last executing test programs: 3.331594558s ago: executing program 0 (id=143): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x29, @remote, 0x1}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000240)="e5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) 1.62367682s ago: executing program 4 (id=134): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00', @ANYRES32], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}]}}, 0x0, 0x66}, 0x20) 1.599854601s ago: executing program 0 (id=135): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.592048821s ago: executing program 4 (id=139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000006640), &(0x7f0000006740)=0x8) 1.485424283s ago: executing program 4 (id=141): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) 1.382929756s ago: executing program 2 (id=146): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3e, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_fd, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @tail_call, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff9}]}, 0x0, 0xacc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000003}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.376400066s ago: executing program 0 (id=148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001240)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14880}, 0x4000) 1.352936657s ago: executing program 2 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n\x00', 0x4) 1.296109499s ago: executing program 3 (id=152): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r2, 0x197, 0x0, 0x0, 0x4, 0x0, 0xfff9, 0x8000, 0x6, 0x1, 0x8a, 'syz0\x00'}) 1.296051419s ago: executing program 0 (id=160): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.265572359s ago: executing program 3 (id=153): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 1.252065269s ago: executing program 0 (id=155): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 1.176486431s ago: executing program 3 (id=156): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000001c40)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x8, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 350.042712ms ago: executing program 0 (id=158): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 296.435663ms ago: executing program 3 (id=159): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 296.220933ms ago: executing program 1 (id=161): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 273.993604ms ago: executing program 2 (id=162): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x3e, 0xcb, 0x3d6, 0x40, 0x0, 0x0, 0xb87d, 0x38, 0x1, 0xfffe, 0x12, 0xed86}, [{0x3, 0x5, 0x8, 0xd, 0x1, 0xe5, 0x10000000001, 0x450c}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 257.321514ms ago: executing program 2 (id=163): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x400, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d2b984b30c50997d3bef409ff2176fd7afe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa501c50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0xfffffffa, 0x6, 0x14, 0x1, "94ba406075c3e07887e9061d8d0a0686c374b8ae5b924bba74286a226b245db0760fcdb7cacf56b15fedb2623d2d2c345b4cb0b5b3e0c3cee141270a91ee86d6", "2730851dc19ac633364ca56b3040de115815af0b5731f87c755f981ba5fefc38", [0xda, 0x5]}) 225.240095ms ago: executing program 4 (id=164): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0xc, &(0x7f0000001fc0)={0x19, 0x1, 0xc}, 0x0) 168.500696ms ago: executing program 2 (id=165): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000003, 0x40002d1}, 0x20a8, 0x0, 0x0, 0x0, 0x10001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 168.354096ms ago: executing program 1 (id=166): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00', @ANYRES32], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}]}}, 0x0, 0x66}, 0x20) 140.757547ms ago: executing program 2 (id=167): timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)) 136.587127ms ago: executing program 1 (id=168): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 72.468609ms ago: executing program 1 (id=169): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0xc, @private1, 0x6}, 0x1c, &(0x7f00000049c0)=[{&(0x7f00000001c0)="79a3818a", 0x4}], 0x1}}], 0x2, 0x14) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0xa7b}, &(0x7f0000000480)=0x8) 71.730889ms ago: executing program 4 (id=179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) close(r0) 63.309889ms ago: executing program 3 (id=170): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4831, 0x1823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) 53.235549ms ago: executing program 1 (id=171): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20) 3.32174ms ago: executing program 1 (id=172): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x8}, 0x10fcc8, 0x1224, 0x0, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000540)={[{@noblock_validity}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0x10000000000000a}, {0xffffffff, 0x4, 0x711, 0xa}]}) 2.90756ms ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n\x00', 0x4) 0s ago: executing program 4 (id=174): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22, 0x8}) kernel console output (not intermixed with test programs): [ 18.633785][ T28] audit: type=1400 audit(1785148277.421:103): avc: denied { search } for pid=3175 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.655854][ T28] audit: type=1400 audit(1785148277.421:104): avc: denied { search } for pid=3175 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.831874][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 19.831890][ T28] audit: type=1400 audit(1785148278.611:120): avc: denied { write } for pid=3232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.861058][ T28] audit: type=1400 audit(1785148278.631:121): avc: denied { write } for pid=3243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.979870][ T28] audit: type=1400 audit(1785148278.761:122): avc: denied { write } for pid=3247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.002801][ T28] audit: type=1400 audit(1785148278.781:123): avc: denied { write } for pid=3258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.059179][ T28] audit: type=1400 audit(1785148278.841:124): avc: denied { write } for pid=3261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.082101][ T28] audit: type=1400 audit(1785148278.861:125): avc: denied { write } for pid=3272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 23.048865][ T28] audit: type=1400 audit(1785148281.831:126): avc: denied { mounton } for pid=3280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.071942][ T28] audit: type=1400 audit(1785148281.851:127): avc: denied { mount } for pid=3280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.072832][ T3280] cgroup: Unknown subsys name 'net' [ 23.099781][ T28] audit: type=1400 audit(1785148281.881:128): avc: denied { unmount } for pid=3280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.232990][ T3280] cgroup: Unknown subsys name 'cpuset' [ 23.239154][ T3280] cgroup: Unknown subsys name 'rlimit' [ 23.349613][ T28] audit: type=1400 audit(1785148282.131:129): avc: denied { setattr } for pid=3280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.399310][ T3284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.442869][ T3280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.609469][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.616659][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.623924][ T3294] bridge_slave_0: entered allmulticast mode [ 24.630363][ T3294] bridge_slave_0: entered promiscuous mode [ 24.646330][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.653553][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.660688][ T3294] bridge_slave_1: entered allmulticast mode [ 24.667194][ T3294] bridge_slave_1: entered promiscuous mode [ 24.719700][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.741231][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.759758][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.766864][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.774053][ T3297] bridge_slave_0: entered allmulticast mode [ 24.780488][ T3297] bridge_slave_0: entered promiscuous mode [ 24.804419][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.811515][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.818690][ T3297] bridge_slave_1: entered allmulticast mode [ 24.825079][ T3297] bridge_slave_1: entered promiscuous mode [ 24.855301][ T3294] team0: Port device team_slave_0 added [ 24.863096][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.870163][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.877288][ T3293] bridge_slave_0: entered allmulticast mode [ 24.883685][ T3293] bridge_slave_0: entered promiscuous mode [ 24.894330][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.901380][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.908572][ T3299] bridge_slave_0: entered allmulticast mode [ 24.914895][ T3299] bridge_slave_0: entered promiscuous mode [ 24.921993][ T3294] team0: Port device team_slave_1 added [ 24.932734][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.939799][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.946984][ T3293] bridge_slave_1: entered allmulticast mode [ 24.953326][ T3293] bridge_slave_1: entered promiscuous mode [ 24.960948][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.970147][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.977241][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.984463][ T3299] bridge_slave_1: entered allmulticast mode [ 24.990830][ T3299] bridge_slave_1: entered promiscuous mode [ 25.011794][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.049531][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.056535][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.082497][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.093382][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.100532][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.107693][ T3301] bridge_slave_0: entered allmulticast mode [ 25.113969][ T3301] bridge_slave_0: entered promiscuous mode [ 25.121234][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.131352][ T3297] team0: Port device team_slave_0 added [ 25.138146][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.147574][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.154625][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.180607][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.193683][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.200750][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.207898][ T3301] bridge_slave_1: entered allmulticast mode [ 25.214400][ T3301] bridge_slave_1: entered promiscuous mode [ 25.221395][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.231285][ T3297] team0: Port device team_slave_1 added [ 25.237904][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.256933][ T3299] team0: Port device team_slave_0 added [ 25.279567][ T3299] team0: Port device team_slave_1 added [ 25.298493][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.305482][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.331523][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.347336][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.357354][ T3293] team0: Port device team_slave_0 added [ 25.367496][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.374527][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.400483][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.416948][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.431143][ T3293] team0: Port device team_slave_1 added [ 25.438942][ T3294] hsr_slave_0: entered promiscuous mode [ 25.445042][ T3294] hsr_slave_1: entered promiscuous mode [ 25.453580][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.460555][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.486478][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.511262][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.518301][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.544224][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.555700][ T3301] team0: Port device team_slave_0 added [ 25.567850][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.574841][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.600982][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.616177][ T3301] team0: Port device team_slave_1 added [ 25.630186][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.637351][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.663335][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.690936][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.697937][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.724007][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.740986][ T3297] hsr_slave_0: entered promiscuous mode [ 25.746974][ T3297] hsr_slave_1: entered promiscuous mode [ 25.752827][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 25.758564][ T3297] Cannot create hsr debugfs directory [ 25.773817][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.780808][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.806839][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.824609][ T3299] hsr_slave_0: entered promiscuous mode [ 25.830677][ T3299] hsr_slave_1: entered promiscuous mode [ 25.836575][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 25.842390][ T3299] Cannot create hsr debugfs directory [ 25.864274][ T3293] hsr_slave_0: entered