last executing test programs: 9.878980804s ago: executing program 3: keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x0, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8.712411377s ago: executing program 3: mlockall(0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$TCXONC(r0, 0x8901, 0x0) 8.635476959s ago: executing program 3: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.102030112s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.933006888s ago: executing program 3: getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000003c0)=0x100) 4.804353578s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8080) sendto$inet6(r2, 0x0, 0x0, 0x8001, &(0x7f0000000180)={0xa, 0x4e21, 0x401, @loopback, 0x1}, 0x1c) 4.590196142s ago: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="cbee2d384c481d0bcc39e8d07a8d03b92125273d360a19a1097e582efac41c17f9cfdf8a124bf22729380223770102324fb4ac5c7141c40c12c8680abefc2b08027eeda006f821d781481ad9abe0c0e77e26d78e377a77e18172d3caedb14c35b58b2b9b8666434990dd585928dfafe2b38885e9b3c67621fdba1ec698deadacf191cd1b61a27c1304538d984d467625afbffa4524be53a65ef546a4338de957042c14435a4591b1680e3cc61e", 0xad}, {&(0x7f0000000340)="9e47fcae4a33fe11c4f70c612ee6205c8dbfe793d242266689e9a368e987aab7117247781b53681570723d6a9cb34199a6eb8d7a175d41b8b98f73c824a793d4bac22bd6e21f63dffb097515cda1a42e62fcf7575968bb9921a1899d3b22fb3eebb7b1ff0fd607e9706ad3963632eaefae1d07307a", 0x75}, {&(0x7f00000003c0)="308f2b9f14b61da366f36fdb880ea324e19520e89c819040a56daa2b9df9e308f779b7441d90f89831fa2a3c7b80d4d92d8e0cd308a8186ace5d4b0757323ba042b95c1b05b4129bb994876b326abae11c865cf0066f73c146cdc064fe2f437d6dd3a19c862c13f31a10799d192126e0196f5aa4d9", 0x75}, {&(0x7f00000001c0)="ad9ffbafc77531e018cd6b66db1d47952539f62d458d34b8c37573164529b8f6bf935ffc726038b95d310fad70e73b4c07e3518285845e4658e7ab", 0x3b}, {&(0x7f00000004c0)="0ec0ab6b97996fad650d0997baf2dd0198c96cec0e0c3f473d99678ecfab07e6819a36b1af8baa7322bb92c8b905862e70fc5273d59516be4b5d619ab7c1bd278e0f112ed597b08dcfda", 0x4a}], 0x5, &(0x7f0000000980)=[{0x70, 0x119, 0x5, "fa743957e512f4e27d2ef6ae66e7667831a1c22efec8a9d05c30885df7658473ed1fe06f28370837e561f9f9617d67be5b4a2bdf704526fceb8275675d35efffcd30f5de5f3c5bfbdd65f0d9a7f4e3fbbddac5c0090ab912f01532676579cb83"}, {0x40, 0x116, 0xffffffe2, "3e56b352ec9858182852fc2051d47c9489d7c4961ccf9bf6f40b6b7f447d12c2e88135737cf7a78c1d93"}, {0x1010, 0x119, 0x10001, "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"}], 0x10c0}, 0x8041) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/71, 0x47}], 0x1}}], 0x1, 0x0, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @broadcast}, 0x354}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='batadv_slave_1\x00', 0x0, 0x2}) 4.223284919s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 4.098832058s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8480a0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x14}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0xb4, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_AF_SPEC={0x7c}]}, 0xb4}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd3b5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x10, 0x86, 0x2000}, 0x10, 0x6efd, r2, 0x4, 0x0, &(0x7f0000000140)=[{0x2, 0x1, 0x2, 0xb}, {0x0, 0x5, 0xd, 0x9}, {0x5, 0x1, 0xf, 0x5}, {0x3, 0x1, 0xe, 0x1}], 0x10, 0x20}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eabdac5a3619b2c"}, 0x5}}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0xe) close(r8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) socket$nl_route(0x10, 0x3, 0x0) 3.618189354s ago: executing program 1: r0 = socket$inet6(0xa, 0x80801, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8903, &(0x7f00000001c0)={@mcast1}) 3.476738536s ago: executing program 1: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.323570556s ago: executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x5452, &(0x7f00000000c0)) 2.182146478s ago: executing program 0: getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000003c0)=0x100) 2.055689928s ago: executing program 0: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x2, 0x0) 1.836802522s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) unshare(0x68060200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}}) 989.026305ms ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) connect$inet(r5, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) r6 = creat(&(0x7f0000004040)='./file0\x00', 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) fallocate(r6, 0x0, 0x0, 0x8120003) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fchmodat(r7, &(0x7f0000000200)='./file0\x00', 0x0) 885.546541ms ago: executing program 4: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = memfd_create(&(0x7f0000000300)='c\x9c\\\xd4\xa4-K\x98.\x89|K\x9b\xf6\x05\x01\x00\xe1\x0eB\x13\xb7\xc9\xcc\x8c\xacn(sN\xe4\xfb?\xc0\xd0\"P`\n\x02\x00\x00\x00\x8f\x97\xac\x8cP\x01\xa0ez3\'\x02m\xe9\xa8[\v\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x89j\x10\xaf\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x88C\x81\x85\x01P\xd1^=\xc2\xbaI\x90\xd7\xe1|u_\xf4\r\xe4\xd4\xc6+\xfc\x9e\x17\x97E\'\x93/!2RN\x81t\xc7f\x8f\b\t\n0H\x03\x96\nUF\xdb\xa2\x00\x00\x00\x00\x00\xbe=\x1e%y\xb8\xb2\x90\xbaw\x87\xd7\x8f\xce\xa3\x98(\xd3\xbah\xb6<\xfd\xb6\xf4\xd3\xd4\x8b\xf2\xbfLBZ\x1ar\r\xa0\x9f\x92\x8d\xae\xce\xe8\xeb\xe5\x14\xbf\xb5\xee\x94C3\xa7\xb0\x82>\xe7\x06*\xa2\xf9\xa2\xc6u\x81\x9e(\xf6\xf9\xdb\xee\xe21\xa1\xec4\r\xbc GW\xb5\xea\xee\xad\xe6+\xdcC\xd6\'+5\xcaP\x8a\xac3\xbe\xda`\x01\x00\xb0\xf5E=\xaf\x92\x91\xff\xf2\x88\xa0\xdfral[\x10\xb3$\xa2Q\x04X\xbc\\\x86n\xdcKe\x86V;Cc\x18\xae\x15\xcb\x9d\x88\xd2\x97\xf7\xe1t\x10\x82\x96\x93\v\xdf\xdd\xc4Vz\xd5\f\xa4\xf0\xc4\xfc\xfc\xf9)\xfc\xdc8/\x9b\x1c\x14\x10\xe4\x80&S\x95\x89M,\x97jG\xebb\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae3\xde\aB\xcd1\x99\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x7f\x8f=\xad\xf7\xcdra\x8a\xb9\xb3m\x90\xad\xd68\x8d\x92\bJ${-\xac\xcc%dV\xd1\xbbU\xf8\xee\x0ek\xd0\x84X9\xb7MPv8\xd7,Cb\xae3\xbe\xd5\x10}F\b\x0fR\xe3\x19', 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x80000000) syz_open_procfs(0x0, &(0x7f0000003080)='cmdline\x00') 780.077308ms ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/87, 0x57}], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r2, 0x0) rt_sigreturn() socketpair$unix(0x1, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r1, 0x0, 0x0) gettid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = epoll_create1(0x0) epoll_pwait2(r5, &(0x7f00000000c0)=[{}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='D', 0x1}], 0x1, 0x0, 0x0, 0x4000001}, 0x8000) rt_sigreturn() clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {r7, r8+60000000}}, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a002, 0xa0) recvmmsg(r6, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x18}, 0x18) close(r3) 736.572174ms ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) r3 = creat(&(0x7f0000004040)='./file0\x00', 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) fallocate(r3, 0x0, 0x0, 0x8120003) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fchmodat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 639.12383ms ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r0 = eventfd(0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000060c0)=ANY=[@ANYBLOB="7f454c46000000eb"], 0x58) write$binfmt_misc(r0, &(0x7f0000006180)=ANY=[@ANYBLOB="ff084dfff3ff556a3de89882fcacae"], 0x8) r1 = memfd_create(&(0x7f0000000300)='c\x9c\\\xd4\xa4-K\x98.\x89|K\x9b\xf6\x05\x01\x00\xe1\x0eB\x13\xb7\xc9\xcc\x8c\xacn(sN\xe4\xfb?\xc0\xd0\"P`\n\x02\x00\x00\x00\x8f\x97\xac\x8cP\x01\xa0ez3\'\x02m\xe9\xa8[\v\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x89j\x10\xaf\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x88C\x81\x85\x01P\xd1^=\xc2\xbaI\x90\xd7\xe1|u_\xf4\r\xe4\xd4\xc6+\xfc\x9e\x17\x97E\'\x93/!2RN\x81t\xc7f\x8f\b\t\n0H\x03\x96\nUF\xdb\xa2\x00\x00\x00\x00\x00\xbe=\x1e%y\xb8\xb2\x90\xbaw\x87\xd7\x8f\xce\xa3\x98(\xd3\xbah\xb6<\xfd\xb6\xf4\xd3\xd4\x8b\xf2\xbfLBZ\x1ar\r\xa0\x9f\x92\x8d\xae\xce\xe8\xeb\xe5\x14\xbf\xb5\xee\x94C3\xa7\xb0\x82>\xe7\x06*\xa2\xf9\xa2\xc6u\x81\x9e(\xf6\xf9\xdb\xee\xe21\xa1\xec4\r\xbc GW\xb5\xea\xee\xad\xe6+\xdcC\xd6\'+5\xcaP\x8a\xac3\xbe\xda`\x01\x00\xb0\xf5E=\xaf\x92\x91\xff\xf2\x88\xa0\xdfral[\x10\xb3$\xa2Q\x04X\xbc\\\x86n\xdcKe\x86V;Cc\x18\xae\x15\xcb\x9d\x88\xd2\x97\xf7\xe1t\x10\x82\x96\x93\v\xdf\xdd\xc4Vz\xd5\f\xa4\xf0\xc4\xfc\xfc\xf9)\xfc\xdc8/\x9b\x1c\x14\x10\xe4\x80&S\x95\x89M,\x97jG\xebb\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae3\xde\aB\xcd1\x99\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x7f\x8f=\xad\xf7\xcdra\x8a\xb9\xb3m\x90\xad\xd68\x8d\x92\bJ${-\xac\xcc%dV\xd1\xbbU\xf8\xee\x0ek\xd0\x84X9\xb7MPv8\xd7,Cb\xae3\xbe\xd5\x10}F\b\x0fR\xe3\x19', 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x1) sendfile(r1, r1, &(0x7f0000000140), 0x80000000) 600.211136ms ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/dmi', 0x400000, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r4) rt_sigreturn() socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000006780)=@abs, 0x6e) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {r5}}, 0x0) socket(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$TIOCGRS485(0xffffffffffffffff, 0x5451, 0x0) msgget$private(0x0, 0x0) 553.868794ms ago: executing program 4: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") rt_sigreturn() r0 = memfd_create(&(0x7f0000000300)='c\x9c\\\xd4\xa4-K\x98.\x89|K\x9b\xf6\x05\x01\x00\xe1\x0eB\x13\xb7\xc9\xcc\x8c\xacn(sN\xe4\xfb?\xc0\xd0\"P`\n\x02\x00\x00\x00\x8f\x97\xac\x8cP\x01\xa0ez3\'\x02m\xe9\xa8[\v\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x89j\x10\xaf\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x88C\x81\x85\x01P\xd1^=\xc2\xbaI\x90\xd7\xe1|u_\xf4\r\xe4\xd4\xc6+\xfc\x9e\x17\x97E\'\x93/!2RN\x81t\xc7f\x8f\b\t\n0H\x03\x96\nUF\xdb\xa2\x00\x00\x00\x00\x00\xbe=\x1e%y\xb8\xb2\x90\xbaw\x87\xd7\x8f\xce\xa3\x98(\xd3\xbah\xb6<\xfd\xb6\xf4\xd3\xd4\x8b\xf2\xbfLBZ\x1ar\r\xa0\x9f\x92\x8d\xae\xce\xe8\xeb\xe5\x14\xbf\xb5\xee\x94C3\xa7\xb0\x82>\xe7\x06*\xa2\xf9\xa2\xc6u\x81\x9e(\xf6\xf9\xdb\xee\xe21\xa1\xec4\r\xbc GW\xb5\xea\xee\xad\xe6+\xdcC\xd6\'+5\xcaP\x8a\xac3\xbe\xda`\x01\x00\xb0\xf5E=\xaf\x92\x91\xff\xf2\x88\xa0\xdfral[\x10\xb3$\xa2Q\x04X\xbc\\\x86n\xdcKe\x86V;Cc\x18\xae\x15\xcb\x9d\x88\xd2\x97\xf7\xe1t\x10\x82\x96\x93\v\xdf\xdd\xc4Vz\xd5\f\xa4\xf0\xc4\xfc\xfc\xf9)\xfc\xdc8/\x9b\x1c\x14\x10\xe4\x80&S\x95\x89M,\x97jG\xebb\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae3\xde\aB\xcd1\x99\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x7f\x8f=\xad\xf7\xcdra\x8a\xb9\xb3m\x90\xad\xd68\x8d\x92\bJ${-\xac\xcc%dV\xd1\xbbU\xf8\xee\x0ek\xd0\x84X9\xb7MPv8\xd7,Cb\xae3\xbe\xd5\x10}F\b\x0fR\xe3\x19', 0x0) futex(&(0x7f0000000700), 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000340)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000000)) close_range(r2, r2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x80000000) 433.928522ms ago: executing program 1: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r1) r2 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r3) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) inotify_init() 432.993712ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) rt_sigreturn() futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r4) rt_sigreturn() ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x5451, 0x0) dup(0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000006) ftruncate(0xffffffffffffffff, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 360.394394ms ago: executing program 4: r0 = inotify_init1(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x1}) fcntl$setstatus(r0, 0x7, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) r3 = socket$inet(0x2, 0x80000, 0x0) dup2(r3, 0xffffffffffffffff) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@dev, @multicast1, @broadcast}, &(0x7f0000000080)=0xc) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$TUNATTACHFILTER(r6, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r7) r8 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r8, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r9) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETA(r2, 0x5451, 0x0) 262.624949ms ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0xfffffe00}, 0x0) r3 = creat(&(0x7f0000004040)='./file0\x00', 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) fallocate(r3, 0x0, 0x0, 0x8120003) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fchmodat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 190.24668ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b7040000000000008500000023"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) 43.607383ms ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 6.789739ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001f4a46d4850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d000000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 0s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) kernel console output (not intermixed with test programs): batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.105742][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.125090][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.166699][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.196165][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.209715][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.210392][ T3579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.229995][ T3579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.239627][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.239989][ T3579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.273702][ T3579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.297985][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.353232][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.361479][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.420875][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.535072][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.556635][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.611758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.621614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.631588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.639859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.648233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.656565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.664856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 