last executing test programs: 3m53.615676915s ago: executing program 1 (id=7): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f7, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket(0xf, 0x5, 0x57c) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0xfffffffc, 0x0, 0x100000e, 0x20004, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000440)='./file0\x00', 0x20009a2) 3m51.306636243s ago: executing program 1 (id=15): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) 3m51.306147433s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x170000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m50.794645927s ago: executing program 1 (id=18): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1eba82, 0x10) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x800) mkdir(0x0, 0x1cb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) statx(r1, 0x0, 0x400, 0x8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) statx(r0, 0x0, 0x100, 0x8, 0x0) lchown(&(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) 3m50.610875216s ago: executing program 1 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0xa, 0x801, 0x0) 3m49.755776216s ago: executing program 1 (id=24): socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)=0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000c80)="$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") r3 = socket$inet(0x2, 0x2, 0x1) shutdown(r3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) 3m49.68036291s ago: executing program 32 (id=24): socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)=0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e6e742c6e6f636173652c696f636861727365743d6575632d6a70000000000000000174653d312c73686f72746e616d653d6c6f7765722c757466383d302c696f636861727365743d6d6163696e7569742c757365667265652c636f6465706167653d3835302c6e6f6e756d7461496c3d302c726f6469722c6e6f6e756d7461696c3d302c757466383d302c00c322b162cd61df25b895def9502bee9e95009810e8069b28a1a7742c279b79301dcd7b7d3dade17faa92b0e638d8c3dc7702220fa1b0bf063436e87dd73b4ad42b74442db1876e699c757a57781457cf16140ae4101b69cd03670cd0f1b9894365143b2305ed3dc0ad22ee05d0725dab07a69e81dcbee809d71a613dab596c7b53341759ed5a2cdab6d8661110d7a1d2e30704bdf3584a5a8be23d241651970f8dda74906ceae015c894f9caede8bb661b19"], 0x1, 0x363, &(0x7f0000000c80)="$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") r3 = socket$inet(0x2, 0x2, 0x1) shutdown(r3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) 14.07482496s ago: executing program 0 (id=997): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, r3, r4, 0x3, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.915643137s ago: executing program 0 (id=999): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0x1, 0x1061e, &(0x7f0000021040)="$eJzs3E1vG0UYB/DHSdOmpZQIceDWlRBSItVRnb4IbgVaARKpytuBEzi2a7m1vVHspqYIqeLEAXHsme8AJ+6IK1+CG+KAxK1SkXc2BdNGQOsmNfn9JOe/Ox4/nrFWkcbe3QAOrKXs998qcSKORsR8RByPKLYrKZILKV6MiJNxJOYi7j8qZfv9hsMRcSwiToyLp5qV8qnP79xevzta/+z7O79e/KL+06l9mzSw716OiN5m2r7ZS5m3U14r2+vbnSJ7Z7fLTE/0rpf7ecqbrY2iws36Tr96kWfaqX++eWMwzqvdemOc7c7Von2zn95wsN3eqVO84Fp9q9hvtjaK7AzyItu30rhGZd4aDFOdZlnv06J8DIc7mdpbo1aaz+b1Ihv9Ydme6ubN1mic22WWbxeNvNssxrHxyB/zU++dTv/GKNtubQ06eT87t1p7ZbV2vlrbyputYetstd5rnj+bLbe7427VYaveu9DO83a3tdrIeyvZcrvRqNZq2fLF1kan3s9qtdUzq6er51bKrVPZm5c/zLrNbHmcr3f6N4ad7iC7ejyy9IqVbG31zKsr2Uu17P31K9mV9y5dWr/ywccXP7r82vrbb5SdHhhWtrx2em2tWjtdXautzOL8862nZf6Lj/dyDrrK5O6x/RoHwAwp1v9H42Hr/z//rU6s/8P6H3hs1v/W/2H9++TmvxgzMf/FbyqPV4CDzeEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBg/bzw7VvFxlLaf/fHlM+WTc+X/SoRMRcR9x5iPg5P1JyPiGciYmGX/gs7HY+k+KESRYVK2TR+HIuIC+Xj7nMPH/uh6X8cAAAAMKPuVXZ75rvbJ79Oq/X0Z2kvh8VemdulPX1pM3f8kym9z/g4W1j6ZUrVilG/MKVixfF9KEZTqlZ8gbU4pWLFV2V7bH4iFv8SlRS7HTMAAMAMm1wJPPCLev3LvR4QAAAAT8hX+z0A9kdxXkB5Ln55An95Qn75g+BRPwQCAADArNv1ugAAAADgf6NY///9/n87FyP/x/v/TVw48K/v/1d61Pv/AQAAAP8s3f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJyd1KIoD8GlL3+P9yyPGuVtxBstwCQ4dEhbgJlgCbsENsAacuQQDhrZEajARuZRIvi9pb9vAj1PC5NxLCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDE9lbPRw/jq/tCc5eowae4GAAAA2GVRzkbVwaA+/9Nc/9dcumjOs4jII2JX717Ej1Zm0eSUH7y+fFfDY0SVsP6Mn832OyKum+3l/7G/BQAAADhf88l0WHfr9W5w6oLoUj1pk/+9SZSXRUQ5eE6Ulq93l4nCqt93L+4SpVUTWP1EYfWUWy9V2qcUraG/NWT1kHdaDgAA0Il2J9BtFwIAAECXbreOxyesg45lsVnK3KwFV/+8f1sQ/NU6AwAAAL6h7NQFAAAAAPvau52v3uD5fwAAAHDe6uf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEyLcjaaT6bDQ3OWq68pmjHN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEMIAEAV7JvPRneT+d1VavIMIVRB4pMkiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBEr+vkfcaejMaW5NPbxrf7TPLr1Ph3aixJRmPtg3n3bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYOd+XuOo4gCAf2d3Z5stSNcogXrQioWKQpOtvxC89CAED4In8RjSFKLrD9ocbIlgLh4U/wMv6sFDL0JAkIoIHrz14Mke66WC5FBB0INEZmemTtq0btPu7Hbz+cDb993h7cz3DWHZ73u7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS1sk4UsbN7KGbx43i2C/X1pez/vINfebq0oXDWcvipDiW1pf6faWV3aO5cWcBAADAtGuW9X1EXEk3F7O+0c3q/0++f/SD/PiPEbH+QB6X9fyNdX/Zl7V/1i5+98Vr1y/Uza+TRsQ33f7KQo1znGRHhxx3aIgxg7WEfIWmOViqabyy8dBWOrjryaeXLr3cHoQH7i5jAOBeOF72RXB6Nf98lPW9cSYGwNRqFS0q9X+zO96cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwtRFPl3ESEY+0/oszl6+tL+/WX126cLhsh954+KPqObNTpBFxerW/slDjXCbZ0SHHnT13/q2lfn/lzB0Fj+3pVTuDZI8v7+wx54kLOpORxu2CaOR/Jff2zMlf29ujyzl7J5mAW3ffB6N8dwIAYNqkRcs+jV9JNxezY8lsxPbnO+v/Y5U4hqz/f1i9eKx6rWr939s1m39+GtE0J9aw9f/82tvvzZ89d75dPH/nRO/Z3gsLLz7Xe35+sJ4yb1UFAACAW2sXrVr/N2Zv3v8/WIljyPr/599e/716reb/1v/7z53v/484IQAAgH3swSN//pHscjxpt+P9pbW1M7388frzE/njGFK9vU65exwzZXCgaNX6Pz4cU34AAABArbY2kh37/6cqcQy5///tU39/Vj1nMyI6xf7/8eV3+6fqm87Eunn/v7vruOqPftMYzc+Ja5guAAAAY9IpWnX/Px18/7/xeDmmERFPPpHHxb8BHKr+f6n18cnqtarf/3+mvilOpMZcfj921v8ztx47F9Gaqyk5AAAApk5Wcc58+VVWisav6ebim18ffLU9O+6sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F/25942YSCM4/DrS6LEbTJCeiuBGWioEIzAh4RkyTMwAAvRUNFaLAIrgATn2p1pnqf5/4or7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrcel+8RUQRqcsUabr7ubxHxEekfdtOPh9ZHK7n5uuZi+NplvM75r9lRJRRDHEOAMDgqm5zbLb1+i/vf95R3nHeatnUq1d+GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODODhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWAEAAP//PP9fMg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) fdatasync(r1) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x4a8e) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) 10.206886081s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000069c868ae287ce0f9ca16ab00b7f8ffffffffffff8400000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1, 0x1cc, &(0x7f00000004c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.203936772s ago: executing program 3 (id=1019): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) r1 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffc, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000840)={[{@nombcache}, {@delalloc}, {}, {@dioread_lock}, {@data_writeback}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@acl}, {@jqfmt_vfsv0}]}, 0x8, 0x60c, &(0x7f0000000140)="$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") syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x10}], 0x1, 0x101) 10.201324312s ago: executing program 5 (id=1020): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, r3, r4, 0x3, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.789935087s ago: executing program 5 (id=1023): mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) 8.667886353s ago: executing program 5 (id=1024): syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r2, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x7}) 8.198848776s ago: executing program 2 (id=1027): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000bc0)=""/104, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) flock(r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 6.82739283s ago: executing program 5 (id=1028): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0x1, 0x1061e, &(0x7f0000021040)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) fdatasync(r1) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x4a8e) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) 6.704147516s ago: executing program 3 (id=1029): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) r1 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffc, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000840)={[{@nombcache}, {@delalloc}, {}, {@dioread_lock}, {@data_writeback}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@acl}, {@jqfmt_vfsv0}]}, 0x8, 0x60c, &(0x7f0000000140)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1000}}, {@noacl}]}, 0x4, 0x523, &(0x7f0000000540)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) poll(0x0, 0x0, 0x101) 6.489682296s ago: executing program 0 (id=1031): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20c453, &(0x7f00000000c0)={[{@nobh}]}, 0x1, 0x55f, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x1e8, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) close(r4) 5.54518572s ago: executing program 2 (id=1034): mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) 5.477776773s ago: executing program 4 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x7}) 5.477420303s ago: executing program 2 (id=1036): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd07, &(0x7f0000000580)="040000000000000000000000380100000000000000000000000000000000000000d5c3760e747a") recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000040)={0x1}) 5.475442374s ago: executing program 4 (id=1037): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r1, 0xffffffffffffffff, 0xee01) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100057a4969c729a1a5ee4c162a9d09ce5f73c0f9ad53f34b8c46c231832909b4fc5b071ab93a8559b4bafd03a25f973c928502cae77c2cc527bb30d7938344e0af8977438bdaee5d84ff886e2a1bc7"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x2000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x2, 0x8) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x800, 0xf, 0x1}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x24, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x400}) socket$inet6(0xa, 0x80000, 0x88) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, 0x0) 3.20674153s ago: executing program 0 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x24080) recvmmsg(r3, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6650}], 0x2, 0x20, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153c, &(0x7f0000000440)="$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") mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 3.20063467s ago: executing program 3 (id=1039): syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r2, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x7}) 3.149767823s ago: executing program 4 (id=1040): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) r1 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffc, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000840)={[{@nombcache}, {@delalloc}, {}, {@dioread_lock}, {@data_writeback}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@acl}, {@jqfmt_vfsv0}]}, 0x8, 0x60c, &(0x7f0000000140)="$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") syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x10}], 0x1, 0x101) 2.952867072s ago: executing program 2 (id=1041): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001e0023030000000000000000080000", @ANYRES32, @ANYBLOB="ba75a20576499504de3f7ddc4d4970a3338654e6fd7ef2cce8fd2236912963112fabca"], 0x18}], 0x1}, 0x0) 2.554675671s ago: executing program 3 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1, 0x4, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_mnt/asound/pcm\x00', 0x0, 0x0) read(r2, &(0x7f0000000700), 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) readv(r3, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1000030a) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) 2.426901647s ago: executing program 2 (id=1043): socket$nl_route(0x10, 0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000390428e06800fedbdf25000000", @ANYRES32=r4, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000e25796036e18377b000108001400ff010000140003", @ANYRES8=r4], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) r6 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) 2.389568918s ago: executing program 5 (id=1044): r0 = socket(0x80000000000000a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4085) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') pwrite64(r1, &(0x7f0000000080)="98", 0x1, 0x99fb) r4 = open(&(0x7f0000000300)='./file0/../file0/file0\x00', 0x2bfe, 0x149) finit_module(r4, 0x0, 0x1) 2.275217974s ago: executing program 3 (id=1045): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab06218d5484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc822642255309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691925c94ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c841bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe458d0ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aa1ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a9d7698b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1faa55d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a48d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f7613d237f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf557910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e006531836c2fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec800", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, r3, r4, 0x3, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.951998428s ago: executing program 0 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x7}) 1.855128184s ago: executing program 5 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x7}) 1.814972985s ago: executing program 4 (id=1048): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$eJzs3dFrJHcdAPDvTHYvubucSdUHLViLVu6q3ubSeG3woSqIPhXUiq91TTYhZHN7JJv2EopN8Q8QRLTgiz75IvgHCNIX30Uo6LuoKFKv+qDQdmRmZ3u5vd3k4HYzsPl8YG7mNzM73+9v9uaX329n2A3g3HoyIq5FxExEPB0RC+X6tJziqDfl+71z99W1fEoiy158O4mkXNc/1mw5v1y+bC4ivvX1iO8lD8bdOzjcbrbbrd2yvNTdSd7NssPrWzvNzdZm69bKyvKzq8+t3ly9MZZ6LkbE81/9209++MuvPf/bz7/y55f+ce37eVr/y7LXYqAe49Srer04F321iNidRLCK1Ioa9tysOBcAAE6W9/c/HBGfKvr/CzFT9OYAAACAaZJ9aT7eTSIyAAAAYGqlETEfSdoon/edjzRtNHrP8H40LqXtzl73cxud/Vvr+baIxainG1vt1o3y2YHFqCd5ebl8xrZffmagvBIRj0XEjxcuFuXGWqe9XvWHHwAAAHBOXB4Y//9noTf+LxxVnBwAAAAwPotVJwAAAABMnPE/AAAATD/jfwAAAJhq33jhhXzK+r9/vf7ywf525+Xr66297cbO/lpjrbN7u7HZ6WwW39m3c9rx2p3O7S/Erf07S93WXndp7+DwpZ3OfvFb4XNnUiEAAADgAY998s0/JRFx9MWLxZS7UG6rR2Qzx3euVZEhMCnpkHUzo3b+62RzAc7W8Wv9YoV5AGdPlx7Or3rVCQCVS07ZPvLhnd+PPxcAAGAyrn589P3/tzcqTQ2YsPL+f3La+B+YPiOf9TludvJ5AGevd//v/axn2B56BjCt6if1AFz6MPXS8dz/P+VRwkSDAgAAFZsvpiRtlOOA+UjTRiPiSvGzAPVkY6vduhERH4qIPy7UZ/PycvHKRG8eAAAAAAAAAAAAAAAAAAAAAAAAAB5SliWRAQAAAFMtIv17/5e5ri48NT/4+cCF5L8LxTwiXvnZiz+90+x2d5fz9f/6YH33jXL9M1V8ggEAAAAM6o/T++N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABind+6+utafzjLuP78SEYvD4tdirpjPRT0iLv07idqx1yURMTOG+EevR8THhsVP8rRisczivvgXItKIuDiu+EPP/wnxoxf/8hjiw3n2Zt7+fHnY9ZfGk8V8+PVXK6dHNbr9Sz9o/2ZGtH9XRh20fn/x8bd+vTQy/usRj9eGtz/9+El+vCHxP/2Qdfzutw8PR23LfhFxdVj7l9wfa6m7c3tp7+Dw+tZOc7O12bq1srL87OpzqzdXbyxtbLVb5b9DY/zoE795/17pvQfqf+mE9reo/4jz/9QJdZ49tvzeW3fufqS3OPDORD1+niW1ofHT3uyzD8bv/+37TLlXXs7PYfrGd4bm8sSv/vDEqDzz+q+PqP/cKfW/dkL9j3v6mz/4y0PuCgCcgb2Dw+1mu93atVDxQlL2eB/lOP1PRE7d+cqj5pz3O6s+Y60kkthutmfjvk3N6hPrLbxWvhvNdv9qG9ORf1f+V5lk8mfdEAEAABN3r9M/uOXeDRj3mQEAAAAAAAAAAAAAAAAAAGCyTv0asFGb0oh4yK8TG4x5VE1VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9P8AAAD//xQlyxg=") getpid() socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x3, 0x4623f, 0x0, 0x10001, 0x1ff, 0x7ffe, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x0, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x3, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0x9, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x104008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x800010, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x80001000, 0x3, 0x7fffffff, 0x3, 0x80, 0x4, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2852, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x80, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) unshare(0x60000600) socket$inet_tcp(0x2, 0x1, 0x0) 1.338647798s ago: executing program 3 (id=1049): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './trace\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0) read(r3, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 911.179488ms ago: executing program 2 (id=1050): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) r1 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffc, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000840)={[{@nombcache}, {@delalloc}, {}, {@dioread_lock}, {@data_writeback}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@acl}, {@jqfmt_vfsv0}]}, 0x8, 0x60c, &(0x7f0000000140)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1000}}, {@noacl}]}, 0x4, 0x523, &(0x7f0000000540)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) poll(&(0x7f0000000040), 0x0, 0x101) 874.836359ms ago: executing program 4 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 0s ago: executing program 4 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x7}) kernel console output (not intermixed with test programs): sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.013992][ T1959] loop0: detected capacity change from 0 to 1024 [ 143.164240][ T1959] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 143.301891][ T1959] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 143.421281][ T1959] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 143.449639][ T1959] EXT4-fs (loop0): barriers disabled [ 143.459423][ T1959] JBD2: no valid journal superblock found [ 143.476101][ T1959] EXT4-fs (loop0): error loading journal [ 143.524051][ T1972] netlink: 'syz.3.446': attribute type 16 has an invalid length. [ 143.559888][ T1972] netlink: 'syz.3.446': attribute type 17 has an invalid length. [ 143.573721][ T1975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=1975 comm=syz.3.446 [ 143.731882][ T1959] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 143.822902][ T1959] loop0: detected capacity change from 0 to 512 [ 143.901426][ T1959] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 144.076416][ T1967] loop2: detected capacity change from 0 to 131072 [ 144.113417][ T1967] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 144.122122][ T1967] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.131182][ T1967] F2FS-fs (loop2): invalid crc value [ 144.138216][ T1967] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.160461][ T1967] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 144.167918][ T1967] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 144.976416][ T30] audit: type=1400 audit(1790217581.038:256): avc: denied { ioctl } for pid=1986 comm="syz.5.450" path="socket:[22357]" dev="sockfs" ino=22357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.001426][ T30] audit: type=1400 audit(1790217581.038:257): avc: denied { setopt } for pid=1986 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.541269][ T2007] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.703852][ T2015] netlink: 'syz.0.460': attribute type 16 has an invalid length. [ 145.712028][ T2015] netlink: 'syz.0.460': attribute type 17 has an invalid length. [ 145.786158][ T2017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2017 comm=syz.0.460 [ 145.856546][ T2021] loop3: detected capacity change from 0 to 1024 [ 145.915528][ T2021] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 146.160950][ T2021] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 146.191964][ T2021] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 146.214068][ T2021] EXT4-fs (loop3): barriers disabled [ 146.246780][ T2021] JBD2: no valid journal superblock found [ 146.253322][ T2021] EXT4-fs (loop3): error loading journal [ 147.229126][ T2021] loop3: detected capacity change from 0 to 512 [ 147.531531][ T2021] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 147.608126][ T1952] lg-g15 0003:046D:0A07.0023: unbalanced collection at end of report description [ 147.637908][ T2048] loop0: detected capacity change from 0 to 1024 [ 147.669443][ T1952] lg-g15: probe of 0003:046D:0A07.0023 failed with error -22 [ 147.693086][ T2050] loop5: detected capacity change from 0 to 1024 [ 147.746862][ T2048] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 147.817786][ T2050] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 147.860028][ T2048] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 147.892420][ T2050] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 147.920950][ T2048] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 147.954383][ T2050] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 148.048021][ T2048] EXT4-fs (loop0): barriers disabled [ 148.058022][ T2050] EXT4-fs (loop5): barriers disabled [ 148.063517][ T2048] JBD2: no valid journal superblock found [ 148.079660][ T2050] JBD2: no valid journal superblock found [ 148.085596][ T2048] EXT4-fs (loop0): error loading journal [ 148.095837][ T2050] EXT4-fs (loop5): error loading journal [ 148.387129][ T2048] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 148.427848][ T2048] loop0: detected capacity change from 0 to 512 [ 148.452083][ T2020] loop2: detected capacity change from 0 to 131072 [ 148.472721][ T2050] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 148.491856][ T2050] loop5: detected capacity change from 0 to 512 [ 148.500406][ T2048] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 148.507899][ T2020] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 148.526294][ T2020] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.531397][ T2050] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 148.551377][ T2020] F2FS-fs (loop2): invalid crc value [ 148.595022][ T2020] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.631618][ T2020] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.638779][ T2020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 148.778550][ T2063] netlink: 'syz.0.474': attribute type 16 has an invalid length. [ 148.846782][ T2067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2067 comm=syz.0.474 [ 148.846792][ T2063] netlink: 'syz.0.474': attribute type 17 has an invalid length. [ 149.576414][ T2079] loop4: detected capacity change from 0 to 256 [ 149.602886][ T2079] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.839431][ T2091] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 150.394423][ T2098] loop2: detected capacity change from 0 to 1024 [ 150.588243][ T2098] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 150.614624][ T2101] netlink: 'syz.4.487': attribute type 16 has an invalid length. [ 150.800831][ T2102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2102 comm=syz.4.487 [ 150.813524][ T2098] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 150.832155][ T2098] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 150.850714][ T2101] netlink: 'syz.4.487': attribute type 17 has an invalid length. [ 150.869514][ T2098] EXT4-fs (loop2): barriers disabled [ 150.881191][ T2098] JBD2: no valid journal superblock found [ 150.929487][ T2098] EXT4-fs (loop2): error loading journal [ 150.992575][ T2110] loop5: detected capacity change from 0 to 512 [ 151.071916][ T2110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 151.080010][ T2110] System zones: 1-12 [ 151.086273][ T2110] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.490: missing EA_INODE flag [ 151.098282][ T2110] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.490: error while reading EA inode 12 err=-117 [ 151.121090][ T2110] EXT4-fs (loop5): 1 orphan inode deleted [ 151.126994][ T2110] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 151.140984][ T2098] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 151.160154][ T2098] loop2: detected capacity change from 0 to 512 [ 151.273071][ T2098] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 151.409622][ T2115] overlayfs: missing 'lowerdir' [ 151.909326][ T2124] loop3: detected capacity change from 0 to 256 [ 151.969969][ T2124] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.030909][ T2099] loop0: detected capacity change from 0 to 131072 [ 152.038749][ T2124] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 152.071812][ T2124] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 152.094732][ T2099] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 152.129798][ T2099] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.191434][ T2099] F2FS-fs (loop0): invalid crc value [ 152.323318][ T437] lg-g15 0003:046D:0A07.0024: item fetching failed at offset 11/12 [ 152.348467][ T2137] loop5: detected capacity change from 0 to 1024 [ 152.356307][ T2099] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.374851][ T437] lg-g15: probe of 0003:046D:0A07.0024 failed with error -22 [ 152.424553][ T2099] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 152.472854][ T2099] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 153.234724][ T2137] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 153.284693][ T2137] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 153.324948][ T2137] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 153.365527][ T2137] EXT4-fs (loop5): barriers disabled [ 153.391862][ T2137] JBD2: no valid journal superblock found [ 153.425350][ T2137] EXT4-fs (loop5): error loading journal [ 153.536731][ T2148] netlink: 'syz.4.500': attribute type 16 has an invalid length. [ 153.545890][ T2137] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 153.562814][ T2148] netlink: 'syz.4.500': attribute type 17 has an invalid length. [ 153.576229][ T2137] loop5: detected capacity change from 0 to 512 [ 153.593058][ T2148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2148 comm=syz.4.500 [ 153.647008][ T2137] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 153.773858][ T2157] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 153.972504][ T2165] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 154.306355][ T30] audit: type=1400 audit(1790217590.398:258): avc: denied { write } for pid=2178 comm="syz.3.512" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.319152][ T2167] tipc: New replicast peer: 255.255.255.255 [ 154.335743][ T2167] tipc: Enabled bearer , priority 10 [ 154.339401][ T30] audit: type=1400 audit(1790217590.428:259): avc: denied { open } for pid=2178 comm="syz.3.512" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.426318][ T2180] loop0: detected capacity change from 0 to 16 [ 154.450740][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 154.481656][ T2180] erofs: Unknown parameter 'fd/3' [ 154.720677][ T437] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.851291][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.431919][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.441141][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.449496][ T26] usb 6-1: Product: syz [ 155.456663][ T26] usb 6-1: Manufacturer: syz [ 155.462726][ T26] usb 6-1: SerialNumber: syz [ 155.566897][ T63] tipc: Node number set to 1235157632 [ 155.572459][ T437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.585251][ T20] lg-g15 0003:046D:0A07.0025: item fetching failed at offset 11/12 [ 155.588007][ T437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.597879][ T2191] loop2: detected capacity change from 0 to 1024 [ 155.603205][ T2186] netlink: 'syz.4.515': attribute type 16 has an invalid length. [ 155.609585][ T20] lg-g15: probe of 0003:046D:0A07.0025 failed with error -22 [ 155.617537][ T437] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.625210][ T2189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2189 comm=syz.4.515 [ 155.637768][ T437] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 155.655477][ T2186] netlink: 'syz.4.515': attribute type 17 has an invalid length. [ 155.660165][ T437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.675502][ T437] usb 4-1: config 0 descriptor?? [ 155.683556][ T2191] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 155.695344][ T2191] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 155.705114][ T2191] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 155.715328][ T2191] EXT4-fs (loop2): barriers disabled [ 155.721104][ T2191] JBD2: no valid journal superblock found [ 155.727195][ T2191] EXT4-fs (loop2): error loading journal [ 155.932555][ T2191] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 155.960266][ T2191] loop2: detected capacity change from 0 to 512 [ 155.991493][ T2191] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 156.685031][ T2201] loop0: detected capacity change from 0 to 1024 [ 156.730969][ T437] usbhid 4-1:0.0: can't add hid device: -71 [ 156.737860][ T437] usbhid: probe of 4-1:0.0 failed with error -71 [ 156.754176][ T2201] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 156.796374][ T437] usb 4-1: USB disconnect, device number 2 [ 156.802620][ T2201] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 156.832415][ T2201] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 156.851146][ T2201] EXT4-fs (loop0): barriers disabled [ 156.856929][ T2201] JBD2: no valid journal superblock found [ 156.862838][ T2201] EXT4-fs (loop0): error loading journal [ 156.930987][ T26] cdc_ncm 6-1:1.0: failed to get mac address [ 156.950853][ T26] cdc_ncm 6-1:1.0: bind() failure [ 156.970815][ T26] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 156.990771][ T26] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 157.000629][ T26] usb 6-1: USB disconnect, device number 3 [ 157.036499][ T2201] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 157.048944][ T2201] loop0: detected capacity change from 0 to 512 [ 157.081818][ T2201] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 157.374799][ T2215] loop0: detected capacity change from 0 to 2048 [ 157.447747][ T2215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.562415][ T2219] tipc: New replicast peer: 255.255.255.255 [ 157.568601][ T2219] tipc: Enabled bearer , priority 10 [ 157.724628][ T2226] netlink: 'syz.5.528': attribute type 16 has an invalid length. [ 157.770101][ T2226] netlink: 'syz.5.528': attribute type 17 has an invalid length. [ 157.874819][ T2226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2226 comm=syz.5.528 [ 157.915118][ T1952] lg-g15 0003:046D:0A07.0026: item fetching failed at offset 11/12 [ 157.918829][ T2235] loop5: detected capacity change from 0 to 1024 [ 157.923449][ T1952] lg-g15: probe of 0003:046D:0A07.0026 failed with error -22 [ 157.942260][ T2235] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 157.951541][ T2235] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 157.961192][ T2235] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 157.971218][ T2235] EXT4-fs (loop5): barriers disabled [ 157.982919][ T2235] JBD2: no valid journal superblock found [ 157.991679][ T2235] EXT4-fs (loop5): error loading journal [ 158.102206][ T2242] futex_wake_op: syz.4.532 tries to shift op by 144; fix this program [ 158.518326][ T2235] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 158.561667][ T1952] tipc: Node number set to 2559826252 [ 158.595863][ T20] lg-g15 0003:046D:0A07.0027: item fetching failed at offset 11/12 [ 158.608199][ T20] lg-g15: probe of 0003:046D:0A07.0027 failed with error -22 [ 158.622860][ T2254] loop2: detected capacity change from 0 to 1024 [ 158.632366][ T2235] loop5: detected capacity change from 0 to 512 [ 158.671816][ T2254] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 158.682185][ T2235] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 158.690420][ T2254] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 158.705826][ T2254] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 158.717146][ T2254] EXT4-fs (loop2): barriers disabled [ 158.723139][ T2254] JBD2: no valid journal superblock found [ 158.729116][ T2254] EXT4-fs (loop2): error loading journal [ 158.780790][ T30] audit: type=1400 audit(1790217594.868:260): avc: denied { listen } for pid=2250 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.388292][ T30] audit: type=1400 audit(1790217594.898:261): avc: denied { write } for pid=2250 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.758168][ T2252] loop3: detected capacity change from 0 to 1024 [ 159.881500][ T2254] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 159.896990][ T2254] loop2: detected capacity change from 0 to 512 [ 159.899821][ T2252] EXT4-fs (loop3): Ignoring removed bh option [ 159.920872][ T2254] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 159.932003][ T2252] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,discard,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 160.641059][ T2284] netlink: 'syz.3.546': attribute type 16 has an invalid length. [ 160.649296][ T2284] netlink: 'syz.3.546': attribute type 17 has an invalid length. [ 160.720497][ T2284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2284 comm=syz.3.546 [ 160.857838][ T2295] Zero length message leads to an empty skb [ 161.021191][ T2298] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 161.615134][ T2312] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 161.699582][ T2313] loop5: detected capacity change from 0 to 512 [ 162.022705][ T2313] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback. [ 162.036224][ T2313] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.510817][ T2323] netlink: 'syz.4.559': attribute type 16 has an invalid length. [ 162.528942][ T2323] netlink: 'syz.4.559': attribute type 17 has an invalid length. [ 162.562564][ T2325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2325 comm=syz.4.559 [ 162.633351][ T2319] tipc: Started in network mode [ 162.640475][ T2319] tipc: Node identity ac14140f, cluster identity 4711 [ 162.648140][ T2319] tipc: New replicast peer: 255.255.255.255 [ 162.654399][ T2319] tipc: Enabled bearer , priority 10 [ 162.669946][ T2300] loop0: detected capacity change from 0 to 131072 [ 162.720448][ T2300] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 162.729258][ T2300] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.738255][ T2300] F2FS-fs (loop0): invalid crc value [ 162.745408][ T2300] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.772940][ T2300] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.779999][ T2300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 163.413478][ T880] lg-g15 0003:046D:0A07.0028: item fetching failed at offset 17/18 [ 163.440028][ T880] lg-g15: probe of 0003:046D:0A07.0028 failed with error -22 [ 163.457759][ T2346] loop3: detected capacity change from 0 to 1024 [ 163.516272][ T2346] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 163.529060][ T2346] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 163.539666][ T2346] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 163.556308][ T2346] EXT4-fs (loop3): barriers disabled [ 163.562287][ T2346] JBD2: no valid journal superblock found [ 163.568079][ T2346] EXT4-fs (loop3): error loading journal [ 163.703238][ T2346] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 163.715269][ T2346] loop3: detected capacity change from 0 to 512 [ 163.781483][ T2346] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 163.793789][ T880] tipc: Node number set to 2886997007 [ 163.934153][ T2355] loop0: detected capacity change from 0 to 256 [ 164.249665][ T2360] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 164.317794][ T2364] tipc: Started in network mode [ 164.322965][ T2364] tipc: Node identity ac14140f, cluster identity 4711 [ 164.329852][ T2364] tipc: New replicast peer: 255.255.255.255 [ 164.336603][ T2364] tipc: Enabled bearer , priority 10 [ 165.450703][ T26] tipc: Node number set to 2886997007 [ 165.929565][ T26] lg-g15 0003:046D:0A07.0029: item fetching failed at offset 17/18 [ 165.941319][ T2405] loop2: detected capacity change from 0 to 1024 [ 165.947874][ T26] lg-g15: probe of 0003:046D:0A07.0029 failed with error -22 [ 165.994409][ T2405] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 166.016589][ T2405] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 166.042025][ T2405] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 166.052480][ T2405] EXT4-fs (loop2): barriers disabled [ 166.058095][ T2405] JBD2: no valid journal superblock found [ 166.064913][ T2405] EXT4-fs (loop2): error loading journal [ 166.197949][ T2405] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 166.225162][ T2405] loop2: detected capacity change from 0 to 512 [ 166.310618][ T2405] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 168.040274][ T2440] loop3: detected capacity change from 0 to 1024 [ 168.120888][ T2440] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 168.137566][ T2440] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 168.147240][ T2440] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 168.158026][ T2440] EXT4-fs (loop3): barriers disabled [ 168.163880][ T2440] JBD2: no valid journal superblock found [ 168.169744][ T2440] EXT4-fs (loop3): error loading journal [ 168.192805][ T2449] fuse: Bad value for 'fd' [ 168.285655][ T2451] loop0: detected capacity change from 0 to 512 [ 168.411970][ T2440] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 168.454921][ T2451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.789266][ T2440] loop3: detected capacity change from 0 to 512 [ 169.700317][ T2463] device syzkaller0 entered promiscuous mode [ 169.708535][ T2463] tipc: Enabled bearer , priority 0 [ 169.717031][ T2463] tipc: Resetting bearer [ 169.725351][ T2440] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 169.760347][ T2462] tipc: Resetting bearer [ 169.779265][ T2462] tipc: Disabling bearer [ 170.585289][ T2488] loop2: detected capacity change from 0 to 512 [ 170.631544][ T2490] fuse: Bad value for 'fd' [ 170.813747][ T2488] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.971799][ T2488] EXT4-fs (loop2): 1 truncate cleaned up [ 170.983510][ T2488] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 171.182153][ T30] audit: type=1400 audit(1790217607.278:262): avc: denied { read write } for pid=2487 comm="syz.2.610" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.215565][ T2488] deleting an unspecified loop device is not supported. [ 171.278057][ T30] audit: type=1400 audit(1790217607.278:263): avc: denied { open } for pid=2487 comm="syz.2.610" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.311716][ T30] audit: type=1400 audit(1790217607.308:264): avc: denied { ioctl } for pid=2487 comm="syz.2.610" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.542728][ T2471] loop0: detected capacity change from 0 to 131072 [ 171.782123][ T2471] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 171.791221][ T2471] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.804210][ T2471] F2FS-fs (loop0): invalid crc value [ 171.816074][ T2471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.848360][ T2471] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 171.855616][ T2471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 171.955883][ T880] lg-g15 0003:046D:0A07.002A: item fetching failed at offset 11/12 [ 171.968187][ T880] lg-g15: probe of 0003:046D:0A07.002A failed with error -22 [ 171.971756][ T2520] loop3: detected capacity change from 0 to 1024 [ 171.996090][ T2520] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 172.009863][ T2520] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 172.019689][ T2520] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 172.029699][ T2520] EXT4-fs (loop3): barriers disabled [ 172.035182][ T2520] JBD2: no valid journal superblock found [ 172.041732][ T2520] EXT4-fs (loop3): error loading journal [ 172.242092][ T2526] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 172.366334][ T2526] loop3: detected capacity change from 0 to 512 [ 172.392811][ T2530] fuse: Bad value for 'fd' [ 172.466941][ T2526] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 172.725911][ T2543] loop5: detected capacity change from 0 to 1024 [ 172.961885][ T2543] EXT4-fs (loop5): Ignoring removed orlov option [ 172.968297][ T2543] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 173.415251][ T362] lg-g15 0003:046D:0A07.002B: unbalanced collection at end of report description [ 173.551917][ T362] lg-g15: probe of 0003:046D:0A07.002B failed with error -22 [ 173.562297][ T2548] loop3: detected capacity change from 0 to 1024 [ 173.600931][ T2548] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 173.641325][ T2548] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 173.674948][ T2548] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 173.719452][ T2548] EXT4-fs (loop3): barriers disabled [ 173.738644][ T2548] JBD2: no valid journal superblock found [ 173.744804][ T2548] EXT4-fs (loop3): error loading journal [ 175.446963][ T2566] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 175.714813][ T2573] fuse: Invalid rootmode [ 175.757528][ T2548] loop3: detected capacity change from 0 to 512 [ 175.820719][ T2548] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 176.202427][ T2584] netlink: 'syz.4.638': attribute type 16 has an invalid length. [ 176.210696][ T2584] netlink: 'syz.4.638': attribute type 17 has an invalid length. [ 176.511934][ T2589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2589 comm=syz.4.638 [ 177.644268][ T2598] loop3: detected capacity change from 0 to 1024 [ 177.685545][ T2598] EXT4-fs (loop3): Ignoring removed bh option [ 177.723875][ T2598] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.853739][ T2598] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 177.932899][ T2615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 178.974162][ T2636] netlink: 'syz.5.654': attribute type 16 has an invalid length. [ 178.990435][ T2636] netlink: 'syz.5.654': attribute type 17 has an invalid length. [ 179.040757][ T2641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2641 comm=syz.5.654 [ 179.048667][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.070556][ T2644] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 179.362202][ T2654] device syzkaller0 entered promiscuous mode [ 179.387534][ T30] audit: type=1400 audit(1790217615.478:265): avc: denied { setopt } for pid=2652 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.490061][ T30] audit: type=1400 audit(1790217615.508:266): avc: denied { ioctl } for pid=2652 comm="syz.0.660" path="socket:[24197]" dev="sockfs" ino=24197 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.612668][ T30] audit: type=1400 audit(1790217615.528:267): avc: denied { write } for pid=2652 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.711425][ T2663] loop2: detected capacity change from 0 to 2048 [ 179.757741][ T2663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.821481][ T2663] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.909234][ T30] audit: type=1400 audit(1790217615.998:268): avc: denied { read } for pid=2662 comm="syz.2.663" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.514033][ T2679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.669'. [ 180.540085][ T2640] loop3: detected capacity change from 0 to 131072 [ 180.549311][ T2650] loop5: detected capacity change from 0 to 131072 [ 180.567846][ T2650] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 180.586915][ T2640] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 180.633433][ T2650] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 180.647098][ T2640] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 180.657411][ T2650] F2FS-fs (loop5): invalid crc value [ 180.660991][ T2640] F2FS-fs (loop3): invalid crc value [ 180.663042][ T2681] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 180.710466][ T2640] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.717339][ T2650] F2FS-fs (loop5): Found nat_bits in checkpoint [ 180.799963][ T2650] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 180.807272][ T2650] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 180.816548][ T2640] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 180.848533][ T2640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 180.859135][ T362] lg-g15 0003:046D:0A07.002C: unbalanced collection at end of report description [ 180.884898][ T2694] loop0: detected capacity change from 0 to 1024 [ 180.903363][ T362] lg-g15: probe of 0003:046D:0A07.002C failed with error -22 [ 180.965495][ T2694] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 180.996576][ T2694] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 181.014217][ T2694] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 181.029483][ T2694] EXT4-fs (loop0): barriers disabled [ 181.036985][ T2694] JBD2: no valid journal superblock found [ 181.043380][ T2694] EXT4-fs (loop0): error loading journal [ 181.112827][ T2702] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.121629][ T2702] overlayfs: missing 'lowerdir' [ 181.596977][ T2707] loop2: detected capacity change from 0 to 512 [ 181.614747][ T2694] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 181.633582][ T2694] loop0: detected capacity change from 0 to 512 [ 181.647631][ T2694] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 181.669951][ T2707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 181.678062][ T2707] System zones: 1-12 [ 181.683218][ T2707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.678: missing EA_INODE flag [ 181.695101][ T2707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.678: error while reading EA inode 12 err=-117 [ 181.707750][ T2707] EXT4-fs (loop2): 1 orphan inode deleted [ 181.726987][ T2707] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 183.190900][ T362] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.452248][ T30] audit: type=1400 audit(1790217619.548:269): avc: denied { read } for pid=2725 comm="syz.0.681" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.478093][ T2726] loop0: detected capacity change from 0 to 256 [ 183.508554][ T2726] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.519583][ T2726] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 183.561394][ T2726] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 183.750529][ T2722] lg-g15 0003:046D:0A07.002D: item fetching failed at offset 19/20 [ 183.772455][ T2722] lg-g15: probe of 0003:046D:0A07.002D failed with error -22 [ 183.787681][ T2733] loop0: detected capacity change from 0 to 1024 [ 183.839489][ T2733] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 183.873506][ T2733] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 183.903531][ T2733] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 183.951726][ T2733] EXT4-fs (loop0): barriers disabled [ 183.959416][ T2733] JBD2: no valid journal superblock found [ 183.969437][ T2733] EXT4-fs (loop0): error loading journal [ 184.530691][ T2733] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 184.696067][ T2733] loop0: detected capacity change from 0 to 512 [ 184.760579][ T2733] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 185.555395][ T2744] loop3: detected capacity change from 0 to 131072 [ 185.611651][ T2744] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 185.620324][ T2744] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 185.629271][ T2744] F2FS-fs (loop3): invalid crc value [ 185.636420][ T2744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.660255][ T2744] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 185.667401][ T2744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 187.703604][ T30] audit: type=1400 audit(1790217623.178:270): avc: denied { read } for pid=2767 comm="syz.2.692" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.734983][ T30] audit: type=1400 audit(1790217623.178:271): avc: denied { open } for pid=2767 comm="syz.2.692" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 188.720959][ T30] audit: type=1400 audit(1790217623.178:272): avc: denied { bind } for pid=2767 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.459833][ T2784] loop5: detected capacity change from 0 to 1024 [ 189.482352][ T870] lg-g15 0003:046D:0A07.002E: unbalanced collection at end of report description [ 189.497902][ T30] audit: type=1400 audit(1790217623.178:273): avc: denied { name_bind } for pid=2767 comm="syz.2.692" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 189.529023][ T30] audit: type=1400 audit(1790217623.178:274): avc: denied { node_bind } for pid=2767 comm="syz.2.692" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 189.575216][ T870] lg-g15: probe of 0003:046D:0A07.002E failed with error -22 [ 189.615316][ T30] audit: type=1400 audit(1790217624.258:275): avc: denied { associate } for pid=2782 comm="syz.4.694" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 189.636671][ T2784] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 189.656569][ T2784] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 189.964734][ T2784] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 190.051829][ T2784] EXT4-fs (loop5): barriers disabled [ 190.057297][ T2784] JBD2: no valid journal superblock found [ 190.065181][ T2784] EXT4-fs (loop5): error loading journal [ 190.491685][ T2784] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 191.542075][ T2808] loop5: detected capacity change from 0 to 512 [ 191.548614][ T2810] fuse: Bad value for 'fd' [ 191.594156][ T2808] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 191.937632][ T26] lg-g15 0003:046D:0A07.002F: item fetching failed at offset 11/12 [ 191.955161][ T2816] loop3: detected capacity change from 0 to 1024 [ 191.981120][ T26] lg-g15: probe of 0003:046D:0A07.002F failed with error -22 [ 192.137215][ T2816] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 192.156577][ T2816] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 192.168755][ T2788] loop0: detected capacity change from 0 to 131072 [ 192.175502][ T2816] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 192.188219][ T2788] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 192.191654][ T2816] EXT4-fs (loop3): barriers disabled [ 192.197235][ T2788] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 192.211103][ T2816] JBD2: no valid journal superblock found [ 192.211417][ T2788] F2FS-fs (loop0): invalid crc value [ 192.222788][ T2816] EXT4-fs (loop3): error loading journal [ 192.240809][ T2788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.278252][ T2788] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 192.285489][ T2788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 192.354650][ T2816] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 192.367073][ T2816] loop3: detected capacity change from 0 to 512 [ 192.389711][ T2816] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 192.578742][ T2813] loop2: detected capacity change from 0 to 131072 [ 192.652706][ T2813] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 192.663619][ T2813] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 192.673018][ T2813] F2FS-fs (loop2): invalid crc value [ 192.701700][ T2813] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.763235][ T2813] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 192.770448][ T2813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 192.973747][ T2850] loop3: detected capacity change from 0 to 256 [ 192.993121][ T2852] fuse: Bad value for 'fd' [ 193.013890][ T2850] FAT-fs (loop3): Directory bread(block 64) failed [ 193.020916][ T2850] FAT-fs (loop3): Directory bread(block 65) failed [ 193.075999][ T2850] FAT-fs (loop3): Directory bread(block 66) failed [ 193.117920][ T2850] FAT-fs (loop3): Directory bread(block 67) failed [ 193.125427][ T2850] FAT-fs (loop3): Directory bread(block 68) failed [ 193.132636][ T2850] FAT-fs (loop3): Directory bread(block 69) failed [ 193.139611][ T2850] FAT-fs (loop3): Directory bread(block 