last executing test programs: 13.767360785s ago: executing program 4 (id=2255): openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000001c0)='./file0/file0\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r4) rt_sigreturn() ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 13.419731353s ago: executing program 4 (id=2258): r0 = epoll_create(0x9) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x13) close(r2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x5451, 0x0) 13.281937794s ago: executing program 4 (id=2259): poll(0x0, 0x0, 0x64) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") r1 = dup(r0) write$P9_RGETATTR(r1, 0x0, 0x0) 12.037652196s ago: executing program 4 (id=2265): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1}) r2 = eventfd2(0x0, 0x0) r3 = dup(r2) dup3(r3, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) rt_sigreturn() syz_read_part_table(0x401b, &(0x7f0000000000)="$eJzs0LEJwlAUBdD7gyjqBs5hL5aOksZOsBGCq1g5hsO4gBPYBBJTCN/Wc6r7i38f762f932SRU7H9pwPzSjvmqQk2fbvkv8z3bl0ySPJqqZkfNS0ryF3Q5x9bbhc+zCvmTvtPtw2y1/+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOJABAAAAEOZvnUf7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpQAAAP//fvgJZQ==") 11.767676478s ago: executing program 4 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x412500, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000404000000000000000000000105000000080000000000000000000003000000"], 0x0, 0x5a}, 0x20) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 9.824504537s ago: executing program 2 (id=2286): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c000480", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x94}}, 0x0) 9.361193995s ago: executing program 2 (id=2289): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xa, 0x0, 0x0, @private1}, 0x1c) r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff}}, 0x43) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000004040)={'ipvlan0'}, 0xa) 9.193880969s ago: executing program 2 (id=2290): timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 9.008537294s ago: executing program 2 (id=2294): r0 = mq_open(&(0x7f0000000fc0)='\x14\x00\x00\x00\x00\x00\x00w\x91\xf6&=P\x13\xd9\xad\x10\xcc\xbf\x83;\x9e\x12`\xf6', 0x40, 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "3c682fceb16b4fad", "2bad1be5b3bf1ef49d73b94c9e97588c", "257bb02d", "66133c192fbbb071"}, 0x28) 8.8152178s ago: executing program 2 (id=2297): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x541b, 0x0) 8.716887308s ago: executing program 4 (id=2299): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c000480", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x94}}, 0x0) 8.550612221s ago: executing program 2 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0x40000}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffff"], 0x0, 0x4a}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000710058348b486f619500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x22b206, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 6.163690136s ago: executing program 0 (id=2313): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.124676159s ago: executing program 0 (id=2314): syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b28, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x28}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 4.971715624s ago: executing program 0 (id=2317): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10908, 0x0, '\x00', @p_u8=0x0}}) 4.825764876s ago: executing program 0 (id=2318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c0001000800ff000000000007000000", @ANYRES32=r5, @ANYBLOB="800094000a000200aaaaaa"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x80801) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r8], 0x94}}, 0x0) 4.204159256s ago: executing program 0 (id=2320): syz_usb_connect(0x2, 0x24, &(0x7f0000002080)={{0x12, 0x1, 0x0, 0xe, 0x24, 0x8c, 0x8, 0xbda, 0x177, 0x1bbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0xd6, 0xae}}]}}]}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) 4.179942258s ago: executing program 1 (id=2321): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.951390617s ago: executing program 1 (id=2322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x408, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@cipso={0x86, 0x10, 0x2, [{0x2, 0xa, "1c3a1b1f1b4bd958"}]}]}}}}}) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000003a40)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x1349eced, @mcast1, 0x1}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="c877c0bbbfe77bb861d9099f8392f78057e71081cc482504f580c8f47745d0391261230418fa03259227c2e38986fa2b66f54576816ab6fcbf63b55cd87e6c0817b190313957f7ae0fa56d0eede441ba95eb81b6c8fee46fe2a60444142f50dd", 0x60}, {&(0x7f0000001740)}, {&(0x7f0000000980)="287b42ee19b2b82519cd72725a28eab340716aafd1ae44e44b9cc3ef74e1e330eeb6c1ac23b41655c7ae12540fee4315bf7489622cc6ee91273ed2abbdb2dcd4683e2c0c6c476179172cbcb45c21847976886cdc74dcb8afcc7e458617370913b5494ad8f4bb503dceacc7bd796c480a547a057a62d278f1601aab23f10e8201fb1b912d370653e6b0c8a8f56ee5f187c6238f1080d7df9d347f66309e2196409c08d3d4d9e4461d0d3a3818ed5fce584142a0c747e0138c7e585a7160074a716faa5250043e5fa1d79d051b8fa273af716f19866d190c81cbdb9649fa4175", 0xdf}, {0x0}], 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x170}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000d40)="73ac2dad41c4a838dfc5cd504f87c73c4fec6a64e0a4e9876b8c40c1bfc6d8889a1455543a67fd4de6635f2723c04ef94a0eed012ff9c18f0148fe662a2e55d995dfd7a5bd74bdc5857ccc32cdb3c6d3769ad6d227fb46082e48ec3038004ce4bf175bb73f4a94a2abe4997fd10a926ab99350861e2133e35303ff98cfd8c8fa91ef9490", 0x84}, {&(0x7f0000002740)="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", 0x800}, {&(0x7f0000000e00)}], 0x3, &(0x7f0000000f40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @dstopts={{0x60, 0x29, 0x37, {0x2d, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @mcast2}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xfd}, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x108, 0x29, 0x36, {0x33, 0x1d, '\x00', [@generic={0xb, 0xe7, "df8c7a531c743ad6d3a862ea37a768844613df3b3a2ec507c7dc1d139444d4462c9e275f5548f192c52c01a6e75b9f07d23dff80457ff35213d8561460f3b3dedfd5ffe9e2e127c330e9e69c70bfe964ffe2dff63fb3efc4343c736713333f3f82dba3b576dcaa40a517c3d56df3e594f02da80c5db428cafcc9cd32e5542a0923797d4e1df34fefab2cb5605b030860fab49b845000c6b09d990d25e5d08029421512100f0a9e6823ecce60d2e597fcf7183aa76b65896aa66b3940647da285896757721a9fdfed5d17d372d71371f5f15f54eb5a1d2a64d59bc2416c5a4d3aba5adb47352ebc"}]}}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x87, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x1da5a313}, @jumbo={0xc2, 0x4, 0x49a7}, @calipso={0x7, 0x48, {0x0, 0x10, 0x65, 0x0, [0x3, 0x3fbc79c5, 0xc, 0xfffffffffffffffd, 0x6, 0x3, 0x9, 0x3ff]}}, @ra={0x5, 0x2, 0xffff}, @generic={0x10, 0xaf, "32b68d512191d2ad2c43a38fd97308a298e8a0552e26c1aa1b6f4e0ff8b6552cb67f1485be6c69ee9bdb70fded3ed8ce34e156f26b92f187627a34802147122544a020812b2dda3d35d40b1dd0b74b38d86ae793c709ed0a2707973bc2ff5e043982a5aae6a546d84854a755302e402b96f4050425f5be329763d9711116d272848732cd4b932f88cad1e894a54165c70108dcc78db3882969af9a126d8ab8d37cb0318cb8541fbba2d7625cc9c9c1"}, @jumbo={0xc2, 0x4, 0x3ff}, @ra={0x5, 0x2, 0x7fff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr={{0x98, 0x29, 0x39, {0x2, 0x10, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00', @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x89, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x3e0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001340)="d94050259b4105fce54a3d55d6d4d469c1fb535bb15d94c944e3cc02c31a3f7fb690815ec4a89172cde26e8693fa9d27853854ff60012cc32016fbce4eba9ee7a898534c92a9e9e449daf65b70ff72c5186dc1e42dc149fb4e24ffe7fb48f2169989da9af4529dcb904c8ca46ddae30558d9b13bf1c5117ea6be21d840d2f7c62205103dc2414e0c796a754bb00797deb84c305acfce6630cbac75cb80b5972256d5c002749bf67b83430ddf13dbb19437d93e16117a4cbbe685bec131f84270c6df8b4430e5086e6bae40ac189b08b5c571943ad5c200845373985e923de8fc32a3522f6d346da973153a461b2bb471269e", 0xf2}, {&(0x7f0000001480)}, {0x0}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x220}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001640)="a2edb11ead4b0336fad32cd4381668a0894b9f8ba95173f93a56034c9d8e7aeb39d1ccb8e803d0527f18da3fa9f083a96aed04af8487405d0edc8151598799e97109ee8cef95e70323c281096443fb5506c87fd535f12d38fa7fdc64e4185131a392bb872ee7b5f67180d00612d06a333623b613954322a91aeca3fa01911f6aa90e645101125ab2a037e540ca8eede3602819a7bbd99a82cc9b", 0x9a}, {&(0x7f0000003980)="9d2d425abd7bd3a61ea091d5797ad96fc7af7c69ae3b7141f272932f6214cf387479fb141cb4474b253703479916d232f93d50066aa1f5d143a24feb1b2d7bc29363dacd4205b0f7fb8768ffbb729cb6587be73f772bf6f606987d8d60d5baaad483cf73b7dca6689ee5b5311865d399b636", 0x72}], 0x2}}], 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x100000008) 3.617977564s ago: executing program 3 (id=2324): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x48) r2 = socket$inet6(0xa, 0xa, 0x2) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000180), 0x4) connect$inet6(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1) r3 = io_uring_setup(0x3453, &(0x7f0000000540)={0x0, 0xd26, 0x1, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4118, 0x1000}], 0x0, 0x34}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181480, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) 2.970198477s ago: executing program 1 (id=2325): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@shortname_lower}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x2, 0x229, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 2.651507713s ago: executing program 1 (id=2326): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x2000000}) 2.32303602s ago: executing program 1 (id=2327): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x0, [{0xd}, {}, {}, {0x0, 0x40}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, &(0x7f0000000080)) 1.274604776s ago: executing program 0 (id=2328): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x94}}, 0x0) 641.615318ms ago: executing program 3 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup=r1, r0, 0x1}, 0x14) close(r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r1, 0xffffffffffffffff, 0x1}, 0x10) 503.565579ms ago: executing program 1 (id=2330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x412500, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000404000000000000000000000105000000080000000000000000000003000000"], 0x0, 0x5a}, 0x20) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 428.635785ms ago: executing program 3 (id=2331): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 253.66311ms ago: executing program 3 (id=2332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 79.646194ms ago: executing program 3 (id=2333): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=2334): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXL7F3ndhri88nmp3nmedlnuc3Mzu7s4oc4H/WtXNpPE4t1869uVzkVx7NdFYezdzpp5NMJKknjd4qtbtJ7aPkanpLPlNsrLqrPW0/HyzMvv3xpyuf9HKNainr17drt8mV+hYbH1ZLziQ5Uq2fwbr+rm/orzVyd7XVGRYBO9sPHIxbM0l3ne+eWivZ0fDXLXBg1Xr3zU0X9FRyNMlk9Tmgd1fs3bMPtYfjHgAAAADsgxd+WX6FPzbucQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhUv39/1q11PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3j20dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5T20ci+fwff/edW527tydu3jt3cKY0gomBJ2gbIzEzEImXh43ErcMaiUHTZSROruav5Rv5ds7lTN7KYhbyvcxlKfM5k69nLkcyV53PxevU9pG6ui731k4jaZXHpVm9iw4/pqXM5dWy7bEs5Ft5Nzcynyvlv0u5mNdzOZczO3CETw5x1ddHe6c9+4WBh8m/SNIert0+KAZ2fPXuNHjWT5fXwfF1W9ai9OLzvx81Plslin38pFofDBsjcXEgEi9tH4nflG8r9zp3by/emntvyP29Vq2L6+hnB+ouUZwvLxYHq8ytPzuKspc2lk324tWqfnHpla2/4xZlJ1fLdrpSW9VnuM09XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94VOK9jDRTtLfkuzUqpmd6+xNopWkTDT6idH6mRiqcmvt6Lzx+2cZc3PUVslzCVSjOsnuP7j9z263u++HaYtEc5tzfi3RrWwq6g7VfGyJf3WfX4djfmMC9tyFpTvvXbh3/8GXFu7MvTP/zvzd2cuXZ6dnL1/524WbC5356d7ruEcJ7IW1m/64RwIAAAAAAAAAAAAMaz/+W8JTdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9rT9vPBwuzbH3+68kkv16iWsn59XbvmbmbxsFpyJsmRaj1o8hn6u16tdzWyUm11hkXAzvYDB+P23wAAAP//+B8RmQ==") r0 = open(&(0x7f000001f580)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000003a00)="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", 0x200}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): v packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.116011][T10505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.142986][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.170207][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.178245][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 547.281531][T10578] loop2: detected capacity change from 0 to 512 [ 547.285359][ T26] audit: type=1326 audit(1722351115.783:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.366219][T10578] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 547.369104][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.394860][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.404538][ T26] audit: type=1326 audit(1722351115.783:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.430562][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.460365][T10505] device hsr_slave_0 entered promiscuous mode [ 547.462664][T10578] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 547.481686][T10505] device hsr_slave_1 entered promiscuous mode [ 547.486007][ T26] audit: type=1326 audit(1722351115.783:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.510947][T10505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.518552][T10505] Cannot create hsr debugfs directory [ 547.528073][T10304] device veth0_macvtap entered promiscuous mode [ 547.535300][T10578] EXT4-fs (loop2): 1 truncate cleaned up [ 547.541131][T10578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 547.566648][ T26] audit: type=1326 audit(1722351115.783:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.589748][ T26] audit: type=1326 audit(1722351115.783:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.613521][ T26] audit: type=1326 audit(1722351115.783:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.636614][ T26] audit: type=1326 audit(1722351115.783:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7fc00000 [ 547.863149][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 547.891298][T10304] device veth1_macvtap entered promiscuous mode [ 547.945967][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.961101][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.971743][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.984828][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.994800][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.005355][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.015627][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.026155][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.042334][T10304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.060665][T10590] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 548.094619][T10590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.103030][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.114056][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.130030][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.153150][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.199259][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.246551][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.269208][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.280051][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.290725][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.301524][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.313688][T10304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.313903][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 