promiscuous mode [ 25.870360][ T3293] hsr_slave_1: entered promiscuous mode [ 25.876365][ T3293] debugfs: 'hsr0' already exists in 'hsr' [ 25.882106][ T3293] Cannot create hsr debugfs directory [ 25.944050][ T3301] hsr_slave_0: entered promiscuous mode [ 25.950049][ T3301] hsr_slave_1: entered promiscuous mode [ 25.955987][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 25.961702][ T3301] Cannot create hsr debugfs directory [ 26.102435][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.110918][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.118527][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.126984][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.134793][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.143454][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.156106][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.164528][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.189447][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.197985][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.208542][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.216840][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.225443][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.234055][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.247046][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.255331][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.274136][ T3293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.282977][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.290595][ T3293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.298950][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.312677][ T3293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.321356][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.329069][ T3293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.337535][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.360327][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.369070][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.377446][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.385689][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.393735][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.402104][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.409805][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.418093][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.445766][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.454160][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.467199][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.475963][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.483519][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.492416][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.500644][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.509461][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.550757][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.573825][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.594589][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.609020][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.617666][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.627492][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.634587][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.651767][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.658895][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.667835][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.674966][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.685015][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.692096][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.724598][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.735120][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.742218][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.753157][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.765582][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.772653][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.790401][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.801146][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.811139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.818269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.839296][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.846420][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.860740][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.870176][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.877309][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.901038][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.908138][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.076227][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.095861][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.177667][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.189095][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.198990][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.268059][ T3294] veth0_vlan: entered promiscuous mode [ 27.291865][ T3294] veth1_vlan: entered promiscuous mode [ 27.309096][ T3297] veth0_vlan: entered promiscuous mode [ 27.348984][ T3297] veth1_vlan: entered promiscuous mode [ 27.359735][ T3294] veth0_macvtap: entered promiscuous mode [ 27.374403][ T3294] veth1_macvtap: entered promiscuous mode [ 27.389662][ T3301] veth0_vlan: entered promiscuous mode [ 27.397841][ T3299] veth0_vlan: entered promiscuous mode [ 27.409209][ T3301] veth1_vlan: entered promiscuous mode [ 27.419107][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.436984][ T3299] veth1_vlan: entered promiscuous mode [ 27.444572][ T3297] veth0_macvtap: entered promiscuous mode [ 27.452003][ T3297] veth1_macvtap: entered promiscuous mode [ 27.459333][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.480174][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.488975][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.501363][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.509650][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.518518][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.539370][ T3293] veth0_vlan: entered promiscuous mode [ 27.549158][ T3301] veth0_macvtap: entered promiscuous mode [ 27.556942][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.565372][ T3299] veth0_macvtap: entered promiscuous mode [ 27.573409][ T3299] veth1_macvtap: entered promiscuous mode [ 27.588278][ T3301] veth1_macvtap: entered promiscuous mode [ 27.600560][ T345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.609614][ T345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.619082][ T345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.630699][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.638062][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 27.638077][ T28] audit: type=1400 audit(1785148286.421:147): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.pxdduv/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.639131][ T3293] veth1_vlan: entered promiscuous mode [ 27.644855][ T28] audit: type=1400 audit(1785148286.421:148): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.679432][ T3293] veth0_macvtap: entered promiscuous mode [ 27.701359][ T28] audit: type=1400 audit(1785148286.421:149): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.pxdduv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.727659][ T28] audit: type=1400 audit(1785148286.421:150): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.749743][ T28] audit: type=1400 audit(1785148286.421:151): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.pxdduv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.778250][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.780999][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.800180][ T28] audit: type=1400 audit(1785148286.421:152): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.pxdduv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.800976][ T345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.828737][ T28] audit: type=1400 audit(1785148286.421:153): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.845185][ T3293] veth1_macvtap: entered promiscuous mode [ 27.857699][ T28] audit: type=1400 audit(1785148286.491:154): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.884464][ T28] audit: type=1400 audit(1785148286.491:155): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="gadgetfs" ino=3902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.889549][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.918115][ T345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.929978][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.937878][ T28] audit: type=1400 audit(1785148286.721:156): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.963911][ T345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.977002][ T345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.980445][ T3500] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 27.988330][ T345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.020800][ T3426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.037857][ T3426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.053139][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.060488][ T3426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.081996][ T3426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.099760][ T3506] loop2: detected capacity change from 0 to 256 [ 28.114821][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.120925][ T3506] ======================================================= [ 28.120925][ T3506] WARNING: The mand mount option has been deprecated and [ 28.120925][ T3506] and is ignored by this kernel. Remove the mand [ 28.120925][ T3506] option from the mount to silence this warning. [ 28.120925][ T3506] ======================================================= [ 28.177552][ T345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.196853][ T345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.213234][ T3509] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 28.219439][ T345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.228466][ T345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.446547][ T3519] syz.4.5 (3519) used greatest stack depth: 10688 bytes left [ 28.493048][ T3528] loop1: detected capacity change from 0 to 512 [ 28.505692][ T3530] loop4: detected capacity change from 0 to 512 [ 28.536642][ T3528] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 28.558164][ T3530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.574967][ T3528] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.12: corrupted in-inode xattr: e_value size too large [ 28.637313][ T3528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.637479][ T3528] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 28.646665][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 28.646684][ C0] EXT4-fs (loop1): initial error at time 1785148287: ext4_iget_extra_inode:5180: inode 15 [ 28.646715][ C0] EXT4-fs (loop1): last error at time 1785148287: ext4_iget_extra_inode:5180: inode 15 [ 28.692575][ T3528] loop1: lost filesystem error report for type 5 error -117 [ 28.694574][ T3528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.758315][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.770221][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.819069][ T3540] netlink: 'syz.4.15': attribute type 11 has an invalid length. [ 28.852305][ T3540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15'. [ 28.864976][ T3526] loop0: detected capacity change from 0 to 512 [ 28.896661][ T3526] EXT4-fs: inline encryption not supported [ 28.916269][ T3526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.941672][ T3526] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 28.964725][ T3545] tun0: tun_chr_ioctl cmd 2147767511 [ 29.009561][ T3526] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -ENXIO [ 29.133773][ T3559] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 29.162766][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.170091][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.180073][ T3564] loop4: detected capacity change from 0 to 512 [ 29.190807][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.190807][ T3426] loop2: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 29.205296][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.212457][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.219827][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.226952][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.232930][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.232930][ T3426] loop2: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 29.265829][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.265829][ T3426] loop2: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 29.267044][ T3564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.290254][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.290254][ T3426] loop2: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 29.302524][ T3559] team0: Port device bridge0 added [ 29.315445][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.315445][ T3426] loop2: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 29.315792][ T3564] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.370883][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.370883][ T3426] loop2: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 29.397404][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.397404][ T3426] loop2: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 29.411123][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.411123][ T3426] loop2: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 29.426509][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.426509][ T3426] loop2: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 29.440296][ T3426] kworker/u8:7: attempt to access beyond end of device [ 29.440296][ T3426] loop2: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 29.492550][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.544606][ T3577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 29.575881][ T3580] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 29.609494][ T3580] netlink: 'syz.4.31': attribute type 2 has an invalid length. [ 29.627246][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 29.661907][ T3586] loop2: detected capacity change from 0 to 164 [ 29.696771][ T3586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.727550][ T3586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.731204][ T3590] loop0: detected capacity change from 0 to 512 [ 29.763954][ T3586] rock: directory entry would overflow storage [ 29.784486][ T3586] rock: sig=0x4f50, size=4, remaining=3 [ 29.790384][ T3594] tap0: tun_chr_ioctl cmd 1074025678 [ 29.796688][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.809906][ T3586] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 29.817720][ T3594] tap0: group set to 0 [ 29.823615][ T3590] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.854385][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 29.911511][ T3603] loop1: detected capacity change from 0 to 1024 [ 29.952542][ T3603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 29.987176][ T3603] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.023062][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.050333][ T3622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.48'. [ 30.205857][ T3640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.55'. [ 30.228187][ T3640] netlink: 'syz.2.55': attribute type 3 has an invalid length. [ 30.308807][ T3646] Zero length message leads to an empty skb [ 30.460247][ T3650] syz.0.60 (3650) used greatest stack depth: 9728 bytes left [ 30.575184][ T3665] loop0: detected capacity change from 0 to 256 [ 30.598646][ T3665] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.709961][ T3671] bridge0: port 3(batadv1) entered blocking state [ 30.737760][ T3671] bridge0: port 3(batadv1) entered disabled state [ 30.745427][ T3671] batadv1: entered allmulticast mode [ 30.751371][ T3671] batadv1: entered promiscuous mode [ 30.797380][ T3674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.73'. [ 30.813154][ T3677] PM: suspend entry (deep) [ 30.815341][ T3678] loop2: detected capacity change from 0 to 512 [ 30.839068][ T3678] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.858353][ T3678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.870352][ T3678] EXT4-fs (loop2): 1 truncate cleaned up [ 30.876748][ T3678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.016351][ T3694] sch_fq: defrate 0 ignored. [ 31.035502][ T345] Filesystems sync: 0.217 seconds [ 31.048979][ T3692] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 31.117112][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.142926][ T3677] Freezing user space processes [ 31.212094][ T310] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 31.212180][ T3677] Freezing user space processes completed (elapsed 0.062 seconds) [ 31.221330][ T310] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 31.229135][ T3677] OOM killer disabled. [ 31.229144][ T3677] Freezing remaining freezable tasks [ 31.249019][ T3677] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 31.257348][ T3677] printk: Suspending console(s) (use no_console_suspend to debug) [ 31.302895][ T3677] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 31.303595][ T3677] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 31.303748][ T3677] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 31.303787][ T3677] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 31.303820][ T3677] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 31.303929][ T3677] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 31.304419][ T3677] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 31.304534][ T3677] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 31.304573][ T3677] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 31.304661][ T3677] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 31.304701][ T3677] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 31.304762][ T3677] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 31.304802][ T3677] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 31.304854][ T3677] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 31.304927][ T3677] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 31.305063][ T3677] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 31.342470][ T3711] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 31.907903][ T3677] ACPI: PM: Preparing to enter system sleep state S3 [ 31.908071][ T3677] ACPI: PM: Saving platform NVS memory [ 31.908198][ T3677] Disabling non-boot CPUs ... [ 31.918152][ T3677] smpboot: CPU 1 is now offline [ 31.923853][ T3677] ACPI: PM: Low-level resume complete [ 31.923901][ T3677] ACPI: PM: Restoring platform NVS memory [ 31.935965][ T3677] Enabling non-boot CPUs ... [ 31.936207][ T3677] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 31.940202][ T3677] CPU1 is up [ 31.940361][ T3677] ACPI: PM: Waking up from system sleep state S3 [ 31.968946][ T3706] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 32.142092][ T3677] OOM killer enabled. [ 32.142697][ T3677] Restarting tasks: Starting [ 32.211123][ T3677] Restarting tasks: Done [ 32.211890][ T3677] random: crng reseeded on system resumption [ 32.221999][ T3677] PM: suspend exit [ 32.290840][ T3846] tap0: tun_chr_ioctl cmd 2147767521 [ 32.408573][ T3857] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.671447][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 32.674582][ T3874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 32.685371][ T3879] PM: suspend entry (deep) [ 32.722586][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 32.722599][ T28] audit: type=1400 audit(1785148291.527:207): avc: denied { unmount } for pid=3882 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.823963][ T3707] Filesystems sync: 0.137 seconds [ 32.833938][ T3892] ------------[ cut here ]------------ [ 32.834783][ T3892] EA inode 11 i_nlink=0 [ 32.834803][ T3892] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.108/3892 [ 32.836994][ T3892] Modules linked in: [ 32.837666][ T3892] CPU: 0 UID: 0 PID: 3892 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT(lazy) [ 32.838965][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.840342][ T3892] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 32.841346][ T3892] Code: 16 bc 96 ff 49 8d 7e 40 4c 8d 2d 8b 9a 5a 05 e8 b6 a1 b5 ff 49 8b 6e 40 4c 89 e7 e8 ea 9c b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 91 03 da 03 90 90 90 90 90 90 90 [ 32.843996][ T3892] RSP: 0018:ffffc9000331f7f8 EFLAGS: 00010246 [ 32.844922][ T3892] RAX: ffff888104673ef0 RBX: ffff888105a74df8 RCX: ffffffff81c29bb6 [ 32.846232][ T3892] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3630 [ 32.847388][ T3892] RBP: 000000000000000b R08: 0001888105a74dab R09: 0000000000000000 [ 32.848564][ T3892] R10: ffffc9000331f728 R11: 0001c9000331f728 R12: ffff888105a74da8 [ 32.849659][ T3892] R13: ffffffff871d3630 R14: ffff888105a74d60 R15: 0000000000000001 [ 32.850862][ T3892] FS: 00007fa635bc76c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 32.852086][ T3892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.853017][ T3892] CR2: 0000001b32d1dff8 CR3: 0000000100a08000 CR4: 00000000003506f0 [ 32.854234][ T3892] Call Trace: [ 32.854802][ T3892] [ 32.855256][ T3892] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 32.856192][ T3892] ext4_xattr_delete_inode+0x6b5/0x790 [ 32.857073][ T3892] ext4_evict_inode+0xb18/0xdf0 [ 32.857771][ T3892] ? __pfx_ext4_evict_inode+0x10/0x10 [ 32.858543][ T3892] evict+0x2a5/0x510 [ 32.859110][ T3892] iput+0x430/0x5a0 [ 32.859686][ T3892] ext4_process_orphan+0x1a4/0x1c0 [ 32.860480][ T3892] ext4_orphan_cleanup+0x6a6/0xa10 [ 32.861402][ T3892] ? ext4_register_li_request+0x403/0x440 [ 32.862402][ T3892] ext4_fill_super+0x33ab/0x3760 [ 32.863142][ T3892] ? set_blocksize+0x14c/0x270 [ 32.863826][ T3892] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.864678][ T3892] get_tree_bdev_flags+0x291/0x300 [ 32.865451][ T3892] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.866504][ T3892] get_tree_bdev+0x1f/0x30 [ 32.867267][ T3892] ext4_get_tree+0x1c/0x30 [ 32.867973][ T3892] vfs_get_tree+0x57/0x1d0 [ 32.868627][ T3892] do_new_mount+0x288/0x8d0 [ 32.869406][ T3892] path_mount+0x4ad/0xb90 [ 32.870027][ T3892] __se_sys_mount+0x28c/0x2e0 [ 32.870697][ T3892] __x64_sys_mount+0x67/0x80 [ 32.871365][ T3892] x64_sys_call+0x2d61/0x3020 [ 32.872034][ T3892] do_syscall_64+0x136/0x3c0 [ 32.872711][ T3892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.873600][ T3892] RIP: 0033:0x7fa63716f10a [ 32.874263][ T3892] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.877363][ T3892] RSP: 002b:00007fa635bc6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.878567][ T3892] RAX: ffffffffffffffda RBX: 00007fa635bc6ee0 RCX: 00007fa63716f10a [ 32.879734][ T3892] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007fa635bc6ea0 [ 32.880853][ T3892] RBP: 0000200000000180 R08: 00007fa635bc6ee0 R09: 0000000000800700 [ 32.882094][ T3892] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 32.883228][ T3892] R13: 00007fa635bc6ea0 R14: 0000000000000470 R15: 000000000000002c [ 32.884361][ T3892] [ 32.884817][ T3892] ---[ end trace 0000000000000000 ]--- [ 32.897179][ T3879] Freezing user space processes [ 32.902790][ T3892] EXT4-fs (loop1): 1 orphan inode deleted [ 32.904082][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.914294][ T3879] Freezing user space processes completed (elapsed 0.016 seconds) [ 32.915400][ T3879] OOM killer disabled. [ 32.916197][ T3879] Freezing remaining freezable tasks [ 32.918538][ T3879] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 32.919709][ T3879] printk: Suspending console(s) (use no_console_suspend to debug) [ 32.958386][ T3879] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 32.958478][ T3879] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 32.958814][ T3879] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 32.958859][ T3879] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 32.958882][ T3879] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 32.958915][ T3879] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 32.958939][ T3879] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 32.959099][ T3879] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 32.959255][ T3879] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 32.959294][ T3879] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 32.959316][ T3879] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 32.959346][ T3879] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 32.959422][ T3879] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 32.959444][ T3879] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 32.959470][ T3879] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 32.959557][ T3879] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 32.985787][ T3702] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 33.567741][ T3879] ACPI: PM: Preparing to enter system sleep state S3 [ 33.567897][ T3879] ACPI: PM: Saving platform NVS memory [ 33.567934][ T3879] Disabling non-boot CPUs ... [ 33.572187][ T3879] smpboot: CPU 1 is now offline [ 33.576100][ T3879] ACPI: PM: Low-level resume complete [ 33.576147][ T3879] ACPI: PM: Restoring platform NVS memory [ 33.588235][ T3879] Enabling non-boot CPUs ... [ 33.588375][ T3879] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 33.593472][ T3879] CPU1 is up [ 33.593673][ T3879] ACPI: PM: Waking up from system sleep state S3 [ 33.634234][ T54] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 33.779445][ T3879] OOM killer enabled. [ 33.780066][ T3879] Restarting tasks: Starting [ 33.796873][ T3892] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.108: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 33.799745][ T28] audit: type=1400 audit(1785148292.599:208): avc: denied { write } for pid=3891 comm="syz.1.108" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.802951][ T28] audit: type=1400 audit(1785148292.599:209): avc: denied { add_name } for pid=3891 comm="syz.1.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.809224][ T3879] Restarting tasks: Done [ 33.809922][ T3879] random: crng reseeded on system resumption [ 33.811438][ T3879] PM: suspend exit [ 33.813665][ T3892] EXT4-fs (loop1): Remounting filesystem read-only [ 33.815722][ T28] audit: type=1400 audit(1785148292.599:210): avc: denied { create } for pid=3891 comm="syz.1.