70) failed [ 193.146979][ T2850] FAT-fs (loop3): Directory bread(block 71) failed [ 193.154442][ T2850] FAT-fs (loop3): Directory bread(block 72) failed [ 193.161627][ T2850] FAT-fs (loop3): Directory bread(block 73) failed [ 193.833256][ T26] lg-g15 0003:046D:0A07.0030: unbalanced collection at end of report description [ 193.850912][ T2857] loop0: detected capacity change from 0 to 1024 [ 193.866875][ T26] lg-g15: probe of 0003:046D:0A07.0030 failed with error -22 [ 193.931965][ T2857] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 193.950741][ T2857] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 194.000957][ T2857] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 194.037272][ T2857] EXT4-fs (loop0): barriers disabled [ 194.041145][ T30] audit: type=1400 audit(1790217630.138:276): avc: denied { ioctl } for pid=2843 comm="syz.3.716" path="socket:[24457]" dev="sockfs" ino=24457 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.042791][ T2857] JBD2: no valid journal superblock found [ 194.118789][ T2857] EXT4-fs (loop0): error loading journal [ 194.125244][ T2848] attempt to access beyond end of device [ 194.125244][ T2848] loop3: rw=2051, want=1192, limit=256 [ 194.446223][ T289] attempt to access beyond end of device [ 194.446223][ T289] loop3: rw=2051, want=1768, limit=256 [ 194.539300][ T289] attempt to access beyond end of device [ 194.539300][ T289] loop3: rw=2051, want=1928, limit=256 [ 194.551149][ T289] attempt to access beyond end of device [ 194.551149][ T289] loop3: rw=2051, want=33800, limit=256 [ 194.600795][ T2857] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 194.612111][ T2857] loop0: detected capacity change from 0 to 512 [ 194.696366][ T2857] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 194.777133][ T2872] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 196.248750][ T2904] loop2: detected capacity change from 0 to 512 [ 196.471320][ T2904] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 196.489479][ T2904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 196.726904][ T2904] System zones: 0-1, 15-15, 18-18, 34-34 [ 196.733310][ T2904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 196.739891][ T2904] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 196.768183][ T2910] loop5: detected capacity change from 0 to 512 [ 197.128658][ T2904] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 197.257183][ T2904] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 197.310139][ T1952] lg-g15 0003:046D:0A07.0031: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 197.367924][ T2910] EXT4-fs (loop5): 1 orphan inode deleted [ 197.373797][ T2910] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 197.385629][ T2910] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.452023][ T1952] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0031/input/input38 [ 197.466649][ T2904] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.737: bad orphan inode 16 [ 197.491097][ T2915] loop0: detected capacity change from 0 to 1024 [ 197.538561][ T2870] loop3: detected capacity change from 0 to 131072 [ 197.722357][ T2904] ext4_test_bit(bit=15, block=18) = 1 [ 197.727916][ T2904] is_bad_inode(inode)=0 [ 197.739807][ T2904] NEXT_ORPHAN(inode)=0 [ 197.780115][ T2914] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 197.788732][ T2904] max_ino=32 [ 197.792170][ T2904] i_nlink=2 [ 197.797547][ T2904] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 197.810128][ T2915] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 197.824480][ T2915] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 197.837161][ T2915] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 197.848594][ T2915] EXT4-fs (loop0): barriers disabled [ 197.854098][ T2915] JBD2: no valid journal superblock found [ 197.859930][ T2915] EXT4-fs (loop0): error loading journal [ 197.945889][ T1952] lg-g15 0003:046D:0A07.0032: item fetching failed at offset 17/18 [ 197.957151][ T2921] loop5: detected capacity change from 0 to 1024 [ 197.964225][ T1952] lg-g15: probe of 0003:046D:0A07.0032 failed with error -22 [ 198.372822][ T2921] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 198.963298][ T2921] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 198.993095][ T2921] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 199.004893][ T2915] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 199.023671][ T2921] EXT4-fs (loop5): barriers disabled [ 199.040729][ T2921] JBD2: no valid journal superblock found [ 199.052386][ T2921] EXT4-fs (loop5): error loading journal [ 199.169606][ T2921] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 199.181962][ T2921] loop5: detected capacity change from 0 to 512 [ 199.213861][ T2921] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 199.253179][ T30] audit: type=1400 audit(1790217635.348:277): avc: denied { map } for pid=2931 comm="syz.2.743" path="socket:[25085]" dev="sockfs" ino=25085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.706550][ T2937] loop2: detected capacity change from 0 to 40427 [ 199.722997][ T2937] F2FS-fs (loop2): Unrecognized mount option "active_logs=Í" or missing value [ 200.085273][ T2954] fuse: Unknown parameter 'user_i00000000000000000000' [ 200.399261][ T1952] lg-g15 0003:046D:0A07.0033: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 200.413217][ T2962] loop0: detected capacity change from 0 to 1024 [ 200.439740][ T1952] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0033/input/input39 [ 200.473981][ T2962] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 200.580940][ T2962] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 200.693033][ T2962] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 200.739749][ T2962] EXT4-fs (loop0): barriers disabled [ 200.751599][ T2962] JBD2: no valid journal superblock found [ 200.757371][ T2962] EXT4-fs (loop0): error loading journal [ 200.906514][ T2972] loop3: detected capacity change from 0 to 512 [ 200.920733][ T2962] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 200.943996][ T2962] loop0: detected capacity change from 0 to 512 [ 200.996684][ T2972] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback. [ 201.010183][ T2972] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.025311][ T2962] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 201.162013][ T2946] loop2: detected capacity change from 0 to 131072 [ 201.181935][ T2946] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 201.227984][ T2946] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 201.242554][ T2946] F2FS-fs (loop2): invalid crc value [ 201.272625][ T2946] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.359318][ T2946] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 201.369651][ T2946] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 201.776917][ T2983] loop0: detected capacity change from 0 to 40427 [ 201.872719][ T2983] F2FS-fs (loop0): Unrecognized mount option "active_logs=Í" or missing value [ 202.272088][ T2997] fuse: Unknown parameter 'user_i00000000000000000000' [ 203.410720][ T30] audit: type=1400 audit(1790217639.498:278): avc: denied { mounton } for pid=3027 comm="syz.0.776" path="/142/file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.435544][ T3019] ip_tables: iptables: counters copy to user failed while replacing table [ 204.110674][ T3026] loop5: detected capacity change from 0 to 131072 [ 204.182003][ T3026] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 204.190073][ T3038] fuse: Unknown parameter 'user_id00000000000000000000' [ 204.193751][ T3026] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 204.206547][ T3026] F2FS-fs (loop5): invalid crc value [ 204.226172][ T3026] F2FS-fs (loop5): Found nat_bits in checkpoint [ 204.268699][ T3026] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 204.276037][ T3026] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 205.095750][ T1952] lg-g15 0003:046D:0A07.0034: unbalanced collection at end of report description [ 205.105427][ T1952] lg-g15: probe of 0003:046D:0A07.0034 failed with error -22 [ 205.109288][ T3066] loop2: detected capacity change from 0 to 1024 [ 205.161332][ T3066] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 205.180741][ T3066] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 205.190229][ T3066] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 205.200489][ T3066] EXT4-fs (loop2): barriers disabled [ 205.205982][ T3066] JBD2: no valid journal superblock found [ 205.212735][ T3066] EXT4-fs (loop2): error loading journal [ 205.342562][ T3066] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 205.354039][ T3066] loop2: detected capacity change from 0 to 512 [ 205.556436][ T3066] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 205.781234][ T3077] fuse: Unknown parameter 'user_id00000000000000000000' [ 205.890428][ T1952] lg-g15 0003:046D:0A07.0035: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 205.904921][ T1952] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0035/input/input40 [ 205.917071][ T3080] loop3: detected capacity change from 0 to 1024 [ 205.962676][ T3080] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 206.003850][ T3080] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 206.025696][ T3080] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 206.040938][ T3080] EXT4-fs (loop3): barriers disabled [ 206.046388][ T3080] JBD2: no valid journal superblock found [ 206.060690][ T3080] EXT4-fs (loop3): error loading journal [ 206.176560][ T26] lg-g15 0003:046D:0A07.0036: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 206.194658][ T3087] loop5: detected capacity change from 0 to 1024 [ 206.210855][ T3080] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 206.211296][ T26] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0036/input/input41 [ 206.251552][ T26] lg-g15 0003:046D:0A07.0036: Led z-10::lcd_backlight renamed to z-10::lcd_backlight_1 due to name collision [ 206.251674][ T3087] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 206.316907][ T3087] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 206.331155][ T3087] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 206.351278][ T3087] EXT4-fs (loop5): barriers disabled [ 206.364150][ T3087] JBD2: no valid journal superblock found [ 206.377454][ T3087] EXT4-fs (loop5): error loading journal [ 206.492001][ T3087] loop5: detected capacity change from 0 to 512 [ 206.571913][ T3087] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 206.700486][ T3082] loop2: detected capacity change from 0 to 131072 [ 206.766218][ T3082] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 206.774865][ T3082] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.784018][ T3082] F2FS-fs (loop2): invalid crc value [ 206.815920][ T3082] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.202480][ T3082] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 207.234111][ T3082] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 207.763477][ T362] lg-g15 0003:046D:0A07.0037: unbalanced collection at end of report description [ 207.835509][ T3109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.800'. [ 207.897951][ T3108] loop0: detected capacity change from 0 to 1024 [ 207.923499][ T362] lg-g15: probe of 0003:046D:0A07.0037 failed with error -22 [ 208.083282][ T3108] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 208.119037][ T3108] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 208.149996][ T3108] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 208.191592][ T3108] EXT4-fs (loop0): barriers disabled [ 208.197297][ T3108] JBD2: no valid journal superblock found [ 208.203675][ T3108] EXT4-fs (loop0): error loading journal [ 208.336959][ T3108] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 208.346245][ T3091] loop3: detected capacity change from 0 to 131072 [ 208.358958][ T3091] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 208.376902][ T3108] loop0: detected capacity change from 0 to 512 [ 208.409978][ T3091] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.419737][ T3108] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 208.438722][ T3091] F2FS-fs (loop3): invalid crc value [ 208.457712][ T3091] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.534860][ T3091] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 208.544045][ T3091] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 208.718836][ T3120] hub 9-0:1.0: USB hub found [ 208.723890][ T3120] hub 9-0:1.0: 1 port detected [ 209.078222][ T30] audit: type=1400 audit(1790217645.168:279): avc: denied { bind } for pid=3123 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.536182][ T3130] fuse: Unknown parameter 'user_id00000000000000000000' [ 210.282540][ T3148] loop0: detected capacity change from 0 to 128 [ 211.708652][ T3148] attempt to access beyond end of device [ 211.708652][ T3148] loop0: rw=2049, want=1041, limit=128 [ 212.033516][ T3148] attempt to access beyond end of device [ 212.033516][ T3148] loop0: rw=524288, want=369, limit=128 [ 212.085469][ T3148] attempt to access beyond end of device [ 212.085469][ T3148] loop0: rw=0, want=153, limit=128 [ 212.120905][ T3148] attempt to access beyond end of device [ 212.120905][ T3148] loop0: rw=0, want=153, limit=128 [ 212.150727][ T3148] attempt to access beyond end of device [ 212.150727][ T3148] loop0: rw=0, want=153, limit=128 [ 212.190697][ T3148] attempt to access beyond end of device [ 212.190697][ T3148] loop0: rw=0, want=153, limit=128 [ 212.220763][ T3148] attempt to access beyond end of device [ 212.220763][ T3148] loop0: rw=0, want=153, limit=128 [ 212.238246][ T3148] attempt to access beyond end of device [ 212.238246][ T3148] loop0: rw=0, want=153, limit=128 [ 212.353020][ T3163] loop0: detected capacity change from 0 to 128 [ 212.579457][ T45] attempt to access beyond end of device [ 212.579457][ T45] loop0: rw=1, want=151, limit=128 [ 212.768497][ T3169] loop0: detected capacity change from 0 to 512 [ 212.847787][ T3158] loop5: detected capacity change from 0 to 131072 [ 212.871052][ T3158] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 212.879614][ T3158] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 212.893246][ T3169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 212.908403][ T3169] System zones: 1-12 [ 212.913499][ T3158] F2FS-fs (loop5): invalid crc value [ 212.929846][ T3169] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.818: missing EA_INODE flag [ 212.951018][ T3176] fuse: Bad value for 'fd' [ 212.955634][ T3169] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.818: error while reading EA inode 12 err=-117 [ 212.976592][ T3158] F2FS-fs (loop5): Found nat_bits in checkpoint [ 212.989483][ T3169] EXT4-fs (loop0): 1 orphan inode deleted [ 212.995527][ T3169] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 213.140063][ T3185] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 213.154637][ T3158] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 213.161951][ T3158] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 214.704405][ T362] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.748866][ T3198] loop2: detected capacity change from 0 to 128 [ 214.856653][ T3198] attempt to access beyond end of device [ 214.856653][ T3198] loop2: rw=2049, want=1041, limit=128 [ 215.315864][ T3206] loop3: detected capacity change from 0 to 512 [ 215.570787][ T3206] EXT4-fs (loop3): 1 orphan inode deleted [ 215.576656][ T3206] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 215.588482][ T3206] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.196134][ T3212] fuse: Bad value for 'fd' [ 217.324478][ T437] lg-g15 0003:046D:0A07.0038: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 217.342920][ T3233] loop0: detected capacity change from 0 to 1024 [ 217.359970][ T437] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0038/input/input42 [ 217.421262][ T3233] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 217.457311][ T3233] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 217.470804][ T3233] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 217.501373][ T3233] EXT4-fs (loop0): barriers disabled [ 217.515483][ T3233] JBD2: no valid journal superblock found [ 217.528467][ T3233] EXT4-fs (loop0): error loading journal [ 217.753227][ T3233] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 217.825971][ T3205] loop2: detected capacity change from 0 to 131072 [ 217.835973][ T3233] loop0: detected capacity change from 0 to 512 [ 217.901177][ T3233] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 217.932494][ T3205] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 217.943307][ T3205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 217.952608][ T3205] F2FS-fs (loop2): invalid crc value [ 217.961302][ T3205] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 218.210420][ T3255] fuse: Bad value for 'fd' [ 219.413268][ T30] audit: type=1400 audit(1790217654.668:280): avc: denied { nlmsg_read } for pid=3252 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 219.465899][ T362] lg-g15 0003:046D:0A07.0039: unbalanced collection at end of report description [ 219.516259][ T3268] loop2: detected capacity change from 0 to 1024 [ 219.537923][ T362] lg-g15: probe of 0003:046D:0A07.0039 failed with error -22 [ 219.589146][ T3268] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 219.597158][ T3277] loop0: detected capacity change from 0 to 512 [ 219.598608][ T3278] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 219.605564][ T3268] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 219.705210][ T3268] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 219.715363][ T3268] EXT4-fs (loop2): barriers disabled [ 219.732337][ T3277] EXT4-fs (loop0): Ignoring removed nobh option [ 219.738766][ T3268] JBD2: no valid journal superblock found [ 219.744788][ T3268] EXT4-fs (loop2): error loading journal [ 219.747430][ T3277] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.851: invalid indirect mapped block 256 (level 2) [ 219.773250][ T3277] EXT4-fs (loop0): 2 truncates cleaned up [ 219.788412][ T3277] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 219.829019][ T3268] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 219.835215][ T362] lg-g15 0003:046D:0A07.003A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 219.853201][ T3268] loop2: detected capacity change from 0 to 512 [ 219.864955][ T3285] loop5: detected capacity change from 0 to 1024 [ 219.896858][ T362] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.003A/input/input43 [ 219.931587][ T3268] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 219.939417][ T3285] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 219.962260][ T3285] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 219.976168][ T3285] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 219.990417][ T3285] EXT4-fs (loop5): barriers disabled [ 220.270811][ T30] audit: type=1400 audit(1790217656.148:281): avc: denied { watch watch_reads } for pid=3275 comm="syz.0.851" path="/155/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.333344][ T3285] JBD2: no valid journal superblock found [ 220.345929][ T3285] EXT4-fs (loop5): error loading journal [ 220.451459][ T3275] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.851: bg 0: block 5: invalid block bitmap [ 220.464434][ T3275] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 220.476908][ T3275] EXT4-fs (loop0): This should not happen!! Data will be lost [ 220.476908][ T3275] [ 220.486686][ T3275] EXT4-fs (loop0): Total free blocks count 0 [ 220.492748][ T3275] EXT4-fs (loop0): Free/Dirty block details [ 220.498705][ T3275] EXT4-fs (loop0): free_blocks=0 [ 220.503715][ T3275] EXT4-fs (loop0): dirty_blocks=33 [ 220.508894][ T3275] EXT4-fs (loop0): Block reservation details [ 220.514946][ T3275] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 220.686809][ T3285] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 220.729327][ T3285] loop5: detected capacity change from 0 to 512 [ 220.782540][ T3285] EXT4-fs (loop5): mb_optimize_scan should be set to 0 or 1. [ 220.917885][ T3306] fuse: Unknown parameter '0x0000000000000003' [ 222.024839][ T3322] loop5: detected capacity change from 0 to 512 [ 222.043959][ T3322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.064791][ T3322] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.512591][ T30] audit: type=1400 audit(1790217658.608:282): avc: denied { ioctl } for pid=3321 comm="syz.5.866" path="/152/file1/file1" dev="loop5" ino=15 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.061393][ T3345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3345 comm=syz.3.872 [ 223.083749][ T30] audit: type=1400 audit(1790217659.178:283): avc: denied { setopt } for pid=3343 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.220194][ T3358] SELinux: failed to load policy [ 223.221552][ T30] audit: type=1400 audit(1790217659.308:284): avc: denied { load_policy } for pid=3350 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 223.938619][ T3333] loop2: detected capacity change from 0 to 131072 [ 223.949399][ T3333] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 223.958677][ T3333] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 223.971657][ T3333] F2FS-fs (loop2): invalid crc value [ 223.987503][ T3333] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.084685][ T3333] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 224.092077][ T3333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 224.594516][ T3365] loop0: detected capacity change from 0 to 131072 [ 224.732948][ T3389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3389 comm=syz.3.885 [ 224.751913][ T3365] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 224.765606][ T3365] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 224.780359][ T3365] F2FS-fs (loop0): invalid crc value [ 224.819096][ T3365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 224.907943][ T3365] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 224.915366][ T3365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 224.984324][ T30] audit: type=1326 audit(1790217661.078:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 225.076125][ T30] audit: type=1326 audit(1790217661.108:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 225.103385][ T30] audit: type=1326 audit(1790217661.108:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 225.200667][ T30] audit: type=1326 audit(1790217661.108:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 225.311001][ T30] audit: type=1326 audit(1790217661.158:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 225.342390][ T30] audit: type=1326 audit(1790217661.158:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ed053cec2 code=0x7ffc0000 [ 225.381890][ T30] audit: type=1326 audit(1790217661.158:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2ed053cf57 code=0x7ffc0000 [ 225.408087][ T30] audit: type=1326 audit(1790217661.158:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2ed04f9e51 code=0x7ffc0000 [ 225.433197][ T30] audit: type=1326 audit(1790217661.158:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2ed053df49 code=0x7ffc0000 [ 225.458333][ T30] audit: type=1326 audit(1790217661.158:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="syz.4.890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2ed04f9ebb code=0x7ffc0000 [ 226.462049][ T3424] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 226.581491][ T3428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3428 comm=syz.5.898 [ 226.836166][ T3446] fuse: Unknown parameter 'group_i00000000000000000000' [ 228.808111][ T3426] loop3: detected capacity change from 0 to 131072 [ 228.872283][ T3426] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 228.889165][ T3426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 228.936559][ T3426] F2FS-fs (loop3): invalid crc value [ 229.006971][ T3426] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.092062][ T3426] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 229.099478][ T3426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 229.110953][ T3430] loop0: detected capacity change from 0 to 131072 [ 229.194388][ T3430] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 229.233849][ T3436] loop2: detected capacity change from 0 to 131072 [ 229.234131][ T3430] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 229.249497][ T3471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3471 comm=syz.4.910 [ 229.265912][ T3430] F2FS-fs (loop0): invalid crc value [ 229.271298][ T3436] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 229.271327][ T3436] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.305813][ T3436] F2FS-fs (loop2): invalid crc value [ 229.354662][ T3436] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.381224][ T3430] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.426810][ T3481] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 229.433700][ T3436] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 229.436246][ T3430] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 229.442393][ T3436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 229.449334][ T3430] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 229.752888][ T3488] fuse: Unknown parameter 'grou00000000000000000000' [ 229.803667][ T3493] fuse: Unknown parameter 'group_i00000000000000000000' [ 229.862292][ T3497] loop3: detected capacity change from 0 to 512 [ 229.940252][ T3497] EXT4-fs (loop3): Test dummy encryption mode enabled [ 229.953916][ T3497] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.918: inode has both inline data and extents flags [ 229.975642][ T3497] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.918: couldn't read orphan inode 15 (err -117) [ 229.992741][ T3497] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 230.299758][ T3497] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 