62.673141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.681570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.689842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.779042][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.782611][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.912685][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.965959][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.713900][ T48] Bluetooth: hci0: command tx timeout [ 63.719382][ T48] Bluetooth: hci2: command tx timeout [ 63.722731][ T3578] Bluetooth: hci3: command tx timeout [ 63.724842][ T3574] Bluetooth: hci4: command tx timeout [ 63.730140][ T3578] Bluetooth: hci1: command tx timeout [ 63.856915][ T3668] loop3: detected capacity change from 0 to 16 [ 63.893070][ T3668] erofs: (device loop3): mounted with root inode @ nid 36. [ 64.500706][ T3655] loop2: detected capacity change from 0 to 32768 [ 64.670360][ T3687] loop4: detected capacity change from 0 to 16 [ 64.690638][ T3655] XFS (loop2): Mounting V5 Filesystem [ 64.725852][ T3687] erofs: (device loop4): mounted with root inode @ nid 36. [ 64.935125][ T3655] XFS (loop2): Ending clean mount [ 65.215409][ T3670] loop0: detected capacity change from 0 to 32768 [ 66.140072][ T3670] ======================================================= [ 66.140072][ T3670] WARNING: The mand mount option has been deprecated and [ 66.140072][ T3670] and is ignored by this kernel. Remove the mand [ 66.140072][ T3670] option from the mount to silence this warning. [ 66.140072][ T3670] ======================================================= [ 66.260644][ T3670] XFS (loop0): Mounting V5 Filesystem [ 66.315446][ T3670] XFS (loop0): Ending clean mount [ 66.334100][ T3717] loop3: detected capacity change from 0 to 16 [ 66.350501][ T3670] XFS (loop0): Quotacheck needed: Please wait. [ 66.359871][ T3576] XFS (loop2): Unmounting Filesystem [ 66.368070][ T3717] erofs: (device loop3): mounted with root inode @ nid 36. [ 66.479617][ T3670] XFS (loop0): Quotacheck: Done. [ 66.635053][ T27] audit: type=1804 audit(1717485644.465:2): pid=3670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2701182588/syzkaller.uvXozQ/0/file0/bus" dev="loop0" ino=9292 res=1 errno=0 [ 66.989277][ T3730] loop1: detected capacity change from 0 to 16 [ 67.050324][ T3730] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.321438][ T3579] XFS (loop0): Unmounting Filesystem [ 68.315178][ T3752] loop0: detected capacity change from 0 to 512 [ 68.361288][ T3752] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.414498][ T3756] loop4: detected capacity change from 0 to 512 [ 68.459990][ T3752] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.0: inline data xattr refers to an external xattr inode [ 68.483488][ T3752] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 68.498326][ T3756] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.579368][ T3752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.589223][ T3762] loop2: detected capacity change from 0 to 16 [ 69.517744][ T3762] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.564204][ T3756] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 69.693004][ T3756] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 69.709986][ T3756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.759646][ T3579] EXT4-fs (loop0): unmounting filesystem. [ 69.808564][ T3735] loop1: detected capacity change from 0 to 32768 [ 69.864594][ T3566] EXT4-fs (loop4): unmounting filesystem. [ 70.345481][ T3735] XFS (loop1): Mounting V5 Filesystem [ 70.462853][ T3735] XFS (loop1): log mount failed [ 71.324955][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.343074][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.746429][ T3808] loop2: detected capacity change from 0 to 512 [ 72.824530][ T3808] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.873050][ T3808] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 72.912428][ T3808] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 72.939424][ T3808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.921170][ T3576] EXT4-fs (loop2): unmounting filesystem. [ 77.402187][ T3840] loop4: detected capacity change from 0 to 1024 [ 77.989825][ T155] cfg80211: failed to load regulatory.db [ 77.997372][ T3840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.916256][ T3859] loop4: detected capacity change from 0 to 512 [ 78.977844][ T3859] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.022263][ T3334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.154139][ T3862] loop1: detected capacity change from 0 to 1024 [ 79.196775][ T3862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.783108][ T3859] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 79.821008][ T3859] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 79.863008][ T3859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.104840][ T3566] EXT4-fs (loop4): unmounting filesystem. [ 80.122061][ T3334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.257367][ T3334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.445884][ T3334] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 80.691441][ T3334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.817549][ T3334] usb 4-1: config 0 descriptor?? [ 82.941817][ T3334] usbhid 4-1:0.0: can't add hid device: -71 [ 82.950739][ T3334] usbhid: probe of 4-1:0.0 failed with error -71 [ 83.031802][ T3334] usb 4-1: USB disconnect, device number 2 [ 85.076836][ T3910] loop1: detected capacity change from 0 to 16 [ 85.134997][ T3910] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.371474][ T3924] loop0: detected capacity change from 0 to 1024 [ 87.381444][ T3924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.428513][ T3934] sched: RT throttling activated [ 91.849425][ T155] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.970896][ T3968] loop3: detected capacity change from 0 to 1024 [ 93.763893][ T3969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 94.164255][ T3968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.111737][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.316507][ T3999] loop3: detected capacity change from 0 to 1024 [ 99.055947][ T155] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.064054][ T3999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.411771][ T22] usb 3-1: device descriptor read/all, error -71 [ 99.696770][ T4013] loop0: detected capacity change from 0 to 1024 [ 99.725536][ T4013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.408997][ T4015] loop2: detected capacity change from 0 to 1024 [ 100.416758][ T4015] hfsplus: unable to parse mount options [ 100.810161][ T4028] loop2: detected capacity change from 0 to 1024 [ 100.818687][ T4028] hfsplus: unable to parse mount options [ 100.829420][ T27] audit: type=1326 audit(1717485678.655:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4012 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x0 [ 101.198873][ T4038] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.031038][ T4062] loop1: detected capacity change from 0 to 1024 [ 102.118573][ T4062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.855550][ T27] audit: type=1800 audit(1717485680.685:4): pid=4065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 102.929979][ T27] audit: type=1800 audit(1717485680.685:5): pid=4065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 102.986864][ T27] audit: type=1800 audit(1717485680.685:6): pid=4065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1959 res=0 errno=0 [ 103.034287][ T27] audit: type=1800 audit(1717485680.685:7): pid=4065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1959 res=0 errno=0 [ 103.055388][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.987360][ T4099] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 104.753230][ T4102] Zero length message leads to an empty skb [ 104.785605][ T27] audit: type=1800 audit(1717485682.615:8): pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1956 res=0 errno=0 [ 104.806293][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.912038][ T27] audit: type=1800 audit(1717485682.615:9): pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1956 res=0 errno=0 [ 104.990906][ T27] audit: type=1800 audit(1717485682.645:10): pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1957 res=0 errno=0 [ 105.090876][ T27] audit: type=1800 audit(1717485682.645:11): pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1957 res=0 errno=0 [ 105.563315][ T4123] loop1: detected capacity change from 0 to 1024 [ 105.647787][ T4123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.781164][ T4112] loop4: detected capacity change from 0 to 32768 [ 106.706114][ T4112] XFS (loop4): Mounting V5 Filesystem [ 106.928572][ T4112] XFS (loop4): Ending clean mount [ 106.959334][ T4112] XFS (loop4): Quotacheck needed: Please wait. [ 107.034609][ T4145] loop2: detected capacity change from 0 to 1024 [ 107.041917][ T4145] hfsplus: unable to parse mount options [ 107.078524][ T4112] XFS (loop4): Quotacheck: Done. [ 107.087873][ T3558] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.821814][ T27] audit: type=1326 audit(1717485685.645:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x0 [ 108.402923][ T27] audit: type=1804 audit(1717485686.235:13): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir480172835/syzkaller.au6vkX/30/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 108.579860][ T27] audit: type=1800 audit(1717485686.405:14): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 108.608294][ T4156] loop3: detected capacity change from 0 to 16 [ 108.639828][ T4156] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.663671][ T27] audit: type=1800 audit(1717485686.405:15): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 108.758472][ T27] audit: type=1800 audit(1717485686.405:16): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1970 res=0 errno=0 [ 108.810025][ T3566] XFS (loop4): Unmounting Filesystem [ 108.883281][ T27] audit: type=1800 audit(1717485686.405:17): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1970 res=0 errno=0 [ 108.904162][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.472535][ T4170] loop0: detected capacity change from 0 to 256 [ 109.505127][ T4170] FAT-fs (loop0): Directory bread(block 64) failed [ 109.530099][ T4170] FAT-fs (loop0): Directory bread(block 65) failed [ 109.546422][ T4170] FAT-fs (loop0): Directory bread(block 66) failed [ 109.567376][ T4170] FAT-fs (loop0): Directory bread(block 67) failed [ 109.584706][ T4170] FAT-fs (loop0): Directory bread(block 68) failed [ 109.607205][ T4170] FAT-fs (loop0): Directory bread(block 69) failed [ 109.625623][ T4170] FAT-fs (loop0): Directory bread(block 70) failed [ 109.650168][ T4170] FAT-fs (loop0): Directory bread(block 71) failed [ 109.670822][ T4170] FAT-fs (loop0): Directory bread(block 72) failed [ 109.692541][ T4170] FAT-fs (loop0): Directory bread(block 73) failed [ 109.784649][ T4172] loop4: detected capacity change from 0 to 4096 [ 111.514558][ T4185] Bluetooth: MGMT ver 1.22 [ 111.979040][ T4194] loop2: detected capacity change from 0 to 1024 [ 111.986752][ T4194] hfsplus: unable to parse mount options [ 112.166756][ T4202] loop1: detected capacity change from 0 to 16 [ 112.173935][ T27] audit: type=1800 audit(1717485690.005:18): pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1951 res=0 errno=0 [ 112.197385][ T4204] loop3: detected capacity change from 0 to 256 [ 112.214957][ T4202] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.312670][ T4204] FAT-fs (loop3): Directory bread(block 64) failed [ 112.360254][ T27] audit: type=1800 audit(1717485690.005:19): pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1951 res=0 errno=0 [ 112.368783][ T4204] FAT-fs (loop3): Directory bread(block 65) failed [ 112.410035][ T4204] FAT-fs (loop3): Directory bread(block 66) failed [ 112.419139][ T4204] FAT-fs (loop3): Directory bread(block 67) failed [ 112.425947][ T4204] FAT-fs (loop3): Directory bread(block 68) failed [ 112.433722][ T4204] FAT-fs (loop3): Directory bread(block 69) failed [ 112.450338][ T4204] FAT-fs (loop3): Directory bread(block 70) failed [ 112.457161][ T4204] FAT-fs (loop3): Directory bread(block 71) failed [ 112.476074][ T4204] FAT-fs (loop3): Directory bread(block 72) failed [ 112.575446][ T4204] FAT-fs (loop3): Directory bread(block 73) failed [ 112.621194][ T27] audit: type=1800 audit(1717485690.005:20): pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1953 res=0 errno=0 [ 112.901061][ T27] audit: type=1800 audit(1717485690.005:21): pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1953 res=0 errno=0 [ 112.931603][ T27] audit: type=1326 audit(1717485690.175:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4193 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x0 [ 113.474787][ T4214] loop0: detected capacity change from 0 to 4096 [ 114.060430][ T4220] loop1: detected capacity change from 0 to 1024 [ 114.221963][ T4220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.436123][ T4207] loop4: detected capacity change from 0 to 32768 [ 114.548759][ T4207] XFS (loop4): Mounting V5 Filesystem [ 114.611805][ T4207] XFS (loop4): Ending clean mount [ 114.622773][ T4207] XFS (loop4): Quotacheck needed: Please wait. [ 114.675890][ T4207] XFS (loop4): Quotacheck: Done. [ 114.728818][ T27] audit: type=1804 audit(1717485692.555:23): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir480172835/syzkaller.au6vkX/34/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 114.818300][ T3566] XFS (loop4): Unmounting Filesystem [ 115.559841][ T4230] loop0: detected capacity change from 0 to 32768 [ 115.649065][ T4230] XFS (loop0): Mounting V5 Filesystem [ 115.653436][ T4256] loop3: detected capacity change from 0 to 16 [ 115.667056][ T3828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.080562][ T4266] loop1: detected capacity change from 0 to 256 [ 116.131025][ T4266] FAT-fs (loop1): Directory bread(block 64) failed [ 116.137931][ T4266] FAT-fs (loop1): Directory bread(block 65) failed [ 116.145218][ T4266] FAT-fs (loop1): Directory bread(block 66) failed [ 116.152286][ T4266] FAT-fs (loop1): Directory bread(block 67) failed [ 116.160153][ T4266] FAT-fs (loop1): Directory bread(block 68) failed [ 116.160252][ T4256] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.166778][ T4266] FAT-fs (loop1): Directory bread(block 69) failed [ 116.180821][ T4266] FAT-fs (loop1): Directory bread(block 70) failed [ 116.187781][ T4266] FAT-fs (loop1): Directory bread(block 71) failed [ 116.199679][ T4266] FAT-fs (loop1): Directory bread(block 72) failed [ 116.206607][ T4266] FAT-fs (loop1): Directory bread(block 73) failed [ 116.387160][ T4230] XFS (loop0): Ending clean mount [ 116.433468][ T4230] XFS (loop0): Quotacheck needed: Please wait. [ 116.732073][ T3828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.867963][ T3828] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.991122][ T3828] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 117.026353][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.072221][ T3828] usb 3-1: config 0 descriptor?? [ 117.094301][ T4230] XFS (loop0): Quotacheck: Done. [ 117.133732][ T3828] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 117.170939][ T4273] loop3: detected capacity change from 0 to 4096 [ 117.191801][ T27] audit: type=1804 audit(1717485695.025:24): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2701182588/syzkaller.uvXozQ/28/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 117.433780][ T3579] XFS (loop0): Unmounting Filesystem [ 117.504752][ T4286] loop1: detected capacity change from 0 to 1024 [ 117.513027][ T4286] hfsplus: unable to parse mount options [ 117.955130][ T3582] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.029926][ T4285] loop4: detected capacity change from 0 to 32768 [ 118.233460][ T4285] XFS (loop4): Mounting V5 Filesystem [ 118.263964][ T4299] loop3: detected capacity change from 0 to 16 [ 118.287543][ T4299] erofs: (device loop3): mounted with root inode @ nid 36. [ 118.481702][ T4285] XFS (loop4): Ending clean mount [ 118.490094][ T4285] XFS (loop4): Quotacheck needed: Please wait. [ 118.541037][ T4285] XFS (loop4): Quotacheck: Done. [ 118.922026][ T27] audit: type=1326 audit(1717485696.745:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb9fa7cf69 code=0x0 [ 119.440932][ T152] usb 3-1: USB disconnect, device number 5 [ 119.490571][ T27] audit: type=1804 audit(1717485697.315:26): pid=4285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir480172835/syzkaller.au6vkX/38/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 119.637352][ T3566] XFS (loop4): Unmounting Filesystem [ 119.708482][ T4319] loop2: detected capacity change from 0 to 16 [ 119.804761][ T4319] erofs: (device loop2): mounted with root inode @ nid 36. [ 119.921479][ T4323] loop0: detected capacity change from 0 to 1024 [ 119.928841][ T4323] hfsplus: unable to parse mount options [ 119.969882][ T3582] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.063824][ T4326] loop0: detected capacity change from 0 to 1024 [ 122.072692][ T4326] hfsplus: unable to parse mount options [ 122.101324][ T27] audit: type=1326 audit(1717485699.925:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 122.151957][ T4330] loop2: detected capacity change from 0 to 1024 [ 122.159329][ T4330] hfsplus: unable to parse mount options [ 122.213740][ T3558] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.624464][ T4333] loop2: detected capacity change from 0 to 1024 [ 122.818395][ T27] audit: type=1326 audit(1717485700.645:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x0 [ 123.209998][ T4333] hfsplus: xattr searching failed [ 123.273311][ T27] audit: type=1326 audit(1717485701.105:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 123.301496][ T4331] loop1: detected capacity change from 0 to 4096 [ 123.399854][ T4332] hfsplus: xattr search failed [ 123.423975][ T27] audit: type=1326 audit(1717485701.135:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 123.538943][ T27] audit: type=1326 audit(1717485701.145:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 123.619259][ T27] audit: type=1326 audit(1717485701.155:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 123.649788][ T27] audit: type=1326 audit(1717485701.165:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 123.739436][ T27] audit: type=1326 audit(1717485701.185:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 123.787068][ T4350] loop2: detected capacity change from 0 to 1024 [ 123.795295][ T4350] hfsplus: unable to parse mount options [ 124.422041][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 124.422056][ T27] audit: type=1326 audit(1717485701.765:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 124.506218][ T4353] loop2: detected capacity change from 0 to 1024 [ 124.515173][ T4353] hfsplus: unable to parse mount options [ 124.561770][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.564167][ T3582] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.586758][ T27] audit: type=1326 audit(1717485702.415:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x0 [ 124.810121][ T4364] loop3: detected capacity change from 0 to 16 [ 124.953325][ T4364] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.057254][ T4369] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 125.730348][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.742733][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.773983][ T22] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 125.804770][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.819104][ T4366] loop4: detected capacity change from 0 to 1024 [ 125.830594][ T22] usb 1-1: config 0 descriptor?? [ 126.013900][ T4366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.369528][ T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 126.401983][ T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 126.444691][ T22] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 126.571436][ T22] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 126.634568][ T22] usb 1-1: USB disconnect, device number 3 [ 126.760299][ T4368] loop2: detected capacity change from 0 to 32768 [ 126.854546][ T4368] XFS (loop2): Mounting V5 Filesystem [ 126.914048][ T4368] XFS (loop2): Ending clean mount [ 126.921038][ T4368] XFS (loop2): Quotacheck needed: Please wait. [ 126.953950][ T4368] XFS (loop2): Quotacheck: Done. [ 127.061200][ T27] audit: type=1804 audit(1717485704.885:57): pid=4368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4223632386/syzkaller.ICO7xY/43/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 127.149432][ T3576] XFS (loop2): Unmounting Filesystem [ 127.447558][ T4392] loop1: detected capacity change from 0 to 1024 [ 127.529845][ T4392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.569305][ T4394] loop0: detected capacity change from 0 to 4096 [ 128.363735][ T27] audit: type=1326 audit(1717485706.195:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738187cf69 code=0x7fc00000 [ 128.535971][ T4407] loop4: detected capacity change from 0 to 256 [ 128.610521][ T4407] FAT-fs (loop4): Directory bread(block 64) failed [ 128.618624][ T4407] FAT-fs (loop4): Directory bread(block 65) failed [ 128.672003][ T4407] FAT-fs (loop4): Directory bread(block 66) failed [ 128.678663][ T4407] FAT-fs (loop4): Directory bread(block 67) failed [ 128.697682][ T4411] loop0: detected capacity change from 0 to 16 [ 128.701847][ T4407] FAT-fs (loop4): Directory bread(block 68) failed [ 128.722384][ T4407] FAT-fs (loop4): Directory bread(block 69) failed [ 128.733759][ T4407] FAT-fs (loop4): Directory bread(block 70) failed [ 128.740430][ T4411] erofs: (device loop0): mounted with root inode @ nid 36. [ 128.754042][ T4407] FAT-fs (loop4): Directory bread(block 71) failed [ 128.769984][ T4413] loop3: detected capacity change from 0 to 1024 [ 128.777157][ T4413] hfsplus: unable to parse mount options [ 128.792412][ T4407] FAT-fs (loop4): Directory bread(block 72) failed [ 128.809142][ T4407] FAT-fs (loop4): Directory bread(block 73) failed [ 130.976114][ T4415] loop3: detected capacity change from 0 to 1024 [ 132.212738][ T27] audit: type=1326 audit(1717485709.635:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x0 [ 132.510091][ T4420] loop0: detected capacity change from 0 to 4096 [ 132.772988][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.779331][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371646][ T27] audit: type=1326 audit(1717485711.195:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 133.834248][ T4449] loop0: detected capacity change from 0 to 16 [ 133.870067][ T4449] erofs: (device loop0): mounted with root inode @ nid 36. [ 134.111205][ T4432] loop1: detected capacity change from 0 to 32768 [ 134.327058][ T4432] XFS (loop1): Mounting V5 Filesystem [ 134.466030][ T4432] XFS (loop1): Ending clean mount [ 134.474520][ T4432] XFS (loop1): Quotacheck needed: Please wait. [ 134.515682][ T4432] XFS (loop1): Quotacheck: Done. [ 134.626338][ T27] audit: type=1804 audit(1717485712.455:61): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3894974527/syzkaller.n6XYkQ/46/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 134.763195][ T3570] XFS (loop1): Unmounting Filesystem [ 135.020058][ T4480] loop4: detected capacity change from 0 to 4096 [ 135.137536][ T4487] loop1: detected capacity change from 0 to 1024 [ 135.145407][ T4487] hfsplus: unable to parse mount options [ 135.197305][ T3582] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.124183][ T4489] loop1: detected capacity change from 0 to 1024 [ 136.136028][ T4489] hfsplus: unable to parse mount options [ 136.159580][ T27] audit: type=1326 audit(1717485713.985:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb9fa7cf69 code=0x0 [ 137.034445][ T4492] loop3: detected capacity change from 0 to 4096 [ 137.782852][ T27] audit: type=1326 audit(1717485715.615:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 137.843163][ T27] audit: type=1326 audit(1717485715.615:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 137.939606][ T27] audit: type=1326 audit(1717485715.645:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 138.046387][ T27] audit: type=1326 audit(1717485715.645:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 138.135581][ T4509] loop3: detected capacity change from 0 to 1024 [ 138.142855][ T4509] hfsplus: unable to parse mount options [ 138.163128][ T27] audit: type=1326 audit(1717485715.645:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 138.234608][ T3582] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.358903][ T27] audit: type=1326 audit(1717485715.645:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 138.480968][ T27] audit: type=1326 audit(1717485715.655:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 138.577315][ T27] audit: type=1326 audit(1717485715.655:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 139.135511][ T4523] loop3: detected capacity change from 0 to 1024 [ 139.152110][ T4523] hfsplus: unable to parse mount options [ 139.165007][ T4528] loop1: detected capacity change from 0 to 1024 [ 139.172289][ T4528] hfsplus: unable to parse mount options [ 139.254644][ T3558] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.277174][ T27] audit: type=1326 audit(1717485717.105:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x0 [ 139.774271][ T4530] loop1: detected capacity change from 0 to 1024 [ 139.785677][ T4530] hfsplus: unable to parse mount options [ 139.855933][ T27] audit: type=1326 audit(1717485717.635:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb9fa7cf69 code=0x0 [ 140.583897][ T4515] loop4: detected capacity change from 0 to 32768 [ 140.676297][ T4515] XFS (loop4): Mounting V5 Filesystem [ 140.724362][ T4543] loop1: detected capacity change from 0 to 4096 [ 140.756582][ T4536] loop0: detected capacity change from 0 to 4096 [ 140.831841][ T4515] XFS (loop4): Ending clean mount [ 140.863518][ T4515] XFS (loop4): Quotacheck needed: Please wait. [ 140.971145][ T4515] XFS (loop4): Quotacheck: Done. [ 141.391327][ T3566] XFS (loop4): Unmounting Filesystem [ 142.504235][ T4574] loop4: detected capacity change from 0 to 1024 [ 142.512296][ T4574] hfsplus: unable to parse mount options [ 142.583960][ T3582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.160850][ T4579] loop4: detected capacity change from 0 to 1024 [ 143.171620][ T4579] hfsplus: unable to parse mount options [ 143.769006][ T4573] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 143.830760][ T4573] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 144.399036][ T4583] loop0: detected capacity change from 0 to 1024 [ 144.406273][ T4583] hfsplus: unable to parse mount options [ 144.466300][ T3582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.482307][ T4585] loop3: detected capacity change from 0 to 1024 [ 144.489370][ T4585] hfsplus: unable to parse mount options [ 144.609317][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 144.609332][ T27] audit: type=1326 audit(1717485722.435:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4571 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f738187cf69 code=0x0 [ 146.161882][ T4587] loop0: detected capacity change from 0 to 1024 [ 147.940937][ T4590] loop3: detected capacity change from 0 to 1024 [ 147.951192][ T4590] hfsplus: unable to parse mount options [ 148.379405][ T4586] hfsplus: xattr searching failed [ 149.386989][ T27] audit: type=1326 audit(1717485725.935:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 150.399355][ T4596] loop1: detected capacity change from 0 to 4096 [ 150.516300][ T4610] loop3: detected capacity change from 0 to 1024 [ 150.523689][ T4610] hfsplus: unable to parse mount options [ 150.533957][ T3566] syz-executor.4 (3566) used greatest stack depth: 20152 bytes left [ 150.738490][ T3677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.968321][ T3677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.172756][ T4622] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.881467][ T3677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.375137][ T3578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.385493][ T3578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.397340][ T3578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.411440][ T3578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.422025][ T3578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.430045][ T3578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.518547][ T3677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.582503][ T4619] loop3: detected capacity change from 0 to 1024 [ 153.639711][ T4619] hfsplus: unable to parse mount options [ 153.656533][ T27] audit: type=1326 audit(1717485731.485:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4629 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7fc00000 [ 153.925658][ T27] audit: type=1326 