last executing test programs: 52.908092868s ago: executing program 4 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e0000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8) 52.832090341s ago: executing program 4 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x407, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0xfffffffd, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x1000, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 52.796250392s ago: executing program 4 (id=32): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0\x00') rmdir(&(0x7f0000000c40)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") 52.674504195s ago: executing program 4 (id=35): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1200082, &(0x7f00000002c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x1, 0x1537, &(0x7f0000001140)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84842, 0x181) rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file1\x00') 52.543361758s ago: executing program 4 (id=40): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000140)=0xfffffffffffffffa, 0x8) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) 52.386913222s ago: executing program 4 (id=45): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 52.374538732s ago: executing program 32 (id=45): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 23.310026522s ago: executing program 5 (id=813): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x29, 0x1, 0x2, 0xfffffffe, 0x40, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x10, 0x6, 0x7}}) 23.309396372s ago: executing program 5 (id=814): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfa, 0x10617, &(0x7f0000010a00)="$eJzs3EtvG1UbB/DHSdOml7dvhFiw60gIKZHqqE4vgl2BVoBEqnJbsALHdi23tieK3dQUIVWsWCCWXfMdYMUeseVLsEMskNhVKvKcScG0EdC6SU1+P8n5z5w5fuaMNYp0xuMJ4MBayn77tRIn42hEzEfEiYhiuZIiuZjihYg4FUdiLuLBq1K2P2g4HBHHIuLkuHiqWSk3fXb3zvq90fqn39395dLn9R9P79tBA/vupYjobablW72UeTvl9bK9vt0psnduu8y0oXejXM9T3mptFBVu1Xf61Ys82079882bg3Fe69Yb42x3rhXtm/20w8F2e6dO8Ybr9a1ivdnaKLIzyIts307jGpV5ezBMdZplvU+K8jEc7mRqb41a6Xg2bxTZ6A/L9lQ3b7ZG49wus9xdNPJusxjHxmN/zM+8tzv9m6Nsu7U16OT97Pxq7eXV2oVqbStvtoatc9V6r3nhXLbc7o67VYeteu9iO8/b3dZqI++tZMvtRqNaq2XLl1obnXo/q9VWz66eqZ5fKZdOZ29c+SDrNrPlcb7W6d8cdrqD7NqJyNI7VrK11bOvrGQv1rL31q9mV9+9fHn96vsfXfrwyqvrb71ednpoWNny2pm1tWrtTHWttjKLx59vPSvHv/hkb+egq0yuHtuvcQDMkGL+fzQeNf//49/qxPw/zP+BJ2b+b/4f5r9P7/gXYyaOf/HrypMV4GBz+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHFg/LXzzZrGwlNbf+SHl/8qm58p+lYiYi4j7jzAfhydqzkfE8YhY2KX/wk7HIym+r0RRoVI2jV/HIuJi+br3/0eP/dD0Pw4AAACYUfcru2359s6pr9JsPf1Z2sthsVfmdmlPF23mTnw8pf2Mz7OFpZ+nVK0Y9fNTKlac34diNKVqxQWsxSkVKy6V7fG1rPmJWPxTVFLsds4AAAAzbHIm8NAspP7FXg8IAACAp+TL/R4A+6O4L6C8F7+8gb+8Ib/8QvCoLwIBAABg1u36uwAAAADgP6OY///1+X/Hy43/8vl/Ez8c+MfP/ys97vP/AAAAgL+Xnv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zs795KQORXEAPm3pe7x/ecQ4dyvOYBkuwaFDwgLcBEvALbgB1oAzl2DA0JZIDSYilxLJ9yXtbRv4cUqYnHtJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JieytnoYXx1f2jOcnWYNHcDAAAA7LIoZ6PqYFCf/2mu/2suXTTnWUTkEbGrdy/iRyuzaHLKD15fvqvhMaJKWH/Gz2b7HRHXzfby/9jfAgAAAJyv+WQ6rLv1ejc4dUF0qZ60yf/eJMrLIqIcPCdKy9e7y0Rh1e+7F3eJ0qoJrH6isHrKrZcq7VOK1tDfGrJ6yDstBwAA6ES7E+i2CwEAAKBLt1vH4xPWQcey2CxlbtaCq3/evy0I/mqdAQAAAN9QduoCAAAAgH3t3c5Xb/D8PwAAADhv9fP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFORvNJ9PhoTnL1dcUzZjmbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCV/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQhgAomDPZD66k9z/rkqLdxChCgKPNFkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHii13XyPmNPRmNL8ult49t9Jvl1avw7NZYko7H2wbz7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc7NzPaxxVHADw7+xmttmCdI0SqAetWKgoNNn6C8FLD0LwIHgSjyFNIbr+oM3Blgjm4kHxP/CiHjz0IgQEqYjgvQdP9lgvFSSHCoKeIm9npk6atGxjM7tNPx94+747vJ35viEs+31vNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZfN0HKvidnroFXGrPPbrjbWl1F+9pU+uL146mlqKs/JY3lzq95WpdI9mx50FAAAAB127qu8j4lq+sZD6Vi/V/5/9+PhHxfGfI2LtoSKu6vlb6/6qr2r/1C7/8NUbNy/UK66TR8R3vcHyfINznGTHRxx3ZIQxw7WEYoWmPVyqab22/shmPrzr2edXrrzaGYaH/l/GAMC9cLLqy+DsSvH5KPX9cSYGwIE1Vbao1f/t3nhzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjC5no8W8VZRDw29V+cXL2xtrRbf33x0tGqHXnr0U/q50ynyCPi7Mpgeb7BuUyy4yOOO3/h4juLg8HyubsKntjTq7YH2R5f3t1jzhMXdCcjjTsF0Sr+Su7tmbO/t7b2L+f0TjIBt+6+D/bz3QkAgIMmL1v6NH4t31hIx7KZiK0vt9f/J2pxjFj//7Ry+UT9WvX6v9/YDCfbqPX/3Oq7H8ydv3CxUz5/71T/+f5L8y+/0H9xbrieMmdVBQAAgNvrlK1e/7dmdu7/H67FMWL9/8vvb/5Rv1Zb/b/D3e//73NCAAAAD7CHj/31Z7bL8azTiQ8XV1fP9YvHm89PFY9jSPXOutXucUxXwaGy1ev/+HhM+QEAAACN2lzPtu3/n6nFMeL+//fP/PNF/ZztiOiW+/8nl94fnGluOhNr5/5/b9dx9R/95rE/PyduYLoAAACMSbds9f3/fPj9/9aT1ZhWRDz9VBGX/wZwpPr/lalPT9evVf/+/3PNTXEitWaL+7G9/p++/djZiKnZhpIDAADgwEkV5/TX36RSNH7LNxbe/vbw652ZcWcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C/7c2+bMBDGcfj1JVHiNhkhvZXADDRUCEbgQ0Ky5BkYgIVoqGgtFoEVQIJz7c40z9P8f8UV9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OfW++ItIopIXaZI093P5T0iPiLt23by+cjicD03X89cHE+znN8x/y0jooxiiHMAAAZXdZtjs63Xf3n/847yjvNWy6ZevfLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBnBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA///BPV1y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 