230.316253][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 230.316270][ T30] audit: type=1400 audit(1790217666.408:395): avc: denied { setattr } for pid=3496 comm="syz.3.918" name="file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 230.349749][ T3497] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 230.463951][ T30] audit: type=1400 audit(1790217666.558:396): avc: denied { rmdir } for pid=289 comm="syz-executor" name="work" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 230.930917][ T3520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3520 comm=syz.0.922 [ 230.977941][ T3522] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 231.727717][ T3529] loop2: detected capacity change from 0 to 40427 [ 231.748354][ T3529] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 231.777672][ T3529] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.797168][ T3529] F2FS-fs (loop2): invalid crc value [ 231.821591][ T3529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.936463][ T3529] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 231.949214][ T3545] fuse: Unknown parameter 'grou00000000000000000000' [ 231.953832][ T3529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.226140][ T3518] loop3: detected capacity change from 0 to 131072 [ 232.326007][ T3518] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 232.347509][ T3518] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 232.580693][ T3518] F2FS-fs (loop3): invalid crc value [ 232.629368][ T3518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.716636][ T3518] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 232.726904][ T3518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 233.046607][ T3538] loop5: detected capacity change from 0 to 131072 [ 233.068691][ T3567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3567 comm=syz.2.936 [ 233.118768][ T437] lg-g15 0003:046D:0A07.003B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 233.127819][ T3538] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 233.134708][ T3574] loop2: detected capacity change from 0 to 1024 [ 233.144649][ T3538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 233.146681][ T437] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.003B/input/input44 [ 233.201573][ T3574] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 233.213739][ T3538] F2FS-fs (loop5): invalid crc value [ 233.224247][ T3574] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 233.246887][ T3575] loop0: detected capacity change from 0 to 512 [ 233.266621][ T3574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 233.283255][ T3575] EXT4-fs (loop0): Test dummy encryption mode enabled [ 233.435129][ T3574] EXT4-fs (loop2): barriers disabled [ 233.450457][ T3575] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.937: corrupted xattr block 95 [ 233.463940][ T3575] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.937: bg 0: block 7: invalid block bitmap [ 233.478045][ T3575] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 233.487929][ T3575] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.937: corrupted xattr block 95 [ 233.501602][ T3575] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117) [ 233.510967][ T3575] EXT4-fs (loop0): 1 orphan inode deleted [ 233.516742][ T3575] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,delalloc,,errors=continue. Quota mode: none. [ 233.600686][ T30] audit: type=1400 audit(1790217669.638:397): avc: denied { validate_trans } for pid=3569 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 233.668338][ T3538] F2FS-fs (loop5): Found nat_bits in checkpoint [ 233.698259][ T3574] JBD2: no valid journal superblock found [ 233.996286][ T3574] EXT4-fs (loop2): error loading journal [ 234.091239][ T3538] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 234.098329][ T3538] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 234.245808][ T3574] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 234.971780][ T30] audit: type=1326 audit(1790217671.058:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.225656][ T30] audit: type=1326 audit(1790217671.058:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.250477][ T30] audit: type=1326 audit(1790217671.058:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ed04fd98e code=0x7ffc0000 [ 235.291670][ T30] audit: type=1326 audit(1790217671.058:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.316625][ T30] audit: type=1326 audit(1790217671.058:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.353819][ T30] audit: type=1326 audit(1790217671.058:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.420072][ T30] audit: type=1326 audit(1790217671.058:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.439874][ T870] lg-g15 0003:046D:0A07.003C: unbalanced collection at end of report description [ 235.445403][ T30] audit: type=1326 audit(1790217671.058:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.465254][ T3607] loop0: detected capacity change from 0 to 1024 [ 235.478835][ T30] audit: type=1326 audit(1790217671.058:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.510225][ T870] lg-g15: probe of 0003:046D:0A07.003C failed with error -22 [ 235.591327][ T3607] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 235.612681][ T3607] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 235.640813][ T3607] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 235.643861][ T3609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3609 comm=syz.4.948 [ 235.660713][ T30] audit: type=1326 audit(1790217671.058:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.688454][ T3607] EXT4-fs (loop0): barriers disabled [ 235.700700][ T3607] JBD2: no valid journal superblock found [ 235.706493][ T3607] EXT4-fs (loop0): error loading journal [ 235.740685][ T30] audit: type=1326 audit(1790217671.058:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.800740][ T30] audit: type=1326 audit(1790217671.058:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.877183][ T3607] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 235.918909][ T30] audit: type=1326 audit(1790217671.068:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 235.923848][ T3607] loop0: detected capacity change from 0 to 512 [ 236.012701][ T30] audit: type=1326 audit(1790217671.068:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 236.013537][ T3620] loop2: detected capacity change from 0 to 256 [ 236.046473][ T63] lg-g15 0003:046D:0A07.003D: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 236.060799][ T3622] loop3: detected capacity change from 0 to 1024 [ 236.061204][ T30] audit: type=1326 audit(1790217671.068:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3601 comm="syz.4.946" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2ed053d159 code=0x7ffc0000 [ 236.067641][ T63] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.003D/input/input45 [ 236.107223][ T3607] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 236.121182][ T3624] loop5: detected capacity change from 0 to 512 [ 236.141108][ T3620] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.160710][ T3624] EXT4-fs (loop5): Ignoring removed nobh option [ 236.167131][ T3622] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 236.176356][ T3620] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 236.204180][ T3622] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 236.214594][ T3624] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.944: invalid indirect mapped block 256 (level 2) [ 236.282160][ T3620] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 236.303162][ T3622] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 236.315513][ T3624] EXT4-fs (loop5): 2 truncates cleaned up [ 236.328159][ T3624] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 236.372710][ T3622] EXT4-fs (loop3): barriers disabled [ 236.381458][ T3622] JBD2: no valid journal superblock found [ 236.387411][ T3622] EXT4-fs (loop3): error loading journal [ 236.960488][ T3622] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 236.985843][ T3623] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.944: bg 0: block 5: invalid block bitmap [ 236.998687][ T3623] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 237.010986][ T3623] EXT4-fs (loop5): This should not happen!! Data will be lost [ 237.010986][ T3623] [ 237.020670][ T3623] EXT4-fs (loop5): Total free blocks count 0 [ 237.026690][ T3623] EXT4-fs (loop5): Free/Dirty block details [ 237.032616][ T3623] EXT4-fs (loop5): free_blocks=0 [ 237.037558][ T3623] EXT4-fs (loop5): dirty_blocks=33 [ 237.042703][ T3623] EXT4-fs (loop5): Block reservation details [ 237.048702][ T3623] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 237.222661][ T3640] loop3: detected capacity change from 0 to 512 [ 237.335398][ T3640] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 237.378392][ T3640] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.420222][ T3645] loop5: detected capacity change from 0 to 512 [ 237.485822][ T3629] loop0: detected capacity change from 0 to 131072 [ 237.531340][ T3629] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 237.539908][ T3629] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.571916][ T3645] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback. [ 237.651887][ T3645] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.679034][ T3629] F2FS-fs (loop0): invalid crc value [ 237.753828][ T3629] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.828415][ T3629] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 237.839036][ T3629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 237.847186][ T3654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3654 comm=syz.4.959 [ 237.967971][ T3663] device veth0 entered promiscuous mode [ 237.980235][ T3663] device vlan2 entered promiscuous mode [ 238.302599][ T3669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'. [ 238.573022][ T3670] loop3: detected capacity change from 0 to 1024 [ 238.602239][ T3670] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 238.631215][ T3670] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 238.661139][ T3670] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 238.681379][ T3670] EXT4-fs (loop3): barriers disabled [ 238.693888][ T3670] JBD2: no valid journal superblock found [ 238.704790][ T3670] EXT4-fs (loop3): error loading journal [ 238.820175][ T3668] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 238.852986][ T3668] loop3: detected capacity change from 0 to 512 [ 239.023772][ T3668] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 239.185842][ T437] lg-g15 0003:046D:0A07.003E: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 239.218663][ T437] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.003E/input/input46 [ 239.383814][ T3677] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 239.584426][ T3677] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 239.889611][ T3677] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 240.126206][ T3677] EXT4-fs (loop2): barriers disabled [ 240.251482][ T3677] JBD2: no valid journal superblock found [ 240.341798][ T3677] EXT4-fs (loop2): error loading journal [ 240.513452][ T3677] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 240.538239][ T3685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3685 comm=syz.3.970 [ 240.822573][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 240.822591][ T30] audit: type=1400 audit(1790217676.918:415): avc: denied { mounton } for pid=3693 comm="syz.5.973" path="/173/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 242.258640][ T3672] set_capacity_and_notify: 1 callbacks suppressed [ 242.258658][ T3672] loop0: detected capacity change from 0 to 131072 [ 242.299265][ T3706] loop3: detected capacity change from 0 to 512 [ 242.307316][ T3704] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 242.357377][ T3706] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 242.365357][ T3706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 242.373435][ T3706] System zones: 0-1, 15-15, 18-18, 34-34 [ 242.390131][ T3706] EXT4-fs (loop3): orphan cleanup on readonly fs [ 242.439173][ T3706] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 242.472241][ T3706] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 242.488711][ T3706] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 242.495772][ T3706] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.978: bad orphan inode 16 [ 242.506856][ T3706] ext4_test_bit(bit=15, block=18) = 1 [ 242.512586][ T3706] is_bad_inode(inode)=0 [ 242.516921][ T3706] NEXT_ORPHAN(inode)=0 [ 242.528442][ T3706] max_ino=32 [ 242.534996][ T3706] i_nlink=2 [ 242.542551][ T3706] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 242.555665][ T3717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 242.570967][ T3717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3717 comm=syz.0.982 [ 242.609991][ T3720] fuse: Unknown parameter 'group_id00000000000000000000' [ 242.699332][ T3695] loop2: detected capacity change from 0 to 131072 [ 242.724140][ T3695] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 243.266444][ T3695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 243.367517][ T3732] loop0: detected capacity change from 0 to 1024 [ 243.380816][ T3695] F2FS-fs (loop2): invalid crc value [ 243.743979][ T3732] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 243.814524][ T3695] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 243.850162][ T3732] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 244.045271][ T3732] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 244.257088][ T3732] EXT4-fs (loop0): barriers disabled [ 244.286009][ T3732] JBD2: no valid journal superblock found [ 244.310820][ T3732] EXT4-fs (loop0): error loading journal [ 244.580480][ T3732] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 244.644814][ T3734] loop0: detected capacity change from 0 to 512 [ 244.679158][ T3734] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 244.865892][ T437] lg-g15 0003:046D:0A07.003F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 244.879449][ T3754] loop2: detected capacity change from 0 to 1024 [ 244.887270][ T3750] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 244.887426][ T437] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.003F/input/input47 [ 244.925829][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.994'. [ 244.935097][ T3753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3753 comm=syz.3.994 [ 244.945816][ T3754] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 244.964115][ T3754] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 244.984419][ T3754] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 245.010143][ T3754] EXT4-fs (loop2): barriers disabled [ 245.017493][ T3754] JBD2: no valid journal superblock found [ 245.023883][ T3754] EXT4-fs (loop2): error loading journal [ 245.523752][ T3765] fuse: Unknown parameter 'group_id00000000000000000000' [ 245.563635][ T3754] loop2: detected capacity change from 0 to 512 [ 245.637604][ T3754] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 246.461112][ T3774] loop3: detected capacity change from 0 to 512 [ 246.552295][ T3774] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1000: bad orphan inode 15 [ 246.580766][ T3774] ext4_test_bit(bit=14, block=5) = 0 [ 246.592132][ T3774] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 246.783573][ T3741] loop5: detected capacity change from 0 to 131072 [ 246.815165][ T3741] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 246.845986][ T3741] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 246.857847][ T3741] F2FS-fs (loop5): invalid crc value [ 247.048157][ T3741] F2FS-fs (loop5): Found nat_bits in checkpoint [ 247.710901][ T30] audit: type=1400 audit(1790217683.748:416): avc: denied { getopt } for pid=3781 comm="syz.4.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.840795][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 247.885944][ T3792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3792 comm=syz.4.1005 [ 248.012772][ T3798] loop2: detected capacity change from 0 to 1024 [ 248.021044][ T3799] fuse: Unknown parameter 'group_id00000000000000000000' [ 248.045716][ T3798] EXT4-fs (loop2): barriers disabled [ 248.051522][ T3798] JBD2: no valid journal superblock found [ 248.064020][ T3798] EXT4-fs (loop2): error loading journal [ 248.073654][ T2722] lg-g15 0003:046D:0A07.0040: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 248.087370][ T3802] loop3: detected capacity change from 0 to 1024 [ 248.101167][ T2722] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0040/input/input48 [ 248.188149][ T30] audit: type=1326 audit(1790217684.268:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec95ccc159 code=0x7ffc0000 [ 248.188432][ T3802] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 248.265078][ T30] audit: type=1326 audit(1790217684.268:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec95ccc159 code=0x7ffc0000 [ 248.448530][ T3802] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 248.519491][ T30] audit: type=1326 audit(1790217684.268:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec95ccc159 code=0x7ffc0000 [ 248.565656][ T3802] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 248.575574][ T3802] EXT4-fs (loop3): barriers disabled [ 248.581005][ T30] audit: type=1326 audit(1790217684.268:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec95ccc159 code=0x7ffc0000 [ 248.581036][ T3802] JBD2: no valid journal superblock found [ 248.611623][ T30] audit: type=1326 audit(1790217684.328:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec95ccc159 code=0x7ffc0000 [ 248.636665][ T3802] EXT4-fs (loop3): error loading journal [ 248.645367][ T30] audit: type=1326 audit(1790217684.328:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec95ccbec2 code=0x7ffc0000 [ 248.670858][ T30] audit: type=1326 audit(1790217684.738:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fec95ccbf57 code=0x7ffc0000 [ 248.695952][ T30] audit: type=1326 audit(1790217684.738:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fec95c88e51 code=0x7ffc0000 [ 248.731841][ T30] audit: type=1326 audit(1790217684.738:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.1006" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fec95cccf49 code=0x7ffc0000 [ 248.922999][ T3802] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 248.970439][ T3802] loop3: detected capacity change from 0 to 512 [ 249.001713][ T3773] loop0: detected capacity change from 0 to 131072 [ 249.035380][ T3773] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 249.052855][ T3802] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 249.062640][ T3773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 249.083253][ T3773] F2FS-fs (loop0): invalid crc value [ 249.094567][ T3773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.796618][ T3837] fuse: Bad value for 'user_id' [ 249.809879][ T3838] loop3: detected capacity change from 0 to 1024 [ 249.816522][ T63] lg-g15 0003:046D:0A07.0041: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 249.889778][ T63] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0041/input/input49 [ 249.892366][ T3838] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 249.920189][ T3838] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 249.950687][ T3838] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 250.782011][ T3838] EXT4-fs (loop3): barriers disabled [ 250.801367][ T3838] JBD2: no valid journal superblock found [ 250.807166][ T3838] EXT4-fs (loop3): error loading journal [ 251.365785][ T3858] loop2: detected capacity change from 0 to 512 [ 251.505004][ T3858] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 251.579182][ T3866] loop0: detected capacity change from 0 to 16 [ 252.703829][ T3858] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.740828][ T3866] erofs: (device loop0): mounted with root inode @ nid 36. [ 252.789823][ T3861] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 252.799002][ T3861] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 252.808079][ T3861] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 252.817196][ T3861] handle_bad_sector: 11 callbacks suppressed [ 252.817215][ T3861] attempt to access beyond end of device [ 252.817215][ T3861] loop0: rw=524288, want=34359738368, limit=16 [ 252.834967][ T3861] attempt to access beyond end of device [ 252.834967][ T3861] loop0: rw=524288, want=136, limit=16 [ 252.846149][ T3861] attempt to access beyond end of device [ 252.846149][ T3861] loop0: rw=524288, want=88, limit=16 [ 252.858467][ T3861] attempt to access beyond end of device [ 252.858467][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 252.869859][ T3861] attempt to access beyond end of device [ 252.869859][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 252.882003][ T3861] attempt to access beyond end of device [ 252.882003][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 252.893327][ T3861] attempt to access beyond end of device [ 252.893327][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 252.904648][ T3861] attempt to access beyond end of device [ 252.904648][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 252.916013][ T3861] attempt to access beyond end of device [ 252.916013][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 252.927346][ T3861] attempt to access beyond end of device [ 252.927346][ T3861] loop0: rw=0, want=34359738368, limit=16 [ 253.074131][ T63] lg-g15 0003:046D:0A07.0042: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 253.088881][ T3870] loop3: detected capacity change from 0 to 1024 [ 253.098569][ T63] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0042/input/input50 [ 253.150367][ T3877] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 253.162203][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 253.162292][ T30] audit: type=1400 audit(1790217689.258:499): avc: denied { relabelto } for pid=3855 comm="syz.2.1027" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 253.212672][ T3870] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 253.747712][ T3876] loop0: detected capacity change from 0 to 512 [ 253.875844][ T3870] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 253.909542][ T3883] fuse: Bad value for 'user_id' [ 253.914915][ T3870] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869) [ 253.960698][ T3876] EXT4-fs (loop0): Ignoring removed nobh option [ 253.992517][ T3870] EXT4-fs (loop3): barriers disabled [ 253.998372][ T3876] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 254.019815][ T3870] JBD2: no valid journal superblock found [ 254.032058][ T3876] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 254.051087][ T3870] EXT4-fs (loop3): error loading journal [ 254.057244][ T3876] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 254.091120][ T3876] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 254.101574][ T3876] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 254.189565][ T3876] EXT4-fs (loop0): failed to initialize system zone (-117) [ 254.206430][ T3870] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 254.221353][ T3876] EXT4-fs (loop0): mount failed [ 254.229308][ T3870] loop3: detected capacity change from 0 to 512 [ 254.253503][ T3870] EXT4-fs (loop3): mb_optimize_scan should be set to 0 or 1. [ 254.260112][ T3893] netlink: 'syz.4.1037': attribute type 49 has an invalid length. [ 254.269928][ T30] audit: type=1400 audit(1790217690.358:500): avc: denied { read } for pid=3891 comm="syz.2.1036" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 254.356447][ T3893] device ip6gretap0 entered promiscuous mode [ 254.576233][ T30] audit: type=1400 audit(1790217690.358:501): avc: denied { open } for pid=3891 comm="syz.2.1036" path="/197/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.718268][ T30] audit: type=1400 audit(1790217690.388:502): avc: denied { ioctl } for pid=3891 comm="syz.2.1036" path="/197/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.719998][ T3893] syz.4.1037 (3893) used greatest stack depth: 20152 bytes left [ 256.371655][ T30] audit: type=1400 audit(1790217690.488:503): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.422246][ T30] audit: type=1400 audit(1790217690.488:504): avc: denied { read } for pid=140 comm="dhcpcd" name="n1766423045" dev="tmpfs" ino=9991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.444639][ T30] audit: type=1400 audit(1790217690.488:505): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n1766423045" dev="tmpfs" ino=9991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.741568][ T3910] loop0: detected capacity change from 0 to 2048 [ 257.001577][ T3910] loop0: p1 < > p4 [ 257.015326][ T3910] loop0: p4 size 722688 extends beyond EOD, truncated [ 257.101442][ T3917] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 257.125697][ T30] audit: type=1400 audit(1790217690.488:506): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n1766423045" dev="tmpfs" ino=9991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.307059][ T3924] fuse: Bad value for 'user_id' [ 257.312756][ T30] audit: type=1400 audit(1790217691.808:507): avc: denied { setopt } for pid=3890 comm="syz.4.