last executing test programs: 12m48.23949407s ago: executing program 32 (id=49): setresuid(0xee00, 0xee00, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) prlimit64(r0, 0x7, 0x0, 0x0) 12m27.429512969s ago: executing program 33 (id=162): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x1a, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x76ebe000) userfaultfd(0x801) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 11m58.30998086s ago: executing program 34 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$eJzs3M1uG1UUAODjpClNKCVCLNh1JISUSLUVJ2kFuwCpAIlUET8LVuDYjuXWP1HsJKYIEVgjln0RWLFnz0uwQyyQ2BWBPDOGphQRqHGS5vuk8Zl7PXN8rlWpOnMjB3BuzSe//FyIKzEbEdMRcTkiPS/kR2otCy9ExNWImHrgKOTzf0xcjIi5iLgyTJ7lLORvfXrvcOP+YGMuz3rtZFYMnAYvRUR7Jzs/aGex28ji7Xy+st9MY3t1P4/ZG+07+bibxYP6VprhoDK6rpLGlUZ2fXdnrzeM261KdRgbze10fqeTfWBvvzHKk95wu7Kbjmv1rVG5h+l9d7PBII93e/0sTy3P93GaPvr9Uczm64N6tp6dO2msdvr5fDerr1YfDON+HnvZdFS7rVpax9Z//JLPgLebnb1Bsl/f7TW7neR6qfxyqXyjWN7t1ur9+mqx0q7dWE0WGq3hZcV+vdJea3S7jVa9VO22F5OFRrVaLJeThfX6VrPSScrl0kppqXh9MT+7lrxx6/2kVUsWhvG1Zmev32z1ku3ubpLdsZgsl1ZeWUxeLCfvbmwmm+/cvLmx+d6H6x/cenXjrdfzi/5SVrKwvLS8XCwvFZfLi/9ywb+eyvUP/4uezPofcunxbue8K5x0AQBnT9r/z8Yk+/9Pvr330/oXle/1/3COnaX+v5k35Pr/8Tsl/e/k+v9jrP/zc7R+/T+PRf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBu/TDz9ZvpyXw2fjqffyafei4fFyJiKiJ+e4TpuHgk53SeZ+Zvrp95qIbvCpFmGH7GU/kxFxFr+XH/2UfXfmGs3wQAAAA8mb45vPpV1q1nL/MnXRCTlD20mbr80ZjyFSJiZv7HMWWbGr48P6Zk6b/vCzEYU7b0AdalMSXLH4p9NqZ0xzJ9JFx6IBSyMDXJagAAgMk42gnYUQcAAHhyfXnSBTB+x9m/K8RoK3O0F5z+5f2fG4KzR0YAAADAGVQ46QIAAACA/13a/5/l3/8DAAAA/ln2+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRHMCfDW7pl4qqLiv1Kt3BMXqELrtEHKCX4Aj0CrkAZyC7HCHCER6j4IhIURgbBf1+kj/Ggj/PiM2bQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT7fVev5/8fPfuTm7+jx57gYAAAA4ZVut583JNI0/tde/tJe+teMiIsqIONW7j+JdJ3PU5lTPvL56UsNNRJOw/4z37fYxIn612/3Xvr8FAAAAuF6b5WqWuvW0m166IIaUJm3Kz78z5RURUU3vMqWV+933TGHN73scfzOlNRNYk0xhacptnCvtRUadw+ToUKRDOWg5AADAILqdwLBdCAAAAEP6c3S+uGAdDKyIw1LmYS24+ef944Lgh84IAAAAeIOKSxcAAAAA9K7p/z3/DwAAAK5bev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdpW6/lmuZqdm7OrX+HHJL25rusMtwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MD+vKNACIRBGOxd35nM/Q8rDRobmlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xpJFQcA/M3uzt4PkFujLJyNJ56cKF6y5y8EmyuEYCFYieWS2z1W91TuUnhHCtNYCP4HNtpeIwQEOQv/giusvDI2EWSLCBZWyvyKk2zQiZrZ3dznA2/eN5OXed83gZDvvEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMLkarhQxM3k0MniRn7ux92NtaR/cKBP7PTvnk9aEkf1pr1wWsk96s46CwAAAE66ZlHfhxC2463VpG900vr/mWJMUvNvPJLFRT1/sO4v+qL2T9q97756e2+iTjZPHEL4pjMerNS2wvl2seK4cxXGpM8Ssic0zfTb1nhz87FJnN716PP7999op+Gp/5YxAPB/uFz0eTCMPkl/PxqOxoPeLBMDYHG1/vnTxZCi/m92asgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMYmm+H5Io5CCE+0/ooTD3Y31g7rd/p3zxft3LuPf1q+ZnKJOIQwHI0Hp2tcyzy7WHHcrdt33u+Px4ObRwqe/FdfJRAIFiU45h9QAACcKHHekrp+O95aTc5FSyH88eX++v9SKQ4V6//vR/culecq1/+92lY436rW/8vrNz5avnX7zgujG/3rg+uDD670Xuq9uvLay71XlpP7uZIdjzlbAAAAFlU7b+X6v7E0vf9/thSHivX/Dz+/80t5rqb6f8rR9/+POSEAAICH2KMXfvs1OuR81G6Hj/vr6zd72XHv4yvZcQap/r0z06dO5a1c/zeXZpAbAAAAULvJZrRv//9aKQ4V9/+/fe73L8rXbOaPIIaj8eDy2ofja/UtZ25N7/93Dh1Xx58T17BcAAAAZuRM3sr7/3H6/n/jqWJMI4Tw7NNZnP8bwEr1/+utz66W5yq///9ifUucS41udj+qvP+fju2G0OrWkBgAAAAn0um8JfX/T/HW6ntfn32r7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kf+5tEwbCOA6/viRK3CYjpLf4mIGGCsEKgIRkyTMwAAvRUNFaLAIrgATnms5QPE/z/xVX3AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvL3r0xcfEVFE6jJFmm7/zp8R8RVp17aT73sW+8up+Xnk4nCc5fyN+X8ZEWUUfZwDANC7qtsc6029GuQd5h3lHeetyqZevvLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA//9fbFmx") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$COMEDI_RANGEINFO(r1, 0x80106408, 0x0) 11m44.916080644s ago: executing program 6 (id=402): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="70000000100039040200"/20, @ANYRES32, @ANYBLOB="40100000004104002800128008000100677265003a000280080007000a01010008001400d6000097bad69711e703de034f0f3eb69f0006000f00030000000a000100aaaaaaaaaaaa0000140014007465616d3000000000000000000000000800040006"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008"], 0x40}, 0x1, 0x0, 0x0, 0x2004c805}, 0x0) 11m44.356065854s ago: executing program 6 (id=409): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001001b0000006818b25f190954cd0000100041f152bf357ee9"], 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m44.08474766s ago: executing program 6 (id=412): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/164, 0xa4}, 0x3}], 0x1, 0x45833af92e4b38ff, 0x0) 11m42.90675025s ago: executing program 6 (id=421): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x180040c, &(0x7f0000000140)={[{@nogrpid}, {@dioread_nolock}, {@resgid}, {}, {@test_dummy_encryption_v1}]}, 0x1, 0x616, &(0x7f0000000340)="$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") mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11m42.276700112s ago: executing program 6 (id=424): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 11m41.674721263s ago: executing program 6 (id=428): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 11m41.207786272s ago: executing program 35 (id=428): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10m2.310755024s ago: executing program 7 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 10m2.089499738s ago: executing program 7 (id=1072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe8000/0x1000)=nil, r4, 0x2, 0x80011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 10m1.482818929s ago: executing program 7 (id=1077): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x40810) syz_open_procfs(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) 10m1.257984223s ago: executing program 7 (id=1080): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 10m0.245994592s ago: executing program 7 (id=1084): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x5d031, 0xffffffffffffffff, 0x0) 9m58.866656846s ago: executing program 7 (id=1089): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) 9m58.300530567s ago: executing program 36 (id=1089): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) 9m40.02133577s ago: executing program 8 (id=1192): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x28}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) 9m39.719691446s ago: executing program 8 (id=1194): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x4100030b) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x80000308) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 9m39.546376029s ago: executing program 8 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 9m39.410548171s ago: executing program 8 (id=1198): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@rodir}, {@shortname_lower}, {@utf8no}, {@shortname_winnt}, {@utf8}]}, 0x0, 0x2b1, &(0x7f0000000840)="$eJzs3c9r024cwPHPt92PrmNrD+MLCuIHveglbPUvKLKBWFDmKupByFyqpbEZTa1UxO7m1b9jePSkoP4Du3jzLl6GIHjZQYwsTbZsC3Od6zLX9wtGnj3P81meZ09aPgkkWb/z6nGt4hoVsympjEpKZEU2RPKbpcB/wTbll0ckakUuj//4fO7W3XvXi6XS7LzqXHHhSkFVJ8+/f/r89YWPzfHbbybfjcpa/v7698KXtf/Xzqz/Wgj/uiNi6qLjNM1F29KlqlszVG/alulaWq27VqOpkfaK7Swvt9WsL01klxuW66pZb2vNamvT0WajreZDs1pXwzB0IiuDJt1zRHl1ft4s9mUwSMJYXGWjUTTTsY3l1eMYFAAAOFmSyv8fVV2tulp3duT3e/P/lPSQ/4sMdP7fu57y/9E+DwZ9spn/Z7c+xVHk/wAAAAAAAAAAAAAAAAAAAAAA/As2PC/neV4u3IY/oyKSEZHw96THif5g/Qdb5Ma9jIj9slVulbvbbnuxIlWxxZLpYZGf/vEQ6JbnrpVmp9WXlw92J4jvtMpp/4YxPz6Uj4+f6cZrNL4jw5KN7r8gOZmKjy/ExLfKI3Lpohfes2aJITn59EAcsWXJP66341/MqF69UdoVP+b3AwAAAADgNDB0y57zd7/d0PBBQLvau5Xb1wck94frA7vOr4fk7FBy8wYAAAAAYJC47Wc107atxqkoeLn9+oTvPziSfSX/r8vUTLsTTGnfzkMiEtS8PRHLdMBCanNihwxP/90qfxORHTVTiS/3URS+PgkOlwN0TuobCQAAAEC/hEl/3NtBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8Tjow8PC/od59lhkd+lkZgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDL8DAAD//yfnFMM=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 9m39.154455216s ago: executing program 8 (id=1201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f00000010c0)="1feb4934c3a9dd7b4a6487a396e4a71fdc2e89eb3d6578aefbddb891034a52a3b66f79499db172def10fc8db93f99bc0c966b43520d9dfb463a66e0d4394322d7b12a2c4a2021e73c6f08cd14bfdf4565bf2ae6509a78fcdd601fdbda3c358450b3c4faa4225bfb17eb25fdedd57edba4b5ef399040800000000000041f15918f3", 0x81}, {&(0x7f00000003c0)="51e4b68f19536342b73677cd5193777110de0eae1de8642c503cfd94f0929123460e2fe755b2ef981f6cb4794a5c33e2b006c993cfebcfdd2813b72755830fc1bcfbbd7a1ff49f6ec717c6e10cfe71375323712d4f2882b87c870932ce4a5ad25b467da6530db47373882b", 0x6b}, {&(0x7f0000000140)="8682d68bf197cfcfb4d1c8f754288b238afd9bb95e245b25f7f0ee2aea5e3994c570b2995e5b4d002855fd74a42ea4adc6fdb48eced6938e98f566c5aa74c8", 0x3f}, {&(0x7f00000001c0)="af930f839896cd6a27c09f1e7cdc9c7d3f9a35c4552ebd13766b87946822df5f7a5217f835603e3e8d9733823b5f98a2a3bef845f19a47060a02", 0x3a}, {&(0x7f0000001300)="a90e3d7b8a5479a2f0458411bddb88a48fd1959dd300ff511daadcc1ac0d53152efed2e14f33938bf77d08f56cdc796e03a1a9ec42d287bb519b115cfb82955d0ae005c709521d5f60eade09372ecdd859451d847e604859331c426712117ae10d6b688512875fe940377e", 0x6b}, {&(0x7f0000001500)="1df5cf947b8580fc5790cccc28fecc918594c64112b0268e34ef2cb9b5e34e3c7be27759b0a6a7e0ec3a0ea8c7cb52669a07864d42b618041a6a5c090c62786b7d742437533a", 0x46}], 0x6) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xf) 9m38.722625104s ago: executing program 8 (id=1203): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = dup(r1) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081020000ff00000000000000f50f0000000000009800000000000000010400"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9m38.214484873s ago: executing program 37 (id=1203): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = dup(r1) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081020000ff00000000000000f50f0000000000009800000000000000010400"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m23.282390988s ago: executing program 9 (id=1840): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x68, {"660f3880590fc7442400ce374265c74424020b000000c7442406000000000f011424c461116431c4828bf635130000003e2ef2460f2cc5450f0666ba4300b800000000eff20f2cae00880000660f38812766b804008ec8"}}], 0x80}) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m23.094188062s ago: executing program 9 (id=1842): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) write(r0, 0x0, 0x0) 8m22.66564329s ago: executing program 9 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xff0, &(0x7f00000014c0)=""/4080, 0x0, 0xc}, 0x94) 8m22.474407373s ago: executing program 9 (id=1851): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 8m22.261471677s ago: executing program 9 (id=1852): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x103880) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x0) 8m21.857335864s ago: executing program 9 (id=1856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x29, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r1, 0xd4741000) 8m21.53909251s ago: executing program 38 (id=1856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x29, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r1, 0xd4741000) 7m32.733997135s ago: executing program 2 (id=2211): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8fffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) fallocate(r3, 0x3, 0x2, 0x8000c62) 7m32.616033796s ago: executing program 2 (id=2212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) close_range(r0, 0xffffffffffffffff, 0x0) 7m32.452009718s ago: executing program 2 (id=2215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={r1, r2}) 7m32.27701736s ago: executing program 2 (id=2217): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4029, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 7m32.112328182s ago: executing program 2 (id=2219): r0 = getpid() setpriority(0x0, r0, 0x2a14b58) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 7m30.61061842s ago: executing program 2 (id=2230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7m30.136273435s ago: executing program 39 (id=2230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m32.17558398s ago: executing program 1 (id=3274): sched_setscheduler(0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) close_range(r0, 0xffffffffffffffff, 0x0) 3m31.448805538s ago: executing program 1 (id=3277): socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x20) 3m30.337451271s ago: executing program 1 (id=3280): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='nouser_xattr,active_logs=0,active_logs=4,nobarrier,fastboot,fastboot,prjjquota=-{,jqfmt=vfsv1,background_gc=off,fastboot,\x00'], 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 3m26.824667143s ago: executing program 1 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m26.399405818s ago: executing program 1 (id=3291): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) futimesat(r1, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340)={{0x0, 0x2710}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 3m26.010866553s ago: executing program 0 (id=3293): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x46c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x43c, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x8, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xcefb, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7fffffff, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x5, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x1, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8000, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x9, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x101, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0x80, 0xe00, 0x80000001, 0x80000000, 0xf, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x0, 0x2, 0x7, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x5, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0x9, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x1, 0x81, 0x8, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 3m25.955171733s ago: executing program 1 (id=3294): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 3m25.166204973s ago: executing program 0 (id=3296): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x18e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe6) mmap(&(0x7f00003a6000/0x3000)=nil, 0x3000, 0x200000d, 0x20812, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m17.348705025s ago: executing program 0 (id=3301): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) creat(&(0x7f00000003c0)='./file1\x00', 0x25) 3m16.383640686s ago: executing program 0 (id=3304): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc8040, 0x2c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) getdents(r2, &(0x7f00000002c0)=""/242, 0xf2) 3m15.402494118s ago: executing program 0 (id=3306): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m12.968140427s ago: executing program 0 (id=3309): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 3m10.579630775s ago: executing program 40 (id=3294): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 2m56.207525655s ago: executing program 41 (id=3309): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 2m27.08360717s ago: executing program 3 (id=3361): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r1, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 2m26.21689461s ago: executing program 3 (id=3363): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1f4) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(0x3) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m24.878060296s ago: executing program 3 (id=3365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf68144615", 0x4e}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c4166", 0x92}], 0x2}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 2m24.48538997s ago: executing program 3 (id=3366): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) 2m21.819061512s ago: executing program 3 (id=3372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x6}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x8, 0x4}, @window={0x3, 0x8, 0xa}, @timestamp, @window={0x3, 0x2}, @timestamp], 0x8) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 2m18.336406813s ago: executing program 3 (id=3375): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 2m16.677094053s ago: executing program 42 (id=3375): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 11.00216708s ago: executing program 4 (id=3489): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x3, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x662c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000000400)="a5", 0x1, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x70c}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x7, 0x280000000}) 10.556641354s ago: executing program 4 (id=3491): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x8, {0x40000000000003, 0x0, 0x2, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x4, 0x7, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x2, 0x9, 0x0, 0x0, 0x100, 0xb}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x5393, &(0x7f0000000000)) 10.1254811s ago: executing program 4 (id=3492): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0xd00}], 0x1}, 0x2002) 9.579660986s ago: executing program 4 (id=3493): socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000040)='rootmode', 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.28862161s ago: executing program 5 (id=3494): setresuid(0xee01, 0xee00, 0x0) setuid(0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) creat(&(0x7f0000000140)='./file0\x00', 0x106) 9.121212611s ago: executing program 4 (id=3495): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 8.275651401s ago: executing program 5 (id=3496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x604a6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 7.766215528s ago: executing program 5 (id=3497): socket(0x2, 0x3, 0xff) r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) 7.428622702s ago: executing program 5 (id=3498): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffea6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) 7.090737466s ago: executing program 5 (id=3499): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x19d, &(0x7f0000000240)="$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") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 549.556583ms ago: executing program 5 (id=3500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="d8000000000000000500000000000000040000000000000003000000000000000800000000000000b70300000000000006000000070000000000000001000000000000000000008099301b9e002000008100000000000000f9ffffffffffffff020000000000000001000000aa0b0000a70500000020000000010000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0c0000000700000000000000020000000000000009000000000000002a"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 0s ago: executing program 4 (id=3501): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r3, r2, 0x6, 0x0) kernel console output (not intermixed with test programs): loop2): rebuilding free space tree [ 197.920065][ T8294] BTRFS info (device loop2): disabling free space tree [ 197.938101][ T8294] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.974988][ T8345] mmap: syz.7.609 (8345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.997801][ T8294] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.650678][ T5770] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.195396][ T8358] netlink: 372 bytes leftover after parsing attributes in process `syz.2.603'. [ 199.986260][ T8351] loop0: detected capacity change from 0 to 40427 [ 200.034906][ T8351] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 200.066905][ T8351] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 200.090598][ T8351] F2FS-fs (loop0): invalid crc value [ 200.330157][ T8351] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 200.337291][ T8351] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.678821][ T5771] bio_check_eod: 3 callbacks suppressed [ 200.678841][ T5771] syz-executor: attempt to access beyond end of device [ 200.678841][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.766123][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 200.797325][ T4995] nci: nci_ntf_packet: unknown ntf opcode 0x4 [ 201.024941][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.7.617'. [ 201.055167][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.7.617'. [ 201.445015][ T8401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.037014][ T8435] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 202.108612][ T8438] "syz.1.631" (8438) uses obsolete ecb(arc4) skcipher [ 202.183392][ T8440] input: syz0 as /devices/virtual/input/input12 [ 203.162302][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.630'. [ 203.221265][ T8467] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.230626][ T8467] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.239729][ T8467] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.248544][ T8467] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.307586][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.630'. [ 203.777939][ T8483] loop2: detected capacity change from 0 to 1024 [ 205.150196][ T8523] input: syz0 as /devices/virtual/input/input13 [ 205.303647][ T8529] input: syz0 as /devices/virtual/input/input14 [ 206.917838][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 206.924826][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 207.219212][ T8592] loop7: detected capacity change from 0 to 16384 [ 207.508527][ T8596] loop7: detected capacity change from 16384 to 0 [ 208.678808][ T1188] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.888007][ T28] audit: type=1800 audit(1777938926.648:19): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.673" name="file0" dev="overlay" ino=967 res=0 errno=0 [ 208.913692][ T1188] usb 3-1: Using ep0 maxpacket: 8 [ 208.948460][ T1188] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 208.956611][ T1188] usb 3-1: config 2 has no interface number 0 [ 208.977764][ T1188] usb 3-1: config 2 interface 31 has no altsetting 0 [ 208.988355][ T1188] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 209.007809][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.022148][ T1188] usb 3-1: Product: syz [ 209.040765][ T1188] usb 3-1: Manufacturer: syz [ 209.045529][ T1188] usb 3-1: SerialNumber: syz [ 209.713533][ T1188] ch9200: probe of 3-1:2.31 failed with error -22 [ 209.768286][ T1188] usb 3-1: USB disconnect, device number 9 [ 210.750861][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 211.089512][ T8681] loop0: detected capacity change from 0 to 2048 [ 211.131967][ T8681] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 213.954387][ T8730] loop0: