnl_net:caif_netlink_parms(): no params data found [ 131.688064][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.737712][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.745420][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.752826][ T5648] bridge_slave_0: entered allmulticast mode [ 131.774110][ T5648] bridge_slave_0: entered promiscuous mode [ 131.788665][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.796343][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.803528][ T5648] bridge_slave_1: entered allmulticast mode [ 131.810997][ T5648] bridge_slave_1: entered promiscuous mode [ 131.844077][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.857476][ T5723] chnl_net:caif_netlink_parms(): no params data found [ 131.892047][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.918236][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.952032][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.099282][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.191074][ T5648] team0: Port device team_slave_0 added [ 132.204128][ T5648] team0: Port device team_slave_1 added [ 132.385802][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.392791][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.426437][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.446318][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.453553][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.461201][ T5723] bridge_slave_0: entered allmulticast mode [ 132.469324][ T5723] bridge_slave_0: entered promiscuous mode [ 132.484998][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.491965][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.519585][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.572051][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.583026][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.590592][ T5723] bridge_slave_1: entered allmulticast mode [ 132.599230][ T5723] bridge_slave_1: entered promiscuous mode [ 132.697511][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.711059][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.807294][ T5648] hsr_slave_0: entered promiscuous mode [ 132.813715][ T5648] hsr_slave_1: entered promiscuous mode [ 132.822598][ T1042] bridge_slave_1: left allmulticast mode [ 132.828433][ T1042] bridge_slave_1: left promiscuous mode [ 132.838566][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.848933][ T1042] bridge_slave_0: left allmulticast mode [ 132.855221][ T1042] bridge_slave_0: left promiscuous mode [ 132.860930][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.229389][ T5799] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 133.240677][ T5799] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.323999][ T5121] Bluetooth: hci1: command tx timeout [ 133.363679][ T5804] loop1: detected capacity change from 0 to 512 [ 133.397293][ T5804] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 133.422944][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.505304][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.512103][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.549456][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.200950][ T1042] bond0 (unregistering): Released all slaves [ 134.407934][ T5723] team0: Port device team_slave_0 added [ 134.416000][ T29] audit: type=1400 audit(1719108625.905:398): avc: denied { write } for pid=5812 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.429603][ T5723] team0: Port device team_slave_1 added [ 134.504684][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.626919][ T5817] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.639948][ T5817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.652137][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.666456][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.673647][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.828758][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.851539][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.882946][ T5824] loop3: detected capacity change from 0 to 2048 [ 134.902131][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.954472][ T5824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.236333][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.270773][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.322616][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.341986][ T5837] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.397884][ T5121] Bluetooth: hci1: command tx timeout [ 135.507212][ T1042] hsr_slave_0: left promiscuous mode [ 135.541803][ T1042] hsr_slave_1: left promiscuous mode [ 135.573492][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.598329][ T5842] loop2: detected capacity change from 0 to 8 [ 135.619877][ T5842] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾' [ 135.642790][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.684054][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.691510][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.709458][ T5237] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 135.973908][ T1042] veth1_macvtap: left promiscuous mode [ 136.001760][ T1042] veth0_macvtap: left promiscuous mode [ 136.011762][ T1042] veth1_vlan: left promiscuous mode [ 136.373358][ T1042] veth0_vlan: left promiscuous mode [ 138.034381][ T5616] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.289043][ T5119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.052420][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 139.096535][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 139.581207][ T29] audit: type=1400 audit(1719108631.065:399): avc: denied { setrlimit } for pid=5871 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 139.584671][ T5870] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.664247][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.689125][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.703129][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.710379][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.826032][ T5876] loop3: detected capacity change from 0 to 512 [ 139.845500][ T5876] EXT4-fs: Ignoring removed nobh option [ 139.871018][ T5876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.919194][ T5875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.980119][ T5876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.991753][ T5876] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 140.051125][ T29] audit: type=1400 audit(1719108631.535:400): avc: denied { read } for pid=5880 comm="syz-executor.1" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.088788][ T29] audit: type=1400 audit(1719108631.535:401): avc: denied { open } for pid=5880 comm="syz-executor.1" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.152959][ T5723] hsr_slave_0: entered promiscuous mode [ 140.185034][ T5723] hsr_slave_1: entered promiscuous mode [ 140.203127][ T5723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.214721][ T5723] Cannot create hsr debugfs directory [ 140.229696][ T5875] loop3: detected capacity change from 0 to 2048 [ 140.375369][ T29] audit: type=1400 audit(1719108631.865:402): avc: denied { mounton } for pid=5873 comm="syz-executor.3" path="/root/syzkaller-testdir1253945743/syzkaller.Q4jw66/47/bus" dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 140.778427][ T29] audit: type=1400 audit(1719108632.255:403): avc: denied { write } for pid=5898 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.829105][ T5902] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 142.111885][ T1042] IPVS: stop unused estimator thread 0... [ 142.779536][ T5926] loop1: detected capacity change from 0 to 2048 [ 142.788324][ T5922] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.863164][ T5926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.925015][ T29] audit: type=1400 audit(1719108634.395:404): avc: denied { mount } for pid=5925 comm="syz-executor.1" name="/" dev="loop1" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 143.196315][ T5648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.245181][ T5648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.399273][ T5648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.456348][ T5648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.490019][ T5917] loop3: detected capacity change from 0 to 32768 [ 143.587434][ T5941] loop2: detected capacity change from 0 to 512 [ 143.615733][ T5941] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 143.658070][ T5917] ERROR: (device loop3): dtSearch: stack overrun! [ 143.658070][ T5917] [ 143.699518][ T5917] ERROR: (device loop3): remounting filesystem as read-only [ 143.735681][ T5917] btstack dump: [ 143.761194][ T5917] bn = 0, index = 0 [ 143.773919][ T5917] bn = 0, index = 0 [ 143.777778][ T5917] bn = 0, index = 0 [ 143.781618][ T5917] bn = 0, index = 0 [ 144.004773][ T5917] bn = 0, index = 0 [ 144.424875][ T5917] bn = 0, index = 0 [ 144.428850][ T5917] bn = 0, index = 0 [ 144.432678][ T5917] bn = 0, index = 0 [ 144.548081][ T5917] jfs_lookup: dtSearch returned -5 [ 144.711624][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.870087][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.918172][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.925514][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.969402][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.976653][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.289838][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.545882][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.728890][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.802072][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.872239][ T29] audit: type=1400 audit(1719108638.355:405): avc: denied { read } for pid=5974 comm="syz-executor.1" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 146.943909][ T29] audit: type=1400 audit(1719108638.355:406): avc: denied { open } for pid=5974 comm="syz-executor.1" path="/root/syzkaller-testdir3157931179/syzkaller.zXfBae/59/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 147.073854][ T29] audit: type=1400 audit(1719108638.355:407): avc: denied { ioctl } for pid=5974 comm="syz-executor.1" path="/root/syzkaller-testdir3157931179/syzkaller.zXfBae/59/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 147.384485][ T5985] loop1: detected capacity change from 0 to 2048 [ 147.440510][ T5985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.484514][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.559483][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.695503][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.760617][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.768291][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.827599][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.838304][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.374215][ T29] audit: type=1400 audit(1719108639.855:408): avc: denied { ioctl } for pid=6000 comm="syz-executor.1" path="/dev/v4l-subdev5" dev="devtmpfs" ino=863 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.710813][ T5978] loop3: detected capacity change from 0 to 32768 [ 148.725379][ T5648] veth0_vlan: entered promiscuous mode [ 148.770054][ T29] audit: type=1400 audit(1719108640.255:409): avc: denied { read } for pid=6008 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.783501][ T5648] veth1_vlan: entered promiscuous mode [ 148.859009][ T29] audit: type=1400 audit(1719108640.255:410): avc: denied { open } for pid=6008 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.891892][ T5973] loop2: detected capacity change from 0 to 40427 [ 148.940783][ T29] audit: type=1400 audit(1719108640.315:411): avc: denied { ioctl } for pid=6008 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=836 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.988813][ T5973] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 149.032217][ T5973] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.087559][ T5978] ERROR: (device loop3): diAllocBit: iag inconsistent [ 149.087559][ T5978] [ 149.122109][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.149126][ T29] audit: type=1400 audit(1719108640.395:412): avc: denied { create } for pid=5976 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.149284][ T5973] F2FS-fs (loop2): invalid crc value [ 149.189383][ T29] audit: type=1400 audit(1719108640.405:413): avc: denied { connect } for pid=5976 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.204282][ T5978] ialloc: diAlloc returned -5! [ 149.227113][ T5648] veth0_macvtap: entered promiscuous mode [ 149.267678][ T5973] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.366581][ T5648] veth1_macvtap: entered promiscuous mode [ 149.505141][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.540225][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.589915][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.604517][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.622164][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.625177][ T5973] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.638465][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.653227][ T5973] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.668191][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.727755][ T5723] veth0_vlan: entered promiscuous mode [ 149.759119][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.786021][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.823300][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.841036][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.864189][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.897289][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.917860][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.986061][ T5648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.009325][ T5648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.024834][ T5648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.040830][ T5648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.067363][ T5723] veth1_vlan: entered promiscuous mode [ 150.350873][ T5723] veth0_macvtap: entered promiscuous mode [ 150.461653][ T5723] veth1_macvtap: entered promiscuous mode [ 150.491368][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.520172][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.623613][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.669880][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.686703][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.698837][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.716259][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.744661][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.773676][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.796130][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.842861][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.025704][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.072179][ T6042] loop2: detected capacity change from 0 to 32768 [ 151.099971][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.119131][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.135562][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.159927][ T6046] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 151.170838][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.189939][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.213797][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.254381][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.275716][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.353978][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.374932][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.381815][ T5723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.450540][ T5723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.474828][ T6042] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 151.495991][ T6042] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 151.504860][ T5723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.538853][ T6054] loop3: detected capacity change from 0 to 2048 [ 151.570831][ T5723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.611125][ T6042] bcachefs (loop2): alloc_read... done [ 151.620035][ T6042] bcachefs (loop2): stripes_read... done [ 151.629087][ T6042] bcachefs (loop2): snapshots_read... done [ 151.640104][ T6042] bcachefs (loop2): journal_replay... done [ 151.647892][ T6042] bcachefs (loop2): resume_logged_ops... done [ 151.655474][ T6042] bcachefs (loop2): going read-write [ 151.673657][ T6042] bcachefs (loop2): done starting filesystem [ 151.719183][ T6054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.752652][ T6062] loop1: detected capacity change from 0 to 2048 [ 151.772427][ T6042] bcachefs (loop2): dirent to missing inode: [ 151.772427][ T6042] u64s 7 type dirent 1073741824:3513596655480990393:U32_MAX len 0 ver 0: file0 -> 14066372638297554945 type reg [ 151.797896][ T6042] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 10 [ 151.826315][ T29] audit: type=1400 audit(1719108643.295:414): avc: denied { rename } for pid=6041 comm="syz-executor.2" name="file1" dev="loop2" ino=1073741826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 151.888925][ T45] bcachefs (loop2): going read-only [ 151.906450][ T45] bcachefs (loop2): finished waiting for writes to stop [ 151.924008][ T6062] loop1: p3 < > p4 < > [ 151.931596][ T6062] loop1: partition table partially beyond EOD, truncated [ 151.975060][ T29] audit: type=1400 audit(1719108643.315:415): avc: denied { remount } for pid=6041 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 152.051452][ T45] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 152.087971][ T6062] loop1: p3 start 4284289 is beyond EOD, truncated [ 152.089341][ T45] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 152.117268][ T5109] bcachefs (loop2): shutting down [ 152.181967][ T45] bcachefs (loop2): unshutdown complete, journal seq 10 [ 152.197792][ T6069] loop4: detected capacity change from 0 to 64 [ 152.221380][ T45] bcachefs (loop2): done going read-only, filesystem not clean [ 152.232312][ T6069] hfs: invalid gid -1 [ 152.264334][ T6069] hfs: unable to parse mount options [ 152.307047][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.359705][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.396077][ T5109] bcachefs (loop2): shutdown complete [ 152.724127][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.793142][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.402022][ T29] audit: type=1400 audit(1719108644.885:416): avc: denied { mount } for pid=6074 comm="syz-executor.3" name="/" dev="autofs" ino=10910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 153.599626][ T29] audit: type=1400 audit(1719108645.085:417): avc: denied { unmount } for pid=5119 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 154.161792][ T6091] loop0: detected capacity change from 0 to 256 [ 154.196957][ T6091] exfat: Bad value for 'uid' [ 154.283689][ T29] audit: type=1326 audit(1719108645.765:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.486193][ T29] audit: type=1326 audit(1719108645.775:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.486277][ T29] audit: type=1326 audit(1719108645.775:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.486332][ T29] audit: type=1326 audit(1719108645.815:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.486387][ T29] audit: type=1326 audit(1719108645.815:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.486442][ T29] audit: type=1326 audit(1719108645.825:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.486497][ T29] audit: type=1326 audit(1719108645.825:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a7d0a9 code=0x7ffc0000 [ 154.553504][ T6105] loop3: detected capacity change from 0 to 2048 [ 155.152787][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.411571][ T6100] tty tty22: ldisc open failed (-12), clearing slot 21 [ 155.709092][ T5119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.239440][ T6136] loop3: detected capacity change from 0 to 64 [ 156.259212][ T6136] hfs: invalid gid -1 [ 156.265627][ T6136] hfs: unable to parse mount options [ 156.563108][ T6101] loop4: detected capacity change from 0 to 40427 [ 156.640121][ T6101] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 157.414967][ T6101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.564490][ T6101] F2FS-fs (loop4): invalid crc value [ 157.590265][ T6101] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 157.697825][ T6148] loop2: detected capacity change from 0 to 512 [ 157.710471][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 157.710491][ T29] audit: type=1400 audit(1719108649.195:1006): avc: denied { create } for pid=6149 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.734135][ T6148] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.820531][ T29] audit: type=1400 audit(1719108649.255:1007): avc: denied { connect } for pid=6149 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.864044][ T6148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.890618][ T6155] loop1: detected capacity change from 0 to 512 [ 157.901935][ T29] audit: type=1400 audit(1719108649.265:1008): avc: denied { write } for pid=6149 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.004504][ T6155] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 158.017837][ T6148] EXT4-fs (loop2): 1 truncate cleaned up [ 158.030587][ T29] audit: type=1400 audit(1719108649.465:1009): avc: denied { read } for pid=6149 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.036110][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.085663][ T29] audit: type=1400 audit(1719108649.575:1010): avc: denied { write } for pid=6159 comm="syz-executor.0" name="vhost-vsock" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.145892][ T29] audit: type=1800 audit(1719108649.625:1011): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 158.725042][ T29] audit: type=1400 audit(1719108649.625:1012): avc: denied { append } for pid=6147 comm="syz-executor.2" path="/root/syzkaller-testdir4277453084/syzkaller.p8fjfI/59/bus/io.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.743290][ T6148] EXT4-fs error (device loop2): swap_inode_boot_loader:383: inode #5: comm syz-executor.2: iget: bad extra_isize 46 (inode size 256) [ 158.781215][ T29] audit: type=1326 audit(1719108649.665:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503aa7d0a9 code=0x7ffc0000 [ 158.860805][ T29] audit: type=1326 audit(1719108649.665:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503aa7d0a9 code=0x7ffc0000 [ 158.916781][ T29] audit: type=1326 audit(1719108649.675:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503aa7d0a9 code=0x7ffc0000 [ 159.033832][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.046126][ T6175] block device autoloading is deprecated and will be removed. [ 159.211424][ T6185] loop3: detected capacity change from 0 to 64 [ 159.229857][ T6185] hfs: invalid gid -1 [ 159.288792][ T6185] hfs: unable to parse mount options [ 159.295927][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.501179][ T6188] loop1: detected capacity change from 0 to 4096 [ 160.384912][ T6188] ntfs3: loop1: failed to