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.451227][ T3926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1043'. [ 257.619973][ T101] loop0: p1 < > p4 [ 257.644378][ T101] loop0: p4 size 722688 extends beyond EOD, truncated [ 257.710017][ T30] audit: type=1400 audit(1790217693.398:508): avc: denied { sys_module } for pid=3921 comm="syz.5.1044" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 257.796745][ T351] udevd[351]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 257.811058][ T442] udevd[442]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 257.840424][ T3934] ------------[ cut here ]------------ [ 257.845932][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 257.856212][ T3934] Modules linked in: [ 257.860130][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Not tainted syzkaller #0 [ 257.867524][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.877746][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 257.883564][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 257.903166][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 257.909413][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 257.917384][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 257.925361][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 257.933329][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000000ffd [ 257.941300][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 257.949288][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 257.958222][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.964800][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 257.972764][ T3934] Call Trace: [ 257.976045][ T3934] [ 257.978967][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 257.984591][ T3934] ? __kasan_check_write+0x14/0x20 [ 257.989688][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 257.994351][ T3934] rb_buffer_peek+0x60/0x7a0 [ 257.998927][ T3934] ring_buffer_peek+0x184/0x3b0 [ 258.003778][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 258.009394][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.014506][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 258.019175][ T3934] __find_next_entry+0x34d/0x6b0 [ 258.024118][ T3934] ? rb_advance_reader+0x39c/0x6b0 [ 258.029230][ T3934] ? trace_find_next_entry+0x370/0x370 [ 258.034674][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 258.040213][ T3934] ? print_trace_line+0x385/0x690 [ 258.045221][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 258.050141][ T3934] ? s_show+0x320/0x320 [ 258.054276][ T3934] vfs_read+0x28c/0xc20 [ 258.058438][ T3934] ? kernel_read+0x1f0/0x1f0 [ 258.063013][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.068111][ T3934] ? mutex_lock+0x9b/0x1c0 [ 258.072512][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 258.079792][ T3934] ? __fget_files+0x2e1/0x340 [ 258.084451][ T3934] ? __fdget_pos+0x2d2/0x380 [ 258.089022][ T3934] ? ksys_read+0x70/0x260 [ 258.093334][ T3934] ksys_read+0x14a/0x260 [ 258.097574][ T3934] ? vfs_write+0xfd0/0xfd0 [ 258.101976][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.107071][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 258.112167][ T3934] __x64_sys_read+0x7b/0x90 [ 258.116666][ T3934] x64_sys_call+0x96d/0x9a0 [ 258.121170][ T3934] do_syscall_64+0x4c/0xa0 [ 258.125589][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 258.130268][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 258.134949][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.140827][ T3934] RIP: 0033:0x7f6d752dc159 [ 258.145241][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.164841][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.173243][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 258.182340][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 258.190317][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 258.198316][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.206517][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 258.214506][ T3934] [ 258.217516][ T3934] ---[ end trace a3c162c93dd038d1 ]--- [ 258.223580][ T3934] ------------[ cut here ]------------ [ 258.229061][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/trace.c:2447 trace_find_cmdline+0x2e3/0x350 [ 258.239057][ T3934] Modules linked in: [ 258.243011][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G W syzkaller #0 [ 258.251824][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.261945][ T3934] RIP: 0010:trace_find_cmdline+0x2e3/0x350 [ 258.267790][ T3934] Code: 44 89 7c 24 40 48 c7 c7 80 65 0f 87 44 89 fe e8 a3 fa 00 00 e9 0d fe ff ff e8 29 45 fd ff e8 b8 f6 93 ff eb a5 e8 1d 45 fd ff <0f> 0b ba 06 00 00 00 48 8b 7c 24 10 48 c7 c6 e0 38 46 85 e9 26 ff [ 258.287811][ T3934] RSP: 0018:ffffc90000bd79a0 EFLAGS: 00010287 [ 258.293950][ T3934] RAX: ffffffff816c8283 RBX: ffff888129934000 RCX: 0000000000080000 [ 258.300956][ T3939] loop3: detected capacity change from 0 to 2048 [ 258.301968][ T3934] RDX: ffffc90001b7d000 RSI: 000000000006affe RDI: 000000000006afff [ 258.316953][ T3934] RBP: ffffc90000bd7a50 R08: 0000000000000003 R09: 0000000000000004 [ 258.324993][ T3934] R10: dffffc0000000000 R11: fffff5200017af3c R12: dffffc0000000000 [ 258.333342][ T3934] R13: 1ffff9200017af38 R14: 00000000a8000002 R15: 0000000000000000 [ 258.341375][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 258.350351][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.357029][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 258.359923][ T3939] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.365072][ T3934] Call Trace: [ 258.365082][ T3934] [ 258.365091][ T3934] ? ring_buffer_peek+0x345/0x3b0 [ 258.386951][ T3934] ? tracing_stop_tr+0x240/0x240 [ 258.391965][ T3934] trace_print_context+0xf9/0x4d0 [ 258.397016][ T3934] ? trace_find_mark+0x120/0x120 [ 258.402030][ T3934] ? __find_next_entry+0x5ab/0x6b0 [ 258.407177][ T3934] ? rb_advance_reader+0x39c/0x6b0 [ 258.412341][ T3934] print_trace_fmt+0x3c6/0x710 [ 258.417140][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 258.422722][ T3934] print_trace_line+0x385/0x690 [ 258.427595][ T3934] tracing_read_pipe+0x4fd/0xab0 [ 258.432568][ T3934] ? s_show+0x320/0x320 [ 258.436736][ T3934] vfs_read+0x28c/0xc20 [ 258.440908][ T3934] ? kernel_read+0x1f0/0x1f0 [ 258.445520][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.450667][ T3934] ? mutex_lock+0x9b/0x1c0 [ 258.455115][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 258.461846][ T3934] ? __fget_files+0x2e1/0x340 [ 258.466554][ T3934] ? __fdget_pos+0x2d2/0x380 [ 258.471209][ T3934] ? ksys_read+0x70/0x260 [ 258.475558][ T3934] ksys_read+0x14a/0x260 [ 258.479837][ T3934] ? vfs_write+0xfd0/0xfd0 [ 258.484386][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.489521][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 258.494698][ T3934] __x64_sys_read+0x7b/0x90 [ 258.499223][ T3934] x64_sys_call+0x96d/0x9a0 [ 258.503794][ T3934] do_syscall_64+0x4c/0xa0 [ 258.508228][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 258.512966][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 258.517654][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.523572][ T3934] RIP: 0033:0x7f6d752dc159 [ 258.528004][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.547927][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.556508][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 258.564539][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 258.572655][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 258.580716][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.588722][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 258.596787][ T3934] [ 258.599836][ T3934] ---[ end trace a3c162c93dd038d2 ]--- [ 258.685327][ T3934] ------------[ cut here ]------------ [ 258.690842][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 258.699169][ T3949] loop2: detected capacity change from 0 to 1024 [ 258.701137][ T3934] Modules linked in: [ 258.701152][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G W syzkaller #0 [ 258.701175][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.701186][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 258.701212][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 258.746635][ T2722] lg-g15 0003:046D:0A07.0043: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 258.755765][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010002 [ 258.755787][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 258.778414][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 258.785361][ T2722] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0043/input/input51 [ 258.786409][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 258.805281][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000000ffd [ 258.813375][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 258.821378][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 258.831119][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.838094][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 258.846111][ T3934] Call Trace: [ 258.849414][ T3934] [ 258.852359][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 258.858018][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.863164][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 258.867874][ T3934] rb_buffer_peek+0x60/0x7a0 [ 258.872518][ T3934] ? rb_advance_reader+0x39c/0x6b0 [ 258.877651][ T3934] ring_buffer_consume+0x1aa/0x370 [ 258.882788][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 258.888358][ T3934] ? print_trace_line+0x385/0x690 [ 258.893497][ T3934] tracing_read_pipe+0x599/0xab0 [ 258.898455][ T3934] ? s_show+0x320/0x320 [ 258.902625][ T3934] vfs_read+0x28c/0xc20 [ 258.906796][ T3934] ? kernel_read+0x1f0/0x1f0 [ 258.911403][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.916633][ T3934] ? mutex_lock+0x9b/0x1c0 [ 258.921167][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 258.927993][ T3934] ? __fget_files+0x2e1/0x340 [ 258.932813][ T3934] ? __fdget_pos+0x2d2/0x380 [ 258.937510][ T3934] ? ksys_read+0x70/0x260 [ 258.941861][ T3934] ksys_read+0x14a/0x260 [ 258.946156][ T3934] ? vfs_write+0xfd0/0xfd0 [ 258.950590][ T3934] ? __kasan_check_write+0x14/0x20 [ 258.955982][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 258.961110][ T3934] __x64_sys_read+0x7b/0x90 [ 258.965635][ T3934] x64_sys_call+0x96d/0x9a0 [ 258.970178][ T3934] do_syscall_64+0x4c/0xa0 [ 258.974637][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 258.979357][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 258.984076][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.990004][ T3934] RIP: 0033:0x7f6d752dc159 [ 258.994450][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.014084][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.022640][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 259.031212][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 259.039276][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 259.047343][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.055367][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 259.063356][ T3934] [ 259.066480][ T3934] ---[ end trace a3c162c93dd038d3 ]--- [ 259.071974][ T3934] ------------[ cut here ]------------ [ 259.077442][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 259.087824][ T3934] Modules linked in: [ 259.091761][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G W syzkaller #0 [ 259.100528][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.110586][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 259.116503][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 259.136118][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 259.142218][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 259.150206][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 259.158187][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 259.166161][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000000ffd [ 259.174135][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 259.182109][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 259.191040][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.197623][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 259.205595][ T3934] Call Trace: [ 259.208873][ T3934] [ 259.211801][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 259.217442][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.222567][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 259.227331][ T3934] rb_advance_reader+0x2b/0x6b0 [ 259.232486][ T3934] ring_buffer_consume+0x1e7/0x370 [ 259.237606][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 259.243254][ T3934] ? print_trace_line+0x385/0x690 [ 259.248283][ T3934] tracing_read_pipe+0x599/0xab0 [ 259.253217][ T3934] ? s_show+0x320/0x320 [ 259.257369][ T3934] vfs_read+0x28c/0xc20 [ 259.261528][ T3934] ? kernel_read+0x1f0/0x1f0 [ 259.266130][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.271257][ T3934] ? mutex_lock+0x9b/0x1c0 [ 259.275674][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 259.282279][ T3934] ? __fget_files+0x2e1/0x340 [ 259.286953][ T3934] ? __fdget_pos+0x2d2/0x380 [ 259.291542][ T3934] ? ksys_read+0x70/0x260 [ 259.295871][ T3934] ksys_read+0x14a/0x260 [ 259.300118][ T3934] ? vfs_write+0xfd0/0xfd0 [ 259.304538][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.309658][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 259.314792][ T3934] __x64_sys_read+0x7b/0x90 [ 259.319300][ T3934] x64_sys_call+0x96d/0x9a0 [ 259.323804][ T3934] do_syscall_64+0x4c/0xa0 [ 259.328226][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 259.332989][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 259.337684][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.343574][ T3934] RIP: 0033:0x7f6d752dc159 [ 259.348089][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.367873][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.376310][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 259.384460][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 259.392439][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 259.400416][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.408492][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 259.416473][ T3934] [ 259.419514][ T3934] ---[ end trace a3c162c93dd038d4 ]--- [ 259.425623][ T3934] ------------[ cut here ]------------ [ 259.431102][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 259.442145][ T3934] Modules linked in: [ 259.446068][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G W syzkaller #0 [ 259.454845][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.464919][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 259.470757][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 259.490480][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 259.496573][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 259.504565][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 259.512640][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 259.520634][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001001 [ 259.528626][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 259.536721][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 259.536743][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.536755][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 259.536772][ T3934] Call Trace: [ 259.536776][ T3934] [ 259.536785][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 259.536808][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.536824][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 259.536839][ T3934] rb_buffer_peek+0x60/0x7a0 [ 259.536854][ T3934] ring_buffer_peek+0x184/0x3b0 [ 259.536869][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 259.536884][ T3934] ? preempt_schedule+0xbc/0xd0 [ 259.536899][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 259.536915][ T3934] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 259.536933][ T3934] __find_next_entry+0x34d/0x6b0 [ 259.536948][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 259.536964][ T3934] ? ring_buffer_consume+0x2a1/0x370 [ 259.536980][ T3934] ? trace_find_next_entry+0x370/0x370 [ 259.536996][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 259.537011][ T3934] ? print_trace_line+0x385/0x690 [ 259.537027][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 259.537042][ T3934] ? s_show+0x320/0x320 [ 259.537054][ T3934] vfs_read+0x28c/0xc20 [ 259.537069][ T3934] ? kernel_read+0x1f0/0x1f0 [ 259.537083][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.537098][ T3934] ? mutex_lock+0x9b/0x1c0 [ 259.537112][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 259.537129][ T3934] ? __fget_files+0x2e1/0x340 [ 259.537144][ T3934] ? __fdget_pos+0x2d2/0x380 [ 259.537157][ T3934] ? ksys_read+0x70/0x260 [ 259.537170][ T3934] ksys_read+0x14a/0x260 [ 259.537185][ T3934] ? vfs_write+0xfd0/0xfd0 [ 259.537202][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.537217][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 259.537234][ T3934] __x64_sys_read+0x7b/0x90 [ 259.537249][ T3934] x64_sys_call+0x96d/0x9a0 [ 259.537264][ T3934] do_syscall_64+0x4c/0xa0 [ 259.537278][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 259.537293][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 259.537308][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.537323][ T3934] RIP: 0033:0x7f6d752dc159 [ 259.537338][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.537352][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.537370][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 259.537382][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 259.537393][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 259.537403][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.537412][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 259.537435][ T3934] [ 259.537440][ T3934] ---[ end trace a3c162c93dd038d5 ]--- [ 259.537450][ T3934] ================================================================== [ 259.537456][ T3934] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0 [ 259.537472][ T3934] Read of size 4 at addr ffff8881053a3011 by task syz.0.1046/3934 [ 259.537486][ T3934] [ 259.537492][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G W syzkaller #0 [ 259.537508][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.537518][ T3934] Call Trace: [ 259.537522][ T3934] [ 259.537527][ T3934] __dump_stack+0x21/0x30 [ 259.537542][ T3934] dump_stack_lvl+0x110/0x170 [ 259.537557][ T3934] ? show_regs_print_info+0x20/0x20 [ 259.537571][ T3934] ? load_image+0x3f0/0x3f0 [ 259.537586][ T3934] print_address_description+0x7f/0x2c0 [ 259.537601][ T3934] ? rb_buffer_peek+0x71a/0x7a0 [ 259.537616][ T3934] kasan_report+0x10f/0x150 [ 259.537630][ T3934] ? rb_buffer_peek+0x71a/0x7a0 [ 259.537645][ T3934] __asan_report_load4_noabort+0x14/0x20 [ 259.537661][ T3934] rb_buffer_peek+0x71a/0x7a0 [ 259.537675][ T3934] ring_buffer_peek+0x184/0x3b0 [ 259.537691][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 259.537706][ T3934] ? preempt_schedule+0xbc/0xd0 [ 259.537721][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 259.537738][ T3934] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 259.537754][ T3934] __find_next_entry+0x34d/0x6b0 [ 259.537770][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 259.537786][ T3934] ? ring_buffer_consume+0x2a1/0x370 [ 259.537802][ T3934] ? trace_find_next_entry+0x370/0x370 [ 259.537818][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 259.537834][ T3934] ? print_trace_line+0x385/0x690 [ 259.537850][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 259.537865][ T3934] ? s_show+0x320/0x320 [ 259.537878][ T3934] vfs_read+0x28c/0xc20 [ 259.537892][ T3934] ? kernel_read+0x1f0/0x1f0 [ 259.537906][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.537922][ T3934] ? mutex_lock+0x9b/0x1c0 [ 259.537938][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 259.537955][ T3934] ? __fget_files+0x2e1/0x340 [ 259.537970][ T3934] ? __fdget_pos+0x2d2/0x380 [ 259.537982][ T3934] ? ksys_read+0x70/0x260 [ 259.537996][ T3934] ksys_read+0x14a/0x260 [ 259.538009][ T3934] ? vfs_write+0xfd0/0xfd0 [ 259.538022][ T3934] ? __kasan_check_write+0x14/0x20 [ 259.538038][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 259.538054][ T3934] __x64_sys_read+0x7b/0x90 [ 259.538068][ T3934] x64_sys_call+0x96d/0x9a0 [ 259.538082][ T3934] do_syscall_64+0x4c/0xa0 [ 259.538095][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 259.538109][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 259.538124][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.538139][ T3934] RIP: 0033:0x7f6d752dc159 [ 259.538149][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.538162][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.538178][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 259.538189][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 259.538200][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 259.538210][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.538220][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 259.538234][ T3934] [ 259.538239][ T3934] [ 259.538242][ T3934] Allocated by task 101: [ 259.538249][ T3934] __kasan_slab_alloc+0xb7/0xe0 [ 259.538263][ T3934] slab_post_alloc_hook+0x4f/0x2b0 [ 259.538279][ T3934] kmem_cache_alloc+0xf7/0x260 [ 259.538293][ T3934] getname_flags+0xba/0x510 [ 259.538306][ T3934] __x64_sys_unlink+0x3c/0x50 [ 259.538320][ T3934] x64_sys_call+0x878/0x9a0 [ 259.538332][ T3934] do_syscall_64+0x4c/0xa0 [ 259.538345][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.538359][ T3934] [ 259.538362][ T3934] Freed by task 101: [ 259.538368][ T3934] kasan_set_track+0x4a/0x70 [ 259.538380][ T3934] kasan_set_free_info+0x23/0x40 [ 259.538393][ T3934] ____kasan_slab_free+0x125/0x160 [ 259.538406][ T3934] __kasan_slab_free+0x11/0x20 [ 259.538418][ T3934] slab_free_freelist_hook+0xc2/0x190 [ 259.538437][ T3934] kmem_cache_free+0x100/0x320 [ 259.538452][ T3934] do_unlinkat+0x630/0x6c0 [ 259.538465][ T3934] __x64_sys_unlink+0x49/0x50 [ 259.538478][ T3934] x64_sys_call+0x878/0x9a0 [ 259.538491][ T3934] do_syscall_64+0x4c/0xa0 [ 259.538503][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.538517][ T3934] [ 259.538520][ T3934] The buggy address belongs to the object at ffff8881053a2200 [ 259.538520][ T3934] which belongs to the cache names_cache of size 4096 [ 259.538532][ T3934] The buggy address is located 3601 bytes inside of [ 259.538532][ T3934] 4096-byte region [ffff8881053a2200, ffff8881053a3200) [ 259.538547][ T3934] The buggy address belongs to the page: [ 259.538554][ T3934] page:ffffea000414e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1053a0 [ 259.538571][ T3934] head:ffffea000414e800 order:3 compound_mapcount:0 compound_pincount:0 [ 259.538583][ T3934] flags: 0x4000000000010200(slab|head|zone=1) [ 259.538603][ T3934] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881001c4900 [ 259.538617][ T3934] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 259.538625][ T3934] page dumped because: kasan: bad access detected [ 259.538631][ T3934] page_owner tracks the page as allocated [ 259.538636][ T3934] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 39402927878, free_ts 39402048356 [ 259.538661][ T3934] post_alloc_hook+0x192/0x1b0 [ 259.538675][ T3934] prep_new_page+0x1c/0x110 [ 259.538689][ T3934] get_page_from_freelist+0x2c3a/0x2cd0 [ 259.538704][ T3934] __alloc_pages+0x1a2/0x460 [ 259.538717][ T3934] new_slab+0xa0/0x4d0 [ 259.538728][ T3934] ___slab_alloc+0x3ac/0x840 [ 259.538742][ T3934] __slab_alloc+0x49/0x90 [ 259.538756][ T3934] kmem_cache_alloc+0x138/0x260 [ 259.538770][ T3934] getname_flags+0xba/0x510 [ 259.538782][ T3934] user_path_at_empty+0x2f/0x1c0 [ 259.538795][ T3934] vfs_statx+0x109/0xa20 [ 259.538810][ T3934] __se_sys_newfstatat+0x10e/0x3d0 [ 259.538825][ T3934] __x64_sys_newfstatat+0x9b/0xb0 [ 259.538840][ T3934] x64_sys_call+0x2c1/0x9a0 [ 259.538853][ T3934] do_syscall_64+0x4c/0xa0 [ 259.538865][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.538880][ T3934] page last free stack trace: [ 259.538884][ T3934] free_unref_page_prepare+0x5fa/0x600 [ 259.538898][ T3934] free_unref_page+0xae/0x540 [ 259.538912][ T3934] __free_pages+0x6c/0x100 [ 259.538925][ T3934] __free_slab+0xe5/0x1e0 [ 259.538940][ T3934] __unfreeze_partials+0x15a/0x190 [ 259.538955][ T3934] put_cpu_partial+0xc6/0x120 [ 259.538970][ T3934] __slab_free+0x1d4/0x290 [ 259.538984][ T3934] ___cache_free+0x104/0x120 [ 259.538998][ T3934] qlink_free+0x4d/0x90 [ 259.539011][ T3934] qlist_free_all+0x5f/0xb0 [ 259.539025][ T3934] kasan_quarantine_reduce+0x14a/0x170 [ 259.539039][ T3934] __kasan_slab_alloc+0x2f/0xe0 [ 259.539052][ T3934] slab_post_alloc_hook+0x4f/0x2b0 [ 259.539067][ T3934] kmem_cache_alloc+0xf7/0x260 [ 259.539081][ T3934] getname_flags+0xba/0x510 [ 259.539093][ T3934] __x64_sys_unlink+0x3c/0x50 [ 259.539106][ T3934] [ 259.539109][ T3934] Memory state around the buggy address: [ 259.539116][ T3934] ffff8881053a2f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.539126][ T3934] ffff8881053a2f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.539135][ T3934] >ffff8881053a3000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.539143][ T3934] ^ [ 259.539150][ T3934] ffff8881053a3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.539159][ T3934] ffff8881053a3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.539166][ T3934] ================================================================== [ 259.539172][ T3934] Disabling lock debugging due to kernel taint [ 259.539652][ T3934] ------------[ cut here ]------------ [ 259.570502][ T30] audit: type=1400 audit(1790217695.628:509): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 259.574882][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 260.629188][ T3934] Modules linked in: [ 260.633093][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 260.642043][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.652097][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 260.658021][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 260.677653][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010006 [ 260.683736][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 260.691715][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 260.699688][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 260.707671][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001001 [ 