detected capacity change from 0 to 512 [ 213.989510][ T8730] EXT4-fs: Ignoring removed bh option [ 214.019592][ T8730] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 214.048472][ T8730] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 214.078021][ T8730] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.697: Corrupt directory, running e2fsck is recommended [ 214.140966][ T8730] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 214.164170][ T8730] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.697: corrupted in-inode xattr: invalid ea_ino [ 214.226300][ T8730] EXT4-fs (loop0): Remounting filesystem read-only [ 214.253459][ T8730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.365586][ T8730] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 214.384448][ T8730] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 214.403547][ T8745] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 214.439507][ T8745] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 214.471744][ T8730] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.697: Corrupt directory, running e2fsck is recommended [ 214.494409][ T8745] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.697: Corrupt directory, running e2fsck is recommended [ 214.568134][ T8746] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 214.608986][ T8746] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 214.649134][ T8746] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.697: Corrupt directory, running e2fsck is recommended [ 214.709711][ T8730] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 214.821539][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.985037][ T8763] "syz.2.705" (8763) uses obsolete ecb(arc4) skcipher [ 215.725444][ T8784] overlayfs: missing 'workdir' [ 217.250454][ T8829] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 217.270784][ T8829] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 217.544734][ T8839] overlayfs: failed to clone upperpath [ 217.644859][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.730'. [ 218.650958][ T8880] loop7: detected capacity change from 0 to 128 [ 218.760673][ T8880] syz.7.740: attempt to access beyond end of device [ 218.760673][ T8880] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 218.877475][ T8887] loop0: detected capacity change from 0 to 1024 [ 218.894599][ T8880] syz.7.740: attempt to access beyond end of device [ 218.894599][ T8880] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 218.905535][ T8887] EXT4-fs: Ignoring removed orlov option [ 218.963104][ T8887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.996525][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 219.012638][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.020388][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.337485][ T8906] tipc: Failed to remove unknown binding: 66,1,1/0:2665230467/2665230469 [ 219.346230][ T8906] tipc: Failed to remove unknown binding: 66,1,1/0:2665230467/2665230469 [ 219.439315][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.799862][ T8918] batadv_slave_1: entered promiscuous mode [ 219.864603][ T8917] batadv_slave_1: left promiscuous mode [ 220.107539][ T8929] loop2: detected capacity change from 0 to 512 [ 220.187898][ T8929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.253531][ T8929] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.753: iget: bad i_size value: 38620345925642 [ 220.287723][ T8929] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.753: couldn't read orphan inode 15 (err -117) [ 220.318034][ T8929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.605435][ T8929] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.753: bg 0: block 5: invalid block bitmap [ 220.658698][ T8929] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 220.727808][ T8929] EXT4-fs (loop2): This should not happen!! Data will be lost [ 220.727808][ T8929] [ 220.749609][ T8945] netlink: 'syz.7.757': attribute type 5 has an invalid length. [ 220.769268][ T8929] EXT4-fs (loop2): Total free blocks count 0 [ 220.775358][ T8929] EXT4-fs (loop2): Free/Dirty block details [ 220.794266][ T8929] EXT4-fs (loop2): free_blocks=0 [ 220.822718][ T8929] EXT4-fs (loop2): dirty_blocks=208 [ 220.838848][ T8929] EXT4-fs (loop2): Block reservation details [ 220.855607][ T8929] EXT4-fs (loop2): i_reserved_data_blocks=208 [ 221.114114][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.666343][ T8966] loop7: detected capacity change from 0 to 16 [ 221.714130][ T8966] erofs: (device loop7): mounted with root inode @ nid 36. [ 221.726371][ T8967] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 221.836445][ T8966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 221.875608][ T8948] loop0: detected capacity change from 0 to 40427 [ 221.938056][ T8948] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 221.944609][ T8948] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 223.667975][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 223.713082][ T9011] sctp: [Deprecated]: syz.0.775 (pid 9011) Use of int in max_burst socket option. [ 223.713082][ T9011] Use struct sctp_assoc_value instead [ 223.863351][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 223.885950][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.918830][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.943549][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.964674][ T9] usb 8-1: Product: syz [ 223.981295][ T9] usb 8-1: Manufacturer: syz [ 223.996349][ T9] usb 8-1: SerialNumber: syz [ 224.015315][ T9] usb 8-1: config 0 descriptor?? [ 224.031338][ T9008] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 224.059914][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 224.087915][ T9] hub: probe of 8-1:0.0 failed with error -5 [ 224.438630][ T8991] loop2: detected capacity change from 0 to 65536 [ 224.499005][ T8991] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 224.554326][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.612952][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.642449][ T8991] XFS (loop2): Ending clean mount [ 224.682471][ T8991] XFS (loop2): Quotacheck needed: Please wait. [ 224.881278][ T8991] XFS (loop2): Quotacheck: Done. [ 225.332637][ T5770] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 226.119436][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 226.126678][ T5777] Bluetooth: hci4: command 0x1003 tx timeout [ 226.387860][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.780'. [ 226.427851][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 227.847031][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 227.927764][ T5832] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 228.034967][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 228.051819][ T9146] netlink: 'syz.0.797': attribute type 25 has an invalid length. [ 228.066363][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 228.089199][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 228.116266][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.142465][ T5832] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.163328][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.213379][ T5832] usb 3-1: config 0 descriptor?? [ 228.296581][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 228.327365][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 228.477076][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 228.484853][ T5832] usbhid: probe of 3-1:0.0 failed with error -71 [ 228.502850][ T5832] usb 3-1: USB disconnect, device number 10 [ 229.052730][ T5882] usb 8-1: USB disconnect, device number 3 [ 229.109754][ T5832] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.335579][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 229.360558][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.391467][ T5832] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 229.418148][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.448806][ T5832] usb 3-1: config 0 descriptor?? [ 229.472600][ T5832] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.505212][ T5832] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 229.927116][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 229.934362][ T5882] usb 3-1: USB disconnect, device number 11 [ 229.968155][ T5882] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 230.791682][ T9207] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 230.791682][ T9207] Q&|xùX [ 231.632448][ T9225] "syz.2.824" (9225) uses obsolete ecb(arc4) skcipher [ 235.294334][ T9296] loop7: detected capacity change from 0 to 40427 [ 235.331286][ T9296] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 235.347902][ T9296] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 237.841000][ T9389] netlink: 'syz.7.867': attribute type 1 has an invalid length. [ 237.931446][ T9389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.093716][ T9394] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 238.786937][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 239.626342][ T9430] overlayfs: failed to clone upperpath [ 240.639710][ T28] audit: type=1326 audit(1777938958.408:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 240.713934][ T28] audit: type=1326 audit(1777938958.438:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 240.817882][ T28] audit: type=1326 audit(1777938958.468:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 240.904637][ T28] audit: type=1326 audit(1777938958.468:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 240.966371][ T28] audit: type=1326 audit(1777938958.468:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 241.057788][ T28] audit: type=1326 audit(1777938958.468:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 241.133287][ T28] audit: type=1326 audit(1777938958.468:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 241.217048][ T28] audit: type=1326 audit(1777938958.478:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 241.283347][ T28] audit: type=1326 audit(1777938958.478:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 241.385079][ T28] audit: type=1326 audit(1777938958.478:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.0.883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 241.610802][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.891'. [ 241.692591][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.891'. [ 242.725214][ T9512] loop7: detected capacity change from 0 to 16 [ 242.776593][ T9512] erofs: (device loop7): mounted with root inode @ nid 36. [ 242.862178][ T9512] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 242.886540][ T9512] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 242.899897][ T9512] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 242.913319][ T9512] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 245.756724][ T9566] netlink: 44 bytes leftover after parsing attributes in process `syz.7.923'. [ 246.506364][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 246.522574][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 246.678592][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 246.886877][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 246.904998][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.926264][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.943342][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.961371][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.991139][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.017559][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.200467][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 247.200482][ T28] audit: type=1326 audit(1777938964.968:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.253723][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 247.266402][ T27] usbtmc 3-1:16.0: can't read capabilities [ 247.280284][ T28] audit: type=1326 audit(1777938964.998:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.334166][ T28] audit: type=1326 audit(1777938965.008:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.382511][ T28] audit: type=1326 audit(1777938965.008:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.410067][ T28] audit: type=1326 audit(1777938965.008:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.438745][ T28] audit: type=1326 audit(1777938965.008:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.480549][ T5832] usb 3-1: USB disconnect, device number 13 [ 247.500796][ T28] audit: type=1326 audit(1777938965.008:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.529708][ T28] audit: type=1326 audit(1777938965.008:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.555267][ T28] audit: type=1326 audit(1777938965.008:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb5ff79cdd9 code=0x7ffc0000 [ 247.591956][ T28] audit: type=1326 audit(1777938965.008:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.7.938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5ff796b57 code=0x7ffc0000 [ 249.929240][ T9640] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 249.929240][ T9640] ˆ8ŒS?R™Ú7Î)̇ [ 252.688407][ T9670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.959'. [ 252.708164][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 252.725319][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 252.759464][ T9670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.959'. [ 252.787053][ T9670] netlink: 43 bytes leftover after parsing attributes in process `syz.1.959'. [ 252.817912][ T9670] netlink: 'syz.1.959': attribute type 5 has an invalid length. [ 252.828586][ T9670] netlink: 43 bytes leftover after parsing attributes in process `syz.1.959'. [ 252.923309][ T9672] syzkaller0: entered promiscuous mode [ 252.929125][ T9672] syzkaller0: entered allmulticast mode [ 253.514292][ T9687] loop7: detected capacity change from 0 to 1024 [ 253.544172][ T9687] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 253.562678][ T9687] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 253.575013][ T9687] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 253.600389][ T9687] EXT4-fs error (device loop7): ext4_get_journal_inode:5820: inode #5: comm syz.7.968: unexpected bad inode w/o EXT4_IGET_BAD [ 253.618979][ T9687] EXT4-fs (loop7): no journal found [ 253.624390][ T9687] EXT4-fs (loop7): can't get journal size [ 253.648431][ T9687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.807064][ T7586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.931887][ T9697] sctp: [Deprecated]: syz.7.972 (pid 9697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.931887][ T9697] Use struct sctp_sack_info instead [ 255.621437][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.988'. [ 255.682128][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.988'. [ 255.834001][ T9773] loop7: detected capacity change from 0 to 4096 [ 255.884821][ T7449] blk_print_req_error: 15 callbacks suppressed [ 255.884848][ T7449] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.061506][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.077806][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.386453][ T9837] tipc: Started in network mode [ 258.406766][ T9837] tipc: Node identity 7f000001, cluster identity 4711 [ 258.431717][ T9837] tipc: Enabled bearer , priority 10 [ 258.596308][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 258.632210][ T9843] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1013'. [ 259.102593][ T9857] netlink: 'syz.2.1019': attribute type 16 has an invalid length. [ 259.111272][ T9857] netlink: 'syz.2.1019': attribute type 17 has an invalid length. [ 259.145507][ T9857] ip_vti0: left promiscuous mode [ 259.188878][ T9857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.431717][ T27] tipc: Node number set to 2130706433 [ 260.658572][ T28] kauditd_printk_skb: 1101 callbacks suppressed [ 260.658588][ T28] audit: type=1326 audit(1777938978.428:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f82e3396b57 code=0x0 [ 260.808264][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 261.007979][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 261.030538][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.050383][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.089834][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.130461][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.179157][ T9] usb 8-1: Product: syz [ 261.183464][ T9] usb 8-1: Manufacturer: syz [ 261.198369][ T9] usb 8-1: SerialNumber: syz [ 261.436795][ T9] usb 8-1: 0:2 : does not exist [ 261.464892][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 261.521611][ T9] usb 8-1: USB disconnect, device number 4 [ 261.579160][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.678014][ T5813] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 261.868009][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 261.879456][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 261.888674][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.896740][ T5813] usb 3-1: Product: syz [ 261.901153][ T5813] usb 3-1: Manufacturer: syz [ 261.905825][ T5813] usb 3-1: SerialNumber: syz [ 261.914879][ T5813] usb 3-1: config 0 descriptor?? [ 261.925314][ T5813] gspca_main: spca508-2.14.0 probing 041e:4018 [ 262.106545][ T9927] loop7: detected capacity change from 0 to 2048 [ 262.131825][ T5813] gspca_spca508: reg_read err -32 [ 262.156703][ T5813] gspca_spca508: reg_read err -32 [ 262.176658][ T5813] gspca_spca508: reg_read err -32 [ 262.176976][ T9927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.193829][ T5813] gspca_spca508: reg_read err -32 [ 262.210732][ T5813] gspca_spca508: reg_read err -32 [ 262.429493][ T5813] gspca_spca508: reg write: error -71 [ 262.435067][ T5813] spca508: probe of 3-1:0.0 failed with error -71 [ 262.468871][ T5813] usb 3-1: USB disconnect, device number 14 [ 262.917023][ T9951] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 262.948532][ T9951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.080995][ T9951] bond1: (slave gretap1): making interface the new active one [ 263.121051][ T9951] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 263.168139][ T9951] syz.0.1059 (9951) used greatest stack depth: 18440 bytes left [ 263.612636][ T9965] loop2: detected capacity change from 0 to 2048 [ 263.682626][ T9965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.078268][ T9977] netlink: 'syz.7.1068': attribute type 3 has an invalid length. [ 264.086913][ T9977] netlink: 'syz.7.1068': attribute type 3 has an invalid length. [ 264.270792][ T9981] loop2: detected capacity change from 0 to 2048 [ 264.303245][ T9981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.349285][ T28] audit: type=1800 audit(1777938982.118:1150): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1071" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 264.402957][ T28] audit: type=1800 audit(1777938982.158:1151): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1071" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 264.962816][T10002] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 265.163283][T10006] loop7: detected capacity change from 0 to 2048 [ 265.269663][ T1188] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 265.371403][T10006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.468642][ T1188] usb 3-1: Using ep0 maxpacket: 8 [ 265.480075][ T1188] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 265.488839][ T1188] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.507731][ T1188] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.523447][ T1188] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.551159][ T1188] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.588019][ T1188] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.607909][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.620100][T10006] loop7: detected capacity change from 2048 to 0 [ 265.664608][T10018] syz.7.1080: attempt to access beyond end of device [ 265.664608][T10018] loop7: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 265.713935][T10018] syz.7.1080: attempt to access beyond end of device [ 265.713935][T10018] loop7: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 265.766959][T10018] syz.7.1080: attempt to access beyond end of device [ 265.766959][T10018] loop7: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 265.817994][T10018] syz.7.1080: attempt to access beyond end of device [ 265.817994][T10018] loop7: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 265.837463][ T1188] usb 3-1: GET_CAPABILITIES returned 0 [ 265.852464][ T1188] usbtmc 3-1:16.0: can't read capabilities [ 265.861257][ C1] I/O error, dev loop7, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.875500][T10018] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4619: inode #5: block 4: comm syz.7.1080: unable to read itable block [ 265.909329][T10018] syz.7.1080: attempt to access beyond end of device [ 265.909329][T10018] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 265.927334][T10018] buffer_io_error: 1 callbacks suppressed [ 265.927351][T10018] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 265.942448][T10018] EXT4-fs (loop7): I/O error while writing superblock [ 266.034708][ T7586] syz-executor: attempt to access beyond end of device [ 266.034708][ T7586] loop7: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 266.165634][ T5835] usb 3-1: USB disconnect, device number 15 [ 266.175380][T10004] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 266.203170][T10019] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 266.343244][ T9955] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.369446][ T9955] syz.7.1060: attempt to access beyond end of device [ 266.369446][ T9955] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 266.402187][ T9955] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 266.411533][ T9955] EXT4-fs (loop7): I/O error while writing superblock [ 266.428412][T10007] kmmpd-loop7: attempt to access beyond end of device [ 266.428412][T10007] loop7: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 266.448998][T10007] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 266.580926][ T9955] bond1: (slave syz_tun): Removing an active aggregator [ 266.611914][ T9955] bond1: (slave syz_tun): Releasing backup interface [ 266.782103][ T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.800142][ T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.959336][ T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.016555][ T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.094737][T10027] loop2: detected capacity change from 0 to 128 [ 267.187725][ T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.189610][T10027] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.213775][T10027] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.293661][ T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.398388][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.515279][ T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.566704][ T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.635469][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.658535][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.688973][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.705976][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.714044][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.723678][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.104658][T10045] chnl_net:caif_netlink_parms(): no params data found [ 269.254678][T10045] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.263756][T10045] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.275939][T10045] bridge_slave_0: entered allmulticast mode [ 269.285287][T10045] bridge_slave_0: entered promiscuous mode [ 269.352994][T10045] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.365603][T10045] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.373211][T10045] bridge_slave_1: entered allmulticast mode [ 269.389338][T10045] bridge_slave_1: entered promiscuous mode [ 269.458530][ T33] hsr_slave_0: left promiscuous mode [ 269.470128][ T33] hsr_slave_1: left promiscuous mode [ 269.476600][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.493129][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.501880][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.515023][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.523606][ T33] bridge_slave_1: left allmulticast mode [ 269.535046][ T33] bridge_slave_1: left promiscuous mode [ 269.542394][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.563735][ T33] bridge_slave_0: left allmulticast mode [ 269.574141][ T33] bridge_slave_0: left promiscuous mode [ 269.581508][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.634488][ T33] veth1_macvtap: left promiscuous mode [ 269.641173][ T33] veth0_macvtap: left promiscuous mode [ 269.648330][ T33] veth1_vlan: left promiscuous mode [ 269.653748][ T33] veth0_vlan: left promiscuous mode [ 270.158060][ T33] bond1 (unregistering): Released all slaves [ 270.762273][ T51] Bluetooth: hci3: command tx timeout [ 270.896253][ T33] team0 (unregistering): Port device team_slave_1 removed [ 270.964469][ T33] team0 (unregistering): Port device team_slave_0 removed [ 271.030458][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.104510][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.670333][ T33] bond0 (unregistering): Released all slaves [ 271.910775][T10045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.951614][T10045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.066518][T10045] team0: Port device team_slave_0 added [ 272.102937][T10045] team0: Port device team_slave_1 added [ 272.185603][T10045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.198774][T10045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.227527][T10045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.241160][T10045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.267810][T10045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.301663][T10045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.406550][T10045] hsr_slave_0: entered promiscuous mode [ 272.416851][T10045] hsr_slave_1: entered promiscuous mode [ 272.424655][T10045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.436033][T10045] Cannot create hsr debugfs directory [ 272.732133][T10045] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 272.743421][T10045] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 272.757210][T10045] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 272.784300][T10045] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 272.838521][ T51] Bluetooth: hci3: command tx timeout [ 272.944669][T10045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.979364][T10045] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.007025][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.014337][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.041310][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.048581][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.388916][T10045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.762115][T10045] veth0_vlan: entered promiscuous mode [ 273.777247][T10045] veth1_vlan: entered promiscuous mode [ 273.833475][T10045] veth0_macvtap: entered promiscuous mode [ 273.848415][T10045] veth1_macvtap: entered promiscuous mode [ 273.870177][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.881491][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.892039][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.909315][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.922930][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.935012][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.952942][T10045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.983653][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.001984][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.017419][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.033957][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.044661][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.061475][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.075885][T10045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.103779][T10045] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.115497][T10045] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.136122][T10045] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.147474][T10045] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.298749][ T9759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.306664][ T9759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.363474][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.375210][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.630976][T10126] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1099'. [ 274.928592][ T51] Bluetooth: hci3: command tx timeout [ 275.524890][T10153] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1097'. [ 275.569520][T10153] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1097'. [ 277.007970][ T51] Bluetooth: hci3: command tx timeout [ 279.301850][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 279.727778][T10263] warning: `syz.1.1126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 282.962042][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 283.096547][T10352] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 283.096547][T10352] Q&|xùX%z [ 283.147973][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 283.165146][ T9] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 283.179137][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 283.194190][ T9] usb 3-1: config 2 has no interface number 0 [ 283.201942][ T9] usb 3-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 283.218333][ T9] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 283.233034][ T9] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 283.244745][ T9] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 283.265916][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 283.276258][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.294080][T10341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.529653][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'. [ 283.558558][ T9] usb 3-1: string descriptor 0 read error: -71 [ 283.582013][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 283.788359][ T9] usb 3-1: USB disconnect, device number 16 [ 284.801712][ T28] audit: type=1326 audit(1777939002.568:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.0.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7fc00000 [ 286.956536][T10464] loop8: detected capacity change from 0 to 128 [ 287.684090][ T33] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.901773][ T33] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.045568][ T33] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.202468][ T33] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.261767][T10478] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 288.374124][T10478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.428350][T10481] bond2: (slave syz_tun): making interface the new active one [ 288.437587][T10481] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 288.979298][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.992652][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.007812][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.033822][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.048946][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.059039][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.273994][T10507] loop2: detected capacity change from 0 to 128 [ 289.302436][T10507] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.616645][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 289.984577][T10533] autofs4:pid:10533:autofs_fill_super: could not open pipe file descriptor [ 290.525302][T10496] chnl_net:caif_netlink_parms(): no params data found [ 291.158331][ T5777] Bluetooth: hci3: command tx timeout [ 291.381821][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.419107][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.437391][T10496] bridge_slave_0: entered allmulticast mode [ 291.459227][T10496] bridge_slave_0: entered promiscuous mode [ 291.509155][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.516368][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.554037][T10496] bridge_slave_1: entered allmulticast mode [ 291.584660][T10496] bridge_slave_1: entered promiscuous mode [ 292.045913][ T33] hsr_slave_0: left promiscuous mode [ 292.085162][ T33] hsr_slave_1: left promiscuous mode [ 292.097422][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.116051][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.139180][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.156975][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.188828][ T33] bridge_slave_1: left allmulticast mode [ 292.194575][ T33] bridge_slave_1: left promiscuous mode [ 292.209073][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.255009][ T33] bridge_slave_0: left allmulticast mode [ 292.271256][ T33] bridge_slave_0: left promiscuous mode [ 292.285980][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.376007][ T33] veth1_macvtap: left promiscuous mode [ 292.382373][ T33] veth0_macvtap: left promiscuous mode [ 292.401342][ T33] veth1_vlan: left promiscuous mode [ 292.406865][ T33] veth0_vlan: left promiscuous mode [ 293.238800][ T5777] Bluetooth: hci3: command tx timeout [ 293.794494][ T33] team0 (unregistering): Port device team_slave_1 removed [ 293.865145][ T33] team0 (unregistering): Port device team_slave_0 removed [ 293.930291][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.999611][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.496200][ T28] audit: type=1326 audit(1777939012.258:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f711659cdd9 code=0x0 [ 294.670353][ T33] bond0 (unregistering): Released all slaves [ 294.951280][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.988743][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.246521][T10496] team0: Port device team_slave_0 added [ 295.304515][T10496] team0: Port device team_slave_1 added [ 295.318172][ T5777] Bluetooth: hci3: command tx timeout [ 295.456366][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.478068][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.581814][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.620206][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.653297][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.725530][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.005802][T10496] hsr_slave_0: entered promiscuous mode [ 296.023355][T10496] hsr_slave_1: entered promiscuous mode [ 296.043411][T10496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.068287][T10496] Cannot create hsr debugfs directory [ 296.726802][T10496] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 296.756177][T10496] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 296.784296][T10496] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 296.812670][T10496] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 296.894978][T10670] overlayfs: failed to resolve './file0': -2 [ 297.110278][T10496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.176281][T10496] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.312521][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.319801][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.355392][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.362674][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.397924][ T5777] Bluetooth: hci3: command tx timeout [ 297.523380][T10496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.078948][T10496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.803899][T10496] veth0_vlan: entered promiscuous mode [ 298.851351][T10496] veth1_vlan: entered promiscuous mode [ 298.961522][T10496] veth0_macvtap: entered promiscuous mode [ 299.020101][T10496] veth1_macvtap: entered promiscuous mode [ 299.104383][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.147849][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.177736][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.207712][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.227941][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.247834][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.299440][T10496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.314134][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.367748][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.397777][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.430822][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.458525][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.489691][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.521832][T10496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.577094][T10496] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.618183][T10496] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.626997][T10496] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.649853][T10496] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.007272][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.030270][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.138689][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.167550][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.116156][T10661] syz.2.1257 (10661): drop_caches: 3 [ 303.250207][T10821] loop9: detected capacity change from 0 to 16 [ 303.304794][T10821] erofs: (device loop9): mounted with root inode @ nid 36. [ 303.377972][T10821] erofs: (device loop9): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 303.413152][T10821] erofs: (device loop9): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 303.453691][T10821] erofs: (device loop9): z_erofs_read_folio: read error -95 @ 72 of nid 36 [ 303.642191][T10831] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1298'. [ 304.435669][T10861] netlink: 'syz.9.1309': attribute type 3 has an invalid length. [ 304.711451][T10877] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 304.871149][T10879] bond1: (slave bridge0): making interface the new active one [ 304.881028][T10879] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 306.407777][T10782] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 306.630092][T10782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.642125][T10782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.664982][ T28] audit: type=1326 audit(1777939024.428:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e559cdd9 code=0x7fc00000 [ 306.667010][T10782] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.768710][ T28] audit: type=1326 audit(1777939024.478:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f46e559cdd9 code=0x7fc00000 [ 306.781712][T10782] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.838495][ T28] audit: type=1326 audit(1777939024.478:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.9.1335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e559cdd9 code=0x7fc00000 [ 306.869136][T10782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.907290][T10782] usb 3-1: config 0 descriptor?? [ 307.356417][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.374602][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.394441][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.420043][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.443314][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.480580][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.498249][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.518221][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.525727][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.555998][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.577138][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.586157][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.601972][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.610191][T10782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.619636][T10782] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 307.640265][T10782] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 307.682319][T10782] usb 3-1: USB disconnect, device number 17 [ 307.903396][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 308.093790][T10984] fido_id[10984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 309.760363][T11047] 9pnet: p9_errstr2errno: server reported unknown error verlay.metacopy [ 311.399425][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 315.544305][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1414'. [ 315.585447][T11232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.592818][T11232] IPv6: NLM_F_CREATE should be set when creating new route [ 315.658136][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1414'. [ 316.092020][T11242] loop9: detected capacity change from 0 to 4096 [ 317.484862][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.491859][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.960290][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 318.010774][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 318.155839][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 318.175434][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 318.244120][T11301] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 318.375287][T11301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.445055][T11303] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 320.877053][T11372] loop2: detected capacity change from 0 to 512 [ 320.911649][T11372] EXT4-fs (loop2): bad geometry: block count 768 exceeds size of device (256 blocks) [ 321.834329][ T28] audit: type=1326 audit(1777939039.598:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.9.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46e559cdd9 code=0x0 [ 322.128339][ T28] audit: type=1326 audit(1777939039.898:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.0.