548.344737][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.376826][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.461612][ T4735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.485516][ T3657] Bluetooth: hci1: command tx timeout [ 548.485581][ T3641] Bluetooth: hci0: command tx timeout [ 548.563441][T10469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.587271][T10304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.600707][T10599] syz.2.1665[10599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.600821][T10599] syz.2.1665[10599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.618925][T10304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.660837][T10304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.678759][T10304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.769966][ T4735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.810200][T10469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.864793][ T4735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.956739][T10469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.017229][ T4735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.057945][T10469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.160850][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.194732][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.265289][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.320484][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.341714][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.360310][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.797701][T10612] loop2: detected capacity change from 0 to 256 [ 549.850746][ T3800] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 550.590817][ T3641] Bluetooth: hci1: command tx timeout [ 550.667604][T10620] loop1: detected capacity change from 0 to 16 [ 550.713189][T10620] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff]‰çõ®#[8û¨ÞÏ+K·þ¬Wù䶓Ú?¸Ò‡í98 7' [ 551.133665][T10628] loop1: detected capacity change from 0 to 512 [ 551.146714][T10624] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 551.215627][T10628] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.274137][T10624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.371914][T10628] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 551.398298][T10628] EXT4-fs (loop1): 1 truncate cleaned up [ 551.407312][T10628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 551.563503][T10638] loop2: detected capacity change from 0 to 512 [ 551.594032][T10638] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.700286][T10638] EXT4-fs (loop2): failed to initialize system zone (-117) [ 551.707790][T10638] EXT4-fs (loop2): mount failed [ 551.833540][T10638] loop2: detected capacity change from 0 to 256 [ 551.876335][T10469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.892218][T10638] FAT-fs (loop2): Directory bread(block 64) failed [ 551.899680][T10638] FAT-fs (loop2): Directory bread(block 65) failed [ 551.906562][T10638] FAT-fs (loop2): Directory bread(block 66) failed [ 551.914662][T10638] FAT-fs (loop2): Directory bread(block 67) failed [ 551.924934][T10638] FAT-fs (loop2): Directory bread(block 68) failed [ 551.966153][T10638] FAT-fs (loop2): Directory bread(block 69) failed [ 551.998034][T10638] FAT-fs (loop2): Directory bread(block 70) failed [ 552.006373][T10638] FAT-fs (loop2): Directory bread(block 71) failed [ 552.022033][T10638] FAT-fs (loop2): Directory bread(block 72) failed [ 552.033956][T10638] FAT-fs (loop2): Directory bread(block 73) failed [ 552.126151][T10469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 552.144537][T10304] EXT4-fs (loop1): unmounting filesystem. [ 552.297550][T10646] syz.1.1673 sent an empty control message without MSG_MORE. [ 552.326197][T10469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 552.478626][T10469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.642691][T10505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.778985][ T3688] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 552.875135][T10505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.912959][T10505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.981334][T10505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 553.179684][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.209614][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.234348][T10469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.241977][ T3688] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 553.280385][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.320302][ T3688] usb 2-1: config 0 descriptor?? [ 553.340006][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.347994][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.491474][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.513670][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.532253][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.559608][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.566981][ T7195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.641901][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.651984][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.661801][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.671084][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.678273][ T7196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.686635][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.695883][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.781020][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.798813][ T9796] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 553.803753][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.820655][ T3688] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 553.830048][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.843269][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.852509][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.861514][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.876419][T10469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.894363][T10469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.906796][T10505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.920802][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.945033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.954160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.984974][ T4735] device hsr_slave_0 left promiscuous mode [ 554.019062][ T4735] device hsr_slave_1 left promiscuous mode [ 554.030968][ T3688] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 554.048846][ T9796] usb 5-1: Using ep0 maxpacket: 16 [ 554.072499][ T3688] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized [ 554.125982][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.137397][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.155919][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.165105][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.169280][ T9796] usb 5-1: config 0 has no interfaces? [ 554.181336][ T4735] device bridge_slave_1 left promiscuous mode [ 554.187650][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.227277][ T4735] device bridge_slave_0 left promiscuous mode [ 554.235938][ T3688] usb 2-1: USB disconnect, device number 12 [ 554.241581][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.272410][ T4735] device hsr_slave_0 left promiscuous mode [ 554.293444][ T4735] device hsr_slave_1 left promiscuous mode [ 554.307775][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.316414][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.325474][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.333526][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.333905][ T9796] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 554.350118][ T9796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.350772][ T4735] device bridge_slave_1 left promiscuous mode [ 554.358219][ T9796] usb 5-1: Product: syz [ 554.369543][ T9796] usb 5-1: Manufacturer: syz [ 554.374284][ T9796] usb 5-1: SerialNumber: syz [ 554.375258][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.388157][ T9796] r8152-cfgselector 5-1: config 0 descriptor?? [ 554.396026][ T4735] device bridge_slave_0 left promiscuous mode [ 554.403243][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.456037][ T4735] device veth1_macvtap left promiscuous mode [ 554.462536][ T4735] device veth0_macvtap left promiscuous mode [ 554.468895][ T4735] device veth1_vlan left promiscuous mode [ 554.474734][ T4735] device veth0_vlan left promiscuous mode [ 554.483574][ T4735] device veth1_macvtap left promiscuous mode [ 554.489782][ T4735] device veth0_macvtap left promiscuous mode [ 554.495979][ T4735] device veth1_vlan left promiscuous mode [ 554.502083][ T4735] device veth0_vlan left promiscuous mode [ 554.649942][ T9796] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 554.838472][T10680] loop1: detected capacity change from 0 to 512 [ 554.854706][T10680] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 554.870321][ T3688] usb 5-1: USB disconnect, device number 12 [ 554.906221][T10680] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 554.922091][T10680] EXT4-fs (loop1): 1 truncate cleaned up [ 554.927865][T10680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 555.384723][ T4735] team0 (unregistering): Port device team_slave_1 removed [ 555.491005][ T4735] team0 (unregistering): Port device team_slave_0 removed [ 555.572663][ T4735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.626722][ T4735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.758181][T10304] EXT4-fs (loop1): unmounting filesystem. [ 555.898966][ T7196] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 556.128913][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 556.138739][ T7196] usb 5-1: Using ep0 maxpacket: 8 [ 556.280036][ T4735] bond0 (unregistering): Released all slaves [ 556.312353][ T7196] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.384204][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 556.513532][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.524792][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.534758][ T14] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.543959][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.567710][ T14] usb 2-1: config 0 descriptor?? [ 556.580537][ T7196] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 556.600299][ T7196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.608369][ T7196] usb 5-1: Product: syz [ 556.613220][ T7196] usb 5-1: Manufacturer: syz [ 556.614541][ T14] hub 2-1:0.0: USB hub found [ 556.617836][ T7196] usb 5-1: SerialNumber: syz [ 556.620159][ T7196] usb 5-1: config 0 descriptor?? [ 556.883542][ T14] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 556.934656][ T4735] team0 (unregistering): Port device team_slave_1 removed [ 556.994973][ T4735] team0 (unregistering): Port device team_slave_0 removed [ 556.998995][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 557.016757][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 557.091789][ T4735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.098119][ T14] usb 2-1: USB disconnect, device number 13 [ 557.252520][ T4735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.858108][ T4735] bond0 (unregistering): Released all slaves [ 557.964567][T10677] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 558.018858][ T7196] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 558.044477][ T7196] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 558.062550][ T7196] dib0700: firmware download failed at 7 with -22 [ 558.091001][T10505] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.108379][ T7196] usb 5-1: USB disconnect, device number 13 [ 558.141688][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 558.151791][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.215080][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 558.230139][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.255450][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.262705][ T9872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.279254][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 558.288256][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.350634][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.357766][ T9872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.366090][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 558.410780][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 558.420819][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 558.441014][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 558.454094][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.464292][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 558.483013][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 558.498072][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 558.509745][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 558.518317][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.527274][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.543872][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.584220][T10505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.667568][T10505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.689225][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 558.706272][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 558.714470][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 558.729556][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.803106][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.824911][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.922978][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.936486][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.949044][T10469] device veth0_vlan entered promiscuous mode [ 558.960886][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.972959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.988850][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 558.996289][T10469] device veth1_vlan entered promiscuous mode [ 559.041319][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.108981][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.152002][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.153229][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.206014][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.218742][ T14] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.243090][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.246832][T10469] device veth0_macvtap entered promiscuous mode [ 559.311723][ T14] usb 2-1: config 0 descriptor?? [ 559.321470][T10469] device veth1_macvtap entered promiscuous mode [ 559.372691][ T14] hub 2-1:0.0: USB hub found [ 