260.715666][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 260.723654][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 260.732607][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.739191][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 260.747167][ T3934] Call Trace: [ 260.750446][ T3934] [ 260.753378][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 260.759016][ T3934] ? __kasan_check_write+0x14/0x20 [ 260.764128][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 260.768803][ T3934] rb_buffer_peek+0x60/0x7a0 [ 260.773392][ T3934] ring_buffer_consume+0x1aa/0x370 [ 260.778507][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 260.784141][ T3934] ? print_trace_line+0x385/0x690 [ 260.789252][ T3934] tracing_read_pipe+0x599/0xab0 [ 260.794191][ T3934] ? s_show+0x320/0x320 [ 260.798609][ T3934] vfs_read+0x28c/0xc20 [ 260.802783][ T3934] ? kernel_read+0x1f0/0x1f0 [ 260.807387][ T3934] ? __kasan_check_write+0x14/0x20 [ 260.812498][ T3934] ? mutex_lock+0x9b/0x1c0 [ 260.816921][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 260.823510][ T3934] ? __fget_files+0x2e1/0x340 [ 260.828271][ T3934] ? __fdget_pos+0x2d2/0x380 [ 260.832857][ T3934] ? ksys_read+0x70/0x260 [ 260.837274][ T3934] ksys_read+0x14a/0x260 [ 260.841519][ T3934] ? vfs_write+0xfd0/0xfd0 [ 260.846025][ T3934] ? __kasan_check_write+0x14/0x20 [ 260.851148][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 260.856263][ T3934] __x64_sys_read+0x7b/0x90 [ 260.860772][ T3934] x64_sys_call+0x96d/0x9a0 [ 260.865275][ T3934] do_syscall_64+0x4c/0xa0 [ 260.869691][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 260.874374][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 260.879048][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.884939][ T3934] RIP: 0033:0x7f6d752dc159 [ 260.889357][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.908984][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.917521][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 260.925518][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 260.933509][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 260.941503][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.949480][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 260.957457][ T3934] [ 260.960499][ T3934] ---[ end trace a3c162c93dd038d6 ]--- [ 260.965990][ T3934] ------------[ cut here ]------------ [ 260.971438][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 260.981683][ T3934] Modules linked in: [ 260.985596][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 260.994355][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.004409][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 261.010216][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 261.029847][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 261.035914][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 261.044062][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 261.052036][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 261.060011][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001001 [ 261.067983][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 261.076039][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 261.085058][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.091640][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 261.099617][ T3934] Call Trace: [ 261.102895][ T3934] [ 261.105828][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 261.111473][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.116609][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 261.121390][ T3934] rb_advance_reader+0x2b/0x6b0 [ 261.126246][ T3934] ring_buffer_consume+0x1e7/0x370 [ 261.131360][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 261.136910][ T3934] ? print_trace_line+0x385/0x690 [ 261.141932][ T3934] tracing_read_pipe+0x599/0xab0 [ 261.146905][ T3934] ? s_show+0x320/0x320 [ 261.151057][ T3934] vfs_read+0x28c/0xc20 [ 261.155213][ T3934] ? kernel_read+0x1f0/0x1f0 [ 261.159819][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.164931][ T3934] ? mutex_lock+0x9b/0x1c0 [ 261.169346][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 261.175929][ T3934] ? __fget_files+0x2e1/0x340 [ 261.180605][ T3934] ? __fdget_pos+0x2d2/0x380 [ 261.185196][ T3934] ? ksys_read+0x70/0x260 [ 261.189525][ T3934] ksys_read+0x14a/0x260 [ 261.193768][ T3934] ? vfs_write+0xfd0/0xfd0 [ 261.198178][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.203298][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 261.208425][ T3934] __x64_sys_read+0x7b/0x90 [ 261.212924][ T3934] x64_sys_call+0x96d/0x9a0 [ 261.217433][ T3934] do_syscall_64+0x4c/0xa0 [ 261.221849][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 261.226526][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 261.231198][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.237092][ T3934] RIP: 0033:0x7f6d752dc159 [ 261.241506][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.261107][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.269539][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 261.277510][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 261.285480][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 261.293453][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.301422][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 261.309397][ T3934] [ 261.312411][ T3934] ---[ end trace a3c162c93dd038d7 ]--- [ 261.318418][ T3934] ------------[ cut here ]------------ [ 261.323892][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 261.326346][ T30] audit: type=1400 audit(1790217695.628:510): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.334166][ T3934] Modules linked in: [ 261.334183][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 261.334207][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.334218][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 261.334246][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 261.334262][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 261.380084][ T30] audit: type=1400 audit(1790217695.628:511): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.384020][ T3934] [ 261.384027][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 261.384045][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 261.384058][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 261.384071][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001005 [ 261.384084][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 261.384098][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 261.404536][ T30] audit: type=1400 audit(1790217695.628:512): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.409767][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.409785][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 261.409804][ T3934] Call Trace: [ 261.432030][ T30] audit: type=1400 audit(1790217695.678:513): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.433302][ T3934] [ 261.433316][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 261.441633][ T30] audit: type=1400 audit(1790217695.678:514): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.449433][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.449458][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 261.457683][ T30] audit: type=1400 audit(1790217695.678:515): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.465389][ T3934] rb_buffer_peek+0x60/0x7a0 [ 261.465413][ T3934] ring_buffer_peek+0x184/0x3b0 [ 261.465431][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 261.465449][ T3934] ? preempt_schedule+0xbc/0xd0 [ 261.465467][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 261.630001][ T3934] ? asm_sysvec_call_function_single+0x1b/0x20 [ 261.636171][ T3934] __find_next_entry+0x34d/0x6b0 [ 261.641109][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 261.646486][ T3934] ? trace_find_next_entry+0x370/0x370 [ 261.651946][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 261.657487][ T3934] ? print_trace_line+0x385/0x690 [ 261.662526][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 261.667549][ T3934] ? s_show+0x320/0x320 [ 261.671724][ T3934] vfs_read+0x28c/0xc20 [ 261.675879][ T3934] ? kernel_read+0x1f0/0x1f0 [ 261.680467][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.685576][ T3934] ? mutex_lock+0x9b/0x1c0 [ 261.689988][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 261.696576][ T3934] ? __fget_files+0x2e1/0x340 [ 261.701253][ T3934] ? __fdget_pos+0x2d2/0x380 [ 261.705841][ T3934] ? ksys_read+0x70/0x260 [ 261.710203][ T3934] ksys_read+0x14a/0x260 [ 261.714444][ T3934] ? vfs_write+0xfd0/0xfd0 [ 261.718862][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.723969][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 261.729091][ T3934] __x64_sys_read+0x7b/0x90 [ 261.733594][ T3934] x64_sys_call+0x96d/0x9a0 [ 261.738096][ T3934] do_syscall_64+0x4c/0xa0 [ 261.742509][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 261.747183][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 261.751866][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.757759][ T3934] RIP: 0033:0x7f6d752dc159 [ 261.762176][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.781787][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.790465][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 261.798447][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 261.806415][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 261.814388][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.822458][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 261.830435][ T3934] [ 261.833451][ T3934] ---[ end trace a3c162c93dd038d8 ]--- [ 261.840156][ T3934] ------------[ cut here ]------------ [ 261.845645][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 261.855923][ T3934] Modules linked in: [ 261.860647][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 261.869488][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.879809][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 261.885630][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 261.905408][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010002 [ 261.911480][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 261.919447][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 261.927414][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 261.935389][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001005 [ 261.943454][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 261.951448][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 261.960393][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.966977][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 261.974950][ T3934] Call Trace: [ 261.978224][ T3934] [ 261.981162][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 261.986798][ T3934] ? __kasan_check_write+0x14/0x20 [ 261.991905][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 261.996578][ T3934] rb_buffer_peek+0x60/0x7a0 [ 262.001164][ T3934] ring_buffer_consume+0x1aa/0x370 [ 262.006294][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 262.011839][ T3934] ? print_trace_line+0x385/0x690 [ 262.016864][ T3934] tracing_read_pipe+0x599/0xab0 [ 262.021801][ T3934] ? s_show+0x320/0x320 [ 262.025953][ T3934] vfs_read+0x28c/0xc20 [ 262.030108][ T3934] ? kernel_read+0x1f0/0x1f0 [ 262.034708][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.039818][ T3934] ? mutex_lock+0x9b/0x1c0 [ 262.044243][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 262.050920][ T3934] ? __fget_files+0x2e1/0x340 [ 262.055595][ T3934] ? __fdget_pos+0x2d2/0x380 [ 262.060178][ T3934] ? ksys_read+0x70/0x260 [ 262.064521][ T3934] ksys_read+0x14a/0x260 [ 262.068762][ T3934] ? vfs_write+0xfd0/0xfd0 [ 262.073175][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.078371][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 262.083482][ T3934] __x64_sys_read+0x7b/0x90 [ 262.088076][ T3934] x64_sys_call+0x96d/0x9a0 [ 262.092577][ T3934] do_syscall_64+0x4c/0xa0 [ 262.096992][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 262.101665][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 262.106341][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.112233][ T3934] RIP: 0033:0x7f6d752dc159 [ 262.116759][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.136827][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.145278][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 262.153250][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 262.161224][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 262.169202][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.177180][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 262.185157][ T3934] [ 262.188175][ T3934] ---[ end trace a3c162c93dd038d9 ]--- [ 262.193664][ T3934] ------------[ cut here ]------------ [ 262.199171][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 262.209503][ T3934] Modules linked in: [ 262.213392][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 262.222146][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.232196][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 262.238005][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 262.257831][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 262.263903][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 262.271872][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 262.280028][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 262.288000][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001005 [ 262.296056][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 262.304037][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 262.312979][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.319558][ T3934] CR2: 0000200000009180 CR3: 000000012837d000 CR4: 00000000003506a0 [ 262.327534][ T3934] Call Trace: [ 262.330811][ T3934] [ 262.333752][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 262.339395][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.344508][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 262.349196][ T3934] rb_advance_reader+0x2b/0x6b0 [ 262.354045][ T3934] ring_buffer_consume+0x1e7/0x370 [ 262.359248][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 262.364792][ T3934] ? print_trace_line+0x385/0x690 [ 262.369815][ T3934] tracing_read_pipe+0x599/0xab0 [ 262.374774][ T3934] ? s_show+0x320/0x320 [ 262.378924][ T3934] vfs_read+0x28c/0xc20 [ 262.383080][ T3934] ? kernel_read+0x1f0/0x1f0 [ 262.387675][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.392958][ T3934] ? mutex_lock+0x9b/0x1c0 [ 262.397375][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 262.403974][ T3934] ? __fget_files+0x2e1/0x340 [ 262.409093][ T3934] ? __fdget_pos+0x2d2/0x380 [ 262.413678][ T3934] ? ksys_read+0x70/0x260 [ 262.418007][ T3934] ksys_read+0x14a/0x260 [ 262.422428][ T3934] ? vfs_write+0xfd0/0xfd0 [ 262.426839][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.431955][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 262.437082][ T3934] __x64_sys_read+0x7b/0x90 [ 262.441581][ T3934] x64_sys_call+0x96d/0x9a0 [ 262.446081][ T3934] do_syscall_64+0x4c/0xa0 [ 262.450772][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 262.455463][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 262.460578][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.466472][ T3934] RIP: 0033:0x7f6d752dc159 [ 262.470891][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.491201][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.499615][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 262.507584][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 262.515730][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 262.523695][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.531922][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 262.539897][ T3934] [ 262.542931][ T3934] ---[ end trace a3c162c93dd038da ]--- [ 262.696196][ T3962] fido_id[3962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.745045][ T3934] ------------[ cut here ]------------ [ 262.750554][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 262.760848][ T3934] Modules linked in: [ 262.764793][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 262.773927][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.784129][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 262.790145][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 262.810017][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010006 [ 262.816081][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 262.824048][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 262.832112][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 262.840560][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001009 [ 262.848659][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 262.856759][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 262.865885][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.872473][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 262.880475][ T3934] Call Trace: [ 262.883753][ T3934] [ 262.886703][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 262.892345][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.897482][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 262.902163][ T3934] rb_buffer_peek+0x60/0x7a0 [ 262.907190][ T3934] ring_buffer_peek+0x184/0x3b0 [ 262.912313][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 262.917871][ T3934] ? preempt_schedule+0xbc/0xd0 [ 262.922743][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 262.928374][ T3934] ? asm_sysvec_call_function_single+0x1b/0x20 [ 262.934535][ T3934] __find_next_entry+0x34d/0x6b0 [ 262.939493][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 262.944867][ T3934] ? trace_find_next_entry+0x370/0x370 [ 262.950362][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 262.955933][ T3934] ? print_trace_line+0x385/0x690 [ 262.960954][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 262.965887][ T3934] ? s_show+0x320/0x320 [ 262.970136][ T3934] vfs_read+0x28c/0xc20 [ 262.974758][ T3934] ? kernel_read+0x1f0/0x1f0 [ 262.979376][ T3934] ? __kasan_check_write+0x14/0x20 [ 262.984492][ T3934] ? mutex_lock+0x9b/0x1c0 [ 262.988942][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 262.995525][ T3934] ? __fget_files+0x2e1/0x340 [ 263.000204][ T3934] ? __fdget_pos+0x2d2/0x380 [ 263.004784][ T3934] ? ksys_read+0x70/0x260 [ 263.009118][ T3934] ksys_read+0x14a/0x260 [ 263.013355][ T3934] ? vfs_write+0xfd0/0xfd0 [ 263.017840][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.023031][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 263.028229][ T3934] __x64_sys_read+0x7b/0x90 [ 263.032722][ T3934] x64_sys_call+0x96d/0x9a0 [ 263.037219][ T3934] do_syscall_64+0x4c/0xa0 [ 263.041638][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 263.046480][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 263.051149][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.057035][ T3934] RIP: 0033:0x7f6d752dc159 [ 263.061446][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.081173][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.089690][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 263.097677][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 263.105751][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 263.113735][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.121709][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 263.129677][ T3934] [ 263.132689][ T3934] ---[ end trace a3c162c93dd038db ]--- [ 263.138653][ T3934] ------------[ cut here ]------------ [ 263.144120][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 263.154503][ T3934] Modules linked in: [ 263.158408][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 263.167163][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.177303][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 263.183112][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 263.202808][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010002 [ 263.208884][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 263.216857][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 263.224933][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 263.232919][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001009 [ 263.240992][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 263.249223][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 263.258325][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.264909][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 263.272910][ T3934] Call Trace: [ 263.276189][ T3934] [ 263.279124][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 263.284765][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.289877][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 263.294555][ T3934] rb_buffer_peek+0x60/0x7a0 [ 263.299141][ T3934] ring_buffer_consume+0x1aa/0x370 [ 263.304374][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 263.309940][ T3934] ? print_trace_line+0x385/0x690 [ 263.314976][ T3934] tracing_read_pipe+0x599/0xab0 [ 263.319931][ T3934] ? s_show+0x320/0x320 [ 263.324100][ T3934] vfs_read+0x28c/0xc20 [ 263.328342][ T3934] ? kernel_read+0x1f0/0x1f0 [ 263.333016][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.338128][ T3934] ? mutex_lock+0x9b/0x1c0 [ 263.342544][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 263.349168][ T3934] ? __fget_files+0x2e1/0x340 [ 263.353848][ T3934] ? __fdget_pos+0x2d2/0x380 [ 263.358441][ T3934] ? ksys_read+0x70/0x260 [ 263.362769][ T3934] ksys_read+0x14a/0x260 [ 263.367017][ T3934] ? vfs_write+0xfd0/0xfd0 [ 263.371429][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.376552][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 263.381663][ T3934] __x64_sys_read+0x7b/0x90 [ 263.386166][ T3934] x64_sys_call+0x96d/0x9a0 [ 263.390670][ T3934] do_syscall_64+0x4c/0xa0 [ 263.395087][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 263.399766][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 263.404441][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.410347][ T3934] RIP: 0033:0x7f6d752dc159 [ 263.414780][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.434578][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.443196][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 263.451257][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 263.459228][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 263.467206][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.475176][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 263.483150][ T3934] [ 263.486176][ T3934] ---[ end trace a3c162c93dd038dc ]--- [ 263.491670][ T3934] ------------[ cut here ]------------ [ 263.497117][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 263.507360][ T3934] Modules linked in: [ 263.511249][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 263.520268][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.530328][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 263.536421][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 263.556513][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 263.562600][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 263.570580][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 263.578555][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 263.586525][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001009 [ 263.594588][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 263.602744][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 263.611794][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.618639][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 263.627177][ T3934] Call Trace: [ 263.630735][ T3934] [ 263.633773][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 263.639423][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.644538][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 263.649216][ T3934] rb_advance_reader+0x2b/0x6b0 [ 263.654077][ T3934] ring_buffer_consume+0x1e7/0x370 [ 263.659628][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 263.665304][ T3934] ? print_trace_line+0x385/0x690 [ 263.670373][ T3934] tracing_read_pipe+0x599/0xab0 [ 263.675339][ T3934] ? s_show+0x320/0x320 [ 263.679503][ T3934] vfs_read+0x28c/0xc20 [ 263.683664][ T3934] ? kernel_read+0x1f0/0x1f0 [ 263.688254][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.693370][ T3934] ? mutex_lock+0x9b/0x1c0 [ 263.697792][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 263.704382][ T3934] ? __fget_files+0x2e1/0x340 [ 263.709076][ T3934] ? __fdget_pos+0x2d2/0x380 [ 263.713674][ T3934] ? ksys_read+0x70/0x260 [ 263.718218][ T3934] ksys_read+0x14a/0x260 [ 263.722478][ T3934] ? vfs_write+0xfd0/0xfd0 [ 263.726906][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.732028][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 263.737226][ T3934] __x64_sys_read+0x7b/0x90 [ 263.741728][ T3934] x64_sys_call+0x96d/0x9a0 [ 263.746328][ T3934] do_syscall_64+0x4c/0xa0 [ 263.750748][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 263.755446][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 263.760213][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.766197][ T3934] RIP: 0033:0x7f6d752dc159 [ 263.770616][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.790309][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.798723][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 263.806819][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 263.814786][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 263.822758][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.830746][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 263.838754][ T3934] [ 263.841777][ T3934] ---[ end trace a3c162c93dd038dd ]--- [ 263.847849][ T3934] ------------[ cut here ]------------ [ 