convert "0080" to macroman [ 160.453897][ T6188] ntfs3: loop1: failed to convert name for inode 1e. [ 160.556425][ T6211] loop4: detected capacity change from 0 to 64 [ 160.613304][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.762477][ T6221] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 160.871286][ T6225] loop1: detected capacity change from 0 to 512 [ 160.964008][ T6225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.022023][ T6219] erspan0: entered promiscuous mode [ 161.066794][ T6219] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 161.093059][ T6225] EXT4-fs (loop1): 1 truncate cleaned up [ 161.102212][ T6218] erspan0: left promiscuous mode [ 161.148089][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.184446][ T6237] syz-executor.4: attempt to access beyond end of device [ 161.184446][ T6237] loop4: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 161.202459][ T6237] syz-executor.4: attempt to access beyond end of device [ 161.202459][ T6237] loop4: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 161.222553][ T6237] syz-executor.4: attempt to access beyond end of device [ 161.222553][ T6237] loop4: rw=34817, sector=76, nr_sectors = 4 limit=64 [ 161.435794][ T6225] EXT4-fs error (device loop1): swap_inode_boot_loader:383: inode #5: comm syz-executor.1: iget: bad extra_isize 46 (inode size 256) [ 161.683004][ T5107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.891067][ T6252] loop0: detected capacity change from 0 to 2048 [ 162.011670][ T6252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.059670][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.269459][ T6265] batadv0: entered promiscuous mode [ 162.272259][ T6268] loop3: detected capacity change from 0 to 64 [ 162.362683][ T6271] loop4: detected capacity change from 0 to 256 [ 162.390703][ T6273] loop0: detected capacity change from 0 to 64 [ 162.412570][ T6273] hfs: invalid gid -1 [ 162.431568][ T6271] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 162.452909][ T6273] hfs: unable to parse mount options [ 163.643210][ T6276] loop1: detected capacity change from 0 to 4096 [ 163.830401][ T6286] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.869800][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 163.869819][ T29] audit: type=1800 audit(1719108655.355:1249): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 163.986694][ T6290] loop0: detected capacity change from 0 to 512 [ 164.004275][ T6290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.220921][ T6290] EXT4-fs (loop0): 1 truncate cleaned up [ 164.237278][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.450863][ T6290] EXT4-fs error (device loop0): swap_inode_boot_loader:383: inode #5: comm syz-executor.0: iget: bad extra_isize 46 (inode size 256) [ 167.653290][ T6303] loop1: detected capacity change from 0 to 64 [ 167.660887][ T5723] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.679006][ T6300] loop3: detected capacity change from 0 to 512 [ 167.789449][ T6300] loop3: detected capacity change from 0 to 512 [ 167.825388][ T6300] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 167.867528][ T6300] ext4_test_bit(bit=14, block=5) = 0 [ 167.881616][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.987240][ T29] audit: type=1800 audit(1719108659.475:1250): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 168.030316][ T29] audit: type=1400 audit(1719108659.515:1251): avc: denied { append } for pid=6299 comm="syz-executor.3" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.157687][ T5119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.175360][ T6317] syz-executor.1: attempt to access beyond end of device [ 168.175360][ T6317] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 168.191370][ T29] audit: type=1400 audit(1719108659.585:1252): avc: denied { connect } for pid=6299 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.212189][ T6317] syz-executor.1: attempt to access beyond end of device [ 168.212189][ T6317] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 168.241678][ T6317] syz-executor.1: attempt to access beyond end of device [ 168.241678][ T6317] loop1: rw=34817, sector=76, nr_sectors = 4 limit=64 [ 168.330773][ T29] audit: type=1400 audit(1719108659.815:1253): avc: denied { create } for pid=6319 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 168.436618][ T6320] loop4: detected capacity change from 0 to 2048 [ 168.479029][ T6320] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.852214][ T29] audit: type=1400 audit(1719108660.335:1254): avc: denied { getopt } for pid=6330 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.985818][ T6333] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 169.015971][ T6333] syzkaller1: entered promiscuous mode [ 169.030793][ T6333] syzkaller1: entered allmulticast mode [ 169.077811][ T6338] loop1: detected capacity change from 0 to 4096 [ 169.161012][ T6339] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.386803][ T6343] loop3: detected capacity change from 0 to 256 [ 169.441294][ T6343] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 169.635112][ T5114] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.803108][ T6349] loop1: detected capacity change from 0 to 512 [ 169.828499][ T6349] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 169.857536][ T5114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.869600][ T5114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.883654][ T5114] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 169.960232][ T5114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.696772][ T5114] usb 1-1: config 0 descriptor?? [ 170.806944][ T6358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6358 comm=syz-executor.1 [ 171.195493][ T5114] usbhid 1-1:0.0: can't add hid device: -71 [ 171.230015][ T5114] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 171.290659][ T5114] usb 1-1: USB disconnect, device number 2 [ 171.329263][ T6368] tmpfs: Bad value for 'mpol' [ 172.354656][ T6378] loop3: detected capacity change from 0 to 512 [ 172.445491][ T6371] loop1: detected capacity change from 0 to 32768 [ 172.446523][ T6383] loop4: detected capacity change from 0 to 64 [ 172.457137][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.585459][ T6378] ext4 filesystem being mounted at /root/syzkaller-testdir1253945743/syzkaller.Q4jw66/76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.889263][ T6378] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 174.226303][ T5119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.350066][ T6379] loop0: detected capacity change from 0 to 32768 [ 174.529855][ T6414] batadv0: entered promiscuous mode [ 174.556200][ T6395] kvm: kvm [6394]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 174.810875][ T6379] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 175.165925][ T6379] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 175.547749][ T6417] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 175.571734][ T6379] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 175.618390][ T6379] bcachefs (loop0): bch2_fs_recovery(): error EINTR [ 175.721539][ T6379] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 175.808012][ T6379] bcachefs (loop0): shutting down [ 175.930424][ T6379] bcachefs (loop0): shutdown complete [ 176.126607][ T6429] loop4: detected capacity change from 0 to 1024 [ 176.483983][ T29] audit: type=1400 audit(1719108667.965:1255): avc: denied { setopt } for pid=6440 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.103294][ T80] hfsplus: b-tree write err: -5, ino 4 [ 177.249856][ T6457] xt_connbytes: Forcing CT accounting to be enabled [ 177.257158][ T6457] No such timeout policy "syz0" [ 177.334153][ T29] audit: type=1400 audit(1719108668.695:1256): avc: denied { write } for pid=6454 comm="syz-executor.3" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 177.357320][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.218315][ T6463] loop4: detected capacity change from 0 to 64 [ 178.255723][ T6463] hfs: unable to parse mount options [ 178.288521][ T29] audit: type=1400 audit(1719108669.775:1257): avc: denied { listen } for pid=6464 comm="syz-executor.1" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.641056][ T29] audit: type=1400 audit(1719108670.125:1258): avc: denied { setopt } for pid=6482 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.080610][ T6491] No such timeout policy "syz0" [ 180.354336][ T29] audit: type=1400 audit(1719108671.785:1259): avc: denied { create } for pid=6497 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 180.995897][ T6504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.002172][ T6504] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 181.023316][ T6504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.029297][ T6504] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 181.050446][ T6506] loop3: detected capacity change from 0 to 1764 [ 181.060971][ T6506] iso9660: Bad value for 'block' [ 181.069249][ T6504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.075471][ T6504] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 181.294760][ T6504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.300709][ T6504] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 181.310920][ T6504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.317015][ T6504] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 181.673550][ T6490] loop1: detected capacity change from 0 to 32768 [ 181.811915][ T6490] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 181.834209][ T6490] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 181.891404][ T6490] bcachefs (loop1): alloc_read... done [ 181.902965][ T6490] bcachefs (loop1): stripes_read... done [ 181.909151][ T6490] bcachefs (loop1): snapshots_read... done [ 181.946026][ T6490] bcachefs (loop1): going read-write [ 181.970832][ T6490] bcachefs (loop1): journal_replay... [ 182.012681][ T6490] bcachefs (loop1): bch2_journal_replay(): error ERESTARTSYS [ 182.050160][ T6490] bcachefs (loop1): bch2_fs_recovery(): error ERESTARTSYS [ 182.059821][ T6490] bcachefs (loop1): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 182.072481][ T5166] bcachefs (loop1): going read-only [ 182.078056][ T6490] bcachefs (loop1): shutting down [ 182.083784][ T5166] bcachefs (loop1): finished waiting for writes to stop [ 182.092793][ T5166] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 182.110053][ T5166] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 182.121450][ T5166] bcachefs (loop1): unshutdown complete, journal seq 11 [ 182.132363][ T5166] bcachefs (loop1): done going read-only, filesystem not clean [ 182.183165][ T6490] bcachefs (loop1): shutdown complete [ 182.572595][ T6518] loop3: detected capacity change from 0 to 32768 [ 182.775135][ T29] audit: type=1400 audit(1719108674.265:1260): avc: denied { ioctl } for pid=6520 comm="syz-executor.4" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 182.855277][ T6490] syz-executor.1 (6490) used greatest stack depth: 20032 bytes left [ 183.310384][ T29] audit: type=1800 audit(1719108674.795:1261): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 183.429361][ T29] audit: type=1326 audit(1719108674.915:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f503aa7d0a9 code=0x0 [ 183.543135][ T29] audit: type=1400 audit(1719108675.025:1263): avc: denied { ioctl } for pid=6539 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12813 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 183.736074][ T6544] xt_connbytes: Forcing CT accounting to be enabled [ 183.742907][ T6544] No such timeout policy "syz0" [ 184.044467][ T6542] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 