559.374844][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.389290][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.400969][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.418341][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.434771][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.448698][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.471503][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.485552][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.499684][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.523387][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.543039][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.562190][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.598539][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.616576][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.627937][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.628865][ T14] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 559.644653][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.663207][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.682959][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.700494][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.720715][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.751834][T10469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.761933][T10469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.770884][T10469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.780004][T10469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.788961][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 559.798491][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 559.868268][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.890856][ T14] usb 2-1: USB disconnect, device number 14 [ 559.897375][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.937265][T10505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.096827][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 560.116179][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.202507][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.240714][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 560.243223][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.254019][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.294726][T10505] device veth0_vlan entered promiscuous mode [ 560.326262][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.328832][ T9873] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 560.345373][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.370500][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.404737][T10505] device veth1_vlan entered promiscuous mode [ 560.439779][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.482206][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.525171][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 560.541001][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 560.581384][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 560.600532][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.608865][ T9873] usb 3-1: Using ep0 maxpacket: 16 [ 560.615406][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.645022][T10505] device veth0_macvtap entered promiscuous mode [ 560.651590][T10725] loop1: detected capacity change from 0 to 512 [ 560.683472][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.707128][T10725] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 560.727624][T10505] device veth1_macvtap entered promiscuous mode [ 560.728995][ T9873] usb 3-1: config 0 has no interfaces? [ 560.804629][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.824682][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.844035][T10725] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 560.892712][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.908483][T10725] EXT4-fs (loop1): 1 truncate cleaned up [ 560.923438][T10725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.932808][ T9873] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 560.948748][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.958905][ T9873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.008969][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.040127][ T9873] usb 3-1: Product: syz [ 561.044350][ T9873] usb 3-1: Manufacturer: syz [ 561.048303][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.058846][ T9873] usb 3-1: SerialNumber: syz [ 561.064540][ T9873] r8152-cfgselector 3-1: config 0 descriptor?? [ 561.245086][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.315387][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.339216][ T9873] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 561.380220][T10505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.420088][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 561.437449][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 561.487372][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 561.536333][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.562376][ T7196] usb 3-1: USB disconnect, device number 18 [ 561.686213][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.730097][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.779918][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.790311][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.801911][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.818746][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.847898][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.868056][T10505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.877962][T10304] EXT4-fs (loop1): unmounting filesystem. [ 561.886819][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 561.897295][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 561.919867][T10505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.929950][T10505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.939725][T10505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.948562][T10505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.963755][T10735] device pim6reg1 entered promiscuous mode [ 562.074388][T10742] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 562.128851][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 562.260507][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.288127][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.333362][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 562.372609][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.390212][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.444214][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 562.511005][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.540142][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.570473][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.614424][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 562.632339][T10753] loop1: detected capacity change from 0 to 2048 [ 562.649094][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.690073][ T22] usb 5-1: config 0 descriptor?? [ 562.708815][T10753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.918414][T10761] loop3: detected capacity change from 0 to 512 [ 562.960810][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.967175][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.984613][T10761] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 563.118292][T10761] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 563.212661][ T22] wacom 0003:056A:0314.0006: unknown main item tag 0x0 [ 563.249705][ T22] wacom 0003:056A:0314.0006: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 563.271249][T10772] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 563.271753][T10761] EXT4-fs (loop3): 1 truncate cleaned up [ 563.326495][T10761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 563.374483][ T22] wacom 0003:056A:0314.0006: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.4-1/input0 [ 563.385059][T10772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.450538][ T22] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0314.0006/input/input7 [ 563.739345][ T22] usb 5-1: USB disconnect, device number 14 [ 563.948849][ T3739] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 564.064029][T10469] EXT4-fs (loop3): unmounting filesystem. [ 564.088950][ T3686] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 564.258988][ T3739] usb 1-1: Using ep0 maxpacket: 16 [ 564.349068][ T3686] usb 3-1: Using ep0 maxpacket: 8 [ 564.388855][ T3739] usb 1-1: config 0 has no interfaces? [ 564.499090][T10802] netlink: 'syz.3.1720': attribute type 1 has an invalid length. [ 564.509028][ T3686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 564.549014][ T3739] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 564.558119][ T3739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.575356][ T3739] usb 1-1: Product: syz [ 564.597764][ T3739] usb 1-1: Manufacturer: syz [ 564.602849][ T3739] usb 1-1: SerialNumber: syz [ 564.624590][ T3739] r8152-cfgselector 1-1: config 0 descriptor?? [ 564.637917][T10810] loop3: detected capacity change from 0 to 512 [ 564.660574][T10810] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 564.733859][T10810] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 564.756045][T10810] EXT4-fs (loop3): 1 truncate cleaned up [ 564.766127][T10810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 564.778903][ T3686] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 564.788004][ T3686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.798951][ T3686] usb 3-1: Product: syz [ 564.803167][ T3686] usb 3-1: Manufacturer: syz [ 564.809345][ T3686] usb 3-1: SerialNumber: syz [ 564.815888][ T3686] usb 3-1: config 0 descriptor?? [ 565.008145][ T3739] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 565.219318][ T9873] usb 1-1: USB disconnect, device number 14 [ 565.419722][ T3686] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 565.436990][ T3686] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 565.446230][ T3686] dib0700: firmware download failed at 7 with -22 [ 565.465192][ T3686] usb 3-1: USB disconnect, device number 19 [ 565.550027][T10469] EXT4-fs (loop3): unmounting filesystem. [ 565.781815][T10845] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 566.187712][T10863] loop0: detected capacity change from 0 to 512 [ 566.239518][T10863] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.314214][T10863] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 566.349801][T10863] EXT4-fs (loop0): 1 truncate cleaned up [ 566.356375][T10863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 566.598268][T10881] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 566.625418][T10881] 8021q: adding VLAN 0 to HW filter on device bond6 [ 566.641321][T10879] loop3: detected capacity change from 0 to 512 [ 566.653404][T10879] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.772973][T10879] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1747: couldn't read orphan inode 16 (err -116) [ 566.809087][T10879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 566.844406][T10879] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 566.966152][T10879] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.1747: corrupted xattr block 19 [ 567.061539][T10505] EXT4-fs (loop0): unmounting filesystem. [ 567.270811][T10469] EXT4-fs (loop3): unmounting filesystem. [ 567.765466][T10910] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 567.815216][T10888] loop2: detected capacity change from 0 to 32768 [ 567.882898][T10920] loop3: detected capacity change from 0 to 1024 [ 567.890388][T10920] EXT4-fs: Ignoring removed i_version option [ 567.896533][T10920] EXT4-fs: Ignoring removed bh option [ 567.950003][T10910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.991461][T10888] XFS (loop2): Mounting V5 Filesystem [ 568.024075][T10920] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 69: comm syz.3.1763: lblock 8 mapped to illegal pblock 69 (length 1) [ 568.051455][T10920] __quota_error: 57 callbacks suppressed [ 568.051482][T10920] Quota error (device loop3): write_blk: dquota write failed [ 568.091165][T10920] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 68: comm syz.3.1763: lblock 7 mapped to illegal pblock 68 (length 1) [ 568.099366][T10932] loop0: detected capacity change from 0 to 512 [ 568.129793][T10920] Quota error (device loop3): write_blk: dquota write failed [ 568.130979][T10932] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 568.144547][T10920] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 67: comm syz.3.1763: lblock 6 mapped to illegal pblock 67 (length 1) [ 568.188313][T10920] Quota error (device loop3): write_blk: dquota write failed [ 568.196430][T10920] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 568.217377][T10920] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 48: comm syz.3.1763: lblock 0 mapped to illegal pblock 48 (length 1) [ 568.252925][T10920] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 568.274569][T10920] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1763: Failed to acquire dquot type 0 [ 568.283965][T10888] XFS (loop2): Torn write (CRC failure) detected at log block 0x180. Truncating head block from 0x200. [ 568.305249][T10920] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 568.308287][T10932] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 568.344010][T10920] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.1763: mark_inode_dirty error [ 568.368313][T10920] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 568.388813][T10920] EXT4-fs (loop3): 1 orphan inode deleted [ 568.394842][T10920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 568.428819][ T4735] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 568.495630][T10932] EXT4-fs (loop0): 1 truncate cleaned up [ 568.528878][T10932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 568.535712][ T4735] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 568.550860][T10888] XFS (loop2): Starting recovery (logdev: internal) [ 568.574506][T10469] EXT4-fs (loop3): unmounting filesystem. [ 568.581956][ T4735] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 0 [ 568.785998][T10469] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 568.809032][T10888] XFS (loop2): Ending recovery (logdev: internal) [ 568.844802][T10469] EXT4-fs error (device loop3): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error [ 568.910048][T10888] XFS (loop2): Quotacheck needed: Please wait. [ 568.996728][T10888] XFS (loop2): Quotacheck: Done. [ 569.196019][ T7016] XFS (loop2): Unmounting Filesystem [ 569.207340][T10505] EXT4-fs (loop0): unmounting filesystem. [ 569.638053][T10933] loop4: detected capacity change from 0 to 32768 [ 569.646265][T10954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1772'. [ 569.770965][T10933] XFS (loop4): Mounting V5 Filesystem [ 569.869484][T10933] XFS (loop4): Ending clean mount [ 569.959787][ T9271] XFS (loop4): Unmounting Filesystem [ 570.275743][T10973] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 570.562520][T10982] loop0: detected capacity change from 0 to 512 [ 570.623277][T10982] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 570.721064][T10982] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 570.824034][T10982] EXT4-fs (loop0): 1 truncate cleaned up [ 570.868884][T10982] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 571.372878][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'. [ 571.554372][T10505] EXT4-fs (loop0): unmounting filesystem. [ 571.866921][T11010] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 