263.853330][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 263.863702][ T3934] Modules linked in: [ 263.867596][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 263.876369][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.886770][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 263.892765][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 263.912456][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 263.918530][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 263.926517][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 263.934589][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 263.943175][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000500100d [ 263.951242][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 263.959227][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 263.968261][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.974931][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 263.982904][ T3934] Call Trace: [ 263.986196][ T3934] [ 263.989135][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 263.994775][ T3934] ? __kasan_check_write+0x14/0x20 [ 263.999886][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 264.004565][ T3934] rb_buffer_peek+0x60/0x7a0 [ 264.009154][ T3934] ring_buffer_peek+0x184/0x3b0 [ 264.014010][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 264.019556][ T3934] ? preempt_schedule+0xbc/0xd0 [ 264.024407][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 264.030035][ T3934] ? asm_sysvec_call_function_single+0x1b/0x20 [ 264.036190][ T3934] __find_next_entry+0x34d/0x6b0 [ 264.041151][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 264.046608][ T3934] ? trace_find_next_entry+0x370/0x370 [ 264.052105][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 264.057653][ T3934] ? print_trace_line+0x385/0x690 [ 264.062683][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 264.067627][ T3934] ? s_show+0x320/0x320 [ 264.071780][ T3934] vfs_read+0x28c/0xc20 [ 264.075939][ T3934] ? kernel_read+0x1f0/0x1f0 [ 264.080527][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.085637][ T3934] ? mutex_lock+0x9b/0x1c0 [ 264.090057][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 264.096656][ T3934] ? __fget_files+0x2e1/0x340 [ 264.101725][ T3934] ? __fdget_pos+0x2d2/0x380 [ 264.106488][ T3934] ? ksys_read+0x70/0x260 [ 264.110814][ T3934] ksys_read+0x14a/0x260 [ 264.115053][ T3934] ? vfs_write+0xfd0/0xfd0 [ 264.119466][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.124579][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 264.129779][ T3934] __x64_sys_read+0x7b/0x90 [ 264.134282][ T3934] x64_sys_call+0x96d/0x9a0 [ 264.138785][ T3934] do_syscall_64+0x4c/0xa0 [ 264.143197][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 264.147873][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 264.152547][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.158526][ T3934] RIP: 0033:0x7f6d752dc159 [ 264.162946][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.182560][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.190975][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 264.198951][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 264.207007][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 264.214979][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.222953][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 264.230928][ T3934] [ 264.233947][ T3934] ---[ end trace a3c162c93dd038de ]--- [ 264.239959][ T3934] ------------[ cut here ]------------ [ 264.245431][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 264.255691][ T3934] Modules linked in: [ 264.259631][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 264.268388][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.278550][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 264.284380][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 264.303986][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010002 [ 264.310161][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 264.318130][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 264.326194][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 264.334344][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000500100d [ 264.342418][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 264.350402][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 264.359341][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.365943][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 264.373923][ T3934] Call Trace: [ 264.377202][ T3934] [ 264.380151][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 264.385793][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.390907][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 264.395690][ T3934] rb_buffer_peek+0x60/0x7a0 [ 264.400283][ T3934] ring_buffer_consume+0x1aa/0x370 [ 264.405398][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 264.410950][ T3934] ? print_trace_line+0x385/0x690 [ 264.415979][ T3934] tracing_read_pipe+0x599/0xab0 [ 264.420916][ T3934] ? s_show+0x320/0x320 [ 264.425072][ T3934] vfs_read+0x28c/0xc20 [ 264.429232][ T3934] ? kernel_read+0x1f0/0x1f0 [ 264.433827][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.439037][ T3934] ? mutex_lock+0x9b/0x1c0 [ 264.443542][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 264.450214][ T3934] ? __fget_files+0x2e1/0x340 [ 264.455153][ T3934] ? __fdget_pos+0x2d2/0x380 [ 264.459740][ T3934] ? ksys_read+0x70/0x260 [ 264.464067][ T3934] ksys_read+0x14a/0x260 [ 264.468308][ T3934] ? vfs_write+0xfd0/0xfd0 [ 264.472728][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.477850][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 264.482978][ T3934] __x64_sys_read+0x7b/0x90 [ 264.487475][ T3934] x64_sys_call+0x96d/0x9a0 [ 264.491979][ T3934] do_syscall_64+0x4c/0xa0 [ 264.496405][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 264.501340][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 264.506016][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.511907][ T3934] RIP: 0033:0x7f6d752dc159 [ 264.516342][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.535951][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.544371][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 264.552344][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 264.560319][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 264.568308][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.576286][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 264.584276][ T3934] [ 264.587319][ T3934] ---[ end trace a3c162c93dd038df ]--- [ 264.592821][ T3934] ------------[ cut here ]------------ [ 264.598270][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 264.608520][ T3934] Modules linked in: [ 264.612414][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 264.621173][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.631241][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 264.637048][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 264.656747][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 264.663071][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 264.671080][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 264.679141][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 264.687125][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000500100d [ 264.695117][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 264.703095][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 264.712040][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.718631][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 264.726701][ T3934] Call Trace: [ 264.729992][ T3934] [ 264.732930][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 264.738568][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.743790][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 264.748489][ T3934] rb_advance_reader+0x2b/0x6b0 [ 264.753340][ T3934] ring_buffer_consume+0x1e7/0x370 [ 264.758455][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 264.764012][ T3934] ? print_trace_line+0x385/0x690 [ 264.769040][ T3934] tracing_read_pipe+0x599/0xab0 [ 264.773987][ T3934] ? s_show+0x320/0x320 [ 264.778143][ T3934] vfs_read+0x28c/0xc20 [ 264.782329][ T3934] ? kernel_read+0x1f0/0x1f0 [ 264.786917][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.792043][ T3934] ? mutex_lock+0x9b/0x1c0 [ 264.796573][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 264.803189][ T3934] ? __fget_files+0x2e1/0x340 [ 264.807980][ T3934] ? __fdget_pos+0x2d2/0x380 [ 264.812579][ T3934] ? ksys_read+0x70/0x260 [ 264.816922][ T3934] ksys_read+0x14a/0x260 [ 264.821184][ T3934] ? vfs_write+0xfd0/0xfd0 [ 264.825614][ T3934] ? __kasan_check_write+0x14/0x20 [ 264.830738][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 264.835942][ T3934] __x64_sys_read+0x7b/0x90 [ 264.840453][ T3934] x64_sys_call+0x96d/0x9a0 [ 264.844960][ T3934] do_syscall_64+0x4c/0xa0 [ 264.849725][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 264.854405][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 264.859092][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.865077][ T3934] RIP: 0033:0x7f6d752dc159 [ 264.869497][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.889292][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.897746][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 264.905826][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 264.913904][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 264.921873][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.929837][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 264.937817][ T3934] [ 264.940969][ T3934] ---[ end trace a3c162c93dd038e0 ]--- [ 264.946666][ T3934] ------------[ cut here ]------------ [ 264.952134][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 264.962413][ T3934] Modules linked in: [ 264.966318][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 264.975078][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.985139][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 264.990951][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 265.010563][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010012 [ 265.016634][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 265.024604][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 265.032575][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 265.040546][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001011 [ 265.048779][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 265.056761][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.065693][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.072273][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 265.080249][ T3934] Call Trace: [ 265.083537][ T3934] [ 265.086558][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 265.092751][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.097879][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 265.102558][ T3934] rb_buffer_peek+0x60/0x7a0 [ 265.107156][ T3934] ring_buffer_peek+0x184/0x3b0 [ 265.112006][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 265.117549][ T3934] ? preempt_schedule+0xbc/0xd0 [ 265.122402][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 265.128032][ T3934] ? asm_sysvec_call_function_single+0x1b/0x20 [ 265.134273][ T3934] __find_next_entry+0x34d/0x6b0 [ 265.139221][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 265.144613][ T3934] ? trace_find_next_entry+0x370/0x370 [ 265.150080][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 265.155626][ T3934] ? print_trace_line+0x385/0x690 [ 265.160666][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 265.165606][ T3934] ? s_show+0x320/0x320 [ 265.169771][ T3934] vfs_read+0x28c/0xc20 [ 265.174016][ T3934] ? kernel_read+0x1f0/0x1f0 [ 265.178604][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.183844][ T3934] ? mutex_lock+0x9b/0x1c0 [ 265.188263][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 265.194880][ T3934] ? __fget_files+0x2e1/0x340 [ 265.199570][ T3934] ? __fdget_pos+0x2d2/0x380 [ 265.204156][ T3934] ? ksys_read+0x70/0x260 [ 265.208487][ T3934] ksys_read+0x14a/0x260 [ 265.212735][ T3934] ? vfs_write+0xfd0/0xfd0 [ 265.217148][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.222267][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 265.227400][ T3934] __x64_sys_read+0x7b/0x90 [ 265.231990][ T3934] x64_sys_call+0x96d/0x9a0 [ 265.236495][ T3934] do_syscall_64+0x4c/0xa0 [ 265.240914][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 265.246117][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 265.250850][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.256785][ T3934] RIP: 0033:0x7f6d752dc159 [ 265.261202][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.280809][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.289234][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 265.297373][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 265.305455][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 265.313447][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.321512][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 265.329501][ T3934] [ 265.332521][ T3934] ---[ end trace a3c162c93dd038e1 ]--- [ 265.338901][ T3934] ------------[ cut here ]------------ [ 265.344509][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 265.354759][ T3934] Modules linked in: [ 265.358646][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 265.367403][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.377544][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 265.383357][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 265.403152][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010006 [ 265.409218][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 265.417205][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 265.425270][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 265.433427][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001011 [ 265.441573][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 265.449541][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.458470][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.465055][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 265.473045][ T3934] Call Trace: [ 265.476325][ T3934] [ 265.479264][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 265.484899][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.490030][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 265.494796][ T3934] rb_buffer_peek+0x60/0x7a0 [ 265.499387][ T3934] ring_buffer_consume+0x1aa/0x370 [ 265.504510][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 265.510061][ T3934] ? print_trace_line+0x385/0x690 [ 265.515103][ T3934] tracing_read_pipe+0x599/0xab0 [ 265.520041][ T3934] ? s_show+0x320/0x320 [ 265.524371][ T3934] vfs_read+0x28c/0xc20 [ 265.528527][ T3934] ? kernel_read+0x1f0/0x1f0 [ 265.533113][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.538238][ T3934] ? mutex_lock+0x9b/0x1c0 [ 265.542804][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 265.549417][ T3934] ? __fget_files+0x2e1/0x340 [ 265.554133][ T3934] ? __fdget_pos+0x2d2/0x380 [ 265.558731][ T3934] ? ksys_read+0x70/0x260 [ 265.563068][ T3934] ksys_read+0x14a/0x260 [ 265.567320][ T3934] ? vfs_write+0xfd0/0xfd0 [ 265.571737][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.576852][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 265.581964][ T3934] __x64_sys_read+0x7b/0x90 [ 265.586467][ T3934] x64_sys_call+0x96d/0x9a0 [ 265.590971][ T3934] do_syscall_64+0x4c/0xa0 [ 265.595391][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 265.600076][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 265.604759][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.610654][ T3934] RIP: 0033:0x7f6d752dc159 [ 265.615096][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.634877][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.643295][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 265.651531][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 265.659692][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 265.667843][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.675821][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 265.683797][ T3934] [ 265.686818][ T3934] ---[ end trace a3c162c93dd038e2 ]--- [ 265.692309][ T3934] ------------[ cut here ]------------ [ 265.697946][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 265.708204][ T3934] Modules linked in: [ 265.712119][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 265.720979][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.731231][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 265.737062][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 265.757030][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 265.763122][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 265.771204][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 265.779341][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 265.787517][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001011 [ 265.795502][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 265.803479][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.812411][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.819130][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 265.827175][ T3934] Call Trace: [ 265.830471][ T3934] [ 265.833496][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 265.839135][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.844490][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 265.849193][ T3934] rb_advance_reader+0x2b/0x6b0 [ 265.854210][ T3934] ring_buffer_consume+0x1e7/0x370 [ 265.859528][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 265.865093][ T3934] ? print_trace_line+0x385/0x690 [ 265.870121][ T3934] tracing_read_pipe+0x599/0xab0 [ 265.875055][ T3934] ? s_show+0x320/0x320 [ 265.879207][ T3934] vfs_read+0x28c/0xc20 [ 265.883367][ T3934] ? kernel_read+0x1f0/0x1f0 [ 265.887955][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.893152][ T3934] ? mutex_lock+0x9b/0x1c0 [ 265.897573][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 265.904165][ T3934] ? __fget_files+0x2e1/0x340 [ 265.908839][ T3934] ? __fdget_pos+0x2d2/0x380 [ 265.913432][ T3934] ? ksys_read+0x70/0x260 [ 265.917824][ T3934] ksys_read+0x14a/0x260 [ 265.922069][ T3934] ? vfs_write+0xfd0/0xfd0 [ 265.926513][ T3934] ? __kasan_check_write+0x14/0x20 [ 265.931884][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 265.936992][ T3934] __x64_sys_read+0x7b/0x90 [ 265.941489][ T3934] x64_sys_call+0x96d/0x9a0 [ 265.946075][ T3934] do_syscall_64+0x4c/0xa0 [ 265.950491][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 265.955168][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 265.959843][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.965752][ T3934] RIP: 0033:0x7f6d752dc159 [ 265.970192][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.989886][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.998302][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 266.006306][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 266.014281][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 266.022340][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.030329][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 266.038396][ T3934] [ 266.041416][ T3934] ---[ end trace a3c162c93dd038e3 ]--- [ 266.047396][ T3934] ------------[ cut here ]------------ [ 266.052881][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 266.063330][ T3934] Modules linked in: [ 266.067252][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 266.076033][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.086098][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 266.091923][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 266.111800][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 266.117870][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 266.126016][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 266.134076][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 266.142072][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001015 [ 266.150042][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 266.158010][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 266.166938][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.173519][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 266.181501][ T3934] Call Trace: [ 266.184779][ T3934] [ 266.187713][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 266.193348][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.198459][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 266.203136][ T3934] rb_buffer_peek+0x60/0x7a0 [ 266.207744][ T3934] ring_buffer_peek+0x184/0x3b0 [ 266.212593][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 266.218144][ T3934] ? preempt_schedule+0xbc/0xd0 [ 266.223015][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 266.228656][ T3934] ? asm_sysvec_call_function_single+0x1b/0x20 [ 266.234811][ T3934] __find_next_entry+0x34d/0x6b0 [ 266.239759][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 266.245153][ T3934] ? trace_find_next_entry+0x370/0x370 [ 266.250664][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 266.256207][ T3934] ? print_trace_line+0x385/0x690 [ 266.261245][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 266.266186][ T3934] ? s_show+0x320/0x320 [ 266.270338][ T3934] vfs_read+0x28c/0xc20 [ 266.274581][ T3934] ? kernel_read+0x1f0/0x1f0 [ 266.279182][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.284383][ T3934] ? mutex_lock+0x9b/0x1c0 [ 266.288801][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 266.295390][ T3934] ? __fget_files+0x2e1/0x340 [ 266.300067][ T3934] ? __fdget_pos+0x2d2/0x380 [ 266.304662][ T3934] ? ksys_read+0x70/0x260 [ 266.308989][ T3934] ksys_read+0x14a/0x260 [ 266.313230][ T3934] ? vfs_write+0xfd0/0xfd0 [ 266.317652][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.322762][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 266.327963][ T3934] __x64_sys_read+0x7b/0x90 [ 266.332476][ T3934] x64_sys_call+0x96d/0x9a0 [ 266.336980][ T3934] do_syscall_64+0x4c/0xa0 [ 266.341393][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 266.346071][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 266.350749][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.356640][ T3934] RIP: 0033:0x7f6d752dc159 [ 266.361055][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.380752][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.389166][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 266.397136][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 266.405113][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 266.413171][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.421144][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 266.429121][ T3934] [ 266.432140][ T3934] ---[ end trace a3c162c93dd038e4 ]--- [ 266.438000][ T3934] ------------[ cut here ]------------ [ 266.443563][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 266.453830][ T3934] Modules linked in: [ 266.457723][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 266.466490][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.476744][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 266.482556][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 266.502256][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010006 [ 266.508314][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 266.516276][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 266.524333][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 266.532300][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001015 [ 266.540267][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 266.548231][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 266.557177][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.563755][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 266.571725][ T3934] Call Trace: [ 266.575028][ T3934] [ 266.577967][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 266.583595][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.588700][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 266.593466][ T3934] rb_buffer_peek+0x60/0x7a0 [ 266.598058][ T3934] ring_buffer_consume+0x1aa/0x370 [ 266.603167][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 266.608714][ T3934] ? print_trace_line+0x385/0x690 [ 266.613753][ T3934] tracing_read_pipe+0x599/0xab0 [ 266.618714][ T3934] ? s_show+0x320/0x320 [ 266.622895][ T3934] vfs_read+0x28c/0xc20 [ 266.627164][ T3934] ? kernel_read+0x1f0/0x1f0 [ 266.631771][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.636885][ T3934] ? mutex_lock+0x9b/0x1c0 [ 266.641308][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 266.647908][ T3934] ? __fget_files+0x2e1/0x340 [ 266.652590][ T3934] ? __fdget_pos+0x2d2/0x380 [ 266.657177][ T3934] ? ksys_read+0x70/0x260 [ 266.661512][ T3934] ksys_read+0x14a/0x260 [ 266.665846][ T3934] ? vfs_write+0xfd0/0xfd0 [ 266.670277][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.675406][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 266.680514][ T3934] __x64_sys_read+0x7b/0x90 [ 266.685049][ T3934] x64_sys_call+0x96d/0x9a0 [ 266.689566][ T3934] do_syscall_64+0x4c/0xa0 [ 266.693974][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 266.698642][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 266.703310][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.709288][ T3934] RIP: 0033:0x7f6d752dc159 [ 266.713704][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.733419][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.741936][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 266.749990][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 