184.328346][ T29] audit: type=1400 audit(1719108675.815:1264): avc: denied { bind } for pid=6539 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.622030][ T6554] loop4: detected capacity change from 0 to 32768 [ 185.623073][ T6558] loop3: detected capacity change from 0 to 64 [ 185.642744][ T6558] hfs: unable to parse mount options [ 185.713163][ T6554] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 185.726021][ T6554] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 185.768634][ T6554] bcachefs (loop4): alloc_read... done [ 185.774328][ T6554] bcachefs (loop4): stripes_read... done [ 185.783657][ T6554] bcachefs (loop4): snapshots_read... done [ 185.798932][ T6554] bcachefs (loop4): going read-write [ 185.813821][ T6554] bcachefs (loop4): journal_replay... done [ 185.858302][ T6554] bcachefs (loop4): resume_logged_ops... done [ 185.873425][ T6554] bcachefs (loop4): delete_dead_inodes... done [ 185.904272][ T6554] bcachefs (loop4): done starting filesystem [ 186.029764][ T29] audit: type=1400 audit(1719108677.515:1265): avc: denied { create } for pid=6553 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 186.184054][ T5648] bcachefs (loop4): shutting down [ 186.193491][ T5648] bcachefs (loop4): going read-only [ 186.212428][ T5648] bcachefs (loop4): finished waiting for writes to stop [ 186.242790][ T5648] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 186.284628][ T5648] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 186.307673][ T5648] bcachefs (loop4): shutdown complete, journal seq 15 [ 186.318449][ T5648] bcachefs (loop4): marking filesystem clean [ 186.349306][ T5648] bcachefs (loop4): shutdown complete [ 187.513234][ T6582] batadv0: entered promiscuous mode [ 188.503953][ T6586] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 189.234168][ T6595] No such timeout policy "syz0" [ 190.020807][ T29] audit: type=1400 audit(1719108681.505:1266): avc: denied { create } for pid=6598 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.055518][ T29] audit: type=1400 audit(1719108681.545:1267): avc: denied { accept } for pid=6598 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.565046][ T6608] input: syz0 as /devices/virtual/input/input8 [ 191.622164][ T29] audit: type=1400 audit(1719108682.045:1268): avc: denied { write } for pid=6604 comm="syz-executor.3" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 192.042144][ T6612] loop3: detected capacity change from 0 to 64 [ 192.051253][ T6612] hfs: unable to parse mount options [ 192.186171][ T6614] Cannot find set identified by id 0 to match [ 192.502778][ T6619] loop4: detected capacity change from 0 to 512 [ 192.516557][ T6619] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 193.945511][ T6629] loop3: detected capacity change from 0 to 256 [ 193.956201][ T6629] FAT-fs (loop3): Unrecognized mount option "uni_xlatd=0" or missing value [ 194.019572][ T29] audit: type=1400 audit(1719108685.505:1269): avc: denied { connect } for pid=6628 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.065383][ T29] audit: type=1400 audit(1719108685.535:1270): avc: denied { bind } for pid=6628 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.086828][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.112975][ T29] audit: type=1400 audit(1719108685.535:1271): avc: denied { write } for pid=6628 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.135771][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.147124][ T29] audit: type=1400 audit(1719108685.535:1272): avc: denied { read } for pid=6628 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.899667][ T6638] No such timeout policy "syz0" [ 194.997603][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.006234][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.838948][ T6650] cgroup: Name too long [ 198.949604][ T6654] Cannot find set identified by id 0 to match [ 199.091368][ T6657] tipc: Started in network mode [ 199.100732][ T6657] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 199.112121][ T6657] tipc: Enabled bearer , priority 10 [ 199.137278][ T6657] tipc: Resetting bearer [ 199.237687][ T6657] tipc: Disabling bearer [ 199.386721][ T6663] syz-executor.4[6663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.387491][ T6663] syz-executor.4[6663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.327512][ T6676] cgroup: Name too long [ 201.101657][ T6685] Cannot find set identified by id 0 to match [ 201.520710][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 202.188163][ T6698] syz-executor.3[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.189010][ T6698] syz-executor.3[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.568074][ T6694] sched: RT throttling activated [ 205.350616][ T6719] Cannot find set identified by id 0 to match [ 205.591723][ T6725] loop4: detected capacity change from 0 to 1024 [ 205.645760][ T6725] hfsplus: bad catalog entry type [ 205.692662][ T51] hfsplus: b-tree write err: -5, ino 4 [ 205.928018][ T6730] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.224068][ T6729] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 206.499841][ T6739] loop4: detected capacity change from 0 to 64 [ 206.511226][ T6739] hfs: invalid gid -1 [ 206.515829][ T6739] hfs: unable to parse mount options [ 209.429105][ T6746] loop4: detected capacity change from 0 to 512 [ 209.437909][ T6746] EXT4-fs: Ignoring removed orlov option [ 209.453149][ T6746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 209.463123][ T6746] System zones: 1-12 [ 209.469180][ T6746] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 209.487301][ T6746] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 209.497641][ T29] audit: type=1400 audit(1719108700.985:1273): avc: denied { open } for pid=6749 comm="syz-executor.3" path="/dev/ptyqa" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 