571.909219][T11010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.946809][T11010] device vlan2 entered promiscuous mode [ 572.084103][ T3686] libceph: connect (1)[c::]:6789 error -101 [ 572.101979][ T3686] libceph: mon0 (1)[c::]:6789 connect error [ 572.185475][T11013] ceph: No mds server is up or the cluster is laggy [ 572.398464][T10993] loop2: detected capacity change from 0 to 32768 [ 572.502519][T10993] XFS (loop2): Mounting V5 Filesystem [ 572.665432][T10993] XFS (loop2): Torn write (CRC failure) detected at log block 0x180. Truncating head block from 0x200. [ 572.840754][T10993] XFS (loop2): Starting recovery (logdev: internal) [ 572.865922][T11044] loop0: detected capacity change from 0 to 512 [ 572.937522][T10993] XFS (loop2): Ending recovery (logdev: internal) [ 572.944920][T11044] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.994459][T10993] XFS (loop2): Quotacheck needed: Please wait. [ 573.016287][T11044] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 573.070848][T11044] EXT4-fs (loop0): 1 truncate cleaned up [ 573.084655][T11044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 573.103884][T10993] XFS (loop2): Quotacheck: Done. [ 573.500629][ T7016] XFS (loop2): Unmounting Filesystem [ 573.821047][T10505] EXT4-fs (loop0): unmounting filesystem. [ 574.069896][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.608905][ T3739] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 575.673559][T11087] loop0: detected capacity change from 0 to 512 [ 575.730039][T11087] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.815660][T11087] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 575.848989][T11087] EXT4-fs (loop0): 1 truncate cleaned up [ 575.854709][T11087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 576.248944][ T3739] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 576.280542][ T3739] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 576.315439][ T3739] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 576.353812][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.409742][T11081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 576.590768][ T3739] libceph: connect (1)[c::]:6789 error -101 [ 576.596879][ T3739] libceph: mon0 (1)[c::]:6789 connect error [ 576.668843][T10505] EXT4-fs (loop0): unmounting filesystem. [ 576.733124][T11101] ceph: No mds server is up or the cluster is laggy [ 576.891920][ T3686] usb 2-1: USB disconnect, device number 15 [ 577.253527][T11122] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 577.384501][T11122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.475760][T11124] device vlan2 entered promiscuous mode [ 578.884737][T11138] loop0: detected capacity change from 0 to 512 [ 578.895722][T11140] loop2: detected capacity change from 0 to 128 [ 578.967459][T11138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 579.065962][T11138] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 579.142638][T11132] loop3: detected capacity change from 0 to 32768 [ 579.200917][T11138] EXT4-fs (loop0): 1 truncate cleaned up [ 579.207305][T11138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 579.209719][T11132] XFS: noikeep mount option is deprecated. [ 579.239469][T11136] loop1: detected capacity change from 0 to 32768 [ 579.248237][ T26] audit: type=1800 audit(1722351147.753:1984): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1828" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 579.280633][T10505] EXT4-fs (loop0): unmounting filesystem. [ 579.307348][T11136] XFS (loop1): Mounting V5 Filesystem [ 579.479115][T11132] XFS (loop3): Mounting V5 Filesystem [ 579.488593][T11136] XFS (loop1): Ending clean mount [ 579.501520][T11136] XFS (loop1): Quotacheck needed: Please wait. [ 579.501604][T11164] loop4: detected capacity change from 0 to 512 [ 579.559315][T11164] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.638325][T11136] XFS (loop1): Quotacheck: Done. [ 579.672792][T11132] XFS (loop3): Ending clean mount [ 579.701054][T11132] XFS (loop3): Quotacheck needed: Please wait. [ 579.746750][T11164] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 579.802043][T11164] EXT4-fs (loop4): 1 truncate cleaned up [ 579.813667][T11164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 579.827143][T11132] XFS (loop3): Quotacheck: Done. [ 579.851158][T11136] loop1: detected capacity change from 32768 to 0 [ 580.064562][T10469] XFS (loop3): Unmounting Filesystem [ 580.347511][T10304] XFS (loop1): Unmounting Filesystem [ 580.532708][ T9271] EXT4-fs (loop4): unmounting filesystem. [ 582.766437][T11202] loop4: detected capacity change from 0 to 32768 [ 582.811038][T11202] XFS: noikeep mount option is deprecated. [ 582.898324][T11202] XFS (loop4): Mounting V5 Filesystem [ 582.910801][T11211] loop2: detected capacity change from 0 to 512 [ 583.023225][T11211] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 583.072352][T11202] XFS (loop4): Ending clean mount [ 583.093455][T11202] XFS (loop4): Quotacheck needed: Please wait. [ 583.098147][T11211] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 583.129753][T11211] EXT4-fs (loop2): 1 truncate cleaned up [ 583.136033][T11211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 583.489679][T11202] XFS (loop4): Quotacheck: Done. [ 583.657030][ T9271] XFS (loop4): Unmounting Filesystem [ 583.977060][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 585.064235][T11251] loop1: detected capacity change from 0 to 512 [ 585.075056][T11251] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 585.238708][T11251] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 585.320698][T11251] EXT4-fs (loop1): 1 truncate cleaned up [ 585.346448][T11251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 585.544466][T11248] loop4: detected capacity change from 0 to 32768 [ 585.552059][T11248] XFS: noikeep mount option is deprecated. [ 585.569341][ T3641] Bluetooth: hci4: command 0x0406 tx timeout [ 585.633881][T11248] XFS (loop4): Mounting V5 Filesystem [ 585.787964][T11248] XFS (loop4): Ending clean mount [ 585.804096][T11248] XFS (loop4): Quotacheck needed: Please wait. [ 585.877691][T11248] XFS (loop4): Quotacheck: Done. [ 586.059990][T10304] EXT4-fs (loop1): unmounting filesystem. [ 586.084689][ T9271] XFS (loop4): Unmounting Filesystem [ 587.369224][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 587.416134][T11279] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 587.560096][T11279] 8021q: adding VLAN 0 to HW filter on device bond7 [ 587.621618][T11286] loop4: detected capacity change from 0 to 512 [ 587.639821][T11286] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 587.749091][ T22] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 587.762113][ T22] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 587.772713][ T22] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 587.783063][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.791506][T11286] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 587.811112][T11286] EXT4-fs (loop4): 1 truncate cleaned up [ 587.816941][T11286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 587.829135][T11275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 588.864026][ T9271] EXT4-fs (loop4): unmounting filesystem. [ 589.151500][ T9796] usb 2-1: USB disconnect, device number 16 [ 589.526471][T11291] loop2: detected capacity change from 0 to 32768 [ 589.579386][T11291] XFS: noikeep mount option is deprecated. [ 589.671754][T11291] XFS (loop2): Mounting V5 Filesystem [ 589.850005][T11291] XFS (loop2): Ending clean mount [ 589.903209][T11291] XFS (loop2): Quotacheck needed: Please wait. [ 589.990799][T11291] XFS (loop2): Quotacheck: Done. [ 590.185607][ T7016] XFS (loop2): Unmounting Filesystem [ 591.029338][T11333] loop3: detected capacity change from 0 to 512 [ 591.118824][T11333] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 591.136123][T11309] loop4: detected capacity change from 0 to 40427 [ 591.193814][T11309] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 591.245042][T11309] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 591.272530][T11333] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 591.305328][T11338] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 591.352881][T11309] F2FS-fs (loop4): invalid crc value [ 591.366145][T11333] EXT4-fs (loop3): 1 truncate cleaned up [ 591.428864][T11333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 591.460142][T11309] F2FS-fs (loop4): Found nat_bits in checkpoint [ 591.543398][T11338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 592.161850][T11309] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 592.191702][T11309] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 592.359734][ T26] audit: type=1804 audit(1722351160.873:1985): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1879" name="/newroot/119/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 592.391243][T11309] syz.4.1879: attempt to access beyond end of device [ 592.391243][T11309] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 592.441398][T10469] EXT4-fs (loop3): unmounting filesystem. [ 592.572211][T11309] syz.4.1879: attempt to access beyond end of device [ 592.572211][T11309] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 593.298995][ T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 593.712023][ T22] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.744810][ T22] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 593.798885][ T22] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.835907][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.888034][T11374] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 593.896519][T11360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 593.976973][T11374] 8021q: adding VLAN 0 to HW filter on device bond9 [ 593.988141][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 594.227399][T11362] loop3: detected capacity change from 0 to 32768 [ 594.286669][T11362] XFS: noikeep mount option is deprecated. [ 594.340646][T11378] loop2: detected capacity change from 0 to 512 [ 594.408885][T11378] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.443640][T11362] XFS (loop3): Mounting V5 Filesystem [ 594.474541][T11378] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 594.579748][T11378] EXT4-fs (loop2): 1 truncate cleaned up [ 594.585482][T11378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 594.621273][ T7196] usb 1-1: USB disconnect, device number 15 [ 594.624068][T11362] XFS (loop3): Ending clean mount [ 594.674994][T11362] XFS (loop3): Quotacheck needed: Please wait. [ 594.846029][T11362] XFS (loop3): Quotacheck: Done. [ 595.327008][T11372] loop4: detected capacity change from 0 to 32768 [ 595.407007][T10469] XFS (loop3): Unmounting Filesystem [ 595.558448][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 595.744954][T11372] XFS (loop4): Mounting V5 Filesystem [ 595.944854][T11372] XFS (loop4): Ending clean mount [ 595.977687][T11372] XFS (loop4): Quotacheck needed: Please wait. [ 596.051515][T11372] XFS (loop4): Quotacheck: Done. [ 596.262979][ T9271] XFS (loop4): Unmounting Filesystem [ 597.245433][T11404] loop2: detected capacity change from 0 to 40427 [ 597.278104][T11404] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 597.336894][T11404] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 597.405341][T11404] F2FS-fs (loop2): invalid crc value [ 597.417304][T11425] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 597.476606][T11404] F2FS-fs (loop2): Found nat_bits in checkpoint [ 597.507267][T11425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.562798][T11404] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 597.576659][T11404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 597.581563][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 597.663178][T11431] device vlan2 entered promiscuous mode [ 597.684987][ T26] audit: type=1804 audit(1722351166.193:1986): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1900" name="/newroot/244/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 597.707915][T11404] syz.2.1900: attempt to access beyond end of device [ 597.707915][T11404] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 597.793619][T11404] syz.2.1900: attempt to access beyond end of device [ 597.793619][T11404] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 599.879723][ T22] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 600.015110][T11449] loop2: detected capacity change from 0 to 512 [ 600.048148][T11436] loop4: detected capacity change from 0 to 32768 [ 600.099856][T11449] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 600.109596][T11436] XFS: noikeep mount option is deprecated. [ 600.168016][T11449] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 600.193774][T11449] EXT4-fs (loop2): 1 truncate cleaned up [ 600.220137][T11449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 600.269098][ T22] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.288716][ T22] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 600.298884][ T22] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.308507][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.319486][T11436] XFS (loop4): Mounting V5 Filesystem [ 600.340040][T11444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.405503][ T3657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.417156][ T3657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.426499][ T3657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 600.436232][ T3657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.444594][ T3657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 600.452195][ T3657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.063281][T11436] XFS (loop4): Ending clean mount [ 601.194022][T11436] XFS (loop4): Quotacheck needed: Please wait. [ 601.420473][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 601.433889][T11436] XFS (loop4): Quotacheck: Done. [ 601.597757][ T9271] XFS (loop4): Unmounting Filesystem [ 601.847458][ T3739] usb 1-1: USB disconnect, device number 16 [ 601.937774][T11461] chnl_net:caif_netlink_parms(): no params data found [ 602.396417][T11486] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 602.478902][ T3641] Bluetooth: hci2: command tx timeout [ 602.560411][T11486] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.592056][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 602.664244][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.680408][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.745428][T11461] device bridge_slave_0 entered promiscuous mode [ 602.787621][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.836006][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.876091][T11461] device bridge_slave_1 entered promiscuous mode [ 603.084283][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.158451][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.337173][T11502] loop4: detected capacity change from 0 to 512 [ 603.354035][T11478] loop2: detected capacity change from 0 to 40427 [ 603.377922][T11502] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 603.434214][T11478] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 603.488903][T11478] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 603.500915][T11502] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 603.531749][T11478] F2FS-fs (loop2): invalid crc value [ 603.538164][T11502] EXT4-fs (loop4): 1 truncate cleaned