266.757963][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 266.765960][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.773928][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 266.781894][ T3934] [ 266.784906][ T3934] ---[ end trace a3c162c93dd038e5 ]--- [ 266.790388][ T3934] ------------[ cut here ]------------ [ 266.795842][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 266.806079][ T3934] Modules linked in: [ 266.809980][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 266.818736][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.828819][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 266.834624][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 266.854503][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010002 [ 266.860590][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 266.868604][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 266.876691][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 266.884703][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001015 [ 266.892689][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 266.900672][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 266.909710][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.916374][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 266.924350][ T3934] Call Trace: [ 266.927633][ T3934] [ 266.930575][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 266.936249][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.941462][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 266.946152][ T3934] rb_advance_reader+0x2b/0x6b0 [ 266.951020][ T3934] ring_buffer_consume+0x1e7/0x370 [ 266.956234][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 266.961799][ T3934] ? print_trace_line+0x385/0x690 [ 266.966954][ T3934] tracing_read_pipe+0x599/0xab0 [ 266.971914][ T3934] ? s_show+0x320/0x320 [ 266.976085][ T3934] vfs_read+0x28c/0xc20 [ 266.980245][ T3934] ? kernel_read+0x1f0/0x1f0 [ 266.984835][ T3934] ? __kasan_check_write+0x14/0x20 [ 266.989952][ T3934] ? mutex_lock+0x9b/0x1c0 [ 266.994368][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 267.000955][ T3934] ? __fget_files+0x2e1/0x340 [ 267.005630][ T3934] ? __fdget_pos+0x2d2/0x380 [ 267.010219][ T3934] ? ksys_read+0x70/0x260 [ 267.014547][ T3934] ksys_read+0x14a/0x260 [ 267.018787][ T3934] ? vfs_write+0xfd0/0xfd0 [ 267.023224][ T3934] ? __kasan_check_write+0x14/0x20 [ 267.028338][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 267.033488][ T3934] __x64_sys_read+0x7b/0x90 [ 267.037992][ T3934] x64_sys_call+0x96d/0x9a0 [ 267.042581][ T3934] do_syscall_64+0x4c/0xa0 [ 267.047345][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 267.052041][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 267.056842][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.062835][ T3934] RIP: 0033:0x7f6d752dc159 [ 267.067251][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.086856][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.095364][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 267.103357][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 267.111352][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 267.119613][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.127581][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 267.135555][ T3934] [ 267.138582][ T3934] ---[ end trace a3c162c93dd038e6 ]--- [ 267.144464][ T3934] ------------[ cut here ]------------ [ 267.149925][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 267.160176][ T3934] Modules linked in: [ 267.164079][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 267.172841][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.182894][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 267.188715][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 267.208407][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 267.214474][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 267.222444][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 267.230421][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 267.238391][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001019 [ 267.246645][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 267.254708][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 267.263657][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.270500][ T3934] CR2: 0000200000045000 CR3: 000000012837d000 CR4: 00000000003506a0 [ 267.278481][ T3934] Call Trace: [ 267.281758][ T3934] [ 267.284691][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 267.290341][ T3934] ? __kasan_check_write+0x14/0x20 [ 267.295452][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 267.300127][ T3934] rb_buffer_peek+0x60/0x7a0 [ 267.304718][ T3934] ring_buffer_peek+0x184/0x3b0 [ 267.309570][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 267.315113][ T3934] ? preempt_schedule+0xbc/0xd0 [ 267.319964][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 267.325593][ T3934] ? asm_sysvec_call_function_single+0x1b/0x20 [ 267.331743][ T3934] __find_next_entry+0x34d/0x6b0 [ 267.336682][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 267.342055][ T3934] ? trace_find_next_entry+0x370/0x370 [ 267.347863][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 267.353433][ T3934] ? print_trace_line+0x385/0x690 [ 267.358462][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 267.363402][ T3934] ? s_show+0x320/0x320 [ 267.367554][ T3934] vfs_read+0x28c/0xc20 [ 267.371706][ T3934] ? kernel_read+0x1f0/0x1f0 [ 267.376294][ T3934] ? __kasan_check_write+0x14/0x20 [ 267.381499][ T3934] ? mutex_lock+0x9b/0x1c0 [ 267.385917][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 267.392503][ T3934] ? __fget_files+0x2e1/0x340 [ 267.397175][ T3934] ? __fdget_pos+0x2d2/0x380 [ 267.401759][ T3934] ? ksys_read+0x70/0x260 [ 267.406085][ T3934] ksys_read+0x14a/0x260 [ 267.410326][ T3934] ? vfs_write+0xfd0/0xfd0 [ 267.414738][ T3934] ? __kasan_check_write+0x14/0x20 [ 267.419847][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 267.425047][ T3934] __x64_sys_read+0x7b/0x90 [ 267.429548][ T3934] x64_sys_call+0x96d/0x9a0 [ 267.434049][ T3934] do_syscall_64+0x4c/0xa0 [ 267.438484][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 267.443167][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 267.447846][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.453739][ T3934] RIP: 0033:0x7f6d752dc159 [ 267.458183][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.477792][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.486207][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 267.494188][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 267.502165][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 267.510140][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.518117][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 267.526096][ T3934] [ 267.529148][ T3934] ---[ end trace a3c162c93dd038e7 ]--- [ 267.596052][ T30] audit: type=1400 audit(1790217703.688:516): avc: denied { read } for pid=3964 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.619074][ T30] audit: type=1400 audit(1790217703.688:517): avc: denied { open } for pid=3964 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.644038][ T30] audit: type=1400 audit(1790217703.688:518): avc: denied { getattr } for pid=3964 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.669446][ T30] audit: type=1400 audit(1790217703.738:519): avc: denied { write } for pid=3963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.692397][ T30] audit: type=1400 audit(1790217703.738:520): avc: denied { add_name } for pid=3963 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.715755][ T30] audit: type=1400 audit(1790217703.738:521): avc: denied { create } for pid=3963 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.738926][ T30] audit: type=1400 audit(1790217703.738:522): avc: denied { write } for pid=3963 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=10127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.765965][ T3934] ------------[ cut here ]------------ [ 267.766592][ T30] audit: type=1400 audit(1790217703.738:523): avc: denied { append } for pid=3963 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=10127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.771536][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 267.771571][ T3934] Modules linked in: [ 267.771583][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 267.771603][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.796853][ T30] audit: type=1400 audit(1790217703.768:524): avc: denied { remove_name } for pid=3974 comm="rm" name="resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=10127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.806741][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 267.806769][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 267.810873][ T30] audit: type=1400 audit(1790217703.768:525): avc: denied { unlink } for pid=3974 comm="rm" name="resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=10127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.819407][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010006 [ 267.819429][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 267.917479][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 267.925500][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 267.933478][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001019 [ 267.941468][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 267.949537][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 267.958700][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.965290][ T3934] CR2: 0000563d861b3300 CR3: 000000012837d000 CR4: 00000000003506a0 [ 267.973266][ T3934] Call Trace: [ 267.976541][ T3934] [ 267.979466][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 267.985116][ T3934] ? __kasan_check_write+0x14/0x20 [ 267.990346][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 267.995046][ T3934] rb_buffer_peek+0x60/0x7a0 [ 267.999651][ T3934] ring_buffer_consume+0x1aa/0x370 [ 268.004770][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 268.010326][ T3934] ? print_trace_line+0x385/0x690 [ 268.015359][ T3934] tracing_read_pipe+0x599/0xab0 [ 268.020321][ T3934] ? s_show+0x320/0x320 [ 268.024475][ T3934] vfs_read+0x28c/0xc20 [ 268.028710][ T3934] ? kernel_read+0x1f0/0x1f0 [ 268.033293][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.038399][ T3934] ? mutex_lock+0x9b/0x1c0 [ 268.042818][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 268.049425][ T3934] ? __fget_files+0x2e1/0x340 [ 268.054230][ T3934] ? __fdget_pos+0x2d2/0x380 [ 268.058922][ T3934] ? ksys_read+0x70/0x260 [ 268.063247][ T3934] ksys_read+0x14a/0x260 [ 268.067490][ T3934] ? vfs_write+0xfd0/0xfd0 [ 268.071942][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.077043][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 268.082151][ T3934] __x64_sys_read+0x7b/0x90 [ 268.086675][ T3934] x64_sys_call+0x96d/0x9a0 [ 268.091173][ T3934] do_syscall_64+0x4c/0xa0 [ 268.095630][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 268.100310][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 268.104987][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.110884][ T3934] RIP: 0033:0x7f6d752dc159 [ 268.115394][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.135088][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.143626][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 268.151602][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 268.159690][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 268.167684][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.175680][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 268.183663][ T3934] [ 268.186682][ T3934] ---[ end trace a3c162c93dd038e8 ]--- [ 268.192177][ T3934] ------------[ cut here ]------------ [ 268.197623][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 268.207870][ T3934] Modules linked in: [ 268.211940][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 268.220789][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.230848][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 268.236655][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 268.256258][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 268.262338][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 268.270306][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 268.278376][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 268.286357][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000005001019 [ 268.294332][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 268.302312][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 268.311242][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.317909][ T3934] CR2: 0000563d861b3300 CR3: 000000012837d000 CR4: 00000000003506a0 [ 268.326143][ T3934] Call Trace: [ 268.329421][ T3934] [ 268.332351][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 268.337986][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.343103][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 268.347789][ T3934] rb_advance_reader+0x2b/0x6b0 [ 268.352638][ T3934] ring_buffer_consume+0x1e7/0x370 [ 268.357747][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 268.363309][ T3934] ? print_trace_line+0x385/0x690 [ 268.368332][ T3934] tracing_read_pipe+0x599/0xab0 [ 268.373270][ T3934] ? s_show+0x320/0x320 [ 268.377425][ T3934] vfs_read+0x28c/0xc20 [ 268.381582][ T3934] ? kernel_read+0x1f0/0x1f0 [ 268.386173][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.391390][ T3934] ? mutex_lock+0x9b/0x1c0 [ 268.395822][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 268.402413][ T3934] ? __fget_files+0x2e1/0x340 [ 268.407184][ T3934] ? __fdget_pos+0x2d2/0x380 [ 268.411773][ T3934] ? ksys_read+0x70/0x260 [ 268.416098][ T3934] ksys_read+0x14a/0x260 [ 268.420339][ T3934] ? vfs_write+0xfd0/0xfd0 [ 268.424838][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.430060][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 268.435172][ T3934] __x64_sys_read+0x7b/0x90 [ 268.439676][ T3934] x64_sys_call+0x96d/0x9a0 [ 268.444201][ T3934] do_syscall_64+0x4c/0xa0 [ 268.448618][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 268.453296][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 268.457972][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.463954][ T3934] RIP: 0033:0x7f6d752dc159 [ 268.468369][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.487974][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.496582][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 268.504569][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 268.512548][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 268.520516][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.528489][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 268.536465][ T3934] [ 268.539484][ T3934] ---[ end trace a3c162c93dd038e9 ]--- [ 268.545062][ T3934] ------------[ cut here ]------------ [ 268.550555][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 268.561339][ T3934] Modules linked in: [ 268.565233][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 268.573993][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.584044][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 268.589942][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 268.609668][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 268.615753][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 268.623723][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 268.631952][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 268.640006][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000500101d [ 268.647993][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 268.656144][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 268.665108][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.671709][ T3934] CR2: 0000563d861b3300 CR3: 000000012837d000 CR4: 00000000003506a0 [ 268.679688][ T3934] Call Trace: [ 268.682962][ T3934] [ 268.685898][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 268.691543][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.696658][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 268.701337][ T3934] rb_buffer_peek+0x60/0x7a0 [ 268.705948][ T3934] ring_buffer_peek+0x184/0x3b0 [ 268.710814][ T3934] ? ring_buffer_iter_empty+0x370/0x370 [ 268.716360][ T3934] ? preempt_schedule+0xbc/0xd0 [ 268.721222][ T3934] ? schedule_preempt_disabled+0x20/0x20 [ 268.726852][ T3934] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 268.733000][ T3934] __find_next_entry+0x34d/0x6b0 [ 268.737939][ T3934] ? preempt_schedule_thunk+0x16/0x18 [ 268.743443][ T3934] ? trace_find_next_entry+0x370/0x370 [ 268.748904][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 268.754456][ T3934] ? print_trace_line+0x385/0x690 [ 268.759497][ T3934] tracing_read_pipe+0x3b8/0xab0 [ 268.764436][ T3934] ? s_show+0x320/0x320 [ 268.768591][ T3934] vfs_read+0x28c/0xc20 [ 268.772746][ T3934] ? kernel_read+0x1f0/0x1f0 [ 268.777333][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.782443][ T3934] ? mutex_lock+0x9b/0x1c0 [ 268.786878][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 268.793465][ T3934] ? __fget_files+0x2e1/0x340 [ 268.798147][ T3934] ? __fdget_pos+0x2d2/0x380 [ 268.802744][ T3934] ? ksys_read+0x70/0x260 [ 268.807166][ T3934] ksys_read+0x14a/0x260 [ 268.811443][ T3934] ? vfs_write+0xfd0/0xfd0 [ 268.815879][ T3934] ? __kasan_check_write+0x14/0x20 [ 268.820994][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 268.826117][ T3934] __x64_sys_read+0x7b/0x90 [ 268.830624][ T3934] x64_sys_call+0x96d/0x9a0 [ 268.835170][ T3934] do_syscall_64+0x4c/0xa0 [ 268.839624][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 268.844347][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 268.849043][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.854942][ T3934] RIP: 0033:0x7f6d752dc159 [ 268.859357][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.878965][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.887378][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 268.895353][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 268.903411][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 268.911495][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.919468][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 268.927447][ T3934] [ 268.930460][ T3934] ---[ end trace a3c162c93dd038ea ]--- [ 268.936364][ T3934] ------------[ cut here ]------------ [ 268.941834][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 268.952113][ T3934] Modules linked in: [ 268.956026][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 268.964799][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.974858][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 268.980674][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 269.000281][ T3934] RSP: 0018:ffffc90000bd7920 EFLAGS: 00010002 [ 269.006440][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 269.014414][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 269.022475][ T3934] RBP: ffffc90000bd7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 269.030447][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000500101d [ 269.038418][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 269.046403][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 269.055329][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.061998][ T3934] CR2: 0000563d861b3300 CR3: 000000012837d000 CR4: 00000000003506a0 [ 269.069971][ T3934] Call Trace: [ 269.073256][ T3934] [ 269.076192][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 269.081852][ T3934] ? __kasan_check_write+0x14/0x20 [ 269.086964][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 269.091638][ T3934] rb_buffer_peek+0x60/0x7a0 [ 269.096227][ T3934] ring_buffer_consume+0x1aa/0x370 [ 269.101338][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 269.106938][ T3934] ? print_trace_line+0x385/0x690 [ 269.111964][ T3934] tracing_read_pipe+0x599/0xab0 [ 269.116897][ T3934] ? s_show+0x320/0x320 [ 269.121046][ T3934] vfs_read+0x28c/0xc20 [ 269.125211][ T3934] ? kernel_read+0x1f0/0x1f0 [ 269.129895][ T3934] ? __kasan_check_write+0x14/0x20 [ 269.135005][ T3934] ? mutex_lock+0x9b/0x1c0 [ 269.139421][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 269.146026][ T3934] ? __fget_files+0x2e1/0x340 [ 269.150711][ T3934] ? __fdget_pos+0x2d2/0x380 [ 269.156026][ T3934] ? ksys_read+0x70/0x260 [ 269.160386][ T3934] ksys_read+0x14a/0x260 [ 269.164693][ T3934] ? vfs_write+0xfd0/0xfd0 [ 269.169340][ T3934] ? __kasan_check_write+0x14/0x20 [ 269.174454][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 269.179570][ T3934] __x64_sys_read+0x7b/0x90 [ 269.184071][ T3934] x64_sys_call+0x96d/0x9a0 [ 269.188573][ T3934] do_syscall_64+0x4c/0xa0 [ 269.192999][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 269.197678][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 269.202354][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.208240][ T3934] RIP: 0033:0x7f6d752dc159 [ 269.212656][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.232658][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.241094][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 269.249080][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 269.257055][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 269.265025][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.272994][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 269.280967][ T3934] [ 269.283987][ T3934] ---[ end trace a3c162c93dd038eb ]--- [ 269.289483][ T3934] ------------[ cut here ]------------ [ 269.294933][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 269.305187][ T3934] Modules linked in: [ 269.309511][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 269.318457][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.328598][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 269.334855][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 269.354565][ T3934] RSP: 0018:ffffc90000bd7940 EFLAGS: 00010006 [ 269.360634][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 269.368608][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 269.376582][ T3934] RBP: ffffc90000bd7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 269.384550][ T3934] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000500101d [ 269.392521][ T3934] R13: 1ffff11020070553 R14: 1ffff11020070556 R15: dffffc0000000000 [ 269.400513][ T3934] FS: 00007f6d73d146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 269.409454][ T3934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.416037][ T3934] CR2: 0000563d861b3300 CR3: 000000012837d000 CR4: 00000000003506a0 [ 269.424018][ T3934] Call Trace: [ 269.427297][ T3934] [ 269.430245][ T3934] ? ring_buffer_read_page+0x1210/0x1210 [ 269.435886][ T3934] ? __kasan_check_write+0x14/0x20 [ 269.441001][ T3934] ? _raw_spin_lock+0x94/0xf0 [ 269.445679][ T3934] rb_advance_reader+0x2b/0x6b0 [ 269.450797][ T3934] ring_buffer_consume+0x1e7/0x370 [ 269.456121][ T3934] ? ring_buffer_iter_dropped+0x60/0x60 [ 269.461707][ T3934] ? print_trace_line+0x385/0x690 [ 269.466758][ T3934] tracing_read_pipe+0x599/0xab0 [ 269.471714][ T3934] ? s_show+0x320/0x320 [ 269.475884][ T3934] vfs_read+0x28c/0xc20 [ 269.480041][ T3934] ? kernel_read+0x1f0/0x1f0 [ 269.484633][ T3934] ? __kasan_check_write+0x14/0x20 [ 269.489740][ T3934] ? mutex_lock+0x9b/0x1c0 [ 269.494154][ T3934] ? wait_for_completion_killable_timeout+0x10/0x10 [ 269.500736][ T3934] ? __fget_files+0x2e1/0x340 [ 269.505408][ T3934] ? __fdget_pos+0x2d2/0x380 [ 269.509988][ T3934] ? ksys_read+0x70/0x260 [ 269.514324][ T3934] ksys_read+0x14a/0x260 [ 269.518563][ T3934] ? vfs_write+0xfd0/0xfd0 [ 269.522995][ T3934] ? __kasan_check_write+0x14/0x20 [ 269.528144][ T3934] ? switch_fpu_return+0x15d/0x2c0 [ 269.533375][ T3934] __x64_sys_read+0x7b/0x90 [ 269.537892][ T3934] x64_sys_call+0x96d/0x9a0 [ 269.542420][ T3934] do_syscall_64+0x4c/0xa0 [ 269.546846][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 269.551533][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 269.556217][ T3934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.562132][ T3934] RIP: 0033:0x7f6d752dc159 [ 269.566556][ T3934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.586169][ T3934] RSP: 002b:00007f6d73d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.594587][ T3934] RAX: ffffffffffffffda RBX: 00007f6d75564090 RCX: 00007f6d752dc159 [ 269.602568][ T3934] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 269.610559][ T3934] RBP: 00007f6d7537306b R08: 0000000000000000 R09: 0000000000000000 [ 269.618549][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.626522][ T3934] R13: 00007f6d75564128 R14: 00007f6d75564090 R15: 00007ffc75c44198 [ 269.634524][ T3934] [ 269.637544][ T3934] ---[ end trace a3c162c93dd038ec ]--- [ 269.740729][ T3934] ------------[ cut here ]------------ [ 269.746213][ T3934] WARNING: CPU: 1 PID: 3934 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xa68/0xc00 [ 269.756584][ T3934] Modules linked in: [ 269.760494][ T3934] CPU: 1 PID: 3934 Comm: syz.0.1046 Tainted: G B W syzkaller #0 [ 269.769246][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.779302][ T3934] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 269.785118][ T3934] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 2d 33 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 1c 35 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 269.804734][ T3934] RSP: 0018:ffffc90000bd77e0 EFLAGS: 00010002 [ 269.810837][ T3934] RAX: 1ffff11020031b01 RBX: ffff888100052600 RCX: ffffffff816c0a84 [ 269.818903][ T3934] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 269.826886][ T3934] RBP: ffffc90000bd7958 R08: ffff88810005260b R09: 1ffff1102000a4c1