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7116596b57 code=0x0 [ 322.355979][T11417] xt_hashlimit: size too large, truncated to 1048576 [ 323.938041][T11426] ceph: No mds server is up or the cluster is laggy [ 324.233607][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1479'. [ 324.254915][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1479'. [ 324.302811][T11443] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.311964][T11443] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.320997][T11443] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.330187][T11443] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.373072][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1479'. [ 324.390097][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1479'. [ 326.158069][ T5813] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 326.364598][ T5813] usb 10-1: Using ep0 maxpacket: 8 [ 326.381656][ T5813] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.409714][ T5813] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 326.426310][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.445553][ T5813] usb 10-1: config 0 descriptor?? [ 326.461365][ T5813] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 327.442027][T11506] veth2: entered promiscuous mode [ 327.447212][T11506] veth2: entered allmulticast mode [ 327.975300][T10782] usb 10-1: USB disconnect, device number 2 [ 328.495039][T11526] loop2: detected capacity change from 0 to 32768 [ 328.570363][T11526] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 328.739508][T11526] XFS (loop2): Ending clean mount [ 328.795336][T11543] loop9: detected capacity change from 0 to 128 [ 328.850773][ T28] audit: type=1800 audit(1777939046.608:1159): pid=11526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1510" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 328.952012][T11543] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.015282][T11543] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.173135][T11554] overlayfs: failed to resolve './cgroup': -2 [ 329.302671][T10496] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.340883][ T1127] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 329.491444][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 329.812381][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 330.525738][T11594] loop9: detected capacity change from 0 to 128 [ 330.568276][T11594] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 330.611500][T11594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.633868][ T5777] Bluetooth: hci3: Malformed LE Event: 0x1b [ 331.047408][T11604] ip6erspan0: entered allmulticast mode [ 331.302760][T11615] input: syz0 as /devices/virtual/input/input15 [ 331.742520][T11631] IPv4: Oversized IP packet from 172.20.20.24 [ 332.686815][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 335.055594][T11729] loop2: detected capacity change from 0 to 128 [ 335.118928][T11729] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.195339][T11729] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 335.504028][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.772639][T11754] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 335.897823][ T5835] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 335.909999][T11754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.938729][T11759] bond3: (slave ip6erspan0): making interface the new active one [ 335.950487][T11759] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 336.100705][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 336.143982][ T5835] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 336.187277][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.203079][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.240971][ T5835] usb 3-1: Product: syz [ 336.269929][ T5835] usb 3-1: Manufacturer: syz [ 336.293127][ T5835] usb 3-1: SerialNumber: syz [ 336.581537][T11748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.424019][ T5835] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 337.460265][ T5835] cdc_ncm 3-1:1.0: bind() failure [ 337.474301][ T5835] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 337.482133][ T5835] cdc_ncm 3-1:1.1: bind() failure [ 337.496444][ T5835] usb 3-1: USB disconnect, device number 18 [ 337.754675][T11813] io-wq is not configured for unbound workers [ 339.061260][T11864] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1602'. [ 339.123159][T11864] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 340.248271][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.293992][T11907] bridge_slave_1: left allmulticast mode [ 340.302678][T11907] bridge_slave_1: left promiscuous mode [ 340.317192][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.337360][T11907] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 340.380910][T11905] batman_adv: batadv0: Adding interface: macvlan4 [ 340.411307][T11905] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.459527][T11905] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active [ 340.938853][T11922] veth1_macvtap: left promiscuous mode [ 340.944471][T11922] macsec0: entered promiscuous mode [ 340.977984][T11922] macsec0: entered allmulticast mode [ 341.013088][T11925] veth1_macvtap: entered promiscuous mode [ 341.053082][T11925] veth1_macvtap: entered allmulticast mode [ 341.085382][T11925] macsec0: left promiscuous mode [ 341.102012][T11925] macsec0: left allmulticast mode [ 341.114944][T11925] veth1_macvtap: left allmulticast mode [ 342.354470][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 342.483923][T11973] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 342.532032][T11979] IPv4: Oversized IP packet from 127.202.26.0 [ 342.613018][T11973] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 342.643565][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 342.680994][T11976] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 342.712946][T11976] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 342.977231][T11985] loop2: detected capacity change from 0 to 2048 [ 343.069215][T11985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.167927][T11994] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 343.201458][T11985] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 343.237804][T11985] EXT4-fs (loop2): This should not happen!! Data will be lost [ 343.237804][T11985] [ 343.248280][T11985] EXT4-fs (loop2): Total free blocks count 0 [ 343.254345][T11985] EXT4-fs (loop2): Free/Dirty block details [ 343.269420][T11985] EXT4-fs (loop2): free_blocks=66060288 [ 343.288054][T11985] EXT4-fs (loop2): dirty_blocks=32 [ 343.296844][T11985] EXT4-fs (loop2): Block reservation details [ 343.328098][T11985] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 343.390365][ T75] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 343.729974][T12007] netlink: set zone limit has 8 unknown bytes [ 343.749568][T12007] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1650'. [ 344.427092][T12040] xt_hashlimit: size too large, truncated to 1048576 [ 345.244238][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026a6d000: rx timeout, send abort [ 345.257048][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026a6d000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 346.566828][T12075] loop2: detected capacity change from 0 to 512 [ 346.587840][T12075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.632088][T12076] overlayfs: failed to clone upperpath [ 346.672295][T12075] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1676: iget: bad i_size value: 38620345925642 [ 346.716877][T12075] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1676: couldn't read orphan inode 15 (err -117) [ 346.730219][T12081] ip6tnl1: entered promiscuous mode [ 346.735866][T12081] ip6tnl1: entered allmulticast mode [ 346.764739][T12075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.926366][T12075] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 347.021031][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.394614][T12123] xt_hashlimit: size too large, truncated to 1048576 [ 349.081683][T12137] 9pnet: p9_errstr2errno: server reported unknown error 01777777 [ 349.519620][T12145] netlink: 'syz.2.1700': attribute type 13 has an invalid length. [ 352.147541][ T9] libceph: connect (1)[c::]:6789 error -97 [ 352.157274][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 352.202416][ T788] libceph: connect (1)[c::]:6789 error -97 [ 352.209051][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 352.431055][ T9] libceph: connect (1)[c::]:6789 error -97 [ 352.437209][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 352.468468][ T788] libceph: connect (1)[c::]:6789 error -97 [ 352.480434][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 352.516762][T12216] geneve2: entered promiscuous mode [ 352.954609][ T9] libceph: connect (1)[c::]:6789 error -97 [ 352.961704][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 352.975939][T12201] ceph: No mds server is up or the cluster is laggy [ 352.979097][T12204] ceph: No mds server is up or the cluster is laggy [ 353.004289][ T788] libceph: connect (1)[c::]:6789 error -97 [ 353.018412][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 354.593199][T12279] Bluetooth: hci0: unsupported parameter 255 [ 354.611058][T12279] Bluetooth: hci0: unsupported parameter 255 [ 355.138009][ T5839] IPVS: starting estimator thread 0... [ 355.258052][T12302] IPVS: using max 18 ests per chain, 43200 per kthread [ 355.284202][T12304] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 355.297780][T12304] netlink: 'syz.0.1758': attribute type 2 has an invalid length. [ 356.273977][T12320] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1765'. [ 357.255543][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 357.525464][T12359] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 357.533687][T12359] netlink: 'syz.1.1781': attribute type 4 has an invalid length. [ 357.544731][T12359] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1781'. [ 358.415112][T12385] netlink: 'syz.0.1790': attribute type 39 has an invalid length. [ 358.631478][T12389] loop2: detected capacity change from 0 to 128 [ 358.651661][T12389] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 358.689865][T12388] overlayfs: failed to clone upperpath [ 358.845005][T12389] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 359.322507][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1805'. [ 359.579499][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 359.780746][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 359.787326][T12424] syz_tun: entered allmulticast mode [ 359.800959][ T27] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 359.812787][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.820955][T12423] syz_tun: left allmulticast mode [ 359.836494][ T27] usb 3-1: Product: syz [ 359.844335][ T27] usb 3-1: Manufacturer: syz [ 359.852494][ T27] usb 3-1: SerialNumber: syz [ 359.971655][T12426] overlayfs: failed to resolve './file0': -2 [ 361.117939][ T27] usb 3-1: current rate 56204 is different from the runtime rate 48000 [ 361.455255][ T5835] usb 3-1: USB disconnect, device number 19 [ 361.641447][T12467] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 361.689271][T12467] bond4: (slave bridge2): making interface the new active one [ 361.697872][T12467] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 361.887499][T12476] syz_tun: entered allmulticast mode [ 361.894304][T12475] syz_tun: left allmulticast mode [ 362.099261][T12482] overlayfs: failed to resolve './cgroup': -2 [ 362.182453][T12486] batadv0: entered promiscuous mode [ 362.207950][T12486] dummy0: entered promiscuous mode [ 362.250386][T12486] hsr1: entered promiscuous mode [ 362.255432][T12486] hsr1: entered allmulticast mode [ 362.292610][T12486] batadv0: entered allmulticast mode [ 362.303530][T12487] loop9: detected capacity change from 0 to 2048 [ 362.310783][T12486] dummy0: entered allmulticast mode [ 362.355372][T12487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.780768][T12542] loop2: detected capacity change from 0 to 4096 [ 363.843818][T12542] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0003] [ 363.866591][T12542] System zones: 0-5 [ 363.902710][T12542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.993858][T12542] fs-verity: sha512 using implementation "sha512-avx2" [ 364.115038][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.276712][ T28] audit: type=1804 audit(1777939082.038:1160): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1853" name="file1" dev="ramfs" ino=30931 res=1 errno=0 [ 364.764019][T12563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1858'. [ 364.799731][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 365.471735][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.488907][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.503067][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.519700][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.535246][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.544327][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.706411][T12585] 9pnet: p9_errstr2errno: server reported unknown error adapte [ 365.932303][T12580] chnl_net:caif_netlink_parms(): no params data found [ 366.047061][T12599] loop2: detected capacity change from 0 to 256 [ 366.167105][T12599] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 366.255039][T12580] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.282000][T12580] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.290542][T12580] bridge_slave_0: entered allmulticast mode [ 366.314215][T12580] bridge_slave_0: entered promiscuous mode [ 366.341273][T12580] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.369411][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.387150][T12580] bridge_slave_1: entered allmulticast mode [ 366.405589][T12580] bridge_slave_1: entered promiscuous mode [ 366.434425][T12604] loop2: detected capacity change from 0 to 512 [ 366.465005][T12580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.505500][T12580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.520589][T12604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.584577][T12604] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.735117][T12580] team0: Port device team_slave_0 added [ 366.780370][T12580] team0: Port device team_slave_1 added [ 366.818821][T12580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.826231][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.866221][T12580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.890976][T12580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.918174][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.946518][T12593] overlayfs: failed to clone lowerpath [ 366.986481][T12580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.112534][T12580] hsr_slave_0: entered promiscuous mode [ 367.134119][T12580] hsr_slave_1: entered promiscuous mode [ 367.150045][T12580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.170800][T12580] Cannot create hsr debugfs directory [ 367.285356][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.638412][ T5777] Bluetooth: hci3: command tx timeout [ 368.178534][ T28] audit: type=1804 audit(1777939085.928:1161): pid=12632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1880" name="/newroot/438/file0/file1" dev="overlay" ino=2325 res=1 errno=0 [ 368.926390][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 368.973793][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.220103][T12650] bridge_slave_0 (unregistering): left allmulticast mode [ 369.227269][T12650] bridge_slave_0 (unregistering): left promiscuous mode [ 369.234955][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.718763][ T5777] Bluetooth: hci3: command tx timeout [ 370.071995][T12580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.113911][T12580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.240971][T12580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.273652][T12580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.622659][T12580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.707526][T12580] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.746217][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.753584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.822154][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.830118][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.496316][T12580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.585980][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'. [ 371.798170][ T5777] Bluetooth: hci3: command tx timeout [ 371.927537][T12580] veth0_vlan: entered promiscuous mode [ 371.973590][T12580] veth1_vlan: entered promiscuous mode [ 372.084964][T12580] veth0_macvtap: entered promiscuous mode [ 372.117431][T12580] veth1_macvtap: entered promiscuous mode [ 372.191824][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.217745][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.237855][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.269009][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.288638][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.308805][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.323089][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.335172][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.374991][T12580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.444260][T12739] bond3: entered promiscuous mode [ 372.477959][T12739] bond3: entered allmulticast mode [ 372.509943][T12739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.645496][T12741] erspan1: entered allmulticast mode [ 372.713170][T12741] erspan1: entered promiscuous mode [ 372.749674][T12741] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 372.761430][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.817344][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.847656][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.895038][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.925670][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.964590][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.017993][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.037718][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.060674][T12580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.115264][T12580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.147189][T12580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.191385][T12580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.204859][T12580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.452098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.477298][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.566003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.583415][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.878167][ T5777] Bluetooth: hci3: command tx timeout [ 374.045194][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 374.137012][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.630490][T12780] bridge_slave_0 (unregistering): left allmulticast mode [ 374.647745][T12780] bridge_slave_0 (unregistering): left promiscuous mode [ 374.669136][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.067845][T12842] netlink: 'syz.0.1938': attribute type 2 has an invalid length. [ 377.777355][T12904] overlayfs: failed to clone upperpath [ 378.929248][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.935658][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.521491][T12957] loop3: detected capacity change from 0 to 32768 [ 380.659338][T12957] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.862624][T12957] XFS (loop3): Ending clean mount [ 380.947678][ T28] audit: type=1800 audit(1777939098.708:1162): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1970" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 381.112693][T12999] overlayfs: failed to clone upperpath [ 381.338667][ T12] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 381.410160][T12580] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 381.977249][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 382.452528][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'. [ 382.465835][T13036] hsr_slave_0: left promiscuous mode [ 382.487823][T13036] hsr_slave_1: left promiscuous mode [ 382.842999][T13043] macsec1: entered promiscuous mode [ 382.879707][T13043] virt_wifi0: entered promiscuous mode [ 382.913675][T13049] lo: Caught tx_queue_len zero misconfig [ 385.038137][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 385.238651][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 385.246170][ T5813] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 385.257541][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.280780][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.301134][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.352570][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.406282][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.443945][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.723063][ T5813] usb 4-1: usb_control_msg returned -32 [ 385.757289][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 386.450036][T13136] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 386.651485][T10782] usb 4-1: USB disconnect, device number 3 [ 387.225636][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 387.291733][T13153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.300716][T13153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.310431][T13153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.319756][T13153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.350595][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 387.756669][T13169] xt_hashlimit: size too large, truncated to 1048576 [ 389.767590][ C0] sched: RT throttling activated [ 390.624606][T13221] overlayfs: failed to clone upperpath [ 392.241686][T13263] overlayfs: failed to clone lowerpath [ 394.968293][T13337] loop2: detected capacity change from 0 to 8192 [ 395.155752][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 395.216654][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 395.271989][T13352] ceph: No mds server is up or the cluster is laggy [ 396.249232][T13372] loop2: detected capacity change from 0 to 128 [ 397.276758][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2087'. [ 398.169538][T13396] loop2: detected capacity change from 0 to 32768 [ 398.298969][T13396] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 398.564066][T13396] XFS (loop2): Ending clean mount [ 399.106448][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 399.845409][T13479] Set syz0 is full, maxelem 0 reached [ 399.988300][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2104'. [ 400.001628][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2104'. [ 400.703064][T13492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2106'. [ 400.777999][T13492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2106'. [ 402.423529][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2115'. [ 405.250326][T13626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.959133][T13644] overlayfs: failed to clone upperpath [ 408.721959][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 409.455449][T13748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 409.499739][T13748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 410.126399][T13772] netlink: 'syz.3.2181': attribute type 13 has an invalid length. [ 410.231858][T13770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 410.652216][T13776] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 411.041865][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2185'. [ 411.393771][T13792] overlayfs: failed to clone upperpath [ 412.161160][T13801] loop2: detected capacity change from 0 to 40427 [ 412.181844][T13801] F2FS-fs (loop2): invalid crc value [ 412.281698][T13801] F2FS-fs (loop2): Start checkpoint disabled! [ 412.297222][T13801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 412.408047][ T28] audit: type=1800 audit(1777939130.168:1163): pid=13801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2191" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 412.461783][ T2915] kworker/u4:7: attempt to access beyond end of device [ 412.461783][ T2915] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 412.485866][ T2915] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 412.937875][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2200'. [ 415.516633][ T6015] team0: Port device syz_tun removed [ 415.811857][ T2915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.836694][ T2915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.007382][ T2915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.018123][ T2915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.130449][ T2915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.156379][ T2915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.307420][ T2915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.337735][ T2915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.789736][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 416.805264][T13924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.881049][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.917468][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.926803][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.962849][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.972914][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 