up [ 603.561015][T11502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 603.576114][T11461] team0: Port device team_slave_0 added [ 603.599740][T11461] team0: Port device team_slave_1 added [ 603.614534][T11478] F2FS-fs (loop2): Found nat_bits in checkpoint [ 604.366468][T11478] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 604.375299][T11478] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 604.411244][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.428724][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.531225][ T9271] EXT4-fs (loop4): unmounting filesystem. [ 604.559084][ T3641] Bluetooth: hci2: command tx timeout [ 604.595332][ T26] audit: type=1804 audit(1722351173.103:1987): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1921" name="/newroot/247/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 604.621024][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.639371][T11478] syz.2.1921: attempt to access beyond end of device [ 604.639371][T11478] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 604.708499][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.747898][T11478] syz.2.1921: attempt to access beyond end of device [ 604.747898][T11478] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 604.765962][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.810219][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.035849][T11461] device hsr_slave_0 entered promiscuous mode [ 605.074197][T11461] device hsr_slave_1 entered promiscuous mode [ 605.131538][T11461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.141436][T11461] Cannot create hsr debugfs directory [ 605.743785][T11461] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.768409][T11516] loop3: detected capacity change from 0 to 32768 [ 605.824762][T11516] XFS: noikeep mount option is deprecated. [ 606.010994][T11516] XFS (loop3): Mounting V5 Filesystem [ 606.080481][T11461] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.187825][T11516] XFS (loop3): Ending clean mount [ 606.207188][T11516] XFS (loop3): Quotacheck needed: Please wait. [ 606.301728][T11461] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.342986][T11516] XFS (loop3): Quotacheck: Done. [ 606.456246][T10469] XFS (loop3): Unmounting Filesystem [ 606.485920][T11522] loop4: detected capacity change from 0 to 32768 [ 606.557718][T11461] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.648140][ T3641] Bluetooth: hci2: command tx timeout [ 606.709241][T11522] find_entry called with index = 0 [ 606.734089][T11522] find_entry called with index = 0 [ 606.786665][T11539] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 606.786665][T11539] [ 606.862097][T11539] ERROR: (device loop4): remounting filesystem as read-only [ 606.890028][T11539] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 606.890028][T11539] [ 606.929024][T11539] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 606.929024][T11539] [ 606.942099][T11461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.970048][T11461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 607.012194][T11461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 607.042375][T11461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 607.197560][T11545] loop3: detected capacity change from 0 to 1024 [ 607.270373][T11545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 607.345961][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.362244][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.371691][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.384895][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.483052][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 607.501231][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.549731][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.556891][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.620825][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 607.639954][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 607.659357][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 607.667958][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.675155][ T9872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.722296][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 607.769836][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 607.842921][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 607.875049][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 607.904705][T11557] loop4: detected capacity change from 0 to 2048 [ 607.910072][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 607.947495][T11557] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.1937: casefold flag without casefold feature [ 607.959999][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.005147][T11557] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 608.024232][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 608.039232][T11557] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 608.047006][T11557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 608.057353][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 608.147015][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 608.189615][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.219262][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.232645][T11461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 608.267692][T10469] EXT4-fs (loop3): unmounting filesystem. [ 608.384230][ T9271] EXT4-fs (loop4): unmounting filesystem. [ 608.532818][T11551] loop0: detected capacity change from 0 to 40427 [ 608.592960][T11551] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 608.622928][T11568] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 608.628727][T11551] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 608.719196][ T3641] Bluetooth: hci2: command tx timeout [ 608.733682][T11551] F2FS-fs (loop0): invalid crc value [ 608.748411][T11551] F2FS-fs (loop0): Found nat_bits in checkpoint [ 608.761673][T11568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.808943][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 609.017982][T11551] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 609.034577][T11551] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 609.178117][ T26] audit: type=1804 audit(1722351177.683:1988): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1940" name="/newroot/46/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 609.200729][T11551] syz.0.1940: attempt to access beyond end of device [ 609.200729][T11551] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 609.285180][T11551] syz.0.1940: attempt to access beyond end of device [ 609.285180][T11551] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 609.356993][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.380919][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.424917][T11560] loop2: detected capacity change from 0 to 32768 [ 609.436703][T11560] XFS: noikeep mount option is deprecated. [ 609.492530][T11560] XFS (loop2): Mounting V5 Filesystem [ 609.592806][T11461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.739156][T11560] XFS (loop2): Ending clean mount [ 609.750391][T11560] XFS (loop2): Quotacheck needed: Please wait. [ 609.797470][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 609.829583][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.846024][T11560] XFS (loop2): Quotacheck: Done. [ 609.995716][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.014308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.055630][ T7016] XFS (loop2): Unmounting Filesystem [ 610.207525][T11461] device veth0_vlan entered promiscuous mode [ 610.245049][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.265216][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.346444][T11461] device veth1_vlan entered promiscuous mode [ 610.469820][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.481395][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.490087][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.499106][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.511001][T11461] device veth0_macvtap entered promiscuous mode [ 610.646875][T11461] device veth1_macvtap entered promiscuous mode [ 610.802353][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.842344][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.848820][ T9873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 610.878540][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.892271][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.902726][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.914232][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.924435][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.937581][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.949025][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.962391][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.986515][T11461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.110158][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 611.139078][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.156977][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.176154][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.239078][ T9873] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.259535][T11613] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 611.264396][ T9873] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 611.312472][T11613] 8021q: adding VLAN 0 to HW filter on device bond6 [ 611.348838][ T9873] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 611.371122][ T9873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.388234][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.426361][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.459160][T11602] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.473916][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.521220][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.561612][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.590925][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.608510][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.626735][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.637191][T11461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.654961][T11461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.669902][T11461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.682970][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.711990][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.735031][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 611.818567][T11615] loop3: detected capacity change from 0 to 40427 [ 611.851539][ T9875] usb 1-1: USB disconnect, device number 17 [ 611.859021][T11615] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 611.866794][T11615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 611.908051][T11622] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1958'. [ 611.933078][T11615] F2FS-fs (loop3): invalid crc value [ 611.954880][T11461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.984288][T11461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.994588][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 612.024246][T11461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.035162][T11615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 612.036113][T11461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.226102][T11615] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 612.248902][T11615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 612.257182][T11620] loop2: detected capacity change from 0 to 32768 [ 612.296576][T11620] XFS: noikeep mount option is deprecated. [ 612.322904][ T26] audit: type=1804 audit(1722351180.833:1989): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1956" name="/newroot/63/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 612.323294][T11615] syz.3.1956: attempt to access beyond end of device [ 612.323294][T11615] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 612.474815][T11615] syz.3.1956: attempt to access beyond end of device [ 612.474815][T11615] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 612.495403][ T5416] device hsr_slave_0 left promiscuous mode [ 612.507745][T11620] XFS (loop2): Mounting V5 Filesystem [ 612.519276][ T5416] device hsr_slave_1 left promiscuous mode [ 612.533569][ T5416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.541718][ T5416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.562607][ T5416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.570327][ T5416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.578445][ T5416] device bridge_slave_1 left promiscuous mode [ 612.586330][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.615821][ T5416] device bridge_slave_0 left promiscuous mode [ 612.622796][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.760235][ T5416] device veth1_macvtap left promiscuous mode [ 612.766598][T11620] XFS (loop2): Ending clean mount [ 612.778406][ T5416] device veth0_macvtap left promiscuous mode [ 612.784997][T11620] XFS (loop2): Quotacheck needed: Please wait. [ 612.798971][ T5416] device veth1_vlan left promiscuous mode [ 612.806539][ T5416] device veth0_vlan left promiscuous mode [ 612.906256][T11620] XFS (loop2): Quotacheck: Done. [ 613.046018][ T7016] XFS (loop2): Unmounting Filesystem [ 613.975988][ T5416] bond2 (unregistering): Released all slaves [ 614.413329][ T5416] bond1 (unregistering): Released all slaves [ 614.644076][T11677] loop4: detected capacity change from 0 to 32768 [ 614.657992][T11677] XFS: noikeep mount option is deprecated. [ 614.691714][T11677] XFS (loop4): Mounting V5 Filesystem [ 614.757319][T11677] XFS (loop4): Ending clean mount [ 614.765699][T11677] XFS (loop4): Quotacheck needed: Please wait. [ 614.904379][T11677] XFS (loop4): Quotacheck: Done. [ 614.982310][ T9271] XFS (loop4): Unmounting Filesystem [ 615.171440][ T5416] team0 (unregistering): Port device team_slave_1 removed [ 615.289846][ T5416] team0 (unregistering): Port device team_slave_0 removed [ 615.388402][ T5416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.438883][ T5416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.997156][ T5416] bond0 (unregistering): Released all slaves [ 616.107103][T11661] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 616.328768][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.347979][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.386891][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.512457][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.537324][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.641537][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 616.875391][T11715] loop1: detected capacity change from 0 to 256 [ 616.953900][T11715] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 616.981941][T11719] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 617.024089][T11721] Bluetooth: MGMT ver 1.22 [ 617.119088][T11719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 617.333339][T11725] input: syz0 as /devices/virtual/input/input10 [ 618.166666][T11728] loop1: detected capacity change from 0 to 16 [ 618.184176][T11728] erofs: (device loop1): mounted with root inode @ nid 36. [ 618.284700][T11718] loop0: detected capacity change from 0 to 32768 [ 618.372231][T11718] XFS: noikeep mount option is deprecated. [ 618.675172][T11718] XFS (loop0): Mounting V5 Filesystem [ 618.760568][T11756] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 619.785897][T11718] XFS (loop0): Ending clean mount [ 619.810028][T11718] XFS (loop0): Quotacheck needed: Please wait. [ 619.885974][T11718] XFS (loop0): Quotacheck: Done. [ 619.981810][T11770] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 619.989141][T10505] XFS (loop0): Unmounting Filesystem [ 620.023060][T11770] 8021q: adding VLAN 0 to HW filter on device bond10 [ 620.227504][T11774] loop2: detected capacity change from 0 to 2048 [ 620.265221][T11774] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.2007: casefold flag without casefold feature [ 620.295839][T11774] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 620.316826][T11774] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 620.344137][T11774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 620.912607][T11749] loop4: detected capacity change from 0 to 32768 [ 621.053938][T11749] XFS (loop4): Mounting V5 Filesystem [ 621.235543][T11749] XFS (loop4): Ending clean mount [ 621.271883][T11749] XFS (loop4): Quotacheck needed: Please wait. [ 621.386188][T11792] loop0: detected capacity change from 0 to 512 [ 621.397652][T11749] XFS (loop4): Quotacheck: Done. [ 621.427414][T11792] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 621.494756][T11792] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 621.596269][T11792] EXT4-fs (loop0): 1 truncate cleaned up [ 621.633521][T11792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 621.667843][ T9271] XFS (loop4): Unmounting Filesystem [ 622.387748][ T9872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 622.749137][ T9872] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.781926][ T9872] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 622.841057][ T9872] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.866378][ T9872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.918113][T10505] EXT4-fs (loop0): unmounting filesystem. [ 622.921057][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 622.940103][T11798] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.317044][T11818] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 624.249460][T11825] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 624.319513][ T946] usb 2-1: USB disconnect, device number 17 [ 624.401840][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.408338][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.448461][T11825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.495858][T11829] device vlan2 entered promiscuous mode [ 624.881701][T11827] loop2: detected capacity change from 0 to 40427 [ 624.918449][T11827] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 624.952479][T11827] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 625.126832][T11816] loop4: detected capacity change from 0 to 32768 [ 625.146065][T11827] F2FS-fs (loop2): Found nat_bits in checkpoint [ 625.156715][T11816] XFS: noikeep mount option is deprecated. [ 625.191267][T11814] loop3: detected capacity change from 0 to 40427 [ 625.209748][T11814] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 625.217541][T11814] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 625.274190][T11814] F2FS-fs (loop3): Found nat_bits in checkpoint [ 625.286617][T11816] XFS (loop4): Mounting V5 Filesystem [ 625.347070][T11827] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 625.357055][T11814] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 625.396283][T11814] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 625.406247][T11816] XFS (loop4): Ending clean mount [ 625.407429][T11814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 625.421271][T11827] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 625.433822][T11816] XFS (loop4): Quotacheck needed: Please wait. [ 625.444816][T11827] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 625.614121][T11816] XFS (loop4): Quotacheck: Done. [ 625.808682][T11854] syz.3.2015: attempt to access beyond end of device [ 625.808682][T11854] loop3: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 625.859746][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 626.124105][ T9271] XFS (loop4): Unmounting Filesystem [ 626.765825][T11860] loop0: detected capacity change from 0 to 1024 [ 627.130230][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 627.569500][T11733] hfsplus: b-tree write err: -5, ino 4 [ 627.863993][T11866] loop4: detected capacity change from 0 to 512 [ 627.905407][T11866] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 628.003246][T11866] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 628.028875][T11866] EXT4-fs (loop4): 1 truncate cleaned up [ 628.034591][T11866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 629.055439][ T9271] EXT4-fs (loop4): unmounting filesystem. [ 629.984520][T11885] netlink: 'syz.1.2030': attribute type 1 has an invalid length. [ 630.028045][T11885] device vlan2 entered promiscuous mode [ 630.233325][T11893] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 631.591521][T11906] loop2: detected capacity change from 0 to 512 [ 631.621746][T11906] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 631.770332][T11909] loop4: detected capacity change from 0 to 1024 [ 631.927116][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 632.176821][T11906] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 632.417590][T11906] EXT4-fs (loop2): 1 truncate cleaned up [ 632.423466][T11906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 632.547053][T11895] loop1: detected capacity change from 0 to 32768 [ 632.605324][T11895] XFS: noikeep mount option is deprecated. [ 633.150666][T11900] loop0: detected capacity change from 0 to 40427 [ 633.399743][T11900] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 633.421153][T11733] hfsplus: b-tree write err: -5, ino 4 [ 633.451390][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 633.475012][T11900] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 633.590519][T11900] F2FS-fs (loop0): Found nat_bits in checkpoint [ 633.726815][T11900] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 633.786359][T11900] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 633.803952][T11900] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 633.833502][T11928] loop4: detected capacity change from 0 to 128 [ 635.088561][T11932] syz.0.2033: attempt to access beyond end of device [ 635.088561][T11932] loop0: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 635.106703][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 636.857659][T11935] loop1: detected capacity change from 0 to 40427 [ 636.879349][T11935] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 636.887260][T11935] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 637.428306][T11935] F2FS-fs (loop1): Found nat_bits in checkpoint [ 637.749111][T11935] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 637.812576][T11935] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 637.830611][T11935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 638.116800][T11957] loop2: detected capacity change from 0 to 1024 [ 638.236630][T11959] syz.1.2041: attempt to access beyond end of device [ 638.236630][T11959] loop1: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 638.257101][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 638.268885][ T946] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 638.363929][ T3800] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.487839][T11957] loop2: detected capacity change from 0 to 8 [ 638.494428][ T3800] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.519982][T11957] squashfs: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿ œŠóÑ·GoDT"lq®¶Ñĸç^;~‚<Ø8ö†¨(ÓTÝ«IãÞÁÿ(Í Èø„@4æz-»«ä•¡ €³@…ƒ*2ƒ°Gæ¡„q8Ý¿HŸ¬ëòÇMtÀjÇRw>§G–0ƒ¾G¦ËÔ]f_gO¤mÄw`_åm‚ [ 638.519982][T11957] p[ºÛéºY5²§ê‹EåàŠ—•h÷×:ñc' [ 638.562775][ T3657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 638.577385][ T3657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 638.587957][ T3657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 638.599874][ T3657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 638.607741][ T3657] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 638.615392][ T3657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 638.663784][ T3800] Buffer I/O error on dev loop2, logical block 0, async page read [ 638.798692][ T41] kworker/dying (41) used greatest stack depth: 14432 bytes left [ 639.918946][ T946] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 639.938697][ T946] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 639.958694][ T946] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.967797][ T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.019100][T11952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 640.072600][T11960] chnl_net:caif_netlink_parms(): no params data found [ 640.391189][ T946] usb 1-1: USB disconnect, device number 18 [ 640.429863][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.577650][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.609698][T11981] loop1: detected capacity change from 0 to 512 [ 640.626347][T11960] device bridge_slave_0 entered promiscuous mode [ 640.646397][ T3641] Bluetooth: hci5: command tx timeout [ 640.677226][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.684824][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.693159][T11960] device bridge_slave_1 entered promiscuous mode [ 640.987768][T11981] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 641.495618][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.550355][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.631525][T11981] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 641.712438][T11981] EXT4-fs (loop1): 1 truncate cleaned up [ 641.751474][T11981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 641.765075][T11990] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 641.892056][T11990] 8021q: adding VLAN 0 to HW filter on device bond8 [ 641.958253][T11971] loop2: detected capacity change from 0 to 32768 [ 641.991707][T11960] team0: Port device team_slave_0 added [ 642.013314][T11971] XFS: noikeep mount option is deprecated. [ 642.036797][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 642.070669][T11960] team0: Port device team_slave_1 added [ 642.332464][T11971] XFS (loop2): Mounting V5 Filesystem [ 642.598344][T11971] XFS (loop2): Ending clean mount [ 642.628058][T11971] XFS (loop2): Quotacheck needed: Please wait. [ 642.719162][ T3641] Bluetooth: hci5: command tx timeout [ 642.732785][T11971] XFS (loop2): Quotacheck: Done. [ 642.780090][T11461] EXT4-fs (loop1): unmounting filesystem. [ 643.166701][ T7016] XFS (loop2): Unmounting Filesystem [ 643.194605][T11960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.223900][T12015] loop1: detected capacity change from 0 to 2048 [ 643.243273][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.990513][T12015] ext4: Unknown parameter 'euid' [ 644.053421][T11960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.091653][T11960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.118931][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.241149][T11960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.529589][T11960] device hsr_slave_0 entered promiscuous mode [ 644.614921][T11960] device hsr_slave_1 entered promiscuous mode [ 644.757617][ T946] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 644.798791][ T3641] Bluetooth: hci5: command tx timeout [ 645.002784][T12032] loop4: detected capacity change from 0 to 1024 [ 646.770519][T12032] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 646.780622][T12032] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 646.829560][T12032] EXT4-fs (loop4): journal inode is deleted [ 647.275982][ T3641] Bluetooth: hci5: command tx timeout [ 647.318919][ T946] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.330546][ T946] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 647.359478][ T946] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 647.376950][T12041] loop1: detected capacity change from 0 to 512 [ 647.389948][ T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.405630][T12041] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 647.415939][T11733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.479108][ T946] usb 1-1: can't set config #27, error -71 [ 647.497844][T12041] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 647.515375][ T946] usb 1-1: USB disconnect, device number 19 [ 647.583686][T12041] EXT4-fs (loop1): 1 truncate cleaned up [ 647.603164][T12041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 647.684495][T11733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.705699][T12046] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 647.909555][T12046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.933418][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 648.263881][T11733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.638498][T11461] EXT4-fs (loop1): unmounting filesystem. [ 648.739803][T11733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.096121][T12048] loop4: detected capacity change from 0 to 32768 [ 649.140225][T12048] XFS: noikeep mount option is deprecated. [ 649.214296][T12048] XFS (loop4): Mounting V5 Filesystem [ 649.381800][T12048] XFS (loop4): Ending clean mount [ 649.410803][T12048] XFS (loop4): Quotacheck needed: Please wait. [ 649.564495][T12048] XFS (loop4): Quotacheck: Done. [ 649.746570][ T9271] XFS (loop4): Unmounting Filesystem [ 650.381014][T11960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 650.415069][T11960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 650.497455][T11960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 650.524049][T11960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 651.094619][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.175952][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.187047][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.231366][T11960] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.438954][ T14] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 651.462929][T12115] netlink: 'syz.4.2079': attribute type 1 has an invalid length. [ 651.516227][T12115] 8021q: adding VLAN 0 to HW filter on device bond9 [ 651.542870][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 651.694686][T11733] device hsr_slave_0 left promiscuous mode [ 651.719897][T11733] device hsr_slave_1 left promiscuous mode [ 651.735110][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.745437][T11733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.761820][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.774288][T11733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.785439][T11733] device bridge_slave_1 left promiscuous mode [ 651.797774][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.809568][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 651.828323][ T14] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 651.846815][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 651.856440][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.884005][T11733] device bridge_slave_0 left promiscuous mode [ 651.896803][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.906208][T12107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 652.053774][T11733] device veth1_macvtap left promiscuous mode [ 652.066358][T11733] device