last executing test programs: 11.714918321s ago: executing program 1 (id=990): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r0, &(0x7f0000003180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0x0, r1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 11.584203566s ago: executing program 1 (id=991): openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000840)=""/171, 0xab) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rt_sigreturn() write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x28}, 0x28) mlockall(0x1) 10.125542152s ago: executing program 0 (id=993): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xe, 0x9}, 0x8) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x20) dup3(r1, r0, 0x0) 10.013513596s ago: executing program 0 (id=994): r0 = memfd_create(&(0x7f0000000d40)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G4\xd7;\xedZ\x98\"\xf2\xe8\xb3\xf75\xb8\xeae)\x90\x86\xe3\xbc\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\x99\xa8HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xad\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Pu\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x929\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8bY^\xfe\x00\x9f\xd5\xfa\x8b\r\xb8\xf4\xe6\xfd\xcbO_\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xc8\xf6\xcaAvT\x1b\xe6\xb9\xe7\xff\xc5HUlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x01\x00\x00\x00{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00RXN9L\xc0\xcc=+\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x1b\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7Rl\xfc.\x93\xe74\xab>\x9e\xd4%\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x1b\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2D\x9be&\xb5g\xc1\xf2o\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd4\x94\x00\x15\xd1@\xf2\x0f}\x94)\xc5qc\xef\x87\x89c\xa4\"\xab3\xae\xbbqc\xf4m\x9dY\xb0\x11\x1e\x87B\xea\xf2\xe3RM2\xb4\b\xe5g\x02\xd3U\xf9\xc8\xaeW\x13r<\xca\xc6\x81}~O\x90\x0f\xb5\xa7\xf5\xaea)Mi}!^a\xd4\x82\xcc\xa6\xb5\xe9\xf8\x8b\x86\xdd~\x9aE\xd7\'z\x10\x93\xd2\x9e\xb8\x05(J\x06\x04\xaa\xecH\xa87\x00\x00\x00\x00\x00\x00D\xaef\x91\a\x00\x00\x00\x00\x00\x00\xa5\x15\x19\x8a\x10\\TI\xd9z\xcc\x96\x81T\x86\xd0\xe0\x85\x1f\xbe\x00\xa4$\xed\x18RU \xaa\r\x19\xb1\xb5\xec\x16GTW\xa2\xc0\xcf\xf7;=\\s\xe5Y\xfdJ\x01\x9e\b\xf2\fKT\\.\xdc\xd1\x17oC9\x04h\xa4\x8f\xd309\a_\x96\xaff1@MW\xd1?\a\x8bg\xb7\xfc\"\x97\xe0\x88\xb5\xfb\x9e)\x13L\\>F>T\xfb\x1e\x13\xd3\x17`\xc1l\xaa\x9d\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x96x \xa7&\xb7vc\xc9\xd0\x86@\'\xad4\x01\xea\xcdB\xdf\xc6\xfb{\xff\xca\xa7\xfd\xa0H\x87 \fjbosH8K\xabg\x8e+V\xd8\xad\xba\x10\xc7#\xf3\xb5\xa8Z\x91\xe2\xcf{\x9e\x97\r\xebS\xfdD*\x16\xbc\x9e\xb9\x8d\x1e\x86\x8c\xfa\xb9s\xf0e\xef\x96\xd5\x81d\xc3+]Or\xda\x96\x940;\x9e\xecE\x04<\xa5\xd2\xd1\xe8\xba\xd3\xee\x17\xd6&\v\x1fX\xf8\xc65\xee\xd6@\xb7(\xe5\xaf(O\xbey\x94`\x89\xb8l\xbe\xd4<\x9aH\xd1\xfd>\x80}\x03rjb;\x06\xb9\xee\x11\xa3\xd9l\xd3\xfe\x91\x0eN\x9d:\xf1GvU\x81\xbc\x83\xd4iFO', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000c) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r1, 0x1, 0x0, 0x0, &(0x7f0000000300)) 9.330025282s ago: executing program 4 (id=996): futex(&(0x7f0000004580)=0x2, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r0 = memfd_create(&(0x7f00000003c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\x00\x00\x00\x00\x00\x00\x00\x00\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x89}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde\x04\x00\x00\x00\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x85\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\a\x00\x00\x00\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17U\'-\x12b\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 \x12.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd\xe3\'\xcb\xcf1:RI\xf6\xf9v\xbfv\xee\xfb\x14\xe6l\x84z\xbc\x1ah\x83\x8b<\xe9v\xcb\xc7\xce\x88\xe0\xa4]\xda\xdf\xe4xK\x05\"`\b\x94\xd3L\x840\x13\xe5\xc4\x9e^\x9f\xe2\xf5\x8c=\xb9\xa2\xec\xf4\xffv.E\xd0\x8e\xdd6\\\xe0I&hLFZ\xae{]\xf5\vD\x92\x80\xaap*q\xf43\xff\xf2\x94\x9b\xef\xca\x80N\xf0>\xfa\xc3h\x985h\x1caD\x88\x00-l\xf0\xfe\xf9\xb8\xf4j', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000047) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 8.751733474s ago: executing program 0 (id=999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x10af6109, 0xc000, 0x0, 0xfffffcef) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541b, 0x0) 7.871415568s ago: executing program 1 (id=1001): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x101}, 0x0) close(r1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) 7.783948271s ago: executing program 0 (id=1002): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) rt_sigreturn() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") getsockname$unix(0xffffffffffffffff, &(0x7f0000002600), &(0x7f0000001380)=0x1fa) r1 = dup(r0) write$P9_RRENAMEAT(r1, 0x0, 0x0) 6.949348933s ago: executing program 3 (id=1003): r0 = memfd_create(&(0x7f0000000080)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xef\r\xd2\xb3\xaa\x9b\x7f\x05\x8eV\xaa\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x03\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\v\xf2\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bI\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9b\x81\x00\x00\x00\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x05\x85\"\xb6\xa6n\xe7\xfd\xff\x7f\x00\x00\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\x9c\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xb1\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12mk\xc8\xd9\x97*k\x7f\x00\x00\x00\x00\x00\x00\x00q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x0) 4.531240086s ago: executing program 4 (id=1009): write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000042c0)=""/192) 4.475641478s ago: executing program 4 (id=1010): mlockall(0x1) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() msgctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x7ff, &(0x7f00000002c0)) 4.319856414s ago: executing program 2 (id=1011): r0 = memfd_create(&(0x7f0000000640)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x8c*\x91R\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d`+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2fo\x7f\x92G\x0e.\xce\x01\x00\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\xab\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x03\v\xf4@\x86\x1d\xc8&^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xa5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:^E^>a\xd8\xdcJu\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+b\xb5\xa63\xc4\x1bx\xfd< \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2V3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xb1\xa9)$\xf5\x1d\x87\x1aJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\xe1\xab\xb7\xe0\x95\xa0U\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xd2\x00\x00\x00\x00&\x82\xe9:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9J\xeefu\x04\xfb\x9b\xc1\xfa\xff\x03\x00\x00\\\xb8\xbdNX\x1e\x97\x911m\xa3\x15\x8e_\xda\x8f\x06\x8fA^\xc2\x05\xf4\x8b\x02[\xa4jR\x96%&\xdf\xf9c\x8a4\x00\xa4tA\n\xfb\x7f\xf1S\xfd<\v\x18\xeb\xfb\xd6\xcb:\xbb\xb0\xe6,\x89\vcU\x00\x1e\xa0\x8b\xae\xe3M\xa6l\x15\x9c\x96\xf6\xbeXU\x17,\x94\x97\f\xfb', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000c, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8008006) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000dc0), 0x10) 3.945349698s ago: executing program 0 (id=1012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @dev}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x5451, 0x0) 3.076258751s ago: executing program 2 (id=1013): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 2.939995166s ago: executing program 2 (id=1014): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ptype\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = memfd_create(&(0x7f0000000c00)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G4\xd7;\xedZ\x98\"\xf2\xe8\xb3\xf75\xb8\xeae)\x90\x86\xe3\xbc\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\x99\xa8HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQ\xa5\x16\x0e\xa4\xa4R\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xad\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Pu\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x929\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8bY^\xfe\x00\x9f\xd5\xfa\x8b\r\xb8\xf4\xe6\xfd\xcbO_\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xc8\xf6\xcaAvT\x1b\xe6\xb9\xe7\xff\xc5HUlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x01\x00\x00\x00{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00RXN9L\xc0\xcc=+\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x1b\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7Rl\xfc.\x93\xe74\xab>\x9e\xd4%\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x1b\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2D\x9be&\xb5g\xc1\xf2o\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd4\x94\x00\x15\xd1@\xf2\x0f}\x94)\xc5qc\xef\x87\x89c\xa4\"\xab3\xae\xbbqc\xf4m\x9dY\xb0\x11\x1e\x87B\xea\xf2\xe3RM2\xb4\b\xe5g\x02\xd3U\xf9\xc8\xaeW\x13r<\xca\xc6\x81}~O\x90\x0f\xb5\xa7\xf5\xaea)Mi}!^a\xd4\x82\xcc\xa6\xb5\xe9\xf8\x8b\x86\xdd~\x9aE\xd7\'z\x10\x93\xd2\x9e\xb8\x05(J\x06\x04\xaa\xecH\xa87\x00\x00\x00\x00\x00\x00D\xaef\x91\a\x00\x00\x00\x00\x00\x00\xa5\x15\x19\x8a\x10\\TI\xd9z\xcc\x96\x81T\x00\x00\xe0\x85\x1f\xbe\x00\xa4$\xed\x18RU \xaa\r\x19\xb1\xb5\xec\x16GTW\xa2\xc0\xcf\xf7;=\\s\xe5Y\xfdJ\x01\x9e\b\xf2\fKT\\.\xdc\xd1\x17oC9\x04h\xa4\x8f\xd309\a_\x96\xaff1@MW\xd1?\a\x8bg\xb7\xfc\"\x97\xe0\x88\xb5\xfb\x9e)\x13L\\>F>T\xfb\x1e\x13\xd3\x17`\xc1l\xaa\x9d\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x96x \xa7&\xb7vc\xc9\xd0\x86@\'\xad4\x01\xea\xcdB\xdf\xc6\xfb{\xff\xca\xa7\xfd\xa0H\x87 \fjbosH8K\xabg\x8e+V\xd8\xad\xba\x10\xc7#\xf3\xb5\xa8Z\x91\xe2\xcf{\x9e\x97\r\xebS\xfdD*\x16\xbc\x9e\xb9\x8d\x1e\x86\x8c\xfa\xb9s\xf0e\xef\x96\xd5\x81d\xc3+]Or\xda\x96\x940;\x9e\xecE\x04<\xa5\xd2\xd1\xe8\xba\xd3\xee\x17\xd6&\v\x1fX\xf8\xc65\xee\xd6@\xb7(\xe5\xaf(O\xbey\x94`\x89\xb8l\xbe\xd4<\x9aH\xd1\xfd>\x80}\x03rjb;\x06\xb9\xee\x11\xa3\xd9l\xd3\xfe\x91\x0eN\x9d:\xf1GvU\x81\xbc\x83\xd4iFORj6\x16\xfcd{\xeb\x84\r\bxa\xe1fC\xd6\x9aR@\xa0\xf5\xe8_\xeeK-\x04\x93\x03\x13\x12\x9f\xeai\x8ew8\x82G\xe5\x93\xf5G\x1b\xba\xb5\x98\x1b\xb6\xda\xa6\x7f\xe8\x15\rr\xa8\xaf\xe8\xcb\x85\xa5\xc7Yu\xe5M\xe7\x8b\x194R\n\x9a\xb2E\"y\xcf', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) pipe2(0x0, 0x0) pipe2$watch_queue(0x0, 0xb82e336200000000) socketpair$unix(0x1, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x800000c) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000100)) 2.553228591s ago: executing program 0 (id=1015): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) read$watch_queue(r1, &(0x7f00000020c0)=""/221, 0xdd) 2.466014575s ago: executing program 1 (id=1016): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x541b, 0x0) 1.679968445s ago: executing program 3 (id=1017): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/fdt', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(r0, 0x0, 0x0) pipe2$watch_queue(0x0, 0xb82e336200000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5450, 0x0) close(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/fdt', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 1.679693965s ago: executing program 2 (id=1018): socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 1.579213309s ago: executing program 2 (id=1019): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = memfd_create(&(0x7f0000000c40)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2GT\b\x8e\x80\xeau[\x99#\xb2\x96\x9b\x01h\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xe0\x80kR\xfc\xcb%u3\xec\xde%\x00]!\xebD\x1b\x8aR\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x8c*\x91R\xd3\v\xc9\x95\xedp*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2fo\x7f\x92G\x0e.\xce\x01\x00\"\xec\x00\x00C\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\xab\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x03\v\xf4@\x86\x1d\xc8&^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xb5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:l\xafWB`U\xb6+^E^>a\xd8\xc4Ju\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+b\xb5\xa63\xc4\x1bx\xfd< \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2V3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xb1\xa9)$\xf5\x1d\x87\x1aJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\x00\x00\x01\x00\x95\xa4U\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xd2\x00\x00\x00\x00&\x82\xe9:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9J\xeefu\x04\xfb\x9b\xc1\xfa\xff\x03\x00\x00\\\xb8\xbdNX\x1e\x97\x911m\xac\x15\x8e_\xda\x8f\x06\x8fA^\xc2\x05\xf4\x8b\x02[\xa4jR\x96%&\xdf\xf9c\x8a4\x00\xa4tA\n\xfb\x7f\xf1S\xfd<\v\x18\xeb\xfb\xd6\xcb:\xbb\xb0\xe6,\x89\vc\x7f\x00\x1e\xa0\x8b\xae\xe3M\xa6l\x15\x9c\x96\xf6\xbe\xb4\x1b\xac\xa9V\x12\x98\xf54\xe0\xa2r\xfc]\xd17BU\xa2\xcd\xf9\x94\x8a\xb5\xb0\x04\xd3\nH\x13N\xbdut%\x92\xa3@\xbaW6s\t\xca\xf3I@#\x95\xa2\x1c\xb5i\xffA\x06\x84lLu\xc4Y(\xb2\x9fI\a\xe7\xb5)-\xf5rh\x01\x88\xb8-&\x8b\xbf%p;\th\xda\xe1&\x86\x90\xcb]\xb6\xcb{\xb3\x85wZ\xb8\xc4h\x17\xc2\x19\xe4\xf0K\xcf\x90\xcf\xb9\x99\x01\xb1/\xc1\xb2-\xbe\xf5\x1b dn\f\x8e\x9f\xcf\xdb\xa8B\xe7\xa7\xe7V\x89\xc3\x01\xe0\xf3\x8b\x83\x01\x06U\xa0\x05\x8dI\x15\xb6\xabpD\x94\x8b\x94\x80X\xc8\xffvN\x1a\x9c\xf8\x89\xd7\xec\xfb\xd2\xa2\x91\x16\x96\xd3\xed\x1c]\xe3\xfd\xee\xf6\xcd!