audit(1717485731.665:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x0 [ 155.483050][ T3571] Bluetooth: hci0: command tx timeout [ 155.503481][ T4641] loop0: detected capacity change from 0 to 1024 [ 155.522307][ T4641] hfsplus: unable to parse mount options [ 156.008270][ T4643] loop0: detected capacity change from 0 to 1024 [ 156.042329][ T27] audit: type=1326 audit(1717485733.865:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 156.655949][ T4649] loop2: detected capacity change from 0 to 16 [ 156.684621][ T4649] erofs: (device loop2): mounted with root inode @ nid 36. [ 156.747613][ T4625] chnl_net:caif_netlink_parms(): no params data found [ 157.645653][ T3571] Bluetooth: hci0: command tx timeout [ 157.783841][ T4661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 159.008809][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.022506][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.064697][ T4625] device bridge_slave_0 entered promiscuous mode [ 159.104380][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.123087][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.166345][ T4625] device bridge_slave_1 entered promiscuous mode [ 159.291010][ T4625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.341884][ T4625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.582407][ T4685] loop0: detected capacity change from 0 to 4096 [ 159.661511][ T4625] team0: Port device team_slave_0 added [ 159.781025][ T4695] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 159.802977][ T3571] Bluetooth: hci0: command tx timeout [ 160.268788][ T4625] team0: Port device team_slave_1 added [ 160.476777][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.483948][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.519617][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.558173][ T4625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.617382][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.628210][ T4699] loop1: detected capacity change from 0 to 1024 [ 160.635477][ T4699] hfsplus: unable to parse mount options [ 160.657457][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.781747][ T4625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.797746][ T27] audit: type=1326 audit(1717485738.625:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 161.272985][ T14] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 161.307756][ T4704] loop1: detected capacity change from 0 to 1024 [ 161.372414][ T27] audit: type=1326 audit(1717485739.175:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb9fa7cf69 code=0x0 [ 161.466656][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.612856][ T14] usb 3-1: config 0 descriptor?? [ 161.691507][ T4625] device hsr_slave_0 entered promiscuous mode [ 161.733016][ T4625] device hsr_slave_1 entered promiscuous mode [ 161.754926][ T4625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.779954][ T4625] Cannot create hsr debugfs directory [ 161.881700][ T3578] Bluetooth: hci0: command tx timeout [ 161.957791][ T3677] device hsr_slave_0 left promiscuous mode [ 161.979108][ T3677] device hsr_slave_1 left promiscuous mode [ 162.015719][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.126120][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.147868][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.161662][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.182100][ T3677] device bridge_slave_1 left promiscuous mode [ 162.189812][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.762175][ T14] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 162.782158][ T14] asix: probe of 3-1:0.0 failed with error -71 [ 162.912185][ T4714] loop1: detected capacity change from 0 to 1024 [ 162.923042][ T4714] hfsplus: unable to parse mount options [ 162.988607][ T3677] device bridge_slave_0 left promiscuous mode [ 163.024003][ T14] usb 3-1: USB disconnect, device number 6 [ 163.073761][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.159723][ T27] audit: type=1326 audit(1717485740.985:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb9fa7cf69 code=0x0 [ 163.539946][ T3677] device veth1_macvtap left promiscuous mode [ 163.571919][ T3677] device veth0_macvtap left promiscuous mode [ 163.619030][ T3677] device veth1_vlan left promiscuous mode [ 163.691967][ T3677] device veth0_vlan left promiscuous mode [ 163.914634][ T4725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 165.447937][ T3677] team0 (unregistering): Port device team_slave_1 removed [ 165.485953][ T3677] team0 (unregistering): Port device team_slave_0 removed [ 165.529599][ T3677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.552202][ T3677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.766799][ T3677] bond0 (unregistering): Released all slaves [ 165.822136][ T4755] loop1: detected capacity change from 0 to 4096 [ 169.551806][ T4769] loop0: detected capacity change from 0 to 1024 [ 169.561379][ T4769] hfsplus: unable to parse mount options [ 169.666750][ T27] audit: type=1326 audit(1717485747.495:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 171.403142][ T4779] loop0: detected capacity change from 0 to 512 [ 171.466666][ T4779] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.523930][ T4625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.537641][ T4779] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 171.575051][ T4625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.596858][ T4779] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 171.610803][ T27] audit: type=1326 audit(1717485749.445:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 171.637582][ T4797] loop1: detected capacity change from 0 to 1024 [ 171.644965][ T4797] hfsplus: unable to parse mount options [ 171.663873][ T4625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.803152][ T4625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.156964][ T4799] loop1: detected capacity change from 0 to 1024 [ 172.689228][ T4779] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 172.759843][ T4779] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 172.854198][ T4625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.888283][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.905798][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.305071][ T4625] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.562750][ T4779] EXT4-fs (loop0): Remounting filesystem read-only [ 175.569511][ T4779] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 175.588659][ T4779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.656787][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.718308][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.737778][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.745930][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.777892][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.810009][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.847217][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.854420][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.305032][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.452314][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.488161][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.516551][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.534254][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.579865][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.596475][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.613806][ T4819] loop3: detected capacity change from 0 to 1024 [ 177.620984][ T4819] hfsplus: unable to parse mount options [ 177.639719][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.655084][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.675837][ T4625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.698837][ T3582] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.856139][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.874726][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.222392][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.230959][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.327348][ T4821] loop3: detected capacity change from 0 to 1024 [ 178.337075][ T4821] hfsplus: unable to parse mount options [ 179.732481][ T3579] EXT4-fs (loop0): unmounting filesystem. [ 179.777701][ T27] audit: type=1326 audit(1717485757.605:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x0 [ 179.949058][ T4827] loop1: detected capacity change from 0 to 4096 [ 180.411816][ T4844] loop0: detected capacity change from 0 to 1024 [ 180.419405][ T4844] hfsplus: unable to parse mount options [ 181.330707][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.378866][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.448311][ T4625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.711883][ T4851] loop0: detected capacity change from 0 to 1024 [ 181.720037][ T4851] hfsplus: unable to parse mount options [ 181.734109][ T3574] Bluetooth: hci3: command 0x0406 tx timeout [ 181.734151][ T3578] Bluetooth: hci4: command 0x0406 tx timeout [ 181.734181][ T3571] Bluetooth: hci1: command 0x0406 tx timeout [ 181.995298][ T27] audit: type=1326 audit(1717485759.825:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 182.259879][ T27] audit: type=1326 audit(1717485759.855:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7fc00000 [ 185.547990][ T4894] loop2: detected capacity change from 0 to 1024 [ 185.555201][ T4894] hfsplus: unable to parse mount options [ 185.614322][ T3582] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.663914][ T4896] loop0: detected capacity change from 0 to 64 [ 185.781058][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.836720][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.972997][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.025504][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.070082][ T4903] loop0: detected capacity change from 0 to 1024 [ 186.077654][ T4903] hfsplus: unable to parse mount options [ 186.230564][ T4625] device veth0_vlan entered promiscuous mode [ 186.239772][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.257230][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.274785][ T4625] device veth1_vlan entered promiscuous mode [ 186.581612][ T4907] loop0: detected capacity change from 0 to 1024 [ 186.589310][ T4907] hfsplus: unable to parse mount options [ 187.176522][ T3582] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.211636][ T27] audit: type=1326 audit(1717485765.035:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 187.252312][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.276567][ T4905] loop3: detected capacity change from 0 to 4096 [ 187.416179][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.502998][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.514943][ T4625] device veth0_macvtap entered promiscuous mode [ 187.532952][ T4625] device veth1_macvtap entered promiscuous mode [ 187.550688][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.581146][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.795766][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.816903][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.838225][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.972148][ T4926] loop1: detected capacity change from 0 to 1024 [ 188.015162][ T4926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.406169][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.735766][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.812139][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.836067][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.982643][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.990850][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.002834][ T27] audit: type=1326 audit(1717485766.805:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7fc00000 [ 189.005392][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.098917][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.186918][ T4934] loop2: detected capacity change from 0 to 1024 [ 189.187160][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.211390][ T4934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.255223][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.275118][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.288140][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.306356][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.329312][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.346727][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.358218][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.457603][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.019993][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.040793][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.382069][ T4625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.504526][ T4625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.527139][ T4625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.591605][ T4625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.850114][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.869055][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.940705][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.953320][ T4969] loop0: detected capacity change from 0 to 1024 [ 191.961193][ T4969] hfsplus: unable to parse mount options [ 191.997453][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.025261][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.077400][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.031871][ T4980] loop0: detected capacity change from 0 to 1024 [ 193.039448][ T4980] hfsplus: unable to parse mount options [ 193.591787][ T27] audit: type=1326 audit(1717485771.385:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 195.388334][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.417214][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.707905][ T4987] loop1: detected capacity change from 0 to 64 [ 196.126747][ T4992] loop0: detected capacity change from 0 to 1024 [ 196.262516][ T4992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.333974][ T5002] loop0: detected capacity change from 0 to 1024 [ 197.346141][ T5002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.517487][ T5004] loop3: detected capacity change from 0 to 1024 [ 197.543464][ T5004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.368803][ T27] audit: type=1326 