veth0_macvtap left promiscuous mode [ 652.080060][T11733] device veth1_vlan left promiscuous mode [ 652.093538][T11733] device veth0_vlan left promiscuous mode [ 652.289889][ T9796] usb 2-1: USB disconnect, device number 18 [ 652.383609][T12124] loop2: detected capacity change from 0 to 32768 [ 652.416595][T12124] XFS: noikeep mount option is deprecated. [ 652.519107][T12124] XFS (loop2): Mounting V5 Filesystem [ 652.593586][T12124] XFS (loop2): Ending clean mount [ 652.625123][T12124] XFS (loop2): Quotacheck needed: Please wait. [ 652.727817][T12124] XFS (loop2): Quotacheck: Done. [ 652.787600][T11733] bond1 (unregistering): Released all slaves [ 652.824957][ T7016] XFS (loop2): Unmounting Filesystem [ 654.175115][T11733] team0 (unregistering): Port device team_slave_1 removed [ 654.278292][T11733] team0 (unregistering): Port device team_slave_0 removed [ 654.308941][ T3686] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 654.361007][T11733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.452176][T11733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.669283][ T3686] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.702959][ T3686] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.738466][ T3686] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.755064][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.803174][T12156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 655.190244][ T3686] usb 2-1: USB disconnect, device number 19 [ 655.453228][T11733] bond0 (unregistering): Released all slaves [ 655.572182][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.581763][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.590447][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.597609][ T9874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.606320][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.615267][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.630139][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.637320][ T9874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.650767][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.663389][T12151] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 655.728668][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.762830][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.795674][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.833244][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.891993][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.908446][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.925902][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.959748][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.969633][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.978211][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.027580][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.056959][T11960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.667065][T12199] netlink: 'syz.0.2108': attribute type 1 has an invalid length. [ 656.767320][T12199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.834399][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.850365][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.874729][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.985075][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.002056][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.070804][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.091400][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.123121][T11960] device veth0_vlan entered promiscuous mode [ 657.141386][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.152227][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.177004][T11960] device veth1_vlan entered promiscuous mode [ 657.250734][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.270263][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.294120][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.324058][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.332460][ T3686] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 657.363848][T11960] device veth0_macvtap entered promiscuous mode [ 657.407296][T11960] device veth1_macvtap entered promiscuous mode [ 657.461089][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.485715][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.508576][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.532016][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.554266][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.581938][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.617637][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.654768][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.685658][T11960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.708923][ T3686] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 657.731161][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.750433][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 657.769734][ T3686] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 657.781264][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 657.790038][ T3686] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 657.800615][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 657.809307][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.821539][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.839372][T12204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 657.857220][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.892176][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.949003][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.002015][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.032213][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.063476][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.097859][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.116284][T11960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.126252][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.143159][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.167477][T11960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.208255][T11960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.223010][ T9873] usb 1-1: USB disconnect, device number 20 [ 658.261079][T11960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.293900][T11960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.506799][ T4735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.554894][ T4735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.592919][ T3880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.609639][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.630903][ T3880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.669682][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 659.485423][T12228] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 659.544127][T12228] 8021q: adding VLAN 0 to HW filter on device bond10 [ 659.571670][T12231] loop0: detected capacity change from 0 to 8 [ 659.627163][T12231] squashfs image failed sanity check [ 659.714719][ T3800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 660.705174][T12247] loop4: detected capacity change from 0 to 136 [ 660.859559][ T3686] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 661.229253][ T3686] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.257662][ T3686] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 661.280667][ T3686] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 661.304064][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.316808][T12263] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 661.351291][T12242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 661.429085][T12263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.438100][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 661.665839][T12271] loop1: detected capacity change from 0 to 8 [ 661.683855][T12271] squashfs image failed sanity check [ 661.720560][ T3800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 661.731955][ T14] usb 1-1: USB disconnect, device number 21 [ 662.825549][T12277] loop4: detected capacity change from 0 to 2048 [ 664.168412][T12298] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 664.209827][T12298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 664.230471][T12298] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2144'. [ 664.488768][ T3688] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 664.919182][ T3688] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.930518][ T3688] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 664.940887][ T3688] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.950301][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.979216][T12305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.075789][T12312] loop4: detected capacity change from 0 to 8 [ 665.102515][T12312] squashfs image failed sanity check [ 665.140954][ T5930] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 665.369312][ T14] usb 4-1: USB disconnect, device number 9 [ 666.293690][T12328] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 666.371376][T12328] 8021q: adding VLAN 0 to HW filter on device bond11 [ 666.415890][T12335] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2156'. [ 666.466957][T12338] device geneve2 entered promiscuous mode [ 667.438848][ T3641] Bluetooth: hci1: command 0x0406 tx timeout [ 668.028802][ T14] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 668.306673][T12367] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 668.395433][T12367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.410932][T12369] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2169'. [ 668.419470][ T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.431032][ T14] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 668.441036][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.450212][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.479172][T12355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.838542][T12379] loop1: detected capacity change from 0 to 512 [ 668.851075][ T3739] usb 1-1: USB disconnect, device number 22 [ 668.919344][ T3800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 669.000642][T12379] loop1: detected capacity change from 0 to 256 [ 669.021028][T12379] exfat: Unknown parameter 'me' [ 669.154525][T12379] loop1: detected capacity change from 0 to 512 [ 669.209859][ T3800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 669.548098][T12388] loop2: detected capacity change from 0 to 512 [ 669.774777][T12388] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.2176: casefold flag without casefold feature [ 669.793956][T12388] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.2176: casefold flag without casefold feature [ 669.813103][T12388] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.2176: ea_inode with extended attributes [ 669.864776][T12388] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2176: error while reading EA inode 12 err=-117 [ 669.884916][T12388] EXT4-fs (loop2): 1 orphan inode deleted [ 669.890981][T12388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 670.389299][ T7016] EXT4-fs (loop2): unmounting filesystem. [ 670.540291][T12402] loop2: detected capacity change from 0 to 128 [ 670.561856][T12403] loop4: detected capacity change from 0 to 2048 [ 670.594488][T12403] ext4: Unknown parameter 'hash' [ 670.628968][ T946] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 670.638289][ T3800] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 670.898773][ T946] usb 2-1: Using ep0 maxpacket: 32 [ 671.062236][ T3641] Bluetooth: hci5: command tx timeout [ 671.579013][ T946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.605995][ T946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.626444][ T946] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 671.644861][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.655796][ T946] usb 2-1: config 0 descriptor?? [ 671.725368][ T946] hub 2-1:0.0: USB hub found [ 671.929325][ T946] hub 2-1:0.0: 1 port detected [ 671.955777][T12427] serio: Serial port pts0 [ 672.059402][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 672.134095][T12435] loop2: detected capacity change from 0 to 2048 [ 672.141541][T12435] ext4: Unknown parameter 'hash' [ 672.192502][ T3718] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.554549][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 672.595494][ T14] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 672.680091][ T946] hub 2-1:0.0: activate --> -90 [ 672.682692][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 672.763150][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.884441][T12420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 673.203556][ T14] usb 2-1: USB disconnect, device number 20 [ 673.310918][ T946] usb 5-1: USB disconnect, device number 15 [ 674.902103][T12468] loop3: detected capacity change from 0 to 2048 [ 674.919749][T12468] ext4: Unknown parameter 'hash' [ 676.100528][T12487] loop4: detected capacity change from 0 to 2048 [ 676.143201][T12487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.195614][T12487] UDF-fs: incorrect filename length (10) [ 676.414243][ T26] audit: type=1326 audit(1722351244.923:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.4.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7ffc0000 [ 676.466354][ T26] audit: type=1326 audit(1722351244.923:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.4.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7ffc0000 [ 676.543632][ T26] audit: type=1326 audit(1722351244.943:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.4.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f42cc577299 code=0x7ffc0000 [ 676.597450][ T26] audit: type=1326 audit(1722351244.943:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.4.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7ffc0000 [ 676.640924][T12500] 9pnet_fd: Insufficient options for proto=fd [ 676.647195][ T26] audit: type=1326 audit(1722351244.943:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.4.