22.439170704s ago: executing program 5 (id=829): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x4}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x108, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x1) 22.019908804s ago: executing program 5 (id=852): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 21.830679189s ago: executing program 5 (id=854): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8c2) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 21.191084334s ago: executing program 5 (id=860): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-f'], 0x9) 21.152650905s ago: executing program 33 (id=860): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-f'], 0x9) 9.857841176s ago: executing program 2 (id=1278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 9.850801805s ago: executing program 2 (id=1279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000440)={0x1c, 0x5, 0xfd}) 9.774996748s ago: executing program 2 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 9.751482588s ago: executing program 2 (id=1283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) chdir(&(0x7f0000000300)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.648870121s ago: executing program 2 (id=1288): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x20048860}, 0x802) 9.529375444s ago: executing program 2 (id=1293): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 9.496292884s ago: executing program 34 (id=1293): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.904837113s ago: executing program 6 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) 1.864894914s ago: executing program 6 (id=1437): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1f, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.833692044s ago: executing program 6 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000500)={0xb, 0x29, 0x2}, 0xb) 1.790202165s ago: executing program 6 (id=1440): r0 = socket$packet(0x11, 0x2, 0x300) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000019c0)=ANY=[], 0x10}}], 0x1, 0x2004c850) 1.724626187s ago: executing program 6 (id=1442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000640), 0x21, 0x557, &(0x7f00000000c0)="$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") ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x800005, 0x80, &(0x7f0000000040)={0x20, 0x31, 0x84b9, 0x7f, 0x4}, 0x8, 0x7, 0x4, 0x0, 0x5, 0x4, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 1.388560305s ago: executing program 6 (id=1448): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) 984.550176ms ago: executing program 3 (id=1469): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') dup3(r1, r0, 0x80000) 973.244836ms ago: executing program 3 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x66, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 947.061157ms ago: executing program 3 (id=1472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'tunl0\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x7, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x5, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}, {0x7}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfffffff9, 0x9db, 0x3, 0x6, 0x3, 0xf9, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5c8, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x4f8, 0xffffffff, 0xffffffff, 0x4f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x270, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x101, 'system_u:object_r:hald_acl_exec_t:s0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3fe}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x628) 808.53546ms ago: executing program 1 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x3, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0xf, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) 784.579721ms ago: executing program 1 (id=1475): mount$fuse(0x0, 0x0, 0x0, 