416.980858][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.046023][T13924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.173773][T13933] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 417.245482][T13933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.292534][T13937] bond2: (slave veth7): Enslaving as an active interface with a down link [ 417.453139][T13939] bond2: (slave gretap0): making interface the new active one [ 417.476777][T13939] gretap0: entered promiscuous mode [ 417.483972][T13939] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 417.681434][ T2915] tipc: Disabling bearer [ 417.719494][ T2915] tipc: Left network mode [ 417.980761][T13952] loop3: detected capacity change from 0 to 4096 [ 418.016042][T13952] EXT4-fs: Invalid want_extra_isize 63 [ 418.316728][T13928] chnl_net:caif_netlink_parms(): no params data found [ 419.080954][ T5777] Bluetooth: hci1: command tx timeout [ 419.275623][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.304720][T13928] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.336851][T13928] bridge_slave_0: entered allmulticast mode [ 419.359096][T13928] bridge_slave_0: entered promiscuous mode [ 419.434753][T13928] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.450510][T13928] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.467772][T13928] bridge_slave_1: entered allmulticast mode [ 419.476337][T13928] bridge_slave_1: entered promiscuous mode [ 419.742675][ T2915] bond3: (slave erspan1): Releasing backup interface [ 419.753186][ T2915] erspan1 (unregistering): left promiscuous mode [ 420.492577][T13928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.531012][T13928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.809030][T14009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.994509][T13928] team0: Port device team_slave_0 added [ 421.039444][T13928] team0: Port device team_slave_1 added [ 421.159917][ T5777] Bluetooth: hci1: command tx timeout [ 421.388433][T13928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.395506][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.463674][T13928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.583733][T13928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.601471][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.689498][T13928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.797184][ T2915] hsr_slave_0: left promiscuous mode [ 421.821985][ T2915] hsr_slave_1: left promiscuous mode [ 421.852218][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.860110][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.889926][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.897422][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.950212][ T2915] batman_adv: batadv0: Removing interface: macvlan4 [ 421.968323][ T2915] bridge_slave_1: left allmulticast mode [ 421.987673][ T2915] bridge_slave_1: left promiscuous mode [ 422.006076][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.119807][ T2915] veth1_macvtap: left promiscuous mode [ 422.125787][ T2915] veth0_macvtap: left promiscuous mode [ 422.140639][ T2915] veth1_vlan: left promiscuous mode [ 422.158176][ T2915] veth0_vlan: left promiscuous mode [ 423.135905][ T2915] bond3 (unregistering): Released all slaves [ 423.251273][ T5777] Bluetooth: hci1: command tx timeout [ 423.490018][ T2915] bond2 (unregistering): Released all slaves [ 424.089698][ T2915] bond1 (unregistering): Released all slaves [ 425.324782][ T5777] Bluetooth: hci1: command tx timeout [ 425.406811][ T2915] team0 (unregistering): Port device team_slave_1 removed [ 425.484253][ T2915] team0 (unregistering): Port device team_slave_0 removed [ 425.563840][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.646091][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.190232][ T2915] bond0 (unregistering): Released all slaves [ 426.937688][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.473468][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.539636][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.946292][T14085] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.957260][T14085] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.971554][T14085] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.982278][T14085] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.127485][T14085] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.136630][T14085] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.145697][T14085] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.154696][T14085] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.270316][T14085] veth2: left promiscuous mode [ 428.275142][T14085] veth2: left allmulticast mode [ 428.400642][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2283'. [ 428.497339][T14100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2287'. [ 428.539391][T14100] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 428.556228][T14100] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 428.586264][T14101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2287'. [ 428.663037][T14101] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 428.716675][T14101] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 428.793155][T14107] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 428.900610][T14107] bond1: entered promiscuous mode [ 428.929390][T14107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.033230][T13928] hsr_slave_0: entered promiscuous mode [ 429.064282][T13928] hsr_slave_1: entered promiscuous mode [ 429.106246][T14112] bond1: (slave bridge2): making interface the new active one [ 429.122368][T14112] bridge2: entered promiscuous mode [ 429.143174][T14112] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 429.152257][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2290'. [ 429.251008][T14119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.260201][T14119] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.272888][T14119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.514233][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.616799][ T2915] IPVS: stop unused estimator thread 0... [ 429.771192][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 429.818208][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 430.310063][ T11] gretap0: left promiscuous mode [ 430.333061][ T9761] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 430.372096][T14149] netlink: 'syz.3.2299': attribute type 7 has an invalid length. [ 430.409835][T14149] netlink: 'syz.3.2299': attribute type 12 has an invalid length. [ 430.426661][T14149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 431.225004][T14170] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 431.234950][T14170] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2307'. [ 431.245206][T14170] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 431.410441][ T4995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 431.439600][ T4995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 431.728755][ T5832] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 431.763480][T13928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.793414][T13928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.832882][T13928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.866108][T13928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.160391][T13928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.231125][T13928] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.302045][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.309360][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.392111][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.399364][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.549963][T13928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.214253][T13928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.215804][T13928] veth0_vlan: entered promiscuous mode [ 434.299665][T13928] veth1_vlan: entered promiscuous mode [ 434.421768][T13928] veth0_macvtap: entered promiscuous mode [ 434.460590][T13928] veth1_macvtap: entered promiscuous mode [ 434.513007][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.532697][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.553198][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.579516][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.594681][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.608206][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.633953][T13928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.659211][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.675281][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.687473][T13928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.698448][T13928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.710471][T13928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.751604][T13928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.763789][T13928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.775346][T13928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.785664][T13928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.947180][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.977153][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.053166][ T4995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.063906][ T4995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.157912][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.338426][ T28] audit: type=1326 audit(1777939153.088:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e339cdd9 code=0x7fc00000 [ 437.187038][T14335] Cannot find del_set index 2 as target [ 437.708430][T14351] netlink: 'syz.0.2351': attribute type 1 has an invalid length. [ 437.745094][T14351] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 437.773674][T14351] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2351'. [ 437.889736][T14354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.036488][T14361] netlink: 'syz.0.2355': attribute type 21 has an invalid length. [ 438.087863][T14361] netlink: 'syz.0.2355': attribute type 6 has an invalid length. [ 438.096763][T14361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2355'. [ 438.478444][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 438.549605][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2359'. [ 439.207857][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 439.826233][T14392] team0: Port device team_slave_0 removed [ 440.368915][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375322][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.918345][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.907273][T14496] tipc: Started in network mode [ 443.933312][T14496] tipc: Node identity 7606a70bd326, cluster identity 4711 [ 443.968233][T14496] tipc: Enabled bearer , priority 0 [ 443.977942][T14498] d: renamed from syzkaller0 [ 444.012856][T14498] tipc: Disabling bearer [ 445.217694][ T28] audit: type=1804 audit(1777939162.978:1165): pid=14531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2395" name="file1" dev="ramfs" ino=36682 res=1 errno=0 [ 447.525560][T14582] Cannot find del_set index 2 as target [ 449.188364][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.236583][T14612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.763786][ T5812] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.811250][ T28] audit: type=1326 audit(1777939167.578:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.2419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f711659cdd9 code=0x0 [ 450.061899][T14625] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2419'. [ 450.092496][T14622] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 450.362123][T14622] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 450.568960][T14625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.679749][T14625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.736724][T14625] bond0 (unregistering): Released all slaves [ 450.743468][ T5832] infiniband syz1: ib_query_port failed (-19) [ 451.121110][T14622] siw: device registration error -19 [ 453.083011][T14692] loop4: detected capacity change from 0 to 128 [ 453.146378][T14692] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.228119][T14692] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 453.239038][T14677] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 453.416888][T14692] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 453.930959][T14692] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 454.171059][T13928] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.468177][T10782] kernel read not supported for file [userfaultfd] (pid: 10782 comm: kworker/1:8) [ 455.101738][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 455.131413][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 456.020657][T10782] kernel write not supported for file bpf-prog (pid: 10782 comm: kworker/1:8) [ 456.326927][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'. [ 456.428884][ T28] audit: type=1326 audit(1777939174.198:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e339cdd9 code=0x7ffc0000 [ 456.490243][ T28] audit: type=1326 audit(1777939174.198:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e339cdd9 code=0x7ffc0000 [ 456.566603][ T28] audit: type=1326 audit(1777939174.238:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e339cdd9 code=0x7ffc0000 [ 456.606521][ T28] audit: type=1326 audit(1777939174.238:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e339cdd9 code=0x7ffc0000 [ 456.719516][ T28] audit: type=1326 audit(1777939174.238:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f82e339cdd9 code=0x7ffc0000 [ 456.799714][ T28] audit: type=1326 audit(1777939174.238:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82e339cb42 code=0x7ffc0000 [ 456.927758][ T28] audit: type=1326 audit(1777939174.238:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f82e335d60e code=0x7ffc0000 [ 457.008770][ T28] audit: type=1326 audit(1777939174.238:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f82e339cc07 code=0x7ffc0000 [ 457.129481][ T28] audit: type=1326 audit(1777939174.238:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82e335d60e code=0x7ffc0000 [ 457.279757][ T28] audit: type=1326 audit(1777939174.238:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.2462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82e339ca6b code=0x7ffc0000 [ 457.637786][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.131415][T14823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2475'. [ 458.311476][T14833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'. [ 458.362725][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 458.619715][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2480'. [ 459.064711][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2483'. [ 459.099713][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2484'. [ 459.298968][T14859] bond3: entered promiscuous mode [ 459.330895][T14859] bond3: entered allmulticast mode [ 459.336427][T14859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.376894][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 459.421867][T14862] macsec1: entered promiscuous mode [ 459.439288][T14862] macsec1: entered allmulticast mode [ 459.885874][T14877] ip6gre1: entered promiscuous mode [ 459.908108][T14877] ip6gre1: entered allmulticast mode [ 460.826943][T14915] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 460.934377][T14915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.968460][T14921] bond1: (slave veth3): Enslaving as an active interface with a down link [ 460.977229][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2500'. [ 461.052447][T14925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.182836][T14925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.278504][T14927] erspan0: entered promiscuous mode [ 461.296777][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 461.326791][T14915] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 461.354324][T14915] bond1: (slave batadv1): making interface the new active one [ 461.386072][T14915] batadv1: entered promiscuous mode [ 461.409052][T14915] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 461.581982][T14939] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.2508'. [ 461.600013][T14939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2508'. [ 462.755068][T14957] erspan0: left promiscuous mode [ 464.118043][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.139213][T14990] loop4: detected capacity change from 0 to 2048 [ 464.216573][T14990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.639788][T14957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.449363][T14957] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.459003][T14957] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.468367][T14957] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.477321][T14957] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.597499][T14957] ip6erspan0: left allmulticast mode [ 465.711813][T14957] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.720984][T14957] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.731345][T14957] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.741183][T14957] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.750757][T14957] geneve2: left promiscuous mode [ 465.976002][T14957] bond3: left promiscuous mode [ 465.981121][T14957] bond3: left allmulticast mode [ 465.995266][T14957] ip6gre1: left promiscuous mode [ 466.000987][T14957] ip6gre1: left allmulticast mode [ 466.015928][T14970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2514'. [ 466.086039][T14998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2520'. [ 466.225721][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2523'. [ 466.245341][T15023] team0: Device bond0 is already an upper device of the team interface [ 466.339618][T15026] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 466.366217][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 466.366234][ T28] audit: type=1326 audit(1777939184.118:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.428201][T15026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.447022][ T28] audit: type=1326 audit(1777939184.118:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.477656][ T28] audit: type=1326 audit(1777939184.128:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.502774][ T28] audit: type=1326 audit(1777939184.128:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.550077][ T28] audit: type=1326 audit(1777939184.128:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.612200][ T28] audit: type=1326 audit(1777939184.128:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.645312][ T28] audit: type=1326 audit(1777939184.138:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.690157][ T28] audit: type=1326 audit(1777939184.138:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.724746][T15033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.746884][ T28] audit: type=1326 audit(1777939184.138:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 466.772785][T15033] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 466.801122][T15033] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 466.822927][ T28] audit: type=1326 audit(1777939184.138:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.0.2525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f711659cdd9 code=0x7ffc0000 [ 467.111476][T15026] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 467.146461][T15026] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 467.674734][T15032] loop4: detected capacity change from 0 to 40427 [ 467.774429][T15032] F2FS-fs (loop4): invalid crc value [ 467.802408][T15032] F2FS-fs (loop4): Found nat_bits in checkpoint [ 468.014294][T15032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 468.038016][T15072] netlink: 'syz.3.2534': attribute type 13 has an invalid length. [ 468.143770][T15072] erspan0: refused to change device tx_queue_len [ 468.164258][T15032] syz.4.2526: attempt to access beyond end of device [ 468.164258][T15032] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 468.166991][T15072] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 468.232984][T15032] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 469.136090][T15104] xt_hashlimit: size too large, truncated to 1048576 [ 470.223016][T15124] ip6gre1: entered promiscuous mode [ 470.247774][T15124] ip6gre1: entered allmulticast mode [ 470.428412][T15133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 470.466468][T15134] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2545'. [ 470.628344][T15134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.672250][T15134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.687394][T15134] bond0 (unregistering): (slave team0): Releasing backup interface [ 470.706500][ T5832] infiniband syz1: ib_query_port failed (-19) [ 470.720302][T15134] bond0 (unregistering): Released all slaves [ 470.837702][T15133] siw: device registration error -19 [ 472.432968][T15173] batman_adv: batadv0: Adding interface: dummy0 [ 472.441060][T15173] batman_adv: batadv0: The MTU of interface dummy0 is too small (1288) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.513924][T15173] batman_adv: batadv0: Interface activated: dummy0 [ 472.578468][T15177] batadv0: mtu less than device minimum [ 472.640928][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.654628][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.667258][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.679787][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.692437][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.705010][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.717767][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.730423][T15177] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.887724][ T9761] batadv1: left promiscuous mode [ 474.073316][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 474.103722][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 474.495656][T15235] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2574'. [ 474.515780][T15235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2574'. [ 474.670826][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 474.975919][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 474.975935][ T28] audit: type=1326 audit(1777939192.738:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15256 