\xae\xc4\xed\x1d\xf1)\xeb\xb3\xd7\x80\xfb~\\V\xa5\"d1y\xe0r7\v\x03l\x1ds2b6\x16\x8b\xd3\x9a\xb3[M\xccz\x0e\xca\xee\xb0\x9a\xe9\xf6]\xa2\xf4\xe7\xf7^Fi', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x8008007) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "2c21ed3f17feeef8", "dc06e4dba6deafc33dc0e5d1a9f65a039e1c518a75edb0fc9dd9111a0aa57adc", "41c66db9", "dc8dcce78ce146f4"}, 0x38) 967.659282ms ago: executing program 1 (id=1020): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000040c0)={0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0xfffffdb6) gettid() rt_sigreturn() socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) write$tcp_congestion(r2, &(0x7f0000000180)='highspeed\x00', 0xffffff02) 447.822172ms ago: executing program 4 (id=1021): pipe2$9p(0x0, 0x0) mlockall(0x1) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() msgctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_socket_connect_nvme_tcp() 365.869145ms ago: executing program 3 (id=1022): r0 = memfd_create(&(0x7f0000000980)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\x87\x99\x14\xf4\xbd\xf6\xe2\xbb\x9cR\xb1\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xfd\x17\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\x05\x00\x00\x00\x00\x00\x00\x00UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x15\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jr\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1b\x8f\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) rt_sigreturn() close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, r3+60000000}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 235.96867ms ago: executing program 3 (id=1024): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) rt_sigreturn() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40002022) write$FUSE_NOTIFY_POLL(r5, &(0x7f00000003c0)={0xffffffffffffff93}, 0xfffffc33) socket$inet6_icmp(0xa, 0x2, 0x3a) 0s ago: executing program 3 (id=1025): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400454ca, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000004080)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r2, r1, 0x0) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="a9", 0x1}], 0x1}}], 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): uota mode: none. [ 67.180385][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 67.381737][ T4859] loop4: detected capacity change from 0 to 1024 [ 67.398912][ T4853] loop1: detected capacity change from 0 to 1024 [ 67.438695][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 67.503187][ T4857] loop3: detected capacity change from 0 to 1024 [ 67.541281][ T4853] hfsplus: bad catalog entry type [ 67.556847][ T4857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.657381][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.659239][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.661689][ T4847] device bridge_slave_0 entered promiscuous mode [ 67.677070][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.679049][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.681505][ T4847] device bridge_slave_1 entered promiscuous mode [ 67.708792][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.767787][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.805571][ T4847] team0: Port device team_slave_0 added [ 67.829108][ T4595] hfsplus: b-tree write err: -5, ino 4 [ 67.829575][ T4847] team0: Port device team_slave_1 added [ 67.893565][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.895433][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.927544][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.931892][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.940656][ T4866] loop1: detected capacity change from 0 to 512 [ 67.954362][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.974711][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.994461][ T4866] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.997889][ T4866] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 68.026618][ T4866] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.272: Corrupt directory, running e2fsck is recommended [ 68.058129][ T4847] device hsr_slave_0 entered promiscuous mode [ 68.066290][ T4866] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 68.068478][ T4866] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.272: corrupted in-inode xattr [ 68.077710][ T4822] fuse: Unknown parameter '184467440737095516150x000000000000000c' [ 68.094620][ T4866] EXT4-fs (loop1): Remounting filesystem read-only [ 68.096325][ T4847] device hsr_slave_1 entered promiscuous mode [ 68.106401][ T4866] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.272: couldn't read orphan inode 15 (err -117) [ 68.146065][ T4866] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 68.146598][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.153276][ T4847] Cannot create hsr debugfs directory [ 68.160864][ T3983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.jATENU/47/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 68.189539][ T4866] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.192547][ T4866] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 68.195146][ T4866] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.272: Corrupt directory, running e2fsck is recommended [ 68.196867][ T3983] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 68.216075][ T4866] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.218959][ T4866] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 68.221505][ T4866] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.272: Corrupt directory, running e2fsck is recommended [ 68.224606][ T4866] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz.1.272: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 68.236649][ T3983] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 68.301773][ T4866] EXT4-fs (loop1): Remounting filesystem read-only [ 68.441786][ T4847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.751265][ T4847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.856228][ T4871] loop3: detected capacity change from 0 to 32768 [ 68.863212][ T4847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.937519][ T4871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.274 (4871) [ 68.999926][ T4847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.005115][ T4871] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 69.008188][ T4871] BTRFS info (device loop3): enabling disk space caching [ 69.010082][ T4871] BTRFS info (device loop3): turning off barriers [ 69.014429][ T4871] BTRFS info (device loop3): force clearing of disk cache [ 69.021040][ T4871] BTRFS info (device loop3): turning on sync discard [ 69.027294][ T4871] BTRFS info (device loop3): turning off discard [ 69.032686][ T4871] BTRFS info (device loop3): doing ref verification [ 69.038978][ T4871] BTRFS info (device loop3): disk space caching is enabled [ 69.044339][ T4871] BTRFS info (device loop3): has skinny extents [ 69.167172][ T4025] Bluetooth: hci5: command 0x0409 tx timeout [ 69.304427][ T4595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.310172][ T4871] BTRFS info (device loop3): enabling ssd optimizations [ 69.314688][ T4871] BTRFS info (device loop3): clearing free space tree [ 69.320305][ T4871] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.336123][ T4871] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.362135][ T4910] loop4: detected capacity change from 0 to 1024 [ 69.404956][ T4910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.443133][ T4595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.530996][ T4595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.649989][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.652004][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.657359][ T25] cfg80211: failed to load regulatory.db [ 69.700582][ T4595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.762037][ T4901] chnl_net:caif_netlink_parms(): no params data found [ 70.021651][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.023464][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.032119][ T4901] device bridge_slave_0 entered promiscuous mode [ 70.064923][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.077138][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.079950][ T4901] device bridge_slave_1 entered promiscuous mode [ 70.334474][ T4901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.375112][ T4901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.411746][ T4940] loop4: detected capacity change from 0 to 1024 [ 70.482436][ T4940] hfsplus: bad catalog entry type [ 70.733005][ T4847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.801999][ T4901] team0: Port device team_slave_0 added [ 70.835571][ T4847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.859589][ T4847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.970493][ T4901] team0: Port device team_slave_1 added [ 70.972666][ T4847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.979353][ T148] hfsplus: b-tree write err: -5, ino 4 [ 71.161196][ T4901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.163893][ T4901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.216077][ T4901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.220382][ T4901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.222143][ T4901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.246016][ T1962] Bluetooth: hci3: command 0x0409 tx timeout [ 71.247752][ T1962] Bluetooth: hci5: command 0x041b tx timeout [ 71.260066][ T4901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.273690][ T4974] loop4: detected capacity change from 0 to 1024 [ 71.319175][ T4974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.478705][ T4901] device hsr_slave_0 entered promiscuous mode [ 71.506403][ T4901] device hsr_slave_1 entered promiscuous mode [ 71.546040][ T4901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.548005][ T4901] Cannot create hsr debugfs directory [ 71.721202][ T4972] loop3: detected capacity change from 0 to 32768 [ 71.738226][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.784009][ T4972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.296 (4972) [ 71.820807][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.829672][ T4972] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 71.832064][ T4972] BTRFS info (device loop3): using free space tree [ 71.833607][ T4972] BTRFS info (device loop3): has skinny extents [ 71.889941][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.892414][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.899253][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.902022][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.915896][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.917844][ T4927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.969373][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.971953][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.974429][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.997190][ T1962] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.999034][ T1962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.001752][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.007544][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.053111][ T4847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.057114][ T4847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.109205][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.113037][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.115620][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.126469][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.133368][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.146420][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.160321][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.183354][ T5015] loop4: detected capacity change from 0 to 1024 [ 72.190710][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.221942][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.232484][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.288620][ T4972] BTRFS info (device loop3): enabling ssd optimizations [ 72.345292][ T5011] hfsplus: bad catalog entry type [ 73.325937][ T4028] Bluetooth: hci5: command 0x040f tx timeout [ 73.327631][ T4028] Bluetooth: hci3: command 0x041b tx timeout [ 73.435631][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.437733][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.443037][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.564781][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.577881][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.595043][ T4046] hfsplus: b-tree write err: -5, ino 4 [ 73.695907][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.698978][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.712792][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.721644][ T5044] x_tables: duplicate underflow at hook 4 [ 73.725626][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.801575][ T4847] device veth0_vlan entered promiscuous mode [ 73.876993][ T4595] device hsr_slave_0 left promiscuous mode [ 73.904485][ T4595] device hsr_slave_1 left promiscuous mode [ 73.997010][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.999015][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.013346][ T5070] loop4: detected capacity change from 0 to 1024 [ 74.019943][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.021825][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.045353][ T4595] device bridge_slave_1 left promiscuous mode [ 74.057881][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.064392][ T5070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.151426][ T4595] device bridge_slave_0 left promiscuous mode [ 74.153493][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.426342][ T4595] device veth1_macvtap left promiscuous mode [ 74.428207][ T4595] device veth0_macvtap left promiscuous mode [ 74.429930][ T4595] device veth1_vlan left promiscuous mode [ 74.431473][ T4595] device veth0_vlan left promiscuous mode [ 74.999242][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 75.021571][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 75.042470][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.105639][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.342308][ T4595] bond0 (unregistering): Released all slaves [ 75.407670][ T1529] Bluetooth: hci3: command 0x040f tx timeout [ 75.409378][ T1529] Bluetooth: hci5: command 0x0419 tx timeout [ 75.559024][ T4847] device veth1_vlan entered promiscuous mode [ 75.580366][ T4901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.619337][ T4901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.687695][ T5091] loop1: detected capacity change from 0 to 1024 [ 75.697455][ T4901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.729077][ T4901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.761638][ T5085] hfsplus: bad catalog entry type [ 75.779167][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.781799][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.786274][ T4847] device veth0_macvtap entered promiscuous mode [ 75.791166][ T4847] device veth1_macvtap entered promiscuous mode [ 75.825885][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.828654][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.831052][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.857876][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.870628][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.873194][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.885791][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.893801][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.909566][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.966292][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.968947][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.973513][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.980719][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.991367][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.996123][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.005958][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.008714][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.011139][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.013824][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.026083][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.065645][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.075145][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.151082][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.153741][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.172767][ T4847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.175032][ T4847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.188835][ T4847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.190994][ T4847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.213066][ T5106] loop3: detected capacity change from 0 to 128 [ 76.259977][ T148] hfsplus: b-tree write err: -5, ino 4 [ 76.295233][ T26] audit: type=1326 audit(76.