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.839868][ T28] audit: type=1400 audit(1785148292.639:211): avc: denied { read } for pid=3916 comm="syz.3.111" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.842365][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.847405][ T28] audit: type=1400 audit(1785148292.639:212): avc: denied { open } for pid=3916 comm="syz.3.111" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.854617][ T28] audit: type=1400 audit(1785148292.639:213): avc: denied { write } for pid=3916 comm="syz.3.111" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.899959][ T3923] set_capacity_and_notify: 2 callbacks suppressed [ 33.899974][ T3923] loop3: detected capacity change from 0 to 512 [ 33.906270][ T3926] tap0: tun_chr_ioctl cmd 1074025677 [ 33.907164][ T3926] tap0: linktype set to 780 [ 33.937091][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.939904][ T3923] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.947247][ T28] audit: type=1400 audit(1785148292.749:214): avc: denied { write } for pid=3922 comm="syz.3.113" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.950755][ T28] audit: type=1400 audit(1785148292.749:215): avc: denied { create } for pid=3922 comm="syz.3.113" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 33.987958][ T3936] coredump: 62(syz.4.117): Core dump to core aborted: cannot preserve file permissions [ 34.007750][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.029819][ T3938] loop2: detected capacity change from 0 to 256 [ 34.031709][ T3938] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.065467][ T28] audit: type=1400 audit(1785148292.869:216): avc: denied { create } for pid=3939 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.312848][ T3959] PM: suspend entry (deep) [ 34.466845][ T3790] Filesystems sync: 0.153 seconds [ 34.499942][ T3959] Freezing user space processes [ 35.267535][ T3959] Freezing user space processes completed (elapsed 0.766 seconds) [ 35.268726][ T3959] OOM killer disabled. [ 35.269390][ T3959] Freezing remaining freezable tasks [ 35.271809][ T3959] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 35.273140][ T3959] printk: Suspending console(s) (use no_console_suspend to debug) [ 35.310774][ T3959] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 35.310834][ T3959] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 35.311607][ T3959] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 35.311667][ T3959] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 35.311712][ T3959] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 35.311801][ T3959] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 35.311829][ T3959] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 35.311851][ T3959] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 35.311873][ T3959] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 35.311954][ T3959] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 35.311986][ T3959] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 35.312048][ T3959] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 35.312079][ T3959] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 35.312102][ T3959] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 35.312254][ T3959] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 35.312350][ T3959] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 35.349265][ T3831] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 35.903079][ T3959] ACPI: PM: Preparing to enter system sleep state S3 [ 35.903252][ T3959] ACPI: PM: Saving platform NVS memory [ 35.903316][ T3959] Disabling non-boot CPUs ... [ 35.907512][ T3959] smpboot: CPU 1 is now offline [ 35.914273][ T3959] ACPI: PM: Low-level resume complete [ 35.914397][ T3959] ACPI: PM: Restoring platform NVS memory [ 35.924810][ T3959] Enabling non-boot CPUs ... [ 35.924968][ T3959] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 35.928877][ T3959] CPU1 is up [ 35.929120][ T3959] ACPI: PM: Waking up from system sleep state S3 [ 35.963352][ T3708] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 36.100903][ T3959] OOM killer enabled. [ 36.101462][ T3959] Restarting tasks: Starting [ 36.122749][ T3959] Restarting tasks: Done [ 36.123532][ T3959] random: crng reseeded on system resumption [ 36.127827][ T3959] PM: suspend exit [ 36.296807][ T3988] loop3: detected capacity change from 0 to 512 [ 36.303962][ T3990] loop4: detected capacity change from 0 to 256 [ 36.305170][ T3988] EXT4-fs: Invalid want_extra_isize 4 [ 36.321447][ T3990] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.449099][ T4005] PM: suspend entry (deep) [ 36.513106][ T3779] Filesystems sync: 0.062 seconds [ 36.563248][ T4005] Freezing user space processes [ 36.567527][ T4005] Freezing user space processes completed (elapsed 0.001 seconds) [ 36.568723][ T4005] OOM killer disabled. [ 36.569346][ T4005] Freezing remaining freezable tasks [ 36.571715][ T4005] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 36.573113][ T4005] printk: Suspending console(s) (use no_console_suspend to debug) [ 36.604186][ T4005] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 36.613751][ T4005] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 36.613792][ T4005] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 36.613908][ T4005] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 36.613957][ T4005] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 36.613999][ T4005] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 36.614109][ T4005] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 36.614181][ T4005] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 36.614232][ T4005] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 36.614321][ T4005] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 36.614415][ T4005] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 36.614438][ T4005] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 36.614467][ T4005] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 36.614650][ T4005] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 36.614736][ T4005] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 36.614759][ T4005] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 36.662675][ T3762] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 37.204178][ T4005] ACPI: PM: Preparing to enter system sleep state S3 [ 37.204310][ T4005] ACPI: PM: Saving platform NVS memory [ 37.204352][ T4005] Disabling non-boot CPUs ... [ 37.208668][ T4005] smpboot: CPU 1 is now offline [ 37.216205][ T4005] ACPI: PM: Low-level resume complete [ 37.216256][ T4005] ACPI: PM: Restoring platform NVS memory [ 37.229190][ T4005] Enabling non-boot CPUs ... [ 37.229424][ T4005] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 37.233834][ T4005] CPU1 is up [ 37.233999][ T4005] ACPI: PM: Waking up from system sleep state S3 [ 37.255924][ T3915] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 37.384844][ T4005] OOM killer enabled. [ 37.385476][ T4005] Restarting tasks: Starting [ 37.403814][ T4005] Restarting tasks: Done [ 37.404523][ T4005] random: crng reseeded on system resumption [ 37.423194][ T4005] PM: suspend exit [ 37.507263][ T4037] process 'syz.2.162' launched './file1' with NULL argv: empty string added [ 37.525425][ T4039] loop5: detected capacity change from 0 to 7 [ 37.526609][ T4039] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.528497][ T4039] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.529625][ T4039] loop5: unable to read partition table [ 37.530489][ T4039] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 37.549519][ T3283] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.551924][ T3283] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.553268][ T3283] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.554564][ T3283] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.555960][ T3283] Buffer I/O error on dev loop5, logical block 0, async page read [ 37.783814][ T4059] loop1: detected capacity change from 0 to 512 [ 37.790782][ T23] ================================================================== [ 37.791450][ T4059] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 37.792008][ T23] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt [ 37.793293][ T4059] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.794093][ T23] [ 37.794099][ T23] write to 0xffff888103ca9a48 of 8 bytes by interrupt on cpu 0: [ 37.796351][ T23] ps2_interrupt+0x50d/0x550 [ 37.796489][ T4059] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.172: bad orphan inode 15 [ 37.797033][ T23] serio_interrupt+0x66/0xf0 [ 37.797061][ T23] i8042_handle_data+0x388/0x680 [ 37.797079][ T23] i8042_interrupt+0x15/0x90 [ 37.797096][ T23] __handle_irq_event_percpu+0x8b/0x480 [ 37.797121][ T23] handle_irq_event+0x64/0xf0 [ 37.797146][ T23] handle_edge_irq+0x155/0x440 [ 37.797168][ T23] __common_interrupt+0x60/0xb0 [ 37.797194][ T23] common_interrupt+0x7e/0x90 [ 37.797217][ T23] asm_common_interrupt+0x26/0x40 [ 37.797236][ T23] finish_task_switch+0x12f/0x340 [ 37.797256][ T23] __schedule+0x799/0xd10 [ 37.797280][ T23] schedule+0x5a/0xa0 [ 37.797304][ T23] worker_thread+0x645/0x750 [ 37.797330][ T23] kthread+0x221/0x270 [ 37.797346][ T23] ret_from_fork+0x146/0x330 [ 37.797371][ T23] ret_from_fork_asm+0x1a/0x30 [ 37.797391][ T23] [ 37.797398][ T23] read to 0xffff888103ca9a48 of 8 bytes by task 23 on cpu 1: [ 37.797415][ T23] ps2_do_sendbyte+0x17e/0x320 [ 37.797437][ T23] __ps2_command+0x364/0xaa0 [ 37.797465][ T23] ps2_command+0x52/0x90 [ 37.797486][ T23] im_explorer_detect+0xad/0x320 [ 37.797510][ T23] psmouse_try_protocol+0x25e/0x310 [ 37.797534][ T23] psmouse_extensions+0x6c6/0x960 [ 37.803857][ T4059] loop1: lost filesystem error report for type 5 error -117 [ 37.804272][ T23] __psmouse_reconnect+0x3da/0x8b0 [ 37.806641][ T4059] ext4_test_bit(bit=14, block=5) = 0 [ 37.806846][ T23] psmouse_reconnect+0x17/0x20 [ 37.807565][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 37.808086][ T23] serio_handle_event+0x1c7/0xac0 [ 37.808116][ T23] process_scheduled_works+0x4d4/0x9a0 [ 37.808751][ C0] EXT4-fs (loop1): initial error at time 1785148296: ext4_orphan_get:1425 [ 37.809448][ T23] worker_thread+0x569/0x750 [ 37.809799][ C0] [ 37.809808][ C0] EXT4-fs (loop1): last error at time 1785148296: ext4_orphan_get:1425 [ 37.810784][ T23] kthread+0x221/0x270 [ 37.811470][ C0] [ 37.814508][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.814834][ T23] ret_from_fork+0x146/0x330 [ 37.822512][ T4059] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.172: bg 0: block 13: invalid block bitmap [ 37.828475][ T23] ret_from_fork_asm+0x1a/0x30 [ 37.829145][ T23] [ 37.829492][ T23] value changed: 0x000000000000000f -> 0x000000000000000a [ 37.830514][ T23] [ 37.830851][ T23] Reported by Kernel Concurrency Sanitizer on: [ 37.831685][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 37.833157][ T23] Tainted: [W]=WARN [ 37.833685][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.835093][ T23] Workqueue: events_long serio_handle_event [ 37.835915][ T23] ================================================================== [ 37.851871][ T4064] PM: suspend entry (deep) [ 37.877440][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.914955][ T4048] loop2: detected capacity change from 0 to 32768 [ 37.926172][ T3784] Filesystems sync: 0.066 seconds [ 37.979095][ T4064] Freezing user space processes [ 37.983312][ T4064] Freezing user space processes completed (elapsed 0.003 seconds) [ 37.984403][ T4064] OOM killer disabled. [ 37.985026][ T4064] Freezing remaining freezable tasks [ 37.987294][ T4064] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 37.988465][ T4064] printk: Suspending console(s) (use no_console_suspend to debug) [ 38.029649][ T4064] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 38.029696][ T4064] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 38.029768][ T4064] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 38.029802][ T4064] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 38.029860][ T4064] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 38.029882][ T4064] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 38.029905][ T4064] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 38.029937][ T4064] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 38.030013][ T4064] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 38.030057][ T4064] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 38.030140][ T4064] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 38.030163][ T4064] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 38.030185][ T4064] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 38.030272][ T4064] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 38.030349][ T4064] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 38.030371][ T4064] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 38.077266][ T3899] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 38.629796][ T4064] ACPI: PM: Preparing to enter system sleep state S3 [ 38.629880][ T4064] ACPI: PM: Saving platform NVS memory [ 38.629925][ T4064] Disabling non-boot CPUs ... [ 38.634112][ T4064] smpboot: CPU 1 is now offline [ 38.640165][ T4064] ACPI: PM: Low-level resume complete [ 38.640215][ T4064] ACPI: PM: Restoring platform NVS memory [ 38.653193][ T4064] Enabling non-boot CPUs ... [ 38.653486][ T4064] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 38.657227][ T4064] CPU1 is up [ 38.657429][ T4064] ACPI: PM: Waking up from system sleep state S3 [ 38.694905][ T3710] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 38.841049][ T4064] OOM killer enabled. [ 38.841729][ T4064] Restarting tasks: Starting [ 38.843680][ T4064] Restarting tasks: Done [ 38.844453][ T4064] random: crng reseeded on system resumption [ 38.845868][ T4064] PM: suspend exit