comm="syz.4.2581" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dbcd9cdd9 code=0x0 [ 475.090184][T15258] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.119513][T15263] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2581'. [ 475.362622][T15263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.432203][T15263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.469130][ T9] infiniband syz1: ib_query_port failed (-19) [ 475.497034][T15263] bond0 (unregistering): Released all slaves [ 475.617809][T15258] siw: device registration error -19 [ 476.043618][T15285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2587'. [ 476.094233][T15285] bridge0: port 1(team0) entered blocking state [ 476.120078][T15285] bridge0: port 1(team0) entered disabled state [ 476.126878][T15285] team0: entered allmulticast mode [ 476.177799][T15285] team_slave_0: entered allmulticast mode [ 476.187039][T15285] team_slave_1: entered allmulticast mode [ 476.233807][T15285] team0: entered promiscuous mode [ 476.278075][T15285] team_slave_0: entered promiscuous mode [ 476.308164][T15285] team_slave_1: entered promiscuous mode [ 478.305274][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'. [ 478.318792][T15360] bridge1: entered promiscuous mode [ 478.324074][T15360] bridge1: entered allmulticast mode [ 478.416048][T15360] team0: Port device bridge1 added [ 478.460570][T15366] bridge0: port 1(team0) entered blocking state [ 478.505271][T15371] loop3: detected capacity change from 0 to 512 [ 478.524006][T15366] bridge0: port 1(team0) entered disabled state [ 478.546475][T15371] EXT4-fs (loop3): orphan cleanup on readonly fs [ 478.553443][T15366] team0: entered allmulticast mode [ 478.572705][T15366] team_slave_0: entered allmulticast mode [ 478.602871][T15371] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.2615: bad orphan inode 13 [ 478.620818][T15366] team_slave_1: entered allmulticast mode [ 478.669086][T15371] ext4_test_bit(bit=12, block=18) = 1 [ 478.701327][T15371] is_bad_inode(inode)=0 [ 478.721619][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 478.729437][T15371] NEXT_ORPHAN(inode)=2130706432 [ 478.745193][T15371] max_ino=32 [ 478.753913][T15371] i_nlink=1 [ 478.775638][T15371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.005432][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.494334][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2621'. [ 479.696295][T15402] loop3: detected capacity change from 0 to 4096 [ 479.819253][T15402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.728972][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.059294][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 481.102665][T15439] batman_adv: batadv0: Adding interface: dummy0 [ 481.116737][T15439] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.154570][T15439] batman_adv: batadv0: Interface activated: dummy0 [ 481.199542][T15446] net_ratelimit: 11 callbacks suppressed [ 481.199564][T15446] batadv0: mtu less than device minimum [ 481.222610][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.235323][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.247910][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.260481][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.273665][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.286319][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.298957][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.311514][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.324182][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.180747][T15477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.233767][T15477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.235436][T15537] overlayfs: failed to clone upperpath [ 485.357215][T15581] 9pnet_fd: Insufficient options for proto=fd [ 485.798452][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 487.624104][T15630] overlayfs: failed to clone upperpath [ 487.956177][T15635] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 488.044919][T15635] bond0: entered promiscuous mode [ 488.056536][T15635] bond0: entered allmulticast mode [ 488.071434][T15635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.102812][T15639] macvlan2: entered promiscuous mode [ 488.132516][T15639] macvlan2: entered allmulticast mode [ 488.143984][T15639] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 488.518380][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 491.166080][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 491.190608][T15736] xfrm1: entered promiscuous mode [ 491.195749][T15736] xfrm1: entered allmulticast mode [ 491.222640][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 492.858559][T15775] overlayfs: failed to clone upperpath [ 493.330400][T15784] loop3: detected capacity change from 0 to 64 [ 493.541083][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.567757][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.605758][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.657668][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.805581][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.837672][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.912967][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.978022][T15784] hfs: request for non-existent node 131072 in B*Tree [ 493.989008][T15799] hfs: request for non-existent node 131072 in B*Tree [ 494.044946][T15799] hfs: request for non-existent node 131072 in B*Tree [ 494.727374][T15820] bridge1: entered promiscuous mode [ 494.743007][T15820] bridge1: entered allmulticast mode [ 494.774852][T15820] team0: Port device bridge1 added [ 494.787239][T15821] bridge0: port 3(team0) entered blocking state [ 494.804236][T15821] bridge0: port 3(team0) entered disabled state [ 494.833942][T15821] team0: entered allmulticast mode [ 494.842798][T15821] team_slave_1: entered allmulticast mode [ 494.865015][T15821] team0: entered promiscuous mode [ 494.883059][T15821] team_slave_1: entered promiscuous mode [ 494.895426][T15821] bridge0: port 3(team0) entered blocking state [ 494.901956][T15821] bridge0: port 3(team0) entered forwarding state [ 494.935287][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 494.967909][T15820] team0: left allmulticast mode [ 494.973197][T15820] team_slave_1: left allmulticast mode [ 494.987027][T15820] team0: left promiscuous mode [ 494.992328][T15820] team_slave_1: left promiscuous mode [ 495.000345][T15820] bridge0: port 3(team0) entered disabled state [ 495.032516][T15820] bridge_slave_1: left allmulticast mode [ 495.046963][T15820] bridge_slave_1: left promiscuous mode [ 495.053892][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.089963][T15820] bridge_slave_0: left allmulticast mode [ 495.101719][T15820] bridge_slave_0: left promiscuous mode [ 495.114971][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.486326][T15828] IPVS: Scheduler module ip_vs_ not found [ 496.552059][T15849] fuse: root generation should be zero [ 497.146650][ T5777] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 497.205254][T15879] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 497.345747][T15885] bridge4: entered promiscuous mode [ 497.377841][T15885] bridge4: entered allmulticast mode [ 497.432150][T15885] team0: Port device bridge4 added [ 497.596783][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 497.617807][T15889] team0: left allmulticast mode [ 497.633682][T15889] team_slave_0: left allmulticast mode [ 497.654326][T15889] team_slave_1: left allmulticast mode [ 497.688067][T15889] team0: left promiscuous mode [ 497.698180][T15889] team_slave_0: left promiscuous mode [ 497.721456][T15889] team_slave_1: left promiscuous mode [ 497.748274][T15889] bridge0: port 1(team0) entered disabled state [ 497.788242][T15889] bridge_slave_1: left allmulticast mode [ 497.811527][T15889] bridge_slave_1: left promiscuous mode [ 497.817411][T15889] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.860844][ T28] audit: type=1326 audit(1777939472.613:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 498.910777][ T28] audit: type=1326 audit(1777939472.613:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 498.936261][ T28] audit: type=1326 audit(1777939472.653:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 498.964596][T15906] batman_adv: batadv0: Interface deactivated: dummy0 [ 498.967870][ T28] audit: type=1326 audit(1777939472.653:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 499.005931][ T28] audit: type=1326 audit(1777939472.653:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 499.055806][ T28] audit: type=1326 audit(1777939472.653:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 499.099855][ T28] audit: type=1326 audit(1777939472.653:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 499.148053][T15918] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 499.189743][ T28] audit: type=1326 audit(1777939472.653:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 499.240414][T15921] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 499.275360][ T28] audit: type=1326 audit(1777939472.653:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 499.307208][ T28] audit: type=1326 audit(1777939472.653:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15917 comm="syz.3.2785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 500.256600][T15962] ip6tnl0: Caught tx_queue_len zero misconfig [ 500.291452][ T5777] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 500.801372][ T5839] libceph: connect (1)[c::]:6789 error -22 [ 500.807621][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 500.895804][T15980] ceph: No mds server is up or the cluster is laggy [ 500.976069][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2806'. [ 501.809782][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.816196][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.808976][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 504.866919][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'. [ 506.551857][T16123] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 506.575906][T16123] ref_ctr increment failed for inode: 0x1184 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807f764c00 [ 511.179004][T16162] xt_hashlimit: size too large, truncated to 1048576 [ 516.837777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 520.525795][T16225] netlink: 'syz.1.2876': attribute type 1 has an invalid length. [ 520.776099][T16225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.878112][T16230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.961716][T16230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.047638][T16230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.102182][T16230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.157485][T16230] bond0: (slave geneve3): making interface the new active one [ 521.192753][T16230] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 525.330415][T16277] bond0: entered promiscuous mode [ 525.335546][T16277] bond_slave_0: entered promiscuous mode [ 525.435739][T16277] bond_slave_1: entered promiscuous mode [ 525.662838][T16277] bridge3: entered promiscuous mode [ 525.777607][T16277] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 525.829513][T16277] Cannot create hsr debugfs directory [ 529.064241][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 529.692360][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 529.755963][T16329] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.765704][T16329] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.775130][T16329] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.784814][T16329] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.994656][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 531.131009][T16349] overlayfs: failed to clone upperpath [ 533.156077][T16364] ref_ctr_offset mismatch. inode: 0x10e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 533.668328][T16372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2932'. [ 533.937725][ T27] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 534.371353][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 534.480937][ T27] usb 4-1: not running at top speed; connect to a high speed hub [ 534.650812][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.860421][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 534.886400][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2932'. [ 534.920348][ T27] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 534.957649][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.966022][T16375] nbd: nbd64 already in use [ 539.728942][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 539.988165][ T27] usb 4-1: Product: syz [ 539.992419][ T27] usb 4-1: Manufacturer: syz [ 539.997081][ T27] usb 4-1: SerialNumber: syz [ 540.439912][ T27] usb 4-1: can't set config #1, error -71 [ 540.489062][ T27] usb 4-1: USB disconnect, device number 4 [ 541.074916][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2937'. [ 541.092667][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.758209][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.008593][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 545.218244][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 545.244144][ T5813] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 545.273057][ T5813] usb 4-1: config 179 has no interface number 0 [ 545.302556][ T5813] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 545.372847][ T5813] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 545.428957][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 545.428975][ T28] audit: type=1326 audit(1777939519.183:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16419 comm="syz.0.2945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x0 [ 545.458831][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.489420][ T5813] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 545.568808][ T5813] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 545.626955][ T5813] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 545.677425][ T5813] usb 4-1: config 179 interface 65 has no altsetting 0 [ 545.710362][ T5813] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 545.750666][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.958058][ T5813] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 546.771849][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.845411][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.921669][ T5813] usb 4-1: USB disconnect, device number 5 [ 546.954552][ T5813] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 547.225187][ T28] audit: type=1107 audit(1777939520.983:1326): pid=16462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 547.303204][T16463] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 547.803678][T16463] batman_adv: batadv0: Adding interface: ip6gretap1 [ 547.841446][T16463] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.898422][T16463] batman_adv: batadv0: Interface activated: ip6gretap1 [ 547.939022][T16470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2963'. [ 548.474410][T16477] netlink: 'syz.0.2965': attribute type 51 has an invalid length. [ 548.576677][T16477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.614462][T16477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.669477][T16477] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 548.705392][T16477] batman_adv: batadv0: Removing interface: ip6gretap1 [ 550.147649][T16498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.214174][T16500] bond4: (slave macvlan1): Enslaving as an active interface with an up link [ 551.896866][T16501] bond4 (unregistering): (slave macvlan1): Releasing backup interface [ 551.957256][T16501] bond4 (unregistering): Released all slaves [ 552.021354][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2979'. [ 552.056799][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'. [ 552.765687][T16533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2984'. [ 553.867457][T16550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 554.311125][T16559] bond4 (unregistering): Released all slaves [ 555.428071][T16572] netlink: 'syz.4.2994': attribute type 1 has an invalid length. [ 555.491686][T16572] bond0: entered promiscuous mode [ 555.497248][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.722162][ T28] audit: type=1326 audit(1777939529.483:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16574 comm="syz.3.2996" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac7f59cdd9 code=0x0 [ 555.903382][T16572] bond0: (slave bridge0): making interface the new active one [ 555.937325][T16572] bridge0: entered promiscuous mode [ 556.016869][T16572] bridge0: left promiscuous mode [ 557.619575][ T28] audit: type=1326 audit(1777939531.383:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16593 comm="syz.4.3002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x0 [ 558.007400][ T28] audit: type=1326 audit(1777939531.763:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 558.148479][ T28] audit: type=1326 audit(1777939531.803:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 558.297570][ T28] audit: type=1326 audit(1777939531.803:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 559.765705][ T28] audit: type=1326 audit(1777939531.803:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 560.478300][ T28] audit: type=1326 audit(1777939531.803:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 563.374522][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.388839][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.532697][ T28] audit: type=1326 audit(1777939531.803:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 563.700197][ T28] audit: type=1326 audit(1777939531.803:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 563.857675][ T28] audit: type=1326 audit(1777939531.803:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 564.066978][ T28] audit: type=1326 audit(1777939531.803:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 564.250075][ T28] audit: type=1326 audit(1777939531.803:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 564.417447][ T28] audit: type=1326 audit(1777939531.833:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 564.595724][ T28] audit: type=1326 audit(1777939531.893:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 564.791055][ T28] audit: type=1326 audit(1777939531.903:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 564.961008][ T28] audit: type=1326 audit(1777939531.963:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 565.134936][ T28] audit: type=1326 audit(1777939531.963:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.3.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f59cdd9 code=0x7ffc0000 [ 566.254873][T16609] loop3: detected capacity change from 0 to 32768 [ 569.576997][ T5813] kernel write not supported for file bpf-prog (pid: 5813 comm: kworker/1:5) [ 570.684749][ T27] IPVS: starting estimator thread 0... [ 570.820255][T16661] IPVS: using max 17 ests per chain, 40800 per kthread [ 575.134354][T16698] loop3: detected capacity change from 0 to 131072 [ 575.290886][T16698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 575.365760][T16698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 575.736017][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 575.736036][ T28] audit: type=1804 audit(1777939549.473:1347): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3040" name="/newroot/253/file1/bus" dev="loop3" ino=10 res=1 errno=0 [ 576.339258][T16710] overlayfs: failed to clone upperpath [ 580.350025][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 580.424491][T16722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'. [ 581.278205][ T5813] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 581.468936][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 581.501161][ T5813] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 581.524347][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.574111][ T5813] usb 4-1: Product: syz [ 581.587755][ T5813] usb 4-1: Manufacturer: syz [ 581.592699][ T5813] usb 4-1: SerialNumber: syz [ 581.677019][ T5813] usb 4-1: config 0 descriptor?? [ 582.285054][ T5813] airspy 4-1:0.0: Board ID: 00 [ 582.293676][ T5813] airspy 4-1:0.0: Firmware version: [ 583.374392][ T5813] airspy 4-1:0.0: Registered as swradio24 [ 583.404793][ T5813] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 583.429316][T16737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3048'. [ 583.706173][ T5813] usb 4-1: USB disconnect, device number 6 [ 588.233556][T16770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.326584][T16770] batadv_slave_0: entered promiscuous mode [ 588.455809][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 590.519347][ T28] audit: type=1326 audit(1777939564.283:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.4.3072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x0 [ 597.548972][T16815] bridge0: port 1(syz_tun) entered blocking state [ 597.638487][T16815] bridge0: port 1(syz_tun) entered disabled state [ 597.645241][T16815] syz_tun: entered allmulticast mode [ 597.884047][T16815] syz_tun: entered promiscuous mode [ 598.154564][T16815] bridge0: port 1(syz_tun) entered blocking state [ 598.161245][T16815] bridge0: port 1(syz_tun) entered forwarding state [ 598.829024][T16828] loop3: detected capacity change from 0 to 512 [ 598.879906][T16828] EXT4-fs: Ignoring removed i_version option [ 598.885989][T16828] EXT4-fs: Ignoring removed bh option [ 599.022280][T16828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.108763][T16828] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 600.106133][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.588030][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3091'. [ 600.939542][T16859] loop3: detected capacity change from 0 to 512 [ 601.039427][T16859] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.3092: inode has both inline data and extents flags [ 601.117183][T16859] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.3092: couldn't read orphan inode 15 (err -117) [ 601.189901][T16859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.593932][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.453918][T16901] loop3: detected capacity change from 0 to 512 [ 604.479318][T16907] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3108'. [ 604.550038][T16901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 604.715611][T16901] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.3109: corrupted xattr entries [ 604.888895][T16901] EXT4-fs (loop3): 1 orphan inode deleted [ 