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc577299 code=0x7ffc0000 [ 676.942541][T12496] loop3: detected capacity change from 0 to 32768 [ 677.016281][T12496] XFS (loop3): Mounting V5 Filesystem [ 677.162032][T12496] XFS (loop3): Ending clean mount [ 677.186984][T12518] loop4: detected capacity change from 0 to 1024 [ 677.228900][T12518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 677.267301][T12518] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 677.286820][T11960] XFS (loop3): Unmounting Filesystem [ 677.298699][T12518] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 677.338290][T12520] loop0: detected capacity change from 0 to 2048 [ 677.345865][T12518] JBD2: no valid journal superblock found [ 677.371136][T12518] EXT4-fs (loop4): error loading journal [ 677.400991][T12520] ext4: Unknown parameter 'hash' [ 678.458378][T12531] input: syz0 as /devices/virtual/input/input12 [ 678.470132][T12533] loop3: detected capacity change from 0 to 1024 [ 678.506399][T12533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 678.952517][T12538] loop3: detected capacity change from 0 to 1764 [ 678.979093][T12538] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 678.988318][T12538] ISOFS: unable to read i-node block [ 679.033304][T12538] isofs_fill_super: get root inode failed [ 679.577289][T12545] loop2: detected capacity change from 0 to 1024 [ 679.626477][T12545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 679.665931][T12545] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 679.708862][T12545] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 679.748727][T12545] JBD2: no valid journal superblock found [ 679.766729][T12545] EXT4-fs (loop2): error loading journal [ 679.800511][T12529] loop4: detected capacity change from 0 to 65536 [ 679.906145][T12529] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 681.456351][T12565] loop4: detected capacity change from 0 to 2048 [ 681.475349][T12565] ext4: Unknown parameter 'hash' [ 681.543753][ T3800] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 684.027905][T12577] loop4: detected capacity change from 0 to 256 [ 684.035566][T12577] exfat: Bad value for 'gid' [ 684.080267][ T3800] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 685.530029][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 685.842747][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.862242][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.222606][T12653] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 688.311792][T12653] 8021q: adding VLAN 0 to HW filter on device bond12 [ 688.368083][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.389149][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 689.893022][T12703] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 690.008533][T12703] 8021q: adding VLAN 0 to HW filter on device bond13 [ 690.047064][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2286'. [ 690.097094][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 690.623400][T12717] loop1: detected capacity change from 0 to 4096 [ 690.650345][T12717] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 690.993526][T12737] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 691.161567][T12737] 8021q: adding VLAN 0 to HW filter on device bond12 [ 691.182524][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2299'. [ 691.193128][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 692.324566][ T3641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.338078][ T3641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.355690][ T3641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.365210][ T3641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.382136][ T3641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 692.391687][ T3641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.535598][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.557450][T12766] loop0: detected capacity change from 0 to 4096 [ 692.644672][T12766] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 692.716806][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.888383][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.116327][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.811913][T12767] chnl_net:caif_netlink_parms(): no params data found [ 694.476426][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.478900][ T3641] Bluetooth: hci0: command tx timeout [ 694.494567][T12767] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.530824][T12767] device bridge_slave_0 entered promiscuous mode [ 694.676017][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.684384][T12767] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.700123][T12767] device bridge_slave_1 entered promiscuous mode [ 694.860761][T12767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.940207][T12767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.000685][T12811] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2318'. [ 695.019378][T12811] device bridge_slave_1 left promiscuous mode [ 695.026324][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.051489][T12811] device bridge_slave_0 left promiscuous mode [ 695.057823][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.363213][T12815] loop3: detected capacity change from 0 to 4096 [ 695.375988][T12767] team0: Port device team_slave_0 added [ 695.423322][T12815] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 695.532131][T12767] team0: Port device team_slave_1 added [ 695.750856][T12767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.758011][T12767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.862356][T12767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.137414][T12767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.290441][T12767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.570093][ T3641] Bluetooth: hci0: command tx timeout [ 696.660902][T12767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.698715][ T22] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 696.726061][T12831] loop1: detected capacity change from 0 to 256 [ 697.298996][ T22] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=1b.bf [ 697.326061][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.356775][ T22] usb 1-1: Product: syz [ 697.377441][ T22] usb 1-1: Manufacturer: syz [ 697.406075][ T22] usb 1-1: SerialNumber: syz [ 697.437177][ T22] usb 1-1: config 0 descriptor?? [ 697.516618][ T22] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 697.761496][ T3687] usb 1-1: USB disconnect, device number 23 [ 698.130913][T12767] device hsr_slave_0 entered promiscuous mode [ 698.162799][T12767] device hsr_slave_1 entered promiscuous mode [ 698.213131][T12767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.243570][T12767] Cannot create hsr debugfs directory [ 698.389672][ T9] device hsr_slave_0 left promiscuous mode [ 698.458885][ T9] device hsr_slave_1 left promiscuous mode [ 698.466382][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.493472][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.541564][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.574275][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.609559][ T9] device bridge_slave_1 left promiscuous mode [ 698.629008][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.639801][ T3657] Bluetooth: hci0: command tx timeout [ 698.654344][ T9] device bridge_slave_0 left promiscuous mode [ 698.671355][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.867858][ T9] device veth1_macvtap left promiscuous mode [ 698.903313][ T9] device veth0_macvtap left promiscuous mode [ 698.933063][ T9] device veth1_vlan left promiscuous mode [ 698.953554][ T9] device veth0_vlan left promiscuous mode [ 699.673550][T12871] loop3: detected capacity change from 0 to 1024 [ 699.749419][ T26] audit: type=1800 audit(1722351268.263:1995): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2334" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 699.789745][T12871] [ 699.792124][T12871] ====================================================== [ 699.799154][T12871] WARNING: possible circular locking dependency detected [ 699.806190][T12871] 6.1.102-syzkaller #0 Not tainted [ 699.811312][T12871] ------------------------------------------------------ [ 699.818340][T12871] syz.3.2334/12871 is trying to acquire lock: [ 699.824415][T12871] ffff8880220e20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x80d/0xb40 [ 699.834297][T12871] [ 699.834297][T12871] but task is already holding lock: [ 699.841675][T12871] ffff88805711cb48 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2d6/0xb40 [ 699.852865][T12871] [ 699.852865][T12871] which lock already depends on the new lock. [ 699.852865][T12871] [ 699.863285][T12871] [ 699.863285][T12871] the existing dependency chain (in reverse order) is: [ 699.872312][T12871] [ 699.872312][T12871] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 699.881381][T12871] lock_acquire+0x1f8/0x5a0 [ 699.886442][T12871] __mutex_lock+0x132/0xd80 [ 699.891498][T12871] hfsplus_file_extend+0x1d2/0x1b10 [ 699.897247][T12871] hfsplus_bmap_reserve+0x101/0x4e0 [ 699.903000][T12871] hfsplus_create_cat+0x1a9/0x1ba0 [ 699.908653][T12871] hfsplus_fill_super+0x13e6/0x1c90 [ 699.914465][T12871] mount_bdev+0x2c9/0x3f0 [ 699.919324][T12871] legacy_get_tree+0xeb/0x180 [ 699.924556][T12871] vfs_get_tree+0x88/0x270 [ 699.929515][T12871] do_new_mount+0x2ba/0xb40 [ 699.934549][T12871] __se_sys_mount+0x2d5/0x3c0 [ 699.939760][T12871] do_syscall_64+0x3b/0xb0 [ 699.944709][T12871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.951135][T12871] [ 699.951135][T12871] -> #0 (&tree->tree_lock){+.+.}-{3:3}: [ 699.958880][T12871] validate_chain+0x1661/0x5950 [ 699.964271][T12871] __lock_acquire+0x125b/0x1f80 [ 699.969681][T12871] lock_acquire+0x1f8/0x5a0 [ 699.974739][T12871] __mutex_lock+0x132/0xd80 [ 699.979801][T12871] hfsplus_file_truncate+0x80d/0xb40 [ 699.985650][T12871] hfsplus_setattr+0x1b9/0x280 [ 699.990942][T12871] notify_change+0xce3/0xfc0 [ 699.996089][T12871] do_truncate+0x21c/0x300 [ 700.001059][T12871] do_sys_ftruncate+0x2e2/0x380 [ 700.006441][T12871] do_syscall_64+0x3b/0xb0 [ 700.011392][T12871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.017830][T12871] [ 700.017830][T12871] other info that might help us debug this: [ 700.017830][T12871] [ 700.028056][T12871] Possible unsafe locking scenario: [ 700.028056][T12871] [ 700.035501][T12871] CPU0 CPU1 [ 700.040868][T12871] ---- ---- [ 700.046231][T12871] lock(&HFSPLUS_I(inode)->extents_lock); [ 700.052047][T12871] lock(&tree->tree_lock); [ 700.059082][T12871] lock(&HFSPLUS_I(inode)->extents_lock); [ 700.067437][T12871] lock(&tree->tree_lock); [ 700.071947][T12871] [ 700.071947][T12871] *** DEADLOCK *** [ 700.071947][T12871] [ 700.080108][T12871] 3 locks held by syz.3.2334/12871: [ 700.085303][T12871] #0: ffff88807b108460 (sb_writers#12){.+.+}-{0:0}, at: do_sys_ftruncate+0x251/0x380 [ 700.094904][T12871] #1: ffff88805711cd40 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 700.105284][T12871] #2: ffff88805711cb48 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2d6/0xb40 [ 700.116960][T12871] [ 700.116960][T12871] stack backtrace: [ 700.122946][T12871] CPU: 0 PID: 12871 Comm: syz.3.2334 Not tainted 6.1.102-syzkaller #0 [ 700.131202][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 700.141268][T12871] Call Trace: [ 700.144550][T12871] [ 700.147484][T12871] dump_stack_lvl+0x1e3/0x2cb [ 700.152177][T12871] ? nf_tcp_handle_invalid+0x642/0x642 [ 700.157656][T12871] ? print_circular_bug+0x12b/0x1a0 [ 700.162863][T12871] check_noncircular+0x2fa/0x3b0 [ 700.167809][T12871] ? add_chain_block+0x850/0x850 [ 700.172761][T12871] ? lockdep_lock+0x11f/0x2a0 [ 700.177453][T12871] ? lockdep_unlock+0x165/0x300 [ 700.182358][T12871] ? lockdep_lock+0x2a0/0x2a0 [ 700.187065][T12871] ? _find_first_zero_bit+0xd0/0x100 [ 700.192395][T12871] validate_chain+0x1661/0x5950 [ 700.197279][T12871] ? reacquire_held_locks+0x660/0x660 [ 700.202674][T12871] ? reacquire_held_locks+0x660/0x660 [ 700.208068][T12871] ? mark_lock+0x9a/0x340 [ 700.212416][T12871] ? look_up_lock_class+0x77/0x140 [ 700.217623][T12871] ? register_lock_class+0x100/0x990 [ 700.222930][T12871] ? is_dynamic_key+0x260/0x260 [ 700.227803][T12871] ? mark_lock+0x9a/0x340 [ 700.232161][T12871] __lock_acquire+0x125b/0x1f80 [ 700.237042][T12871] lock_acquire+0x1f8/0x5a0 [ 700.241562][T12871] ? hfsplus_file_truncate+0x80d/0xb40 [ 700.247067][T12871] ? read_lock_is_recursive+0x10/0x10 [ 700.252482][T12871] ? __might_sleep+0xb0/0xb0 [ 700.257089][T12871] ? __mutex_unlock_slowpath+0x218/0x750 [ 700.262766][T12871] ? hfsplus_block_free+0x3d6/0x4d0 [ 700.268087][T12871] ? do_raw_spin_unlock+0x137/0x8a0 [ 700.273411][T12871] __mutex_lock+0x132/0xd80 [ 700.277935][T12871] ? hfsplus_file_truncate+0x80d/0xb40 [ 700.283415][T12871] ? hfsplus_file_truncate+0x80d/0xb40 [ 700.288884][T12871] ? mutex_lock_nested+0x10/0x10 [ 700.293851][T12871] ? hfsplus_free_extents+0x47e/0xae0 [ 700.299236][T12871] hfsplus_file_truncate+0x80d/0xb40 [ 700.304626][T12871] ? hfsplus_add_extent+0x880/0x880 [ 700.309850][T12871] ? unmap_mapping_range+0xf4/0x280 [ 700.315101][T12871] ? unmap_mapping_pages+0x180/0x180 [ 700.320407][T12871] ? current_time+0x1dc/0x300 [ 700.325118][T12871] ? setattr_prepare+0x1e0/0xc20 [ 700.330102][T12871] ? truncate_setsize+0xcb/0xf0 [ 700.334974][T12871] hfsplus_setattr+0x1b9/0x280 [ 700.339781][T12871] ? hfsplus_fileattr_set+0x330/0x330 [ 700.345192][T12871] notify_change+0xce3/0xfc0 [ 700.349820][T12871] do_truncate+0x21c/0x300 [ 700.354253][T12871] ? put_page_bootmem+0x2e0/0x2e0 [ 700.359299][T12871] ? bpf_lsm_path_truncate+0x5/0x10 [ 700.364530][T12871] do_sys_ftruncate+0x2e2/0x380 [ 700.369435][T12871] do_syscall_64+0x3b/0xb0 [ 700.373879][T12871] ? clear_bhb_loop+0x45/0xa0 [ 700.378576][T12871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.384491][T12871] RIP: 0033:0x7f8fbd577299 [ 700.388913][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.408622][T12871] RSP: 002b:00007f8fbe34c048 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 700.417048][T12871] RAX: ffffffffffffffda RBX: 00007f8fbd705f80 RCX: 00007f8fbd577299 [ 700.425030][T12871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 700.433109][T12871] RBP: 00007f8fbd5e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 700.441089][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.449066][T12871] R13: 000000000000000b R14: 00007f8fbd705f80 R15: 00007ffc1d36ac98 [ 700.457145][T12871] [ 700.506139][ T9] bond12 (unregistering): Released all slaves [ 700.532226][T12871] hfsplus: request for non-existent node 16777216 in B*Tree [ 700.539964][T12871] hfsplus: request for non-existent node 16777216 in B*Tree [ 700.572555][T12871] hfsplus: request for non-existent node 16777216 in B*Tree [ 700.580042][T12871] hfsplus: request for non-existent node 16777216 in B*Tree [ 700.620885][T11876] hfsplus: request for non-existent node 16777216 in B*Tree [ 700.628411][T11876] hfsplus: request for non-existent node 16777216 in B*Tree [ 700.728889][ T3657] Bluetooth: hci0: command tx timeout [ 700.735468][ T9] bond11 (unregistering): Released all slaves [ 700.893735][ T9] bond10 (unregistering): Released all slaves [ 701.056735][ T9] bond9 (unregistering): Released all slaves [ 701.227288][ T9] bond8 (unregistering): Released all slaves [ 701.387475][ T9] bond7 (unregistering): Released all slaves [ 701.539080][ T9] bond6 (unregistering): Released all slaves [ 701.698523][ T9] bond5 (unregistering): Released all slaves [ 701.861026][ T9] bond4 (unregistering): Released all slaves [ 702.032215][ T9] bond3 (unregistering): Released all slaves [ 702.289644][ T9] bond2 (unregistering): Released all slaves [ 702.448900][ T9] bond1 (unregistering): Released all slaves [ 702.904688][ T9] team0 (unregistering): Port device team_slave_1 removed [ 702.953118][ T9] team0 (unregistering): Port device team_slave_0 removed [ 703.002301][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.048400][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.554246][ T9] bond0 (unregistering): Released all slaves [ 703.622524][T12852] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 703.631398][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2328'. [ 704.334316][T12767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 704.353893][T12767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 704.373053][T12767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 704.382814][T12767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 704.513648][T12767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.538346][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 704.547820][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 704.561128][T12767] 8021q: ad