209.531265][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.597349][ T29] audit: type=1400 audit(1719108701.085:1274): avc: denied { rmdir } for pid=6745 comm="syz-executor.4" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 209.619450][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.625716][ T29] audit: type=1400 audit(1719108701.085:1275): avc: denied { mounton } for pid=6745 comm="syz-executor.4" path="/root/syzkaller-testdir575744017/syzkaller.oJ5gYR/58/file0/file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 209.653091][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.707710][ T5648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.812493][ T29] audit: type=1326 audit(1719108701.295:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febea27d0a9 code=0x0 [ 209.835941][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.049851][ T6758] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 210.692086][ T6765] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 210.747234][ T6767] loop4: detected capacity change from 0 to 64 [ 210.767289][ T6767] hfs: unable to parse mount options [ 212.602396][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.611962][ T6776] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 212.620375][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.635313][ T6776] Zero length message leads to an empty skb [ 212.681021][ T6778] loop3: detected capacity change from 0 to 1024 [ 212.710307][ T6778] hfsplus: bad catalog entry type [ 212.727462][ T51] hfsplus: b-tree write err: -5, ino 4 [ 212.891314][ T29] audit: type=1400 audit(1719108704.375:1277): avc: denied { write } for pid=6781 comm="syz-executor.3" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.915266][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.921979][ T6783] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in; [ 212.921979][ T6783] program syz-executor.3 not setting count and/or reply_len properly [ 256.360849][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.367282][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.797659][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.804485][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.398018][ T30] INFO: task kworker/0:4:5114 blocked for more than 143 seconds. [ 343.405911][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 343.413870][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.422815][ T30] task:kworker/0:4 state:D stack:23472 pid:5114 tgid:5114 ppid:2 flags:0x00004000 [ 343.433084][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 343.439919][ T30] Call Trace: [ 343.443214][ T30] 2024/06/23 02:13:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 343.446174][ T30] __schedule+0xf15/0x5d00 [ 343.450592][ T30] ? __pfx_mark_lock+0x10/0x10 [ 343.455452][ T30] ? __pfx___schedule+0x10/0x10 [ 343.460316][ T30] ? schedule+0x298/0x350 [ 343.464676][ T30] ? __pfx_lock_release+0x10/0x10 [ 343.469722][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.503844][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.509107][ T30] schedule+0xe7/0x350 [ 343.517421][ T30] schedule_preempt_disabled+0x13/0x30 [ 343.522927][ T30] __mutex_lock+0x5b8/0x9c0 [ 343.527747][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 343.545990][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 343.551062][ T30] ? irqentry_exit+0x3b/0x90 [ 343.556046][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 343.562402][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 343.574717][ T30] process_one_work+0x9fb/0x1b60 [ 343.579691][ T30] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 343.591126][ T30] ? __pfx_process_one_work+0x10/0x10 [ 343.596660][ T30] ? assign_work+0x1a0/0x250 [ 343.601282][ T30] worker_thread+0x6c8/0xf70 [ 343.611990][ T30] ? __kthread_parkme+0x148/0x220 [ 343.617166][ T30] ? __pfx_worker_thread+0x10/0x10 [ 343.622296][ T30] kthread+0x2c1/0x3a0 [ 343.632190][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.637485][ T30] ? __pfx_kthread+0x10/0x10 [ 343.642094][ T30] ret_from_fork+0x45/0x80 [ 343.657270][ T30] ? __pfx_kthread+0x10/0x10 [ 343.661905][ T30] ret_from_fork_asm+0x1a/0x30 [ 343.672008][ T30] [ 343.675150][ T30] INFO: task syz-executor.2:6503 blocked for more than 143 seconds. [ 343.683140][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 343.696752][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.707829][ T30] task:syz-executor.2 state:D stack:29072 pid:6503 tgid:6492 ppid:5109 flags:0x00004006 [ 343.721590][ T30] Call Trace: [ 343.725057][ T30] [ 343.727999][ T30] __schedule+0xf15/0x5d00 [ 343.732431][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 343.743507][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 343.748808][ T30] ? __pfx___schedule+0x10/0x10 [ 343.754152][ T30] ? schedule+0x298/0x350 [ 343.758500][ T30] ? __pfx_lock_release+0x10/0x10 [ 343.763546][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 343.774226][ T30] ? __mutex_trylock_common+0x78/0x250 [ 343.779745][ T30] schedule+0xe7/0x350 [ 343.784048][ T30] schedule_preempt_disabled+0x13/0x30 [ 343.789528][ T30] __mutex_lock+0x5b8/0x9c0 [ 343.794453][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 343.799670][ T30] ? rfkill_unregister+0xde/0x2c0 [ 343.804763][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 343.809839][ T30] ? device_del+0x6b6/0x9f0 [ 343.814495][ T30] ? __pfx_device_del+0x10/0x10 [ 343.819368][ T30] ? rfkill_unregister+0xde/0x2c0 [ 343.824493][ T30] rfkill_unregister+0xde/0x2c0 [ 343.829370][ T30] nfc_unregister_device+0x94/0x330 [ 343.834662][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 343.840409][ T30] virtual_ncidev_close+0x51/0xb0 [ 343.845508][ T30] __fput+0x408/0xbb0 [ 343.849509][ T30] task_work_run+0x14e/0x250 [ 343.854218][ T30] ? __pfx_task_work_run+0x10/