audit(1717485776.195:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 198.464960][ T27] audit: type=1326 audit(1717485776.225:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 198.583343][ T27] audit: type=1326 audit(1717485776.225:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 198.695239][ T5013] kvm: vcpu 0: requested 18 ns lapic timer period limited to 200000 ns [ 198.741730][ T27] audit: type=1326 audit(1717485776.225:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 198.758669][ T5013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 198.834094][ T27] audit: type=1326 audit(1717485776.225:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 198.971215][ T27] audit: type=1326 audit(1717485776.225:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 199.020618][ T27] audit: type=1326 audit(1717485776.225:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 199.026571][ T3570] syz-executor.1 (3570) used greatest stack depth: 19992 bytes left [ 199.175480][ T3707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.357071][ T27] audit: type=1326 audit(1717485776.235:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 199.539955][ T27] audit: type=1326 audit(1717485776.235:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 199.687759][ T27] audit: type=1326 audit(1717485776.235:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x7ffc0000 [ 199.712241][ T3574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.727489][ T27] audit: type=1326 audit(1717485776.325:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae927cf69 code=0x7fc00000 [ 199.770307][ T3574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.781846][ T3574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.791267][ T3574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.812688][ T3574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.825746][ T3574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.850208][ T3707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.873609][ T5037] loop3: detected capacity change from 0 to 1024 [ 199.881016][ T5037] hfsplus: unable to parse mount options [ 199.934887][ T3582] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.424530][ T5044] loop3: detected capacity change from 0 to 1024 [ 200.435434][ T5044] hfsplus: unable to parse mount options [ 201.043181][ T27] audit: type=1326 audit(1717485778.275:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x0 [ 201.085336][ T3707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.350200][ T3574] Bluetooth: hci1: command tx timeout [ 204.621372][ T3707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.401701][ T3567] Bluetooth: hci1: command tx timeout [ 205.521027][ T5073] loop0: detected capacity change from 0 to 1024 [ 206.118653][ T5073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.142426][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 206.185485][ T5076] fuse: Unknown parameter 'grou00000000000000000000' [ 206.211404][ T27] audit: type=1804 audit(1717485784.035:114): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1927692585/syzkaller.5wT37F/5/file0" dev="sda1" ino=1964 res=1 errno=0 [ 206.428226][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.472043][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.489252][ T5034] device bridge_slave_0 entered promiscuous mode [ 206.516898][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.538859][ T5087] loop0: detected capacity change from 0 to 1024 [ 206.546074][ T5087] hfsplus: unable to parse mount options [ 206.560660][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.722653][ T5034] device bridge_slave_1 entered promiscuous mode [ 207.140871][ T5092] loop0: detected capacity change from 0 to 1024 [ 207.152684][ T5092] hfsplus: unable to parse mount options [ 207.543496][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.694877][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.028170][ T5034] team0: Port device team_slave_0 added [ 208.069172][ T5034] team0: Port device team_slave_1 added [ 208.432905][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.465318][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.482551][ T3567] Bluetooth: hci1: command tx timeout [ 208.493362][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.522819][ T3582] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.558155][ T27] audit: type=1326 audit(1717485786.385:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d10a7cf69 code=0x0 [ 208.616731][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.642238][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.711449][ T5097] loop3: detected capacity change from 0 to 512 [ 208.763438][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.900296][ T5097] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 208.912108][ T5097] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 208.923310][ T5097] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 208.936891][ T3334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.013241][ T5097] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 209.022187][ T5097] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 209.042532][ T5097] EXT4-fs (loop3): Remounting filesystem read-only [ 209.049304][ T5097] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 209.069756][ T5097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.132986][ T5034] device hsr_slave_0 entered promiscuous mode [ 209.152351][ T5034] device hsr_slave_1 entered promiscuous mode [ 209.201684][ T3334] usb 5-1: Using ep0 maxpacket: 32 [ 209.225771][ T3573] EXT4-fs (loop3): unmounting filesystem. [ 209.351867][ T3334] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.381366][ T3334] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.431444][ T3334] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.471061][ T3334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.552735][ T3334] hub 5-1:4.0: USB hub found [ 209.637204][ T3707] device hsr_slave_0 left promiscuous mode [ 209.652311][ T3707] device hsr_slave_1 left promiscuous mode [ 209.658986][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.677914][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.720380][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.776728][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.781727][ T3334] hub 5-1:4.0: 2 ports detected [ 209.820252][ T3707] device bridge_slave_1 left promiscuous mode [ 209.826733][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.845618][ T3707] device bridge_slave_0 left promiscuous mode [ 209.879952][ T3574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.888984][ T3574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.892721][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.905081][ T3578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.914303][ T3578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.922341][ T3578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.931010][ T3578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.953942][ T3707] device veth1_macvtap left promiscuous mode [ 209.960025][ T3707] device veth0_macvtap left promiscuous mode [ 209.975694][ T3707] device veth1_vlan left promiscuous mode [ 209.981511][ T3707] device veth0_vlan left promiscuous mode [ 210.021692][ T3610] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.287868][ T3610] usb 3-1: Using ep0 maxpacket: 32 [ 210.351737][ T5141] fuse: Unknown parameter 'grou00000000000000000000' [ 210.372571][ T27] audit: type=1804 audit(1717485788.205:116): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2498040794/syzkaller.YjAIdt/88/file0" dev="sda1" ino=1949 res=1 errno=0 [ 210.401504][ T3707] team0 (unregistering): Port device team_slave_1 removed [ 210.422078][ T3610] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.435241][ T3610] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.435599][ T3707] team0 (unregistering): Port device team_slave_0 removed [ 210.445395][ T3610] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.470063][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.478686][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.508134][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.521941][ T3574] Bluetooth: hci1: command tx timeout [ 210.549646][ T3610] hub 3-1:4.0: USB hub found [ 210.588475][ T3707] bond0 (unregistering): Released all slaves [ 210.755662][ T3610] hub 3-1:4.0: 2 ports detected [ 210.935559][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 211.018472][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.026598][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.035219][ T5129] device bridge_slave_0 entered promiscuous mode [ 211.045979][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.053530][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.062443][ T5129] device bridge_slave_1 entered promiscuous mode [ 211.073549][ T22] hub 5-1:4.0: activate --> -90 [ 211.136201][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.149456][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.226367][ T5129] team0: Port device team_slave_0 added [ 211.278603][ T5129] team0: Port device team_slave_1 added [ 211.301949][ T5160] loop3: detected capacity change from 0 to 1024 [ 211.309722][ T5160] hfsplus: unable to parse mount options [ 211.377661][ T3582] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.506522][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.518661][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.546665][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.784954][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.818417][ T3334] usb 5-1: USB disconnect, device number 2 [ 212.824758][ T22] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 212.868387][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.974815][ T3828] usb 3-1: USB disconnect, device number 7 [ 212.983448][ T22] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 213.043581][ T3574] Bluetooth: hci4: command tx timeout [ 213.094892][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.190736][ T5129] device hsr_slave_0 entered promiscuous mode [ 213.229598][ T5129] device hsr_slave_1 entered promiscuous mode [ 213.250782][ T5129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.303421][ T5129] Cannot create hsr debugfs directory [ 213.324763][ T5034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.347353][ T5170] loop3: detected capacity change from 0 to 512 [ 213.366014][ T5034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.405897][ T5034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.427998][ T5170] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 213.505689][ T5034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.551375][ T5170] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 213.571455][ T5187] process 'syz-executor.4' launched '/dev/fd/3' with NULL argv: empty string added [ 213.662504][ T5170] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 213.812617][ T5170] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 213.820840][ T5170] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 213.878115][ T5170] EXT4-fs (loop3): Remounting filesystem read-only [ 213.895547][ T5170] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 213.929379][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.172286][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.197826][ T5129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.322109][ T5200] loop2: detected capacity change from 0 to 1024 [ 214.634058][ T5200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.081975][ T3574] Bluetooth: hci4: command tx timeout [ 215.144293][ T3573] EXT4-fs (loop3): unmounting filesystem. [ 215.161023][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.182501][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.255485][ T5129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.278158][ T5207] loop4: detected capacity change from 0 to 1024 [ 215.285454][ T5207] hfsplus: unable to parse mount options [ 215.355569][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.363251][ T3582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.474755][ T3609] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.501253][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.513616][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.522989][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.530122][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.101843][ T3574] Bluetooth: hci4: command tx timeout [ 218.122541][ T3609] usb 3-1: Using ep0 maxpacket: 32 [ 218.133774][ T5129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.208908][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.217646][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.230796][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.240480][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.247662][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.271685][ T3609] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 218.279288][ T3609] usb 3-1: can't read configurations, error -71 [ 218.329177][ T5129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.462075][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.471070][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.480250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.503602][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.523644][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.578071][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.644210][ T5225] loop2: detected capacity change from 0 to 1024 [ 218.671390][ T5225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.971880][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.370766][ T5034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.401749][ T5034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.470557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.480436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.498326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.525358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.559805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.828904][ T5129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.914012][ T5129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.959777][ T5129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.009090][ T5129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.122100][ T3567] Bluetooth: hci4: command tx timeout [ 220.205729][ T5243] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 220.372185][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.379910][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.429550][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.465651][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.534434][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.554854][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.598347][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.642044][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.657023][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.765210][ T5034] device veth0_vlan entered promiscuous mode [ 220.784561][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.799458][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.831223][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.838411][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.881961][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.906084][ T5255] kvm [5254]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 220.916831][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.944817][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.952086][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.967956][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.989788][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.014358][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.032385][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.052986][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.070538][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.206811][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.224359][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.242055][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.382505][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.399467][ T5034] device veth1_vlan entered promiscuous mode [ 223.423917][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.439446][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.493873][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.511413][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.563063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.577173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.626172][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.775190][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.803582][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.920536][ T5284] loop3: detected capacity change from 0 to 1024 [ 225.064959][ T5284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.574200][ T5034] device veth0_macvtap entered promiscuous mode [ 225.590789][ T5034] device veth1_macvtap entered promiscuous mode [ 225.607383][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.618876][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.650620][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.692393][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.724969][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.741693][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.751653][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.763434][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.775277][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.838588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.852905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.861041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.912523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.925802][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.954239][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.980990][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.010218][ T5294] loop4: detected capacity change from 0 to 1024 [ 226.017881][ T5294] hfsplus: unable to parse mount options [ 226.071738][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.093064][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.139085][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.149483][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.160781][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.257297][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.267861][ T5301] loop3: detected capacity change from 0 to 1024 [ 226.275247][ T5301] hfsplus: unable to parse mount options [ 226.289646][ T5034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.298465][ T3582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.321788][ T5034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.330679][ T5034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.340030][ T5034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.415887][ T5302] loop2: detected capacity change from 0 to 1024 [ 226.462420][ T5302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.151869][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.219387][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.233179][ T3558] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.467455][ T5305] loop3: detected capacity change from 0 to 1024 [ 227.868753][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.884400][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.028253][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.679107][ T5311] loop3: detected capacity change from 0 to 1024 [ 230.686561][ T5311] hfsplus: unable to parse mount options [ 232.283576][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.297191][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.745880][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.785519][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.796681][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.806320][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.182417][ T5129] device veth0_vlan entered promiscuous mode [ 236.242621][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.268240][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.302290][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.334615][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.350087][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.407528][ T5129] device veth1_vlan entered promiscuous mode [ 236.429827][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.542523][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.556995][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.619763][ T5129] device veth0_macvtap entered promiscuous mode [ 236.650980][ T5129] device veth1_macvtap entered promiscuous mode [ 236.968625][ T5333] fuse: Bad value for 'fd' [ 238.111909][ T5337] loop4: detected capacity change from 0 to 1024 [ 238.333039][ T5337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.474802][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.632815][ T27] audit: type=1804 audit(1717485816.465:117): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir177987642/syzkaller.9npxgK/2/file0" dev="sda1" ino=1961 res=1 errno=0 [ 238.706834][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.743695][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.766462][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.777020][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.787974][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.799752][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.811770][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.821829][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.841781][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.870257][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.918982][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.939465][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.940077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.941147][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.991712][ T5346] loop4: detected capacity change from 0 to 1024 [ 238.992488][ T5346] hfsplus: unable to parse mount options [ 239.011123][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.011143][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.011152][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.011163][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.011171][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.011182][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.011191][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.011202][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.011211][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.011221][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.013308][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.016432][ T5129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.016463][ T5129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.016487][ T5129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.016510][ T5129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.047984][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.048752][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.157558][ T3582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.672512][ T5349] loop4: detected capacity change from 0 to 1024 [ 239.675612][ T5349] hfsplus: unable to parse mount options [ 239.681683][ T27] audit: type=1326 audit(1717485817.505:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdae927cf69 code=0x0 [ 240.115673][ T4016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.115728][ T4016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.118404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.221156][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.221211][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.225116][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.352301][ T3707] device hsr_slave_0 left promiscuous mode [ 240.352933][ T3707] device hsr_slave_1 left promiscuous mode [ 240.356918][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.356963][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.374029][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.374057][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.387071][ T3707] device bridge_slave_1 left promiscuous mode [ 240.387214][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.390352][ T3707] device bridge_slave_0 left promiscuous mode [ 240.390485][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.407394][ T3707] device veth1_macvtap left promiscuous mode [ 240.407474][ T3707] device veth0_macvtap left promiscuous mode [ 240.407585][ T3707] device veth1_vlan left promiscuous mode [ 240.407674][ T3707] device veth0_vlan left promiscuous mode [ 240.451637][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 246.136430][ T3707] team0 (unregistering): Port device team_slave_1 removed [ 246.179016][ T3707] team0 (unregistering): Port device team_slave_0 removed [ 246.193855][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.204807][ T5345] tty tty24: ldisc open failed (-12), clearing slot 23 [ 246.272546][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.432422][ T7] usb 3-1: device descriptor read/all, error -71 [ 249.352888][ T5390] loop3: detected capacity change from 0 to 1024 [ 249.380565][ T5390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.180421][ T3707] bond0 (unregistering): Released all slaves [ 250.249750][ T5398] loop2: detected capacity change from 0 to 1024 [ 250.257505][ T5398] hfsplus: unable to parse mount options [ 252.253303][ T5400] loop3: detected capacity change from 0 to 1024 [ 252.497684][ T5400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.460369][ T5435] loop1: detected capacity change from 0 to 1024 [ 260.272489][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.278825][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.493011][ T5435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.752863][ T5438] loop4: detected capacity change from 0 to 512 [ 260.800617][ T5438] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 260.950969][ T5438] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 261.010459][ T5438] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 261.217639][ T5438] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 261.294879][ T5438] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 261.379645][ T5438] EXT4-fs (loop4): Remounting filesystem read-only [ 261.405587][ T5460] ptrace attach of "/root/syz-executor.3 exec"[3573] was attempted by "/root/syz-executor.3 exec"[5460] [ 261.420162][ T5438] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 261.504390][ T5438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.854446][ T5471] loop0: detected capacity change from 0 to 1024 [ 261.943925][ T5471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.231974][ T3574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.243808][ T3574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.252260][ T3574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.261215][ T3574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.268987][ T3574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.276363][ T3574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.306624][ T4625] EXT4-fs (loop4): unmounting filesystem. [ 264.910065][ T5499] chnl_net:caif_netlink_parms(): no params data found [ 265.120318][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.128927][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.137314][ T5499] device bridge_slave_0 entered promiscuous mode [ 265.147957][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.155182][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.163361][ T5499] device bridge_slave_1 entered promiscuous mode [ 265.227069][ T5499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.273460][ T5499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.397644][ T5499] team0: Port device team_slave_0 added [ 265.424035][ T5499] team0: Port device team_slave_1 added [ 265.547085][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.584455][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.624516][ T5499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.678446][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.701741][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.894436][ T5499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.362860][ T3567] Bluetooth: hci1: command tx timeout [ 266.379875][ T5499] device hsr_slave_0 entered promiscuous mode [ 266.609552][ T5499] device hsr_slave_1 entered promiscuous mode [ 266.650224][ T5499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.672011][ T5499] Cannot create hsr debugfs directory [ 266.685770][ T5510] loop4: detected capacity change from 0 to 40427 [ 266.709753][ T5510] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 266.718519][ T5510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 266.782422][ T5510] F2FS-fs (loop4): invalid crc value [ 266.829128][ T5510] F2FS-fs (loop4): Found nat_bits in checkpoint [ 266.972051][ T5537] loop2: detected capacity change from 0 to 512 [ 266.984678][ T5537] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.070903][ T5537] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 267.079416][ T5529] kvm: emulating exchange as write [ 267.091588][ T5510] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 267.098884][ T5510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 267.159228][ T5499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.187162][ T5537] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 267.226713][ T27] audit: type=1800 audit(1717485845.055:119): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=455 res=0 errno=0 [ 267.250381][ T5537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.281313][ T27] audit: type=1800 audit(1717485845.105:120): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=455 res=0 errno=0 [ 267.383009][ T5499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.400484][ T4016] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 267.459738][ T4016] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 267.471488][ T5537] EXT4-fs error (device loop2) in ext4_resetent:3682: error 2 [ 267.494669][ T5499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.573787][ T3576] EXT4-fs (loop2): unmounting filesystem. [ 267.640597][ T5499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.770909][ T5555] loop0: detected capacity change from 0 to 16 [ 267.830724][ T5555] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.037543][ T5557] loop0: detected capacity change from 0 to 1024 [ 268.065715][ T5499] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.087104][ T5557] ext4: Unknown parameter '' [ 268.119301][ T5499] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.138807][ T5499] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.250991][ T5499] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.471768][ T3567] Bluetooth: hci1: command tx timeout [ 268.624349][ T27] audit: type=1800 audit(1717485846.455:121): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 269.543810][ T5567] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.665436][ T5499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.707864][ T5499] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.742136][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.766177][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.802664][ T5579] loop3: detected capacity change from 0 to 1764 [ 269.864042][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.886635][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.938250][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.945514][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.971713][ T5579] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 270.195390][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.205994][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.220460][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.237690][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.244889][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.377241][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.542858][ T3574] Bluetooth: hci1: command tx timeout [ 270.864557][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.898643][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.941246][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.994505][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.048048][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.113041][ T3707] device hsr_slave_0 left promiscuous mode [ 271.134547][ T3707] device hsr_slave_1 left promiscuous mode [ 271.144034][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.167497][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.193876][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.194937][ T5586] loop3: detected capacity change from 0 to 1024 [ 271.225158][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.250444][ T5586] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 271.261807][ T5586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 271.272907][ T3707] device bridge_slave_1 left promiscuous mode [ 271.287318][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.299512][ T3707] device bridge_slave_0 left promiscuous mode [ 271.307580][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.308380][ T5586] System zones: [ 271.334182][ T3707] device veth1_macvtap left promiscuous mode [ 271.341405][ T5586] 0-1 [ 271.344734][ T3707] device veth0_macvtap left promiscuous mode [ 271.344843][ T3707] device veth1_vlan left promiscuous mode [ 271.359686][ T5586] , 3-12 [ 271.359827][ T3707] device veth0_vlan left promiscuous mode [ 271.359849][ T5586] [ 271.382614][ T5586] EXT4-fs (loop3): orphan cleanup on readonly fs [ 271.432294][ T5586] EXT4-fs error (device loop3): ext4_free_blocks:6211: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.490484][ T5586] EXT4-fs (loop3): 1 orphan inode deleted [ 271.521645][ T5586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 271.629350][ T3573] EXT4-fs (loop3): unmounting filesystem. [ 271.797685][ T5577] loop0: detected capacity change from 0 to 40427 [ 272.147690][ T5577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 272.601747][ T3567] Bluetooth: hci1: command tx timeout [ 272.652287][ T27] audit: type=1326 audit(1717485850.485:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 272.694168][ T5577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 272.735510][ T27] audit: type=1326 audit(1717485850.485:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 272.786706][ T3707] team0 (unregistering): Port device team_slave_1 removed [ 272.838159][ T27] audit: type=1326 audit(1717485850.485:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 272.880797][ T5608] loop3: detected capacity change from 0 to 1024 [ 272.888379][ T5609] loop2: detected capacity change from 0 to 1024 [ 272.897107][ T5608] EXT4-fs: Ignoring removed orlov option [ 272.906813][ T27] audit: type=1326 audit(1717485850.485:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 272.936083][ T3707] team0 (unregistering): Port device team_slave_0 removed [ 272.976617][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.030087][ T27] audit: type=1326 audit(1717485850.485:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 273.063532][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.120424][ T27] audit: type=1326 audit(1717485850.485:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 273.198340][ T27] audit: type=1326 audit(1717485850.485:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 273.270709][ T27] audit: type=1326 audit(1717485850.485:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6827cf69 code=0x7ffc0000 [ 273.370663][ T5608] EXT4-fs (loop3): Test dummy encryption mode enabled [ 273.383666][ T3707] bond0 (unregistering): Released all slaves [ 273.395159][ T5608] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.441508][ T5608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 273.481686][ T5608] EXT4-fs (loop3): invalid journal inode [ 273.488789][ T5608] EXT4-fs (loop3): can't get journal size [ 273.518687][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.538309][ T5608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.538569][ T5614] loop0: detected capacity change from 0 to 8192 [ 273.552658][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.643108][ T5591] loop4: detected capacity change from 0 to 40427 [ 273.767840][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.775271][ T5591] F2FS-fs (loop4): Found nat_bits in checkpoint [ 273.807682][ T5499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.841211][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.501690][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.510301][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.574594][ T3573] EXT4-fs (loop3): unmounting filesystem. [ 276.340088][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.361368][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.410680][ T5499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.525483][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.549248][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.650303][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.667075][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.762185][ T5499] device veth0_vlan entered promiscuous mode [ 276.780844][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.791263][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.821410][ T5499] device veth1_vlan entered promiscuous mode [ 276.964130][ T27] audit: type=1326 audit(1717485854.795:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 276.994467][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.008083][ T5631] loop3: detected capacity change from 0 to 32768 [ 277.015003][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.052913][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.062853][ T5631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5631) [ 277.088481][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.093389][ T27] audit: type=1326 audit(1717485854.795:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b74e7cf69 code=0x7ffc0000 [ 277.114974][ T5499] device veth0_macvtap entered promiscuous mode [ 277.164562][ T5499] device veth1_macvtap entered promiscuous mode [ 277.238634][ T5631] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.268485][ T5631] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 277.272401][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.299013][ T5631] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 277.350004][ T5631] BTRFS info (device loop3): use zstd compression, level 3 [ 277.351573][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.383067][ T5631] BTRFS info (device loop3): using free space tree [ 277.447317][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.458419][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.475797][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.489178][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.506397][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.518710][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.534730][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.543420][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.552556][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.560767][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.571008][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.582603][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.595800][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.606933][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.617693][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.627809][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.638805][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.650052][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.661072][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.674214][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.690654][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.713652][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.755084][ T5499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.836841][ T5499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.901666][ T5499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.922322][ T5631] BTRFS error (device loop3): open_ctree failed [ 277.966115][ T5499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.201803][ T3567] Bluetooth: hci0: command 0x0406 tx timeout [ 278.300581][ T5691] loop2: detected capacity change from 0 to 512 [ 278.586550][ T5691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 278.606705][ T5691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 278.625095][ T5691] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 278.641340][ T5691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 278.662461][ T5691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 278.680832][ T5691] EXT4-fs (loop2): 1 orphan inode deleted [ 278.686900][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.102970][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.111121][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.219551][ T3576] EXT4-fs (loop2): unmounting filesystem. [ 279.227801][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.259110][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.280641][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.311923][ T5696] loop3: detected capacity change from 0 to 128 [ 279.319515][ T5696] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.334467][ T5696] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.361118][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.487061][ T5704] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.819127][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 279.819141][ T27] audit: type=1326 audit(1717485857.645:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 279.876769][ T5654] loop4: detected capacity change from 0 to 40427 [ 279.953774][ T27] audit: type=1326 audit(1717485857.685:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 280.094158][ T5654] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 280.374586][ T27] audit: type=1326 audit(1717485857.685:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 280.761866][ T27] audit: type=1326 audit(1717485857.685:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 280.832305][ T27] audit: type=1326 audit(1717485857.695:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 280.937514][ T27] audit: type=1326 audit(1717485857.695:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 281.008904][ T27] audit: type=1326 audit(1717485857.695:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 281.077068][ T5741] loop3: detected capacity change from 0 to 512 [ 281.092371][ T27] audit: type=1326 audit(1717485857.695:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 