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.3.318" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd40328 code=0x0 [ 76.424919][ T4901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.434920][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.439474][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.444646][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.487789][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.490286][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.509288][ T4901] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.537579][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.540970][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.546273][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.556194][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.558920][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.561455][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.563364][ T4927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.572796][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.629478][ T5123] loop4: detected capacity change from 0 to 1024 [ 76.638132][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.640839][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.643655][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.645480][ T4028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.656495][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.667230][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.670168][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.673066][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.675596][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.689856][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.725259][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.738601][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.741140][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.744033][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.750834][ T5123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.764709][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.770317][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.779564][ T5133] loop1: detected capacity change from 0 to 64 [ 76.859208][ T5133] hfs: get root inode failed [ 77.201415][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.203506][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.230590][ T4901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.278207][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.280937][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.314628][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.318121][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.320940][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.323164][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.350313][ T4901] device veth0_vlan entered promiscuous mode [ 77.379802][ T4901] device veth1_vlan entered promiscuous mode [ 77.410695][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.421302][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.423826][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.436163][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.444861][ T4901] device veth0_macvtap entered promiscuous mode [ 77.457890][ T4901] device veth1_macvtap entered promiscuous mode [ 77.486272][ T1962] Bluetooth: hci3: command 0x0419 tx timeout [ 77.529847][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.532562][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.534934][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.563863][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.567095][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.569624][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.572083][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.574715][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.601946][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.604648][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.623124][ T4901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.625329][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.629483][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.631848][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.634287][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.659722][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.662403][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.664860][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.683276][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.687399][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.690089][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.692453][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.695036][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.695798][ T5157] loop4: detected capacity change from 0 to 8192 [ 77.715950][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.718664][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.746709][ T4901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.749017][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.751628][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.829230][ T5157] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 77.831708][ T5157] REISERFS (device loop4): using ordered data mode [ 77.833327][ T5157] reiserfs: using flush barriers [ 77.839147][ T4901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.841253][ T4901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.843524][ T4901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.859380][ T5157] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.863711][ T5157] REISERFS (device loop4): checking transaction log (loop4) [ 77.908562][ T5157] REISERFS (device loop4): Using tea hash to sort names [ 77.910907][ T5157] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 77.927401][ T4901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.090418][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.092552][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.097989][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.149664][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.151767][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.157108][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.420174][ T26] audit: type=1326 audit(78.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.2.330" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fa35328 code=0x0 [ 78.682955][ T5206] loop2: detected capacity change from 0 to 1024 [ 78.803957][ T5206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.906394][ T5205] loop1: detected capacity change from 0 to 4096 [ 78.991699][ T5205] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 78.994325][ T5205] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 79.009230][ T5205] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 79.012650][ T5205] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 79.054013][ T5205] ntfs: volume version 3.1. [ 79.077132][ T5205] ntfs: (device loop1): ntfs_nlstoucs(): Name using character set cp950 contains characters that cannot be converted to Unicode. [ 79.097625][ T5205] ntfs: (device loop1): ntfs_lookup(): Failed to convert name to Unicode. [ 79.107556][ T5219] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 79.109979][ T5219] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 80.236278][ T5240] loop3: detected capacity change from 0 to 1024 [ 80.348583][ T5240] hfsplus: bad catalog entry type [ 80.355903][ T5247] loop2: detected capacity change from 0 to 2048 [ 80.405990][ T5247] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.409169][ T5247] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 80.417700][ T5247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.527345][ T153] hfsplus: b-tree write err: -5, ino 4 [ 80.675056][ T5261] loop3: detected capacity change from 0 to 2048 [ 80.715043][ T5261] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.720458][ T5266] loop4: detected capacity change from 0 to 64 [ 80.787335][ T5266] hfs: get root inode failed [ 80.793825][ T5268] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.803382][ T5261] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 80.826760][ T5266] fuse: Bad value for 'fd' [ 80.860082][ T5261] Remounting filesystem read-only [ 81.048747][ T5230] loop1: detected capacity change from 0 to 32768 [ 81.051336][ T5275] loop4: detected capacity change from 0 to 1024 [ 81.123694][ T5275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.827734][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.844172][ T5301] loop1: detected capacity change from 0 to 1024 [ 81.900247][ T5298] hfsplus: bad catalog entry type [ 81.982327][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.131199][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.198488][ T5311] netlink: 152 bytes leftover after parsing attributes in process `syz.2.365'. [ 82.201732][ T5317] loop3: detected capacity change from 0 to 512 [ 82.234709][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.272167][ T5317] EXT4-fs (loop3): 1 truncate cleaned up [ 82.274705][ T5317] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.281002][ T5295] chnl_net:caif_netlink_parms(): no params data found [ 82.281103][ T5322] CIFS: VFS: Malformed UNC in devname [ 82.398693][ T4595] hfsplus: b-tree write err: -5, ino 4 [ 82.496821][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.500076][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.511866][ T5295] device bridge_slave_0 entered promiscuous mode [ 82.544867][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.548178][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.559794][ T5295] device bridge_slave_1 entered promiscuous mode [ 82.650846][ T5295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.692277][ T5295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.695905][ T5320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 82.799172][ T5295] team0: Port device team_slave_0 added [ 82.803837][ T5335] loop1: detected capacity change from 0 to 1024 [ 82.847462][ T5335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.917911][ T5295] team0: Port device team_slave_1 added [ 82.957577][ T5338] loop4: detected capacity change from 0 to 4096 [ 83.017029][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.018917][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.025364][ T5295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.046476][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.048214][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.085599][ T5295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.259672][ T5295] device hsr_slave_0 entered promiscuous mode [ 83.296228][ T5295] device hsr_slave_1 entered promiscuous mode [ 83.599647][ T5331] loop2: detected capacity change from 0 to 32768 [ 83.613722][ T5346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'. [ 83.683490][ T5348] loop1: detected capacity change from 0 to 1024 [ 83.726128][ T1962] Bluetooth: hci5: command 0x0409 tx timeout [ 83.747619][ T5355] loop3: detected capacity change from 0 to 190 [ 83.753745][ T5348] hfsplus: bad catalog entry type [ 83.792601][ T5331] XFS (loop2): Mounting V5 Filesystem [ 83.820233][ T5355] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 83.824874][ T5355] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.852186][ T5355] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 83.883229][ T5355] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 83.885395][ T5355] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 83.908683][ T5331] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 83.940838][ T5355] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 83.943116][ T5355] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 83.972069][ T5331] XFS (loop2): Starting recovery (logdev: internal) [ 84.006226][ T5355] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 84.009740][ T5355] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 84.039939][ T5331] XFS (loop2): Ending recovery (logdev: internal) [ 84.042944][ T5355] ntfs: volume version 3.1. [ 84.050198][ T5355] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 84.061287][ T5355] handle_bad_sector: 1 callbacks suppressed [ 84.061298][ T5355] attempt to access beyond end of device [ 84.061298][ T5355] loop3: rw=0, want=560, limit=190 [ 84.131392][ T148] hfsplus: b-tree write err: -5, ino 4 [ 84.152486][ T4901] XFS (loop2): Unmounting Filesystem [ 84.288129][ T5295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.372909][ T5379] netlink: 'syz.1.383': attribute type 2 has an invalid length. [ 84.375468][ T5295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.448480][ T5295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.499638][ T5385] loop1: detected capacity change from 0 to 1024 [ 84.567711][ T5385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.572552][ T5295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.638713][ T5392] loop3: detected capacity change from 0 to 512 [ 84.696030][ T5392] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 84.729388][ T5392] EXT4-fs (loop3): 1 truncate cleaned up [ 84.735881][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,auto_da_alloc,nombcache,noquota,grpquota,norecovery,. Quota mode: writeback. [ 84.856574][ T5392] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 84.861544][ T5392] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 62 [ 85.070117][ T136] device hsr_slave_0 left promiscuous mode [ 85.116138][ T5403] loop3: detected capacity change from 0 to 1024 [ 85.143007][ T136] device hsr_slave_1 left promiscuous mode [ 85.155045][ T5403] hfsplus: bad catalog entry type [ 85.236191][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.238180][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.307824][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.309844][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.353244][ T136] device bridge_slave_1 left promiscuous mode [ 85.354958][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.409575][ T136] device bridge_slave_0 left promiscuous mode [ 85.411319][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.421990][ T5390] loop4: detected capacity change from 0 to 32768 [ 85.456877][ T5390] xfs: Unknown parameter '' [ 85.586126][ T136] device veth1_macvtap left promiscuous mode [ 85.587822][ T136] device veth0_macvtap left promiscuous mode [ 85.589502][ T136] device veth1_vlan left promiscuous mode [ 85.591192][ T136] device veth0_vlan left promiscuous mode [ 85.805929][ T4028] Bluetooth: hci5: command 0x041b tx timeout [ 86.098105][ T5412] loop1: detected capacity change from 0 to 32768 [ 86.226979][ T5412] XFS (loop1): Mounting V5 Filesystem [ 86.295049][ T5412] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.352588][ T5412] XFS (loop1): Starting recovery (logdev: internal) [ 86.372736][ T5412] XFS (loop1): Ending recovery (logdev: internal) [ 86.413750][ T136] team0 (unregistering): Port device team_slave_1 removed [ 86.476832][ T136] team0 (unregistering): Port device team_slave_0 removed [ 86.509492][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.529357][ T3980] XFS (loop1): Unmounting Filesystem [ 86.578873][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.873474][ T136] bond0 (unregistering): Released all slaves [ 87.141490][ T5295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.151177][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.153631][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.159219][ T5295] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.164249][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.166911][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.171643][ T351] hfsplus: b-tree write err: -5, ino 4 [ 87.176600][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.178356][ T4026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.180880][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.198516][ T5435] loop1: detected capacity change from 0 to 256 [ 87.235652][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.238370][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.240741][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.242686][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.244900][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.269421][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.272201][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.275540][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.410068][ T5444] VFS: could not find a valid V7 on nullb0. [ 87.458253][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 87.460490][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 87.462721][ T5443] netlink: 'syz.3.398': attribute type 11 has an invalid length. [ 87.518399][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.553802][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.106122][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.108826][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.112038][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.114580][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.181017][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.200019][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.277726][ T4030] Bluetooth: hci5: command 0x040f tx timeout [ 88.365066][ T5453] loop3: detected capacity change from 0 to 1024 [ 88.453813][ T5453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.490004][ T5456] loop1: detected capacity change from 0 to 1024 [ 88.521101][ T5440] loop4: detected capacity change from 0 to 32768 [ 88.531369][ T5459] loop2: detected capacity change from 0 to 4096 [ 88.562018][ T5459] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 88.566202][ T5456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.571478][ T5440] ERROR: (device loop4): dtReadFirst: btstack overrun [ 88.571478][ T5440] [ 88.582105][ T5440] ERROR: (device loop4): remounting filesystem as read-only [ 88.583979][ T5440] btstack dump: [ 88.584881][ T5440] bn = 0, index = 0 [ 88.601536][ T5440] bn = 0, index = 0 [ 88.602611][ T5440] bn = 0, index = 0 [ 88.603701][ T5440] bn = 0, index = 0 [ 88.604663][ T5440] bn = 0, index = 0 [ 88.605537][ T5440] bn = 0, index = 0 [ 88.632129][ T5440] bn = 0, index = 0 [ 88.633133][ T5440] bn = 0, index = 0 [ 88.637379][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.639473][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.657375][ T5295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.689543][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.692184][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.741363][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.743961][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.752370][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.754654][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.774231][ T5295] device veth0_vlan entered promiscuous mode [ 88.828618][ T5295] device veth1_vlan entered promiscuous mode [ 88.891591][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.894324][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.897324][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.900699][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.905450][ T5295] device veth0_macvtap entered promiscuous mode [ 88.923908][ T5295] device veth1_macvtap entered promiscuous mode [ 88.986712][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.003508][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.029061][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.052559][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.065911][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.068693][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.071187][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.073854][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.087067][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.095877][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.104611][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.115836][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.118662][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.127483][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.140457][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.155314][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.164743][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.181275][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.200952][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.203505][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.206267][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.208880][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.211515][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.213898][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.218424][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.222508][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.226127][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.228729][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.234948][ T5295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.237951][ T5295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.240200][ T5295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.242478][ T5295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.442115][ T5474] loop1: detected capacity change from 0 to 1024 [ 89.444813][ T5476] loop3: detected capacity change from 0 to 512 [ 89.467209][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.470913][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.518140][ T5474] hfsplus: bad catalog entry type [ 89.523985][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.567630][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.569978][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.596939][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.640568][ T5476] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 89.701287][ T5465] loop4: detected capacity change from 0 to 32768 [ 89.846648][ T5465] XFS (loop4): Mounting V5 Filesystem [ 89.873721][ T9] hfsplus: b-tree write err: -5, ino 4 [ 89.996319][ T5465] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 90.044548][ T5465] XFS (loop4): Starting recovery (logdev: internal) [ 90.071081][ T5503] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 90.074306][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 90.075906][ T5465] XFS (loop4): Ending recovery (logdev: internal) [ 90.095128][ T5502] loop3: detected capacity change from 0 to 256 [ 90.122714][ T5506] netlink: 'syz.1.411': attribute type 8 has an invalid length. [ 90.209190][ T5509] netlink: 'syz.0.410': attribute type 21 has an invalid length. [ 90.211359][ T5509] netlink: 'syz.0.410': attribute type 6 has an invalid length. [ 90.213248][ T5509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.410'. [ 90.285915][ T4030] Bluetooth: hci5: command 0x0419 tx timeout [ 90.917673][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 90.917860][ T26] audit: type=1326 audit(90.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.3.409" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd40328 code=0x0 [ 91.436673][ T3986] XFS (loop4): Unmounting Filesystem [ 91.635677][ T5525] loop3: detected capacity change from 0 to 1024 [ 91.714483][ T5525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.779156][ T5529] loop2: detected capacity change from 0 to 1024 [ 91.830630][ T5529] hfsplus: bad catalog entry type [ 92.132309][ T5114] hfsplus: b-tree write err: -5, ino 4 [ 92.361674][ T5543] loop4: detected capacity change from 0 to 256 [ 92.364000][ T5541] loop1: detected capacity change from 0 to 4096 [ 92.404213][ T5546] x_tables: unsorted entry at hook 2 [ 92.409462][ T5541] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 93.053018][ T26] audit: type=1326 audit(92.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.4.424" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2326328 code=0x0 [ 93.797435][ T5559] loop1: detected capacity change from 0 to 256 [ 93.809211][ T5562] loop4: detected capacity change from 0 to 1024 [ 93.867283][ T5559] exfat: Deprecated parameter 'utf8' [ 93.868640][ T5559] exfat: Deprecated parameter 'namecase' [ 93.870158][ T5559] exfat: Deprecated parameter 'namecase' [ 93.935221][ T5559] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 94.093944][ T5571] loop2: detected capacity change from 0 to 1024 [ 94.197419][ T5571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.237161][ T5576] Cannot find add_set index 0 as target [ 94.386563][ T5578] loop4: detected capacity change from 0 to 1024 [ 94.407798][ T5551] loop3: detected capacity change from 0 to 32768 [ 94.440497][ T5578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.548431][ T5590] loop1: detected capacity change from 0 to 256 [ 94.555312][ T5551] XFS (loop3): Mounting V5 Filesystem [ 94.681540][ T5551] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 94.719625][ T5551] XFS (loop3): Starting recovery (logdev: internal) [ 94.740917][ T5551] XFS (loop3): Ending recovery (logdev: internal) [ 95.368627][ T26] audit: type=1326 audit(95.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.441" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa32a1328 code=0x0 [ 95.847694][ T5598] loop2: detected capacity change from 0 to 64 [ 95.915856][ T3977] XFS (loop3): Unmounting Filesystem [ 95.984105][ T4030] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 95.990904][ T4030] Bluetooth: hci2: Injecting HCI hardware error event [ 95.992965][ T3984] Bluetooth: hci2: hardware error 0x00 [ 96.092159][ T5606] loop1: detected capacity change from 0 to 512 [ 96.211139][ T5606] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.447: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 96.230722][ T5606] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.447: Bad quota inode: 4, type: 1 [ 96.242281][ T5606] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.268802][ T5606] EXT4-fs (loop1): mount failed [ 96.361968][ T5615] loop4: detected capacity change from 0 to 1024 [ 96.406412][ T5616] Cannot find add_set index 0 as target [ 96.454844][ T5615] hfsplus: bad catalog entry type [ 96.560930][ T5622] loop1: detected capacity change from 0 to 1024 [ 96.600968][ T5629] loop2: detected capacity change from 0 to 512 [ 96.634225][ T5622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.665395][ T5629] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.717583][ T5629] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.455: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 96.724280][ T5629] EXT4-fs error (device loop2): ext4_quota_enable:6390: comm syz.2.455: Bad quota inode: 4, type: 1 [ 96.784881][ T5629] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.789016][ T5629] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 96.792057][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.800347][ T4595] hfsplus: b-tree write err: -5, ino 4 [ 96.933979][ T5636] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 96.998854][ T5626] loop3: detected capacity change from 0 to 32768 [ 97.050580][ T5645] loop2: detected capacity change from 0 to 512 [ 97.128265][ T5626] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.130572][ T5626] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.217516][ T5645] loop2: detected capacity change from 0 to 8192 [ 97.243103][ T5626] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 20ms [ 97.256816][ T4028] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 97.258731][ T4028] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.269865][ T5645] loop2: p1 p2 p3 [ 97.270907][ T5645] loop2: partition table partially beyond EOD, truncated [ 97.273527][ T5645] loop2: p2 start 16781326 is beyond EOD, truncated [ 97.390994][ T3589] loop2: p1 p2 p3 [ 97.392050][ T3589] loop2: partition table partially beyond EOD, truncated [ 97.394758][ T3589] loop2: p2 start 16781326 is beyond EOD, truncated [ 97.485685][ T4028] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 226ms [ 97.488686][ T4028] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.491011][ T5626] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 98.488398][ T5660] Cannot find add_set index 0 as target [ 98.507990][ T5656] loop2: detected capacity change from 0 to 512 [ 98.972864][ T5662] loop4: detected capacity change from 0 to 1024 [ 99.055487][ T5668] loop1: detected capacity change from 0 to 2048 [ 99.274578][ T5668] NILFS (loop1): unrecognized mount option "" [ 99.304564][ T5662] hfsplus: bad catalog entry type [ 99.510137][ T5668] loop1: detected capacity change from 0 to 1024 [ 99.557104][ T5668] hfsplus: unable to parse mount options [ 99.570407][ T5678] loop2: detected capacity change from 0 to 1024 [ 99.634217][ T5683] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.663990][ T5596] hfsplus: b-tree write err: -5, ino 4 [ 99.781716][ T5678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.549130][ T5697] Cannot find add_set index 0 as target [ 100.648721][ T5702] loop4: detected capacity change from 0 to 4096 [ 100.717854][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 100.775117][ T5712] loop1: detected capacity change from 0 to 1024 [ 100.797084][ T5702] ntfs: (device loop4): ntfs_external_attr_find(): Base inode 0x1 contains corrupt attribute list attribute. Unmount and run chkdsk. [ 100.800687][ T5702] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 100.803228][ T5702] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 100.825849][ T5702] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.841816][ T5702] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 100.842075][ T5712] hfsplus: bad catalog entry type [ 100.850402][ T5702] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.864250][ T5702] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.880147][ T5715] loop3: detected capacity change from 0 to 4096 [ 100.883537][ T5702] ntfs: volume version 3.1. [ 100.894663][ T5702] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 100.898324][ T5702] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 100.915914][ T5702] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 101.163423][ T4595] hfsplus: b-tree write err: -5, ino 4 [ 101.202371][ T5725] loop3: detected capacity change from 0 to 4096 [ 101.255301][ T5733] loop4: detected capacity change from 0 to 1024 [ 101.315816][ T5733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.362354][ T5743] Cannot find add_set index 0 as target [ 101.424465][ T5745] loop1: detected capacity change from 0 to 256 [ 101.507426][ T5747] loop3: detected capacity change from 0 to 1764 [ 101.524182][ T5745] overlayfs: failed to resolve '/Oc': -2 [ 101.555637][ T5747] ISOFS: unable to read i-node block [ 101.557555][ T5747] isofs_fill_super: get root inode failed [ 101.606692][ T5753] loop2: detected capacity change from 0 to 1024 [ 101.666421][ T5753] hfsplus: bad catalog entry type [ 101.716231][ T3980] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 101.718432][ T3980] FAT-fs (loop1): Filesystem has been set read-only [ 101.720631][ T3980] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 102.010372][ T5768] loop3: detected capacity change from 0 to 1024 [ 102.195458][ T5773] loop4: detected capacity change from 0 to 4096 [ 102.293007][ T5776] loop3: detected capacity change from 0 to 512 [ 102.383904][ T5776] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 102.389856][ T4595] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.401005][ T5776] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=c001e] [ 102.486206][ T148] hfsplus: b-tree write err: -5, ino 4 [ 102.532391][ T4595] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.636844][ T5783] loop3: detected capacity change from 0 to 2048 [ 102.649103][ T4595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.664750][ T5786] loop2: detected capacity change from 0 to 256 [ 102.696501][ T5783] UDF-fs: bad mount option "00000000000000000000007" or missing value [ 102.708293][ T5786] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.734590][ T4595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.889170][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 103.011526][ T5798] loop4: detected capacity change from 0 to 1024 [ 103.026053][ T5798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.252015][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.255284][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.289645][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.297752][ T5777] device bridge_slave_0 entered promiscuous mode [ 103.313734][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.324287][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.327183][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.329867][ T5777] device bridge_slave_1 entered promiscuous mode [ 103.329982][ T5815] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.334584][ T5815] xt_connbytes: Forcing CT accounting to be enabled [ 103.397830][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.412395][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.521134][ T5777] team0: Port device team_slave_0 added [ 103.544736][ T5777] team0: Port device team_slave_1 added [ 103.553971][ T5817] loop3: detected capacity change from 0 to 4096 [ 103.628776][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.677058][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.678795][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.683065][ T5812] loop2: detected capacity change from 0 to 32768 [ 103.685174][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.689021][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.701032][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.702827][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.739025][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.936677][ T5596] read_mapping_page failed! [ 103.938098][ T5596] ERROR: (device loop2): txAbort: [ 103.938098][ T5596] [ 103.958922][ T5596] ERROR: (device loop2): remounting filesystem as read-only [ 103.960876][ T5596] jfs_write_inode: jfs_commit_inode failed! [ 104.586281][ T4028] Bluetooth: hci2: command 0x0409 tx timeout [ 104.689771][ T5777] device hsr_slave_0 entered promiscuous mode [ 104.709454][ T5842] loop2: detected capacity change from 0 to 1024 [ 104.726295][ T5777] device hsr_slave_1 entered promiscuous mode [ 104.758850][ T5842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.767217][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.769163][ T5777] Cannot create hsr debugfs directory [ 106.067807][ T5842] fuse: Bad value for 'fd' [ 106.077478][ T5851] loop3: detected capacity change from 0 to 32768 [ 106.109595][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.134027][ T5858] loop4: detected capacity change from 0 to 32768 [ 106.158650][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.214404][ T5858] XFS (loop4): Mounting V5 Filesystem [ 106.247020][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.293567][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.320007][ T5851] XFS (loop3): Mounting V5 Filesystem [ 106.372157][ T5858] XFS (loop4): Ending clean mount [ 106.517362][ T5851] XFS (loop3): Ending clean mount [ 106.520148][ T5858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 106.522086][ T5858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.535481][ T5851] XFS (loop3): Quotacheck needed: Please wait. [ 106.546594][ T4595] device hsr_slave_0 left promiscuous mode [ 106.559345][ T5858] vhci_hcd vhci_hcd.0: Device attached [ 106.595847][ T5851] XFS (loop3): Quotacheck: Done. [ 106.605912][ T4926] Bluetooth: hci2: command 0x041b tx timeout [ 106.616973][ T5907] Cannot find add_set index 0 as target [ 106.631314][ T4595] device hsr_slave_1 left promiscuous mode [ 106.661009][ T5851] XFS (loop3): Unmounting Filesystem [ 106.695987][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.698116][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.706332][ T5899] vhci_hcd: connection closed [ 106.712603][ T5554] vhci_hcd: stop threads [ 106.717261][ T5554] vhci_hcd: release socket [ 106.726525][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.733388][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.735424][ T5554] vhci_hcd: disconnect device [ 106.746740][ T4026] vhci_hcd: vhci_device speed not set [ 106.754663][ T4595] device bridge_slave_1 left promiscuous mode [ 106.756711][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.812646][ T4595] device bridge_slave_0 left promiscuous mode [ 106.814342][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.946311][ T4595] device veth1_macvtap left promiscuous mode [ 106.947947][ T4595] device veth0_macvtap left promiscuous mode [ 106.949517][ T4595] device veth1_vlan left promiscuous mode [ 106.960375][ T4595] device veth0_vlan left promiscuous mode [ 107.208431][ T5917] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 107.541588][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 107.562815][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 107.587851][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.626055][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.813932][ T4595] bond0 (unregistering): Released all slaves [ 107.968954][ T5916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.989242][ T3986] XFS (loop4): Unmounting Filesystem [ 108.159428][ T5921] loop2: detected capacity change from 0 to 4096 [ 108.162406][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.183648][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.186325][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.228715][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.241096][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.243697][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.246627][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.248389][ T4030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.257304][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.277483][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.280001][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.282372][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.284290][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.290288][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.3.554'. [ 108.292578][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.3.554'. [ 108.312895][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.318909][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.324649][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.328524][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.332327][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.359348][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.362052][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.374494][ T5931] netlink: 'syz.3.555': attribute type 10 has an invalid length. [ 108.394551][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.415633][ T5931] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.448269][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.450997][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.470215][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.473519][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.491799][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.494374][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.678613][ T5940] loop4: detected capacity change from 0 to 1024 [ 108.687359][ T4926] Bluetooth: hci2: command 0x040f tx timeout [ 108.749619][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.752629][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.754707][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.804719][ T5940] hfsplus: bad catalog entry type [ 108.827047][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.829805][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.911265][ T5777] device veth0_vlan entered promiscuous mode [ 108.925103][ T5947] misc userio: Invalid payload size [ 108.946166][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.948871][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.951995][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.954842][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.978145][ T5777] device veth1_vlan entered promiscuous mode [ 109.079592][ T5777] device veth0_macvtap entered promiscuous mode [ 109.084345][ T5777] device veth1_macvtap entered promiscuous mode [ 109.107970][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.110821][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.113602][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.114190][ T5596] hfsplus: b-tree write err: -5, ino 4 [ 109.117730][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.167955][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.170650][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.173062][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.205152][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.235853][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.238640][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.241284][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.243821][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.266744][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.276614][ T5961] Cannot find add_set index 0 as target [ 109.291699][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.316366][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.339618][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.342314][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.353250][ T5935] loop3: detected capacity change from 0 to 32768 [ 109.496586][ T5935] XFS (loop3): Mounting V5 Filesystem [ 109.516677][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.519708][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.522370][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.527354][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.531057][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.536159][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.540135][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.545251][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.550108][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.554024][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.560315][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.570388][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.573159][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.578307][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.582852][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.593861][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.603805][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.611969][ T5935] XFS (loop3): Ending clean mount [ 109.651978][ T4567] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x434, xfs_rmapbt block 0x14 [ 109.654970][ T4567] XFS (loop3): Unmount and run xfs_repair [ 109.665606][ T4567] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 109.667561][ T4567] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 109.670027][ T4567] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 109.672266][ T4567] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 109.674512][ T4567] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 109.715782][ T4567] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 109.718511][ T4567] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 109.720752][ T4567] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 109.722969][ T4567] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 109.750984][ T5935] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 109.783061][ T5935] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x164c/0x1f34 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 109.807262][ T5935] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 109.883640][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.895609][ T3977] XFS (loop3): Unmounting Filesystem [ 109.915959][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.957820][ T5986] loop2: detected capacity change from 0 to 1024 [ 109.958771][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.961801][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.983079][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.985640][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.002662][ T5986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.097745][ T5988] loop7: detected capacity change from 0 to 16384 [ 110.272731][ T5964] loop4: detected capacity change from 0 to 32768 [ 110.321060][ T5995] loop1: detected capacity change from 0 to 1024 [ 110.345007][ T5964] XFS (loop4): Mounting V5 Filesystem [ 110.379301][ T5995] hfsplus: bad catalog entry type [ 110.471451][ T148] hfsplus: b-tree write err: -5, ino 4 [ 110.485997][ T4064] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.643070][ T5964] XFS (loop4): Ending clean mount [ 110.643571][ T6005] loop1: detected capacity change from 0 to 4096 [ 110.663200][ T5964] XFS (loop4): Quotacheck needed: Please wait. [ 110.729314][ T4064] usb 1-1: Using ep0 maxpacket: 8 [ 110.766011][ T4926] Bluetooth: hci2: command 0x0419 tx timeout [ 110.777802][ T5964] XFS (loop4): Quotacheck: Done. [ 110.848932][ T6012] Cannot find add_set index 0 as target [ 110.871514][ T4064] usb 1-1: config 0 has no interfaces? [ 110.873262][ T4064] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.875625][ T4064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.918223][ T4064] usb 1-1: config 0 descriptor?? [ 111.212780][ T3986] XFS (loop4): Unmounting Filesystem [ 111.222461][ T4026] usb 1-1: USB disconnect, device number 2 [ 111.822384][ T6016] loop3: detected capacity change from 0 to 32768 [ 111.825571][ T6028] loop1: detected capacity change from 0 to 1024 [ 111.931351][ T6016] XFS (loop3): Mounting V5 Filesystem [ 111.950452][ T6028] hfsplus: bad catalog entry type [ 112.046523][ T9] hfsplus: b-tree write err: -5, ino 4 [ 112.071162][ T6022] loop2: detected capacity change from 0 to 32768 [ 112.104845][ T6016] XFS (loop3): Ending clean mount [ 112.116801][ T4030] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x434, xfs_rmapbt block 0x14 [ 112.125298][ T4030] XFS (loop3): Unmount and run xfs_repair [ 112.134124][ T4030] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 112.143527][ T4030] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 112.150388][ T6022] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.577 (6022) [ 112.160074][ T4030] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 112.162241][ T4030] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 112.177930][ T4030] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 112.180216][ T4030] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 112.182343][ T4030] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 112.184415][ T4030] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 112.203894][ T4030] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 112.218542][ T6016] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 112.225604][ T6022] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 112.227990][ T6022] BTRFS info (device loop2): setting nodatacow, compression disabled [ 112.228921][ T6047] Cannot find add_set index 0 as target [ 112.230033][ T6022] BTRFS info (device loop2): setting datacow [ 112.246596][ T6016] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x164c/0x1f34 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 112.250927][ T6016] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 112.258218][ T6022] BTRFS info (device loop2): doing ref verification [ 112.259951][ T6022] BTRFS info (device loop2): force clearing of disk cache [ 112.261747][ T6022] BTRFS info (device loop2): turning off barriers [ 112.280511][ T6022] BTRFS info (device loop2): enabling ssd optimizations [ 112.282294][ T6022] BTRFS info (device loop2): using spread ssd allocation scheme [ 112.284145][ T6022] BTRFS info (device loop2): not using ssd optimizations [ 112.301759][ T6022] BTRFS info (device loop2): not using spread ssd allocation scheme [ 112.303854][ T6022] BTRFS info (device loop2): using free space tree [ 112.305506][ T6022] BTRFS info (device loop2): has skinny extents [ 112.307884][ T3977] XFS (loop3): Unmounting Filesystem [ 112.576954][ T6022] BTRFS info (device loop2): clearing free space tree [ 112.578661][ T6022] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.581102][ T6022] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.635078][ T6072] loop4: detected capacity change from 0 to 4096 [ 112.645225][ T6022] BTRFS info (device loop2): creating free space tree [ 112.652266][ T6022] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.663758][ T6022] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.103838][ T6093] loop3: detected capacity change from 0 to 164 [ 113.157076][ T6093] Unable to read rock-ridge attributes [ 113.247754][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.291025][ T6099] Cannot find add_set index 0 as target [ 113.575174][ T6108] loop4: detected capacity change from 0 to 1024 [ 113.623320][ T6108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.021837][ T6105] loop3: detected capacity change from 0 to 32768 [ 114.115581][ T6103] loop2: detected capacity change from 0 to 32768 [ 114.139922][ T6105] XFS (loop3): Mounting V5 Filesystem [ 114.220990][ T6103] XFS (loop2): Mounting V5 Filesystem [ 114.335212][ T6105] XFS (loop3): Ending clean mount [ 114.347100][ T6105] XFS (loop3): Quotacheck needed: Please wait. [ 114.353616][ T4024] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 114.357891][ T4024] XFS (loop3): Unmount and run xfs_repair [ 114.359728][ T4024] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 114.362734][ T4024] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 114.366766][ T4024] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 114.369877][ T4024] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 114.373330][ T4024] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 114.377859][ T4024] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.381323][ T4024] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.384778][ T4024] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.386958][ T6103] XFS (loop2): Ending clean mount [ 114.388295][ T4024] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.391000][ T5596] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 114.395154][ T6105] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 114.412234][ T6103] XFS (loop2): Quotacheck needed: Please wait. [ 114.425340][ T4028] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 114.429757][ T4028] XFS (loop2): Unmount and run xfs_repair [ 114.431998][ T4028] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 114.437373][ T4028] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 114.448466][ T4028] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 114.456234][ T6139] loop4: detected capacity change from 0 to 1024 [ 114.459718][ T4028] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 114.469778][ T4028] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 114.478751][ T4028] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.488886][ T4028] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.497652][ T4028] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.507699][ T4028] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 114.516758][ T9] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 114.521817][ T6103] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 114.571697][ T4901] XFS (loop2): Unmounting Filesystem [ 114.573561][ T6139] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.577047][ T6139] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.594002][ T3977] XFS (loop3): Unmounting Filesystem [ 114.624817][ T6139] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.606: Invalid block bitmap block 0 in block_group 0 [ 114.670068][ T6139] __quota_error: 10 callbacks suppressed [ 114.670081][ T6139] Quota error (device loop4): write_blk: dquota write failed [ 114.674023][ T6139] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 114.689236][ T6139] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.606: Failed to acquire dquot type 0 [ 114.704183][ T6139] EXT4-fs error (device loop4): ext4_free_blocks:6226: comm syz.4.606: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.757774][ T136] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 114.760373][ T136] EXT4-fs error (device loop4): ext4_release_dquot:6219: comm kworker/u4:1: Failed to release dquot type 0 [ 114.787705][ T6139] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.606: Invalid inode bitmap blk 0 in block_group 0 [ 114.793100][ T6139] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 114.805876][ T6139] EXT4-fs (loop4): 1 orphan inode deleted [ 114.807520][ T6139] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; barrier=0x0000000000000033,nodelalloc,usrjquota=,,errors=continue. Quota mode: writeback. [ 114.992395][ T6145] loop1: detected capacity change from 0 to 4096 [ 115.004564][ T6147] loop4: detected capacity change from 0 to 164 [ 115.022763][ T6147] Unable to read rock-ridge attributes [ 115.245638][ T6149] loop4: detected capacity change from 0 to 1024 [ 115.310563][ T6149] hfsplus: bad catalog entry type [ 115.367295][ T6153] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.552653][ T6162] syz.2.607 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.582833][ T5596] hfsplus: b-tree write err: -5, ino 4 [ 115.635029][ T26] audit: type=1326 audit(115.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.643310][ T26] audit: type=1326 audit(115.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.649347][ T6166] loop3: detected capacity change from 0 to 1024 [ 115.685897][ T26] audit: type=1326 audit(115.590:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.692054][ T26] audit: type=1326 audit(115.590:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.711323][ T26] audit: type=1326 audit(115.590:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.727360][ T26] audit: type=1326 audit(115.610:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.732691][ T6166] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 115.736250][ T6168] loop4: detected capacity change from 0 to 1024 [ 115.743519][ T6166] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.750463][ T6168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.756646][ T26] audit: type=1326 audit(115.610:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fa35328 code=0x7ffc0000 [ 115.811672][ T6166] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.617: Invalid block bitmap block 0 in block_group 0 [ 115.841277][ T6166] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.617: Failed to acquire dquot type 0 [ 115.865928][ T6166] EXT4-fs error (device loop3): ext4_free_blocks:6226: comm syz.3.617: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.891348][ T6166] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.617: Invalid inode bitmap blk 0 in block_group 0 [ 115.905966][ T4595] EXT4-fs error (device loop3): ext4_release_dquot:6219: comm kworker/u4:8: Failed to release dquot type 0 [ 115.909402][ T6166] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 115.911905][ T6166] EXT4-fs (loop3): 1 orphan inode deleted [ 115.913612][ T6166] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; barrier=0x0000000000000006,nodelalloc,usrjquota=,,errors=continue. Quota mode: writeback. [ 116.335489][ T6183] Cannot find add_set index 0 as target [ 116.451230][ T6189] loop2: detected capacity change from 0 to 1024 [ 116.545402][ T6189] hfsplus: bad catalog entry type [ 116.634209][ T6193] loop4: detected capacity change from 0 to 4096 [ 116.713426][ T6180] loop1: detected capacity change from 0 to 32768 [ 116.827671][ T5596] hfsplus: b-tree write err: -5, ino 4 [ 116.858248][ T6180] XFS (loop1): Mounting V5 Filesystem [ 116.983325][ T6180] XFS (loop1): Ending clean mount [ 116.988431][ T6180] XFS (loop1): Quotacheck needed: Please wait. [ 117.061560][ T6180] XFS (loop1): Quotacheck: Done. [ 117.080781][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 117.083227][ T6209] netlink: 6 bytes leftover after parsing attributes in process `syz.3.630'. [ 117.391600][ T6220] loop4: detected capacity change from 0 to 1024 [ 117.452558][ T6222] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 117.454167][ T6220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.669886][ T5777] XFS (loop1): Unmounting Filesystem [ 118.029681][ T6207] loop2: detected capacity change from 0 to 65536 [ 118.076818][ T6207] XFS (loop2): no-recovery mounts must be read-only. [ 118.204545][ T6239] loop4: detected capacity change from 0 to 4096 [ 118.698572][ T6252] Cannot find add_set index 0 as target [ 118.842344][ T6259] loop3: detected capacity change from 0 to 1024 [ 118.871640][ T6261] loop2: detected capacity change from 0 to 1024 [ 118.898807][ T6259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.912041][ T6261] hfsplus: bad catalog entry type [ 119.271956][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 119.275601][ T6271] udc-core: couldn't find an available UDC or it's busy [ 119.279507][ T6271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.459290][ T6244] loop1: detected capacity change from 0 to 65536 [ 119.520746][ T6244] XFS (loop1): no-recovery mounts must be read-only. [ 119.534083][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 119.637278][ T6275] loop1: detected capacity change from 0 to 256 [ 119.741958][ T148] hfsplus: b-tree write err: -5, ino 4 [ 119.943314][ T6288] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 120.081793][ T6295] loop2: detected capacity change from 0 to 1024 [ 120.123750][ T6295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.318588][ T6282] loop3: detected capacity change from 0 to 32768 [ 120.432479][ T6282] XFS (loop3): Mounting V5 Filesystem [ 120.546250][ T6282] XFS (loop3): Ending clean mount [ 120.581695][ T6282] input: syz1 as /devices/virtual/input/input14 [ 120.630818][ T6298] loop4: detected capacity change from 0 to 32768 [ 120.849585][ T6324] loop2: detected capacity change from 0 to 64 [ 120.850739][ T6298] XFS (loop4): Mounting V5 Filesystem [ 120.985382][ T6298] XFS (loop4): Ending clean mount [ 121.067464][ T3986] XFS (loop4): Unmounting Filesystem [ 121.219456][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 121.225348][ T6331] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 121.237403][ T6331] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 121.464252][ T3977] XFS (loop3): Unmounting Filesystem [ 121.547355][ T6337] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 121.784187][ T6348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.683'. [ 121.822102][ T6345] loop1: detected capacity change from 0 to 4096 [ 121.876772][ T6351] loop4: detected capacity change from 0 to 512 [ 122.548588][ T6367] loop1: detected capacity change from 0 to 1024 [ 122.617948][ T6367] hfsplus: bad catalog entry type [ 122.737533][ T6374] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 122.807327][ T148] hfsplus: b-tree write err: -5, ino 4 [ 123.067782][ T6379] loop3: detected capacity change from 0 to 4096 [ 123.113325][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 123.113338][ T26] audit: type=1326 audit(123.060:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.1.697" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96cb9328 code=0x0 [ 123.195887][ T227] block nbd1: Attempted send on invalid socket [ 123.197416][ T227] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.200722][ T227] block nbd1: Attempted send on invalid socket [ 123.202261][ T227] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.634945][ T4595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.674015][ T6390] loop3: detected capacity change from 0 to 1024 [ 123.722455][ T4595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.762272][ T6390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.783764][ T4595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.832162][ T4595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.113991][ T6391] chnl_net:caif_netlink_parms(): no params data found [ 124.284598][ T6406] loop1: detected capacity change from 0 to 1024 [ 124.354961][ T6406] hfsplus: bad catalog entry type [ 124.521811][ T6418] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 124.583122][ T6423] loop2: detected capacity change from 0 to 1024 [ 124.676661][ T6423] hfsplus: bad catalog entry type [ 124.733339][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.735112][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.738825][ T6391] device bridge_slave_0 entered promiscuous mode [ 124.785040][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.787085][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.789618][ T6391] device bridge_slave_1 entered promiscuous mode [ 124.817554][ T136] hfsplus: b-tree write err: -5, ino 4 [ 124.896851][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.938368][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.030109][ T6391] team0: Port device team_slave_0 added [ 125.057903][ T6391] team0: Port device team_slave_1 added [ 125.127146][ T6441] loop1: detected capacity change from 0 to 4096 [ 125.142302][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.144145][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.157744][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.162394][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.164212][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.172825][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.320657][ T6391] device hsr_slave_0 entered promiscuous mode [ 125.366332][ T6391] device hsr_slave_1 entered promiscuous mode [ 125.420871][ T6391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.422889][ T6391] Cannot create hsr debugfs directory [ 125.587151][ T6456] loop3: detected capacity change from 0 to 64 [ 125.613490][ T6457] loop1: detected capacity change from 0 to 1024 [ 125.682379][ T6457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.703431][ T148] hfsplus: b-tree write err: -5, ino 4 [ 125.725901][ T4025] Bluetooth: hci4: command 0x0409 tx timeout [ 125.907863][ T6466] loop2: detected capacity change from 0 to 1024 [ 126.006286][ T6463] hfsplus: bad catalog entry type [ 126.179232][ T5596] hfsplus: b-tree write err: -5, ino 4 [ 126.656656][ T6485] EXT4-fs (nvme0n1p2): re-mounted. Opts: (null). Quota mode: none. [ 126.797632][ T4595] device hsr_slave_0 left promiscuous mode [ 126.850877][ T6495] loop2: detected capacity change from 0 to 4096 [ 126.852762][ T4595] device hsr_slave_1 left promiscuous mode [ 126.942893][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.944839][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.994130][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.011267][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.033702][ T4595] device bridge_slave_1 left promiscuous mode [ 127.035377][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.099327][ T4595] device bridge_slave_0 left promiscuous mode [ 127.101785][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.236545][ T4595] device veth1_macvtap left promiscuous mode [ 127.238313][ T4595] device veth0_macvtap left promiscuous mode [ 127.239864][ T4595] device veth1_vlan left promiscuous mode [ 127.242512][ T4595] device veth0_vlan left promiscuous mode [ 127.335390][ T6511] loop2: detected capacity change from 0 to 512 [ 127.723515][ T6515] loop1: detected capacity change from 0 to 1024 [ 127.805958][ T4025] Bluetooth: hci4: command 0x041b tx timeout [ 127.836707][ T6515] hfsplus: bad catalog entry type [ 128.037889][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 128.113580][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 128.147292][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.203078][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.452431][ T4595] bond0 (unregistering): Released all slaves [ 128.562707][ T6391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.641234][ T6391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.662703][ T6391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.705110][ T6519] loop2: detected capacity change from 0 to 1024 [ 128.709308][ T6391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.794956][ T6519] hfsplus: bad catalog entry type [ 128.816732][ T5114] hfsplus: b-tree write err: -5, ino 4 [ 128.975611][ T6528] loop1: detected capacity change from 0 to 1024 [ 128.989226][ T136] hfsplus: b-tree write err: -5, ino 4 [ 129.042572][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.060065][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.062459][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.077047][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.091499][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.094133][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.098237][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.100061][ T4025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.150168][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.152922][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.158767][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.161476][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.163367][ T4926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.180908][ T6528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.197940][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.200756][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.238686][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.241951][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.244797][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.249299][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.257212][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.259867][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.266583][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.273929][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.292639][ T6540] loop3: detected capacity change from 0 to 512 [ 129.304413][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.318211][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.358003][ T6540] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #3: comm syz.3.731: corrupted inode contents [ 129.362361][ T6540] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #3: comm syz.3.731: mark_inode_dirty error [ 129.376363][ T6540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.731: bg 0: block 296: padding at end of block bitmap is not set [ 129.392761][ T6540] Quota error (device loop3): write_blk: dquota write failed [ 129.398183][ T6540] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 129.411672][ T6540] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.731: Failed to acquire dquot type 0 [ 129.449940][ T6540] EXT4-fs (loop3): 1 truncate cleaned up [ 129.477055][ T6540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.551461][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.553581][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.569631][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.824645][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.827423][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.862511][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.865040][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.868342][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.870660][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.875076][ T6391] device veth0_vlan entered promiscuous mode [ 129.889312][ T4926] Bluetooth: hci4: command 0x040f tx timeout [ 129.969930][ T6391] device veth1_vlan entered promiscuous mode [ 130.043233][ T6391] device veth0_macvtap entered promiscuous mode [ 130.049396][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.051802][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.054159][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.071315][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.082280][ T6391] device veth1_macvtap entered promiscuous mode [ 130.091139][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.093601][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.122917][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.125449][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.138934][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.141559][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.143924][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.165828][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.168275][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.170699][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.175504][ T6574] loop1: detected capacity change from 0 to 4096 [ 130.190332][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.192847][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.238350][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.240612][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.243064][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.259870][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.262449][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.264791][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.280924][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.283298][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.320721][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.323076][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.335955][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.338329][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.344050][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.352368][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.358053][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.360626][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.390599][ T6582] loop3: detected capacity change from 0 to 512 [ 130.399511][ T6391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.407170][ T6391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.411130][ T6584] loop2: detected capacity change from 0 to 1024 [ 130.414197][ T6391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.417045][ T6391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.516313][ T6580] hfsplus: bad catalog entry type [ 130.556375][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.560031][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.567091][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.600283][ T5554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.607232][ T5554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.631805][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.831473][ T5554] hfsplus: b-tree write err: -5, ino 4 [ 130.842883][ T6591] loop4: detected capacity change from 0 to 1024 [ 130.920114][ T6591] hfsplus: bad catalog entry type [ 131.087261][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.089140][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.203428][ T6598] loop1: detected capacity change from 0 to 1024 [ 131.270499][ T5114] hfsplus: b-tree write err: -5, ino 4 [ 131.275412][ T6598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.282835][ T6602] loop2: detected capacity change from 0 to 64 [ 131.684893][ T6606] loop4: detected capacity change from 0 to 4096 [ 131.732084][ T6606] ntfs3: Unknown parameter 'nl802154' [ 131.966329][ T6094] Bluetooth: hci4: command 0x0419 tx timeout [ 132.151546][ T6618] loop1: detected capacity change from 0 to 1024 [ 132.228763][ T6618] hfsplus: bad catalog entry type [ 132.351663][ T6621] loop3: detected capacity change from 0 to 4096 [ 132.513434][ T5554] hfsplus: b-tree write err: -5, ino 4 [ 132.954423][ T6636] loop3: detected capacity change from 0 to 1024 [ 132.996761][ T6634] loop1: detected capacity change from 0 to 4096 [ 133.017036][ T6638] loop4: detected capacity change from 0 to 1024 [ 133.038168][ T6636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.052042][ T6634] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 133.105173][ T6638] hfsplus: bad catalog entry type [ 133.230900][ T26] audit: type=1326 audit(133.180:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.1.756" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96cb9328 code=0x0 [ 133.730103][ T6644] loop3: detected capacity change from 0 to 512 [ 133.915619][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 133.955329][ T5554] hfsplus: b-tree write err: -5, ino 4 [ 134.043100][ T6651] loop1: detected capacity change from 0 to 1024 [ 134.101045][ T6651] hfsplus: bad catalog entry type [ 134.398062][ T4595] hfsplus: b-tree write err: -5, ino 4 [ 134.410296][ T6660] loop4: detected capacity change from 0 to 4096 [ 134.740216][ T6667] loop1: detected capacity change from 0 to 512 [ 134.771222][ T6667] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 134.773856][ T6667] EXT4-fs (loop1): Unrecognized mount option "fsuuid=7bYd8444-7dc2-ce5b-fa52-66R0b61b" or missing value [ 134.832308][ T6669] loop2: detected capacity change from 0 to 1024 [ 134.880061][ T6669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.183908][ T6673] loop3: detected capacity change from 0 to 4096 [ 135.229302][ T6678] loop1: detected capacity change from 0 to 8 [ 135.248646][ T6678] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 135.296166][ T6673] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 135.468402][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 135.470969][ T6690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.779'. [ 135.533347][ T6691] loop1: detected capacity change from 0 to 1024 [ 135.577512][ T6695] loop4: detected capacity change from 0 to 64 [ 135.594009][ T6691] hfsplus: bad catalog entry type [ 135.845950][ T6702] loop3: detected capacity change from 0 to 4096 [ 135.869636][ T136] hfsplus: b-tree write err: -5, ino 4 [ 136.147306][ T6717] loop2: detected capacity change from 0 to 1024 [ 136.323733][ T6717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.604131][ T6709] chnl_net:caif_netlink_parms(): no params data found [ 136.957748][ T441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.084466][ T441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.111210][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.113549][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.117340][ T6709] device bridge_slave_0 entered promiscuous mode [ 137.135933][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.161632][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.187912][ T6709] device bridge_slave_1 entered promiscuous mode [ 137.219221][ T6745] udc-core: couldn't find an available UDC or it's busy [ 137.221169][ T6745] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.231677][ T441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.338504][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.369993][ T441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.398128][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.478851][ T6709] team0: Port device team_slave_0 added [ 137.498148][ T6709] team0: Port device team_slave_1 added [ 137.558409][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.564937][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.590579][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.639680][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.641680][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.662057][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.886372][ T4567] Bluetooth: hci6: command 0x0409 tx timeout [ 137.929251][ T6709] device hsr_slave_0 entered promiscuous mode [ 137.966577][ T6709] device hsr_slave_1 entered promiscuous mode [ 138.006119][ T6709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.008146][ T6709] Cannot create hsr debugfs directory [ 138.127059][ T6760] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.010704][ T6709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.061078][ T6709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.158715][ T6709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.209332][ T6709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.509669][ T6832] VFS: could not find a valid V7 on nullb0. [ 139.647112][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.683224][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.685651][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.758314][ T6852] udc-core: couldn't find an available UDC or it's busy [ 139.776109][ T6852] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.860497][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.876738][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.879695][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.882242][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.884053][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.898539][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.913888][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.917065][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.925208][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.925280][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.948307][ T6863] VFS: could not find a valid V7 on nullb0. [ 139.965925][ T6094] Bluetooth: hci6: command 0x041b tx timeout [ 140.001432][ T6865] block nbd3: shutting down sockets [ 140.040354][ T441] device hsr_slave_0 left promiscuous mode [ 140.082058][ T441] device hsr_slave_1 left promiscuous mode [ 140.116669][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.118639][ T441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.137984][ T6872] loop4: detected capacity change from 0 to 16 [ 140.145133][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.148572][ T441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.160187][ T441] device bridge_slave_1 left promiscuous mode [ 140.161852][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.226512][ T441] device bridge_slave_0 left promiscuous mode [ 140.228274][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.336483][ T441] device veth1_macvtap left promiscuous mode [ 140.338231][ T441] device veth0_macvtap left promiscuous mode [ 140.339916][ T441] device veth1_vlan left promiscuous mode [ 140.341442][ T441] device veth0_vlan left promiscuous mode [ 141.205624][ T441] team0 (unregistering): Port device team_slave_1 removed [ 141.237544][ T441] team0 (unregistering): Port device team_slave_0 removed [ 141.293836][ T441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.384812][ T441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.672829][ T441] bond0 (unregistering): Released all slaves [ 141.827268][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.838233][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.875075][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.878917][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.882030][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.916851][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.925980][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.946198][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.948829][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.954974][ T6709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.968626][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.976287][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.978884][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.046087][ T4926] Bluetooth: hci6: command 0x040f tx timeout [ 142.252675][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.254740][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.259853][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.307154][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.310000][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.357841][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.360510][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.363153][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.376362][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.380328][ T6709] device veth0_vlan entered promiscuous mode [ 142.397953][ T6709] device veth1_vlan entered promiscuous mode [ 142.460295][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.462752][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.465179][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.476345][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.487916][ T6709] device veth0_macvtap entered promiscuous mode [ 142.492527][ T6709] device veth1_macvtap entered promiscuous mode [ 142.543987][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.567491][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.569995][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.572729][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.575199][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.595745][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.598251][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.601032][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.603626][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.621331][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.637301][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.640185][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.642881][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.645386][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.656429][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.671100][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.674289][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.678211][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.686263][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.688853][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.704314][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.714471][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.722945][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.736068][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.738775][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.754998][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.769936][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.772611][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.787723][ T6709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.796832][ T6709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.799174][ T6709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.801689][ T6709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.970901][ T5596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.973172][ T5596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.994868][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.042078][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.044387][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.051134][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.126396][ T4028] Bluetooth: hci6: command 0x0419 tx timeout [ 144.165988][ T6903] VFS: could not find a valid V7 on nullb0. [ 148.889764][ T6934] VFS: could not find a valid V7 on nullb0. [ 149.133764][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 163.886006][ T4028] Bluetooth: hci1: command 0x0406 tx timeout [ 192.534709][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.541576][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.605999][ T4028] Bluetooth: hci3: command 0x0406 tx timeout [ 202.768076][ T27] INFO: task syz.0.164:4551 blocked for more than 143 seconds. [ 202.769914][ T27] Not tainted 5.15.161-syzkaller #0 [ 202.771425][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 202.773566][ T27] task:syz.0.164 state:D stack: 0 pid: 4551 ppid: 3976 flags:0x00000001 [ 202.784312][ T27] Call trace: [ 202.785217][ T27] __switch_to+0x308/0x5e8 [ 202.792198][ T27] __schedule+0xf10/0x1e48 [ 202.810555][ T27] schedule+0x11c/0x1c8 [ 202.814307][ T27] schedule_preempt_disabled+0x18/0x2c [ 202.822145][ T27] rwsem_down_read_slowpath+0x5b0/0x988 [ 202.827203][ T27] down_read+0x10c/0x398 [ 202.833006][ T27] lookup_slow+0x50/0x84 [ 202.838555][ T27] walk_component+0x394/0x4cc [ 202.844466][ T27] path_lookupat+0x13c/0x3d0 [ 202.849310][ T27] filename_lookup+0x1c4/0x4c8 [ 202.855250][ T27] user_path_at_empty+0x5c/0x1a4 [ 202.860541][ T27] __arm64_sys_mount+0x4dc/0x5e0 [ 202.865397][ T27] invoke_syscall+0x98/0x2b8 [ 202.871374][ T27] el0_svc_common+0x138/0x258 [ 202.876025][ T27] do_el0_svc+0x58/0x14c [ 202.880768][ T27] el0_svc+0x7c/0x1f0 [ 202.884232][ T27] el0t_64_sync_handler+0x84/0xe4 [ 202.891302][ T27] el0t_64_sync+0x1a0/0x1a4 [ 202.894992][ T27] INFO: task syz.0.164:4557 blocked for more than 143 seconds. [ 202.903959][ T27] Not tainted 5.15.161-syzkaller #0 [ 202.911330][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 202.920635][ T27] task:syz.0.164 state:D stack: 0 pid: 4557 ppid: 3976 flags:0x00000001 [ 202.928141][ T27] Call trace: [ 202.932547][ T27] __switch_to+0x308/0x5e8 [ 202.938281][ T27] __schedule+0xf10/0x1e48 [ 202.941868][ T27] schedule+0x11c/0x1c8 [ 202.946564][ T27] schedule_preempt_disabled+0x18/0x2c [ 202.953865][ T27] rwsem_down_read_slowpath+0x5b0/0x988 [ 202.958557][ T27] down_read+0x10c/0x398 [ 202.963234][ T27] lookup_slow+0x50/0x84 [ 202.966674][ T27] walk_component+0x394/0x4cc [ 202.972618][ T27] path_lookupat+0x13c/0x3d0 [ 202.978533][ T27] filename_lookup+0x1c4/0x4c8 [ 202.983463][ T27] user_path_at_empty+0x5c/0x1a4 [ 202.988369][ T27] __arm64_sys_chdir+0xc0/0x2d0 [ 202.994283][ T27] invoke_syscall+0x98/0x2b8 [ 202.997878][ T27] el0_svc_common+0x138/0x258 [ 203.004970][ T27] do_el0_svc+0x58/0x14c [ 203.009829][ T27] el0_svc+0x7c/0x1f0 [ 203.013473][ T27] el0t_64_sync_handler+0x84/0xe4 [ 203.019589][ T27] el0t_64_sync+0x1a0/0x1a4 [ 203.023291][ T27] [ 203.023291][ T27] Showing all locks held in the system: [ 203.031417][ T27] 1 lock held by khungtaskd/27: [ 203.037371][ T27] #0: ffff800014b214a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 203.046360][ T27] 2 locks held by getty/3735: [ 203.051695][ T27] #0: ffff0000d29dc098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 203.064554][ T27] #1: ffff80001a32e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 203.074265][ T27] 2 locks held by syz.0.164/4538: [ 203.081487][ T27] 1 lock held by syz.0.164/4551: [ 203.085347][ T27] #0: ffff0000e08fc188 (&type->i_mutex_dir_key#20){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 [ 203.096557][ T27] 1 lock held by syz.0.164/4557: [ 203.101409][ T27] #0: ffff0000e08fc188 (&type->i_mutex_dir_key#20){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 [ 203.113348][ T27] 3 locks held by kworker/u4:9/5114: [ 203.118413][ T27] 1 lock held by syz-executor/6709: [ 203.125069][ T27] 3 locks held by syz.1.1020/7364: [ 203.131118][ T27] 3 locks held by syz.2.1023/7373: [ 203.134926][ T27] 1 lock held by syz.4.1021/7369: [ 203.141283][ T27] #0: ffff0000d5b98118 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x15c/0x2b4 [ 203.150614][ T27] 2 locks held by syz.4.1021/7371: [ 203.155474][ T27] 2 locks held by syz.3.1025/7379: [ 203.161781][ T27] [ 203.162443][ T27] ============================================= [ 203.162443][ T27] [ 203.174171][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 203.175920][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0 [ 203.177957][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 203.180504][ T27] Call trace: [ 203.181348][ T27] dump_backtrace+0x0/0x530 [ 203.182476][ T27] show_stack+0x2c/0x3c [ 203.183518][ T27] dump_stack_lvl+0x108/0x170 [ 203.184727][ T27] dump_stack+0x1c/0x58 [ 203.185774][ T27] panic+0x304/0x8bc [ 203.186779][ T27] hung_task_panic+0x0/0x2c [ 203.187996][ T27] kthread+0x37c/0x45c [ 203.189034][ T27] ret_from_fork+0x10/0x20 [ 203.190181][ T27] SMP: stopping secondary CPUs [ 203.191402][ T27] Kernel Offset: disabled [ 203.192506][ T27] CPU features: 0x0,000081c1,21302e40 [ 203.193891][ T27] Memory Limit: none [ 203.861637][ T27] Rebooting in 86400 seconds..