604.954154][T16901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.556159][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.722446][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 608.807980][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'. [ 609.105547][T16983] netlink: 'syz.0.3131': attribute type 12 has an invalid length. [ 609.579620][T16989] loop3: detected capacity change from 0 to 256 [ 609.956569][T16989] FAT-fs (loop3): Directory bread(block 64) failed [ 609.991456][T16989] FAT-fs (loop3): Directory bread(block 65) failed [ 610.014988][T16989] FAT-fs (loop3): Directory bread(block 66) failed [ 610.066473][T16989] FAT-fs (loop3): Directory bread(block 67) failed [ 610.098574][T16989] FAT-fs (loop3): Directory bread(block 68) failed [ 610.120719][T16989] FAT-fs (loop3): Directory bread(block 69) failed [ 610.158473][T16989] FAT-fs (loop3): Directory bread(block 70) failed [ 610.165103][T16989] FAT-fs (loop3): Directory bread(block 71) failed [ 610.228005][T16989] FAT-fs (loop3): Directory bread(block 72) failed [ 610.240975][T16989] FAT-fs (loop3): Directory bread(block 73) failed [ 617.702747][T17039] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3150'. [ 617.796278][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 617.807596][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 617.884655][ T23] libceph: connect (1)[c::]:6789 error -22 [ 617.916035][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 617.990051][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 618.021086][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 618.088848][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 618.103247][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 618.848000][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 618.854073][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 618.862418][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 618.921546][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 619.686014][T17040] ceph: No mds server is up or the cluster is laggy [ 619.703569][ T27] libceph: connect (1)[c::]:6789 error -22 [ 619.731470][T17046] ceph: No mds server is up or the cluster is laggy [ 619.838340][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 619.866862][T17055] netlink: 'syz.1.3152': attribute type 2 has an invalid length. [ 619.904207][T17049] ceph: No mds server is up or the cluster is laggy [ 620.496790][T17055] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 620.963021][ T27] libceph: connect (1)[c::]:6789 error -22 [ 620.976757][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 621.006794][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 621.166314][ T23] libceph: connect (1)[c::]:6789 error -22 [ 623.088058][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 623.141316][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 623.245094][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 623.253650][T14098] libceph: connect (1)[c::]:6789 error -22 [ 623.270802][T14098] libceph: mon0 (1)[c::]:6789 connect error [ 623.280357][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 623.298325][T14098] libceph: connect (1)[c::]:6789 error -22 [ 623.314691][T14098] libceph: mon0 (1)[c::]:6789 connect error [ 624.689832][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.698692][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.205677][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 632.963926][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 633.488433][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 634.488389][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3205'. [ 634.534595][ T28] audit: type=1326 audit(1777939608.283:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f711659cdd9 code=0x0 [ 638.624999][T17218] loop3: detected capacity change from 0 to 512 [ 638.788139][T17218] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 639.059514][T17218] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 639.096425][T17218] EXT4-fs (loop3): orphan cleanup on readonly fs [ 639.312442][T17218] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 639.405866][T17218] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 639.475690][T17218] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 639.640833][T17218] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 639.703009][T17218] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3210: corrupted inode contents [ 639.757642][T17218] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #12: comm syz.3.3210: mark_inode_dirty error [ 639.837923][T17218] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3210: corrupted inode contents [ 639.886612][T17218] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3210: mark_inode_dirty error [ 639.960162][T17218] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3210: corrupted inode contents [ 640.063153][T17218] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 640.106438][T17218] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.3210: corrupted inode contents [ 640.144740][T17218] EXT4-fs error (device loop3): ext4_truncate:4301: inode #12: comm syz.3.3210: mark_inode_dirty error [ 640.215067][T17218] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 640.283338][T17218] EXT4-fs (loop3): 1 truncate cleaned up [ 640.298351][T17218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.496818][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.962416][T17324] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 649.322830][T17325] macvlan2: entered promiscuous mode [ 649.377563][T17325] macvlan2: entered allmulticast mode [ 649.482008][T17325] bond2: entered promiscuous mode [ 649.499737][T17325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.690977][T17325] bond2: left promiscuous mode [ 650.354814][T17335] loop3: detected capacity change from 0 to 1024 [ 650.404299][T17335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 650.518606][T17335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c01c, mo2=0003] [ 650.626277][T17335] System zones: 0-1, 3-36 [ 650.710248][T17335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.326686][T12580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.228820][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3273'. [ 654.297791][T17404] netlink: 'syz.0.3275': attribute type 1 has an invalid length. [ 654.531726][T17404] bond5: entered promiscuous mode [ 654.591445][T17404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 654.801327][T17408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 654.902954][T17408] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 654.983822][T17408] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 655.029552][T17408] bond5: (slave ip6gre1): making interface the new active one [ 655.055132][T17408] ip6gre1: entered promiscuous mode [ 655.130117][T17408] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 655.398383][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.447120][T17436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.818316][T17438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.825631][T17438] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address [ 658.953950][T17438] bond3: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 659.022140][T17438] bond3: (slave xfrm2): making interface the new active one [ 659.062053][T17438] bond3: (slave xfrm2): Enslaving as an active interface with an up link [ 660.427237][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 674.140460][T17518] xt_hashlimit: size too large, truncated to 1048576 [ 679.426661][T17539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 679.446853][T17539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 679.475043][T17539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 679.547255][T17539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 679.589278][T17539] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 679.606264][T17539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.935472][T17544] netlink: 1904 bytes leftover after parsing attributes in process `syz.4.3315'. [ 681.160085][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 681.758352][T17539] Bluetooth: hci4: command tx timeout [ 682.327032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 682.717810][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'. [ 683.151599][T17538] chnl_net:caif_netlink_parms(): no params data found [ 684.136996][T17539] Bluetooth: hci4: command tx timeout [ 686.023973][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.146745][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.154675][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.224105][T17539] Bluetooth: hci4: command tx timeout [ 686.238452][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.238733][T17538] bridge_slave_0: entered allmulticast mode [ 686.267827][T17538] bridge_slave_0: entered promiscuous mode [ 686.316499][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.394241][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.509223][T17538] bridge_slave_1: entered allmulticast mode [ 686.612848][T17538] bridge_slave_1: entered promiscuous mode [ 689.667871][T17539] Bluetooth: hci4: command tx timeout [ 690.390476][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.494761][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.420942][T17538] team0: Port device team_slave_0 added [ 693.509046][T17538] team0: Port device team_slave_1 added [ 694.517253][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.598336][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.798213][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.860924][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.926351][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.060437][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.468248][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.484963][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.495584][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.506766][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.515501][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 695.524240][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 695.898919][T17583] bridge0: port 1(syz_tun) entered disabled state [ 695.985511][T17583] syz_tun: left allmulticast mode [ 696.034060][T17583] syz_tun: left promiscuous mode [ 696.099016][T17583] bridge0: port 1(syz_tun) entered disabled state [ 696.184142][T17583] bond0: (slave syz_tun): making interface the new active one [ 696.255442][T17583] syz_tun: entered promiscuous mode [ 696.301532][T17583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 696.405586][T17584] bond0: (slave syz_tun): Releasing backup interface [ 696.434161][T17584] syz_tun: left promiscuous mode [ 696.538832][T17538] hsr_slave_0: entered promiscuous mode [ 696.574695][T17538] hsr_slave_1: entered promiscuous mode [ 696.609599][T17538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.636275][T17538] Cannot create hsr debugfs directory [ 696.661031][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3327'. [ 697.509634][T17596] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 697.561758][ T5777] Bluetooth: hci2: command tx timeout [ 697.835719][T17596] bond3: entered promiscuous mode [ 697.870427][T17596] bond3: entered allmulticast mode [ 697.905531][T17596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 698.109904][T17597] erspan1: entered allmulticast mode [ 698.213893][T17597] bond3: (slave erspan1): making interface the new active one [ 698.269523][T17597] erspan1: entered promiscuous mode [ 698.325284][T17597] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 698.406676][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 698.562892][T17598] bond3: left promiscuous mode [ 698.619827][T17598] erspan1: left promiscuous mode [ 698.625037][T17598] bond3: left allmulticast mode [ 699.549529][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'. [ 699.647493][ T5777] Bluetooth: hci2: command tx timeout [ 701.719960][ T5777] Bluetooth: hci2: command tx timeout [ 703.798640][ T5777] Bluetooth: hci2: command tx timeout [ 704.055600][T17580] chnl_net:caif_netlink_parms(): no params data found [ 705.044808][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.142816][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.222524][T17580] bridge_slave_0: entered allmulticast mode [ 705.268677][T17580] bridge_slave_0: entered promiscuous mode [ 705.791772][T17518] bond2: (slave syz_tun): Releasing active interface [ 706.158995][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.196781][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.240846][T17580] bridge_slave_1: entered allmulticast mode [ 706.300342][T17580] bridge_slave_1: entered promiscuous mode [ 706.611501][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.625271][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.312450][T17580] team0: Port device team_slave_0 added [ 713.369877][T17580] team0: Port device team_slave_1 added [ 713.398817][T17538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 713.692373][T17538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 713.728847][T17538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 713.776601][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.806166][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.891650][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.121624][T17538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 714.218798][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.236103][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.348120][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.702665][T17580] hsr_slave_0: entered promiscuous mode [ 714.752737][T17580] hsr_slave_1: entered promiscuous mode [ 714.793102][T17580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.845873][T17580] Cannot create hsr debugfs directory [ 716.762455][ T75] bond3: (slave ip6erspan0): Releasing active interface [ 717.078192][ T75] bond5: (slave ip6gre1): Releasing backup interface [ 717.107310][ T75] ip6gre1 (unregistering): left promiscuous mode [ 717.128835][ T75] bond5: Destroying bond [ 717.228289][ T28] audit: type=1326 audit(1777939690.983:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 717.352944][ T28] audit: type=1326 audit(1777939690.983:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 717.451325][ T28] audit: type=1326 audit(1777939690.983:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 717.555117][ T28] audit: type=1326 audit(1777939690.983:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 717.668296][ T28] audit: type=1326 audit(1777939690.983:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 717.802801][ T28] audit: type=1326 audit(1777939690.983:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 717.908330][ T28] audit: type=1326 audit(1777939690.983:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 718.015960][ T28] audit: type=1326 audit(1777939690.983:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 718.135721][ T28] audit: type=1326 audit(1777939691.013:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 718.276974][ T28] audit: type=1326 audit(1777939691.013:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.4.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 718.749790][ T75] bond5 (unregistering): Released all slaves [ 721.824231][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.024740][T17822] loop3: detected capacity change from 0 to 2048 [ 722.094447][T17822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.296621][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 724.428152][T12580] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 724.503103][T12580] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 724.884778][T17834] hsr_slave_1 (unregistering): left promiscuous mode [ 726.000742][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.074252][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.081513][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.701316][T17841] ipip0: entered promiscuous mode [ 726.718687][T17841] ipip0: entered allmulticast mode [ 726.803725][T16600] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.810970][T16600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.084976][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.509063][ T75] bond1: (slave gretap1): Releasing active interface [ 729.481180][T17580] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 729.625267][T17580] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 731.175872][T17580] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 731.263827][T17580] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 736.428978][ T75] hsr_slave_0: left promiscuous mode [ 736.487562][ T75] hsr_slave_1: left promiscuous mode [ 736.966859][T17539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.989879][T17539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.000968][T17539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.009902][T17539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.018036][T17539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 737.025518][T17539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.670992][ T75] team0 (unregistering): Port device bridge4 removed [ 738.080773][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.224891][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.235562][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.345940][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.354466][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 738.368603][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.911609][ T75] bond0 (unregistering): Released all slaves [ 739.079977][T17539] Bluetooth: hci0: command tx timeout [ 739.188809][ T75] bond4 (unregistering): (slave bridge2): Releasing active interface [ 739.310271][ T75] bond4 (unregistering): Released all slaves [ 740.389316][ T75] bond3 (unregistering): Released all slaves [ 740.451957][T17539] Bluetooth: hci3: command tx timeout [ 741.167561][T17539] Bluetooth: hci0: command tx timeout [ 741.424831][ T75] bond2 (unregistering): Released all slaves [ 742.469445][ T75] bond1 (unregistering): Released all slaves [ 742.538419][T17539] Bluetooth: hci3: command tx timeout [ 743.257189][T17539] Bluetooth: hci0: command tx timeout [ 744.597824][T17539] Bluetooth: hci3: command tx timeout [ 744.964922][ T75] team0 (unregistering): Port device team_slave_1 removed [ 745.171944][ T75] team0 (unregistering): Port device team_slave_0 removed [ 745.337109][T17539] Bluetooth: hci0: command tx timeout [ 746.697335][T17539] Bluetooth: hci3: command tx timeout [ 747.578804][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.585189][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.311199][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.462715][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.120345][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.127621][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.218906][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.226223][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.681091][T17879] chnl_net:caif_netlink_parms(): no params data found [ 749.932261][T17865] chnl_net:caif_netlink_parms(): no params data found [ 750.162421][ T75] IPVS: stop unused estimator thread 0... [ 750.908518][T17879] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.915746][T17879] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.041730][T17879] bridge_slave_0: entered allmulticast mode [ 751.152296][T17879] bridge_slave_0: entered promiscuous mode [ 751.458519][T17879] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.465743][T17879] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.548389][T17879] bridge_slave_1: entered allmulticast mode [ 751.578123][T17879] bridge_slave_1: entered promiscuous mode [ 752.289783][T17865] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.297103][T17865] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.365229][T17865] bridge_slave_0: entered allmulticast mode [ 752.406578][T17865] bridge_slave_0: entered promiscuous mode [ 752.451037][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.464756][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.475348][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.486386][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.498513][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 752.505999][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.570014][T17865] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.609627][T17865] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.617021][T17865] bridge_slave_1: entered allmulticast mode [ 752.663884][T17865] bridge_slave_1: entered promiscuous mode [ 752.748636][T17879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.796444][T17879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.891099][T17985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3389'. [ 753.146136][T17865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.751390][T17865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.910702][T17879] team0: Port device team_slave_0 added [ 753.963421][T17879] team0: Port device team_slave_1 added [ 754.590398][T17865] team0: Port device team_slave_0 added [ 754.598994][ T5777] Bluetooth: hci4: command tx timeout [ 754.633398][T17879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.642646][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.678475][T17879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.715258][T17865] team0: Port device team_slave_1 added [ 754.744222][T17879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.762178][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.832327][T17879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.892636][T17998] bond4: entered promiscuous mode [ 755.093670][T17865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.113614][T17865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.151833][T17865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.359119][T17865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.376137][T17865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.448337][T17865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.907094][T18009] bond5: entered promiscuous mode [ 756.004725][T17879] hsr_slave_0: entered promiscuous mode [ 756.043580][T17879] hsr_slave_1: entered promiscuous mode [ 