281.163693][ T27] audit: type=1326 audit(1717485857.695:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a847cf69 code=0x7ffc0000 [ 281.200455][ T5741] EXT4-fs (loop3): filesystem is read-only [ 281.220549][ T5741] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 281.279514][ T5741] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 281.592147][ T27] audit: type=1804 audit(1717485859.415:146): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2498040794/syzkaller.YjAIdt/129/file0" dev="sda1" ino=1956 res=1 errno=0 [ 282.607901][ T5771] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.704233][ T5776] bridge0: port 3(syz_tun) entered blocking state [ 282.729334][ T5776] bridge0: port 3(syz_tun) entered disabled state [ 282.766109][ T5776] device syz_tun entered promiscuous mode [ 282.788297][ T5776] bridge0: port 3(syz_tun) entered blocking state [ 282.795392][ T5776] bridge0: port 3(syz_tun) entered forwarding state [ 283.024100][ T5786] loop2: detected capacity change from 0 to 256 [ 283.283262][ T5782] loop0: detected capacity change from 0 to 8192 [ 283.320715][ T5782] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.285805][ T5799] loop4: detected capacity change from 0 to 64 [ 285.349558][ T5763] loop3: detected capacity change from 0 to 40427 [ 285.388979][ T5763] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 285.414553][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.525147][ T5817] loop1: detected capacity change from 0 to 128 [ 285.579077][ T5817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 285.642091][ T5817] ext4 filesystem being mounted at /root/syzkaller-testdir821221712/syzkaller.OkTv0q/14/mnt supports timestamps until 2038 (0x7fffffff) [ 285.818316][ T5499] EXT4-fs (loop1): unmounting filesystem. [ 287.626656][ T5809] loop0: detected capacity change from 0 to 32768 [ 287.803580][ T5815] loop2: detected capacity change from 0 to 32768 [ 287.844868][ T5815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5815) [ 287.920961][ T5815] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.970190][ T5815] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 288.023560][ T5815] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 288.082212][ T5815] BTRFS info (device loop2): use zstd compression, level 3 [ 288.101645][ T5815] BTRFS info (device loop2): using free space tree [ 288.587201][ T5815] BTRFS error (device loop2): open_ctree failed [ 288.775189][ T5896] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 288.808540][ T5896] team0: Device ip6gre0 is of different type [ 288.973903][ T5835] loop1: detected capacity change from 0 to 32768 [ 289.100775][ T5835] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 289.162542][ T5835] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 289.249843][ T5835] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 289.299655][ T5681] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 289.315626][ T5681] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 289.509569][ T5681] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 193ms [ 289.509969][ T5901] fuse: Unknown parameter 'rootmod' [ 289.554076][ T5681] gfs2: fsid=syz:syz.0: jid=0: Done [ 289.574597][ T5835] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 289.603762][ T5835] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 290.351754][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 290.711800][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 290.872026][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.232594][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 291.247185][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 291.256707][ T26] usb 5-1: SerialNumber: syz [ 291.283014][ T26] usb 5-1: config 0 descriptor?? [ 291.337495][ T26] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 291.357674][ T26] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 291.361755][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 291.394349][ T26] usb 5-1: Failed to create links for entity 255 [ 291.401307][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 291.424948][ T26] usb 5-1: Failed to register entities (-22). [ 291.585463][ T5681] usb 5-1: USB disconnect, device number 3 [ 291.631624][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 291.875156][ T5887] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 291.891333][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.918290][ T5887] usb 2-1: Product: syz [ 291.933815][ T5887] usb 2-1: Manufacturer: syz [ 291.955295][ T5887] r8152-cfgselector 2-1: config 0 descriptor?? [ 292.216128][ T5887] r8152-cfgselector 2-1: Unknown version 0x0000 [ 292.261738][ T5887] r8152-cfgselector 2-1: Unknown version 0x0000 [ 292.268482][ T5887] r8152-cfgselector 2-1: bad CDC descriptors [ 292.336294][ T5887] r8152-cfgselector 2-1: Unknown version 0x0000 [ 292.353399][ T5887] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 292.407818][ T5942] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 292.474522][ T5942] team0: Device ip6gre0 is of different type [ 293.529091][ T5936] loop4: detected capacity change from 0 to 32768 [ 293.565418][ T5936] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 293.587393][ T5936] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 293.634502][ T5936] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 293.658431][ T5681] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 293.667700][ T5681] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 293.832841][ T5681] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 165ms [ 293.858336][ T5681] gfs2: fsid=syz:syz.0: jid=0: Done [ 293.875224][ T5936] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 296.530935][ T6019] ------------[ cut here ]------------ [ 296.536910][ T6019] Please remove unsupported % in format string [ 296.544482][ T6019] WARNING: CPU: 0 PID: 6019 at lib/vsprintf.c:2661 format_decode+0x12d2/0x1f10 [ 296.553689][ T6019] Modules linked in: [ 296.557611][ T6019] CPU: 0 PID: 6019 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 296.566024][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 2024/06/04 07:24:34 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 296.576236][ T6019] RIP: 0010:format_decode+0x12d2/0x1f10 [ 296.581895][ T6019] Code: da 03 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 a0 d9 07 8c e8 fe 16 cd f6 <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 296.601598][ T6019] RSP: 0018:ffffc9000a97f680 EFLAGS: 00010246 [ 296.607871][ T6019] RAX: 21ccfebe9236c500 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 296.615923][ T6019] RDX: ffffc9000a29a000 RSI: 0000000000004aec RDI: 0000000000004aed [ 296.624000][ T6019] RBP: ffffc9000a97f770 R08: ffffffff81528ede R09: fffff5200152fe31 [ 296.632043][ T6019] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 296.640035][ T6019] R13: ffff0000ffffff00 R14: ffffc9000a97f9ac R15: 1ffff9200152ff35 [ 296.648101][ T6019] FS: 00007f4b75bd86c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 296.657127][ T6019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.663790][ T6019] CR2: 0000001b32622000 CR3: 00000000480d0000 CR4: 00000000003506f0 [ 296.671978][ T6019] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.679976][ T6019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.688062][ T6019] Call Trace: [ 296.691361][ T6019] [ 296.694359][ T6019] ? __warn+0x15a/0x520 [ 296.698538][ T6019] ? format_decode+0x12d2/0x1f10 [ 296.703550][ T6019] ? report_bug+0x2af/0x500 [ 296.708156][ T6019] ? format_decode+0x12d2/0x1f10 [ 296.713164][ T6019] ? handle_bug+0x3d/0x70 [ 296.717518][ T6019] ? exc_invalid_op+0x16/0x40 [ 296.722276][ T6019] ? asm_exc_invalid_op+0x16/0x20 [ 296.727509][ T6019] ? __warn_printk+0x28e/0x350 [ 296.732349][ T6019] ? format_decode+0x12d2/0x1f10 [ 296.737321][ T6019] ? vsnprintf+0x1c70/0x1c70 [ 296.742051][ T6019] ? bstr_printf+0x1b6/0x10c0 [ 296.746760][ T6019] bstr_printf+0x130/0x10c0 [ 296.751298][ T6019] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 296.756663][ T6019] ? vbin_printf+0x1bc0/0x1bc0 [ 296.761482][ T6019] ? print_irqtrace_events+0x210/0x210 [ 296.767036][ T6019] ? bpf_trace_printk+0x111/0x220 [ 296.772153][ T6019] bpf_trace_printk+0x19d/0x220 [ 296.777041][ T6019] ? ktime_get+0x1ac/0x270 [ 296.781602][ T6019] ? bpf_probe_write_user+0xd0/0xd0 [ 296.786826][ T6019] ? ktime_get+0x1ac/0x270 [ 296.791278][ T6019] ? ktime_get+0x242/0x270 [ 296.795779][ T6019] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 296.801269][ T6019] bpf_test_run+0x40f/0x8b0 [ 296.805869][ T6019] ? convert___skb_to_skb+0x610/0x610 [ 296.811373][ T6019] ? eth_type_trans+0x3cd/0x7a0 [ 296.816309][ T6019] ? eth_get_headlen+0x240/0x240 [ 296.821274][ T6019] ? convert___skb_to_skb+0x41/0x610 [ 296.826627][ T6019] ? build_skb+0x112/0x250 [ 296.831071][ T6019] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 296.836564][ T6019] ? cpu_online+0xb0/0xb0 [ 296.840932][ T6019] ? cpu_online+0xb0/0xb0 [ 296.845330][ T6019] bpf_prog_test_run+0x32f/0x3a0 [ 296.850304][ T6019] __sys_bpf+0x3eb/0x6c0 [ 296.854629][ T6019] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 296.860051][ T6019] ? print_irqtrace_events+0x210/0x210 [ 296.865595][ T6019] ? print_irqtrace_events+0x210/0x210 [ 296.871092][ T6019] ? syscall_enter_from_user_mode+0x2e/0x230 [ 296.877149][ T6019] ? lockdep_hardirqs_on+0x94/0x130 [ 296.882413][ T6019] __x64_sys_bpf+0x78/0x90 [ 296.886865][ T6019] do_syscall_64+0x3b/0xb0 [ 296.891311][ T6019] ? clear_bhb_loop+0x45/0xa0 [ 296.896067][ T6019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.902032][ T6019] RIP: 0033:0x7f4b74e7cf69 [ 296.906469][ T6019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 296.926243][ T6019] RSP: 002b:00007f4b75bd80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.934732][ T6019] RAX: ffffffffffffffda RBX: 00007f4b74fb3fa0 RCX: 00007f4b74e7cf69 [ 296.942766][ T6019] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 296.950752][ T6019] RBP: 00007f4b74eda706 R08: 0000000000000000 R09: 0000000000000000 [ 296.958891][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.966945][ T6019] R13: 000000000000000b R14: 00007f4b74fb3fa0 R15: 00007fffa543b2b8 [ 296.975014][ T6019] [ 296.978049][ T6019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 296.985425][ T6019] CPU: 0 PID: 6019 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 296.993761][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 297.003809][ T6019] Call Trace: [ 297.007077][ T6019] [ 297.009997][ T6019] dump_stack_lvl+0x1e3/0x2cb [ 297.014679][ T6019] ? nf_tcp_handle_invalid+0x642/0x642 [ 297.020140][ T6019] ? panic+0x764/0x764 [ 297.024206][ T6019] ? 0xffffffffa0001acc [ 297.028378][ T6019] ? vscnprintf+0x59/0x80 [ 297.032706][ T6019] panic+0x318/0x764 [ 297.036618][ T6019] ? __warn+0x169/0x520 [ 297.040764][ T6019] ? memcpy_page_flushcache+0xfc/0xfc [ 297.046138][ T6019] __warn+0x348/0x520 [ 297.050224][ T6019] ? format_decode+0x12d2/0x1f10 [ 297.055157][ T6019] report_bug+0x2af/0x500 [ 297.059475][ T6019] ? format_decode+0x12d2/0x1f10 [ 297.064586][ T6019] handle_bug+0x3d/0x70 [ 297.068743][ T6019] exc_invalid_op+0x16/0x40 [ 297.073265][ T6019] asm_exc_invalid_op+0x16/0x20 [ 297.078546][ T6019] RIP: 0010:format_decode+0x12d2/0x1f10 [ 297.084100][ T6019] Code: da 03 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 a0 d9 07 8c e8 fe 16 cd f6 <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 297.103697][ T6019] RSP: 0018:ffffc9000a97f680 EFLAGS: 00010246 [ 297.109758][ T6019] RAX: 21ccfebe9236c500 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 297.117807][ T6019] RDX: ffffc9000a29a000 RSI: 0000000000004aec RDI: 0000000000004aed [ 297.125857][ T6019] RBP: ffffc9000a97f770 R08: ffffffff81528ede R09: fffff5200152fe31 [ 297.133817][ T6019] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 297.141785][ T6019] R13: ffff0000ffffff00 R14: ffffc9000a97f9ac R15: 1ffff9200152ff35 [ 297.150038][ T6019] ? __warn_printk+0x28e/0x350 [ 297.154810][ T6019] ? vsnprintf+0x1c70/0x1c70 [ 297.159394][ T6019] ? bstr_printf+0x1b6/0x10c0 [ 297.164074][ T6019] bstr_printf+0x130/0x10c0 [ 297.168575][ T6019] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 297.173686][ T6019] ? vbin_printf+0x1bc0/0x1bc0 [ 297.178445][ T6019] ? print_irqtrace_events+0x210/0x210 [ 297.183909][ T6019] ? bpf_trace_printk+0x111/0x220 [ 297.188934][ T6019] bpf_trace_printk+0x19d/0x220 [ 297.193786][ T6019] ? ktime_get+0x1ac/0x270 [ 297.198199][ T6019] ? bpf_probe_write_user+0xd0/0xd0 [ 297.203400][ T6019] ? ktime_get+0x1ac/0x270 [ 297.207819][ T6019] ? ktime_get+0x242/0x270 [ 297.212505][ T6019] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 297.218050][ T6019] bpf_test_run+0x40f/0x8b0 [ 297.222564][ T6019] ? convert___skb_to_skb+0x610/0x610 [ 297.227928][ T6019] ? eth_type_trans+0x3cd/0x7a0 [ 297.232782][ T6019] ? eth_get_headlen+0x240/0x240 [ 297.237802][ T6019] ? convert___skb_to_skb+0x41/0x610 [ 297.243079][ T6019] ? build_skb+0x112/0x250 [ 297.247502][ T6019] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 297.252887][ T6019] ? cpu_online+0xb0/0xb0 [ 297.257215][ T6019] ? cpu_online+0xb0/0xb0 [ 297.261543][ T6019] bpf_prog_test_run+0x32f/0x3a0 [ 297.266486][ T6019] __sys_bpf+0x3eb/0x6c0 [ 297.270728][ T6019] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 297.276104][ T6019] ? print_irqtrace_events+0x210/0x210 [ 297.281573][ T6019] ? print_irqtrace_events+0x210/0x210 [ 297.287028][ T6019] ? syscall_enter_from_user_mode+0x2e/0x230 [ 297.293095][ T6019] ? lockdep_hardirqs_on+0x94/0x130 [ 297.298297][ T6019] __x64_sys_bpf+0x78/0x90 [ 297.302711][ T6019] do_syscall_64+0x3b/0xb0 [ 297.307211][ T6019] ? clear_bhb_loop+0x45/0xa0 [ 297.311886][ T6019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.317771][ T6019] RIP: 0033:0x7f4b74e7cf69 [ 297.322262][ T6019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 297.341989][ T6019] RSP: 002b:00007f4b75bd80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.350396][ T6019] RAX: ffffffffffffffda RBX: 00007f4b74fb3fa0 RCX: 00007f4b74e7cf69 [ 297.358368][ T6019] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 297.366328][ T6019] RBP: 00007f4b74eda706 R08: 0000000000000000 R09: 0000000000000000 [ 297.374289][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.382280][ T6019] R13: 000000000000000b R14: 00007f4b74fb3fa0 R15: 00007fffa543b2b8 [ 297.390342][ T6019] [ 297.393614][ T6019] Kernel Offset: disabled [ 297.397961][ T6019] Rebooting in 86400 seconds..