756.062302][T17879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.091856][T17879] Cannot create hsr debugfs directory [ 756.130102][T18011] macvlan2: entered promiscuous mode [ 756.158476][T18011] macvlan2: entered allmulticast mode [ 756.176871][T18011] bond5: (slave macvlan2): Opening slave failed [ 756.678529][T17539] Bluetooth: hci4: command tx timeout [ 757.149873][T17865] hsr_slave_0: entered promiscuous mode [ 757.278237][T17865] hsr_slave_1: entered promiscuous mode [ 757.323033][T17865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.349088][T18030] overlayfs: failed to clone upperpath [ 757.356282][T17865] Cannot create hsr debugfs directory [ 758.126336][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 758.126353][ T28] audit: type=1326 audit(1777939731.883:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dbcd9cdd9 code=0x0 [ 758.757990][T17539] Bluetooth: hci4: command tx timeout [ 759.404926][T17977] chnl_net:caif_netlink_parms(): no params data found [ 760.691761][ T75] hsr_slave_0: left promiscuous mode [ 760.729177][ T75] hsr_slave_1: left promiscuous mode [ 760.752103][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.778942][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.824090][ T75] bridge_slave_1: left allmulticast mode [ 760.844300][ T75] bridge_slave_1: left promiscuous mode [ 760.851323][T17539] Bluetooth: hci4: command tx timeout [ 760.878619][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.961985][ T75] bridge_slave_0: left allmulticast mode [ 760.977506][ T75] bridge_slave_0: left promiscuous mode [ 760.996435][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.610396][ T75] team0 (unregistering): Port device team_slave_1 removed [ 763.005111][ T75] team0 (unregistering): Port device team_slave_0 removed [ 763.270398][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.476203][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.426399][ T75] bond0 (unregistering): Released all slaves [ 764.834826][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.905248][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.966748][T17977] bridge_slave_0: entered allmulticast mode [ 765.008271][T17977] bridge_slave_0: entered promiscuous mode [ 765.068590][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.075814][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.127781][T17977] bridge_slave_1: entered allmulticast mode [ 765.135287][T17977] bridge_slave_1: entered promiscuous mode [ 765.411595][ T28] audit: type=1326 audit(1777939739.173:1418): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=18090 comm="syz.4.3401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x0 [ 765.532281][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.666080][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.758596][T17879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 766.816626][T17879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 767.068877][T17977] team0: Port device team_slave_0 added [ 767.102172][T17879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 767.745912][T17977] team0: Port device team_slave_1 added [ 767.815860][T17879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 768.458000][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.465023][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.608397][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.789219][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.796458][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.958623][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.340375][T17977] hsr_slave_0: entered promiscuous mode [ 771.428625][T17977] hsr_slave_1: entered promiscuous mode [ 771.482843][T17977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.520133][T17977] Cannot create hsr debugfs directory [ 772.744332][T17865] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.796237][T17865] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.115757][T17865] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 773.162406][T17865] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.791403][T17879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.126031][T17879] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.234284][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.241583][ T9761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.442762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.450031][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.529003][T17865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.795072][T17865] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.283231][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.290480][ T9761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.326492][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.333752][ T9761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.404206][T17977] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.441378][T17977] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 784.547291][ T75] hsr_slave_0: left promiscuous mode [ 784.610358][ T75] hsr_slave_1: left promiscuous mode [ 784.651337][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.689490][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.715037][ T75] bridge_slave_1: left allmulticast mode [ 784.738348][ T75] bridge_slave_1: left promiscuous mode [ 784.770322][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.822651][ T75] bridge_slave_0: left allmulticast mode [ 784.832132][ T75] bridge_slave_0: left promiscuous mode [ 784.863945][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.300141][ T75] team0 (unregistering): Port device team_slave_1 removed [ 786.460262][ T75] team0 (unregistering): Port device team_slave_0 removed [ 786.699811][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.951228][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.032470][ T75] bond0 (unregistering): Released all slaves [ 788.316914][T17977] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 788.360578][T17977] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 788.490639][T17879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.995415][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.236257][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.421394][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.428669][ T9759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.582990][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.590235][ T9761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.649985][T17865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.457238][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3421'. [ 791.617295][T17879] veth0_vlan: entered promiscuous mode [ 791.751588][T17879] veth1_vlan: entered promiscuous mode [ 791.949404][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.144661][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 792.276067][T17879] veth0_macvtap: entered promiscuous mode [ 792.283087][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 792.301724][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 792.322050][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 792.331142][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 792.341256][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.714251][T17879] veth1_macvtap: entered promiscuous mode [ 792.963078][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.001001][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.078921][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.137230][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.187352][T17879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.213690][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.267636][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.305350][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.350072][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.395617][T17879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.831295][T17879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.866845][T17879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.938203][T17879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.946996][T17879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.438952][T17539] Bluetooth: hci2: command tx timeout [ 794.923403][T17977] veth0_vlan: entered promiscuous mode [ 795.239762][T17977] veth1_vlan: entered promiscuous mode [ 795.249532][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.310769][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.685114][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.727440][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.840902][T17977] veth0_macvtap: entered promiscuous mode [ 796.000042][T17977] veth1_macvtap: entered promiscuous mode [ 796.024085][T18212] chnl_net:caif_netlink_parms(): no params data found [ 796.361312][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.433841][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.457006][T18238] overlayfs: failed to clone upperpath [ 796.478270][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.524314][T17539] Bluetooth: hci2: command tx timeout [ 796.534339][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.576917][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.601865][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.666967][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.805502][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.837082][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.903801][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.934906][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.973249][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.033182][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.096852][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.598499][T17539] Bluetooth: hci2: command tx timeout [ 800.254985][T17977] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.296318][T17977] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.316114][T17977] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.326373][T17977] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.684351][T17539] Bluetooth: hci2: command tx timeout [ 801.044632][T18250] bridge_slave_0: left allmulticast mode [ 801.128190][T18250] bridge_slave_0: left promiscuous mode [ 801.134099][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.211026][T18250] bridge_slave_1: left allmulticast mode [ 801.240206][T18250] bridge_slave_1: left promiscuous mode [ 801.268348][T18250] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.498955][T18250] bond0: (slave bond_slave_0): Releasing backup interface [ 801.563691][T18250] bond0: (slave bond_slave_1): Releasing backup interface [ 801.768668][T18250] team0: Port device team_slave_0 removed [ 801.839119][T18250] team0: Port device team_slave_1 removed [ 801.879773][T18250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.908812][T18250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.951254][T18250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.974585][T18250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.034239][T18212] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.133222][T18212] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.196335][T18212] bridge_slave_0: entered allmulticast mode [ 806.258894][T18212] bridge_slave_0: entered promiscuous mode [ 806.302826][T18212] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.358423][T18212] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.378622][T18212] bridge_slave_1: entered allmulticast mode [ 806.418359][T18212] bridge_slave_1: entered promiscuous mode [ 806.835915][T18275] netlink: 'syz.4.3437': attribute type 2 has an invalid length. [ 807.194150][T18212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.629827][T18212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.693178][T18283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3439'. [ 807.717550][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.717575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.777818][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 808.064939][T18212] team0: Port device team_slave_0 added [ 808.119296][T18212] team0: Port device team_slave_1 added [ 808.638224][ T9761] hsr_slave_0: left promiscuous mode [ 808.769041][ T9761] hsr_slave_1: left promiscuous mode [ 809.006992][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.015038][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.880409][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.947373][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.990324][ T9761] bridge_slave_1: left allmulticast mode [ 809.996065][ T9761] bridge_slave_1: left promiscuous mode [ 810.030178][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.078754][ T9761] bridge_slave_0: left allmulticast mode [ 810.084483][ T9761] bridge_slave_0: left promiscuous mode [ 810.103465][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.900011][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.917944][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.943034][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.954900][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.963580][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 812.971309][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.411970][ T9761] team0 (unregistering): Port device team_slave_1 removed [ 813.672408][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3446'. [ 813.760033][ T9761] team0 (unregistering): Port device team_slave_0 removed [ 814.055234][ T9761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.308579][ T9761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.000382][ T5777] Bluetooth: hci0: command tx timeout [ 816.599949][ T9761] bond0 (unregistering): Released all slaves [ 817.108136][ T5777] Bluetooth: hci0: command tx timeout [ 817.169459][T18212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.296654][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.439643][T18212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.499814][T18212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.506843][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.641813][T18212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.602427][T18212] hsr_slave_0: entered promiscuous mode [ 818.758167][T18212] hsr_slave_1: entered promiscuous mode [ 818.833937][T18212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.843004][T18212] Cannot create hsr debugfs directory [ 818.987174][T18320] netlink: 'syz.4.3450': attribute type 12 has an invalid length. [ 819.158752][ T5777] Bluetooth: hci0: command tx timeout [ 820.470338][ T28] audit: type=1326 audit(1777939794.233:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 820.609455][ T28] audit: type=1326 audit(1777939794.253:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 820.758162][ T28] audit: type=1326 audit(1777939794.253:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbcd9cdd9 code=0x7ffc0000 [ 820.913345][ T28] audit: type=1326 audit(1777939794.263:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 821.036007][ T28] audit: type=1326 audit(1777939794.273:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 821.238304][ T5777] Bluetooth: hci0: command tx timeout [ 821.250719][ T28] audit: type=1326 audit(1777939794.323:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 821.363302][T18301] chnl_net:caif_netlink_parms(): no params data found [ 821.461968][ T28] audit: type=1326 audit(1777939794.323:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 821.572924][ T28] audit: type=1326 audit(1777939794.333:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 821.746077][ T28] audit: type=1326 audit(1777939794.343:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 833.162209][ T28] audit: type=1326 audit(1777939794.343:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 833.430774][ T28] audit: type=1326 audit(1777939794.343:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 833.679138][ T28] audit: type=1326 audit(1777939794.343:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 833.761445][ T9761] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.890321][ T28] audit: type=1326 audit(1777939794.353:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 834.073412][ T28] audit: type=1326 audit(1777939794.363:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 834.238374][ T28] audit: type=1326 audit(1777939794.373:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 834.324470][ T28] audit: type=1326 audit(1777939794.373:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 834.441011][ T28] audit: type=1326 audit(1777939794.373:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 834.595973][ T28] audit: type=1326 audit(1777939794.373:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 834.718142][ T28] audit: type=1326 audit(1777939794.373:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18330 comm="syz.4.3451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbcd5d60e code=0x7ffc0000 [ 838.100940][ T9761] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.414878][T18389] loop5: detected capacity change from 0 to 64 [ 839.164920][ T9761] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.702528][ T9761] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.549427][T18428] netlink: 'syz.5.3463': attribute type 4 has an invalid length. [ 842.787317][T18429] netlink: 'syz.5.3463': attribute type 4 has an invalid length. Stopping sshd: [ 842.969940][T18301] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.977159][T18301] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.069681][T18301] bridge_slave_0: entered allmulticast mode [ 843.078852][T18301] bridge_slave_0: entered promiscuous mode [ 843.149266][T18301] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.156464][T18301] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.256456][T18301] bridge_slave_1: entered allmulticast mode [ 843.312808][T18301] bridge_slave_1: entered promiscuous mode stopped /usr/sbin/sshd (pid 5529) OK [ 843.802166][T18301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.844130][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 843.930389][T18301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link Stopping crond: [ 844.449718][T18301] team0: Port device team_slave_0 added [ 844.529039][T18301] team0: Port device team_slave_1 added stopped /usr/sbin/crond (pid 5512) OK [ 845.494862][T18301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.525136][T18301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.633424][T18301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active Stopping dhcpcd... [ 845.904648][T18301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.945963][T18301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. stopped /sbin/dhcpcd (pid 5431) [ 846.177998][T18301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.803079][T18212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 846.864246][T18212] netdevsim netdevsim7 netdevsim1: renamed from eth1 Stopping network: [ 847.255414][T18212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 847.998161][T18212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 848.466465][T18301] hsr_slave_0: entered promiscuous mode [ 849.077922][T18301] hsr_slave_1: entered promiscuous mode [ 849.125888][T18301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.156890][T18498] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3477'. [ 849.199301][T18301] Cannot create hsr debugfs directory [ 851.597316][T18514] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 851.849704][T18514] bond6: entered promiscuous mode [ 851.908435][T18514] 8021q: adding VLAN 0 to HW filter on device bond6 [ 852.168359][T18516] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. OK [ 852.351417][T18516] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 852.505652][T18516] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode Stopping iptables: [ 852.908654][T17539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 852.938359][T17539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 852.946844][T17539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 852.956300][T17539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 852.980302][T17539] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 852.987846][T17539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 OK Stopping system message bus: [ 855.081120][T17539] Bluetooth: hci4: command tx timeout [ 855.673718][ T9761] hsr_slave_0: left promiscuous mode [ 855.800152][ T9761] hsr_slave_1: left promiscuous mode [ 855.822155][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.897466][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.003485][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.057509][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.149571][ T9761] bridge_slave_1: left allmulticast mode [ 856.155338][ T9761] bridge_slave_1: left promiscuous mode [ 856.285160][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.356841][ T9761] bridge_slave_0: left allmulticast mode [ 856.376361][ T9761] bridge_slave_0: left promiscuous mode [ 856.420583][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.731538][ T9761] veth1_macvtap: left promiscuous mode [ 856.737154][ T9761] veth0_macvtap: left promiscuous mode [ 856.768590][ T9761] veth1_vlan: left promiscuous mode [ 856.787589][ T9761] veth0_vlan: left promiscuous mode done [ 857.158509][T17539] Bluetooth: hci4: command tx timeout [ 859.253181][T17539] Bluetooth: hci4: command tx timeout [ 859.348550][T18593] loop5: detected capacity change from 0 to 8 [ 859.490446][T18593] SQUASHFS error: Unable to read inode 0x11f Stopping klogd: OK [ 861.332676][T17539] Bluetooth: hci4: command tx timeout Stopping acpid: [ 862.000327][ T9761] team0 (unregistering): Port device team_slave_1 removed [ 862.202149][ T9761] team0 (unregistering): Port device team_slave_0 removed [ 862.294642][T17539] Bluetooth: hci3: command 0x0406 tx timeout [ 862.402744][ T9761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.614150][ T9761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface OK Stopping syslogd: stopped /sbin/syslogd (pid 5119) OK [ 864.243086][ T9761] bond0 (unregistering): Released all slaves umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 864.986739][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3495'. [ 865.063930][T18577] bond7 (unregistering): Released all slaves serialport: VM disconnected.