0x280441c, &(0x7f0000000200)=ANY=[@ANYBLOB="6664b788c10ec936787a5c980f833df2ec1e3ee24a8e2478163a6df718564be5af9ec1e7605d9795542d239fdf5338fe38f4e25812149b76d5b32e90e700335ae0a6802b8f88f560d9c01284b70e204fa07746679610391a5eaf23"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000000010104000000000000000002"], 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d00"], 0x2370}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 663.772263ms ago: executing program 1 (id=1477): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x80) 660.380964ms ago: executing program 3 (id=1478): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 637.696634ms ago: executing program 3 (id=1479): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800412, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x1, 0x5580, &(0x7f00000008c0)="$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") bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101040, 0x10b) sync_file_range(r0, 0x80, 0xfa0, 0x2) 589.486935ms ago: executing program 1 (id=1480): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) 490.709628ms ago: executing program 7 (id=1486): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 433.458659ms ago: executing program 1 (id=1488): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='m', 0x1}]) 422.273169ms ago: executing program 7 (id=1489): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 389.44688ms ago: executing program 7 (id=1491): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="f4", 0x1}, {0x0}], 0x2) 365.873601ms ago: executing program 7 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) writev(r0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000840)="46d3", 0x2}], 0x2) 336.106921ms ago: executing program 7 (id=1494): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e2b64000200475400f6a13b", 0x10, 0x88a8ffff, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0xfc, 0x6, @multicast}, 0x14) 330.828662ms ago: executing program 0 (id=1495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)="a62257b796c5", 0x6}], 0x2, 0x6, 0xa2, 0x0) 318.804422ms ago: executing program 0 (id=1496): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0xfffffffe, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cb00"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) 301.272352ms ago: executing program 0 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 285.655443ms ago: executing program 7 (id=1498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x1, 0x8, 0x4e23, 0x5, 0xa, 0x40, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x5f}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x642, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9, 0x6}, 0x7e, 0x3503, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8112) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 262.199453ms ago: executing program 0 (id=1499): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, 0x0) 261.984853ms ago: executing program 3 (id=1500): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) 254.609963ms ago: executing program 1 (id=1501): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC], 0x5, 0x19f, &(0x7f0000001cc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 239.850514ms ago: executing program 0 (id=1502): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 0s ago: executing program 0 (id=1503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r0, &(0x7f0000001000)=""/8192, 0x2000) kernel console output (not intermixed with test programs): b305e5 [ 34.997306][ T1198] loop5: detected capacity change from 0 to 40427 [ 35.008332][ T1212] netem: change failed [ 35.023906][ T285] attempt to access beyond end of device [ 35.023906][ T285] loop1: rw=2049, want=45104, limit=40427 [ 35.034069][ T1214] loop2: detected capacity change from 0 to 256 [ 35.044305][ T1198] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 35.058661][ T1198] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 35.077786][ T1198] F2FS-fs (loop5): invalid crc value [ 35.091978][ T1198] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 35.103100][ T1208] SELinux: failed to load policy [ 35.175478][ T1198] F2FS-fs (loop5): Start checkpoint disabled! [ 35.192638][ T1198] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 35.204712][ T1198] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 35.269329][ T45] attempt to access beyond end of device [ 35.269329][ T45] loop5: rw=2049, want=45104, limit=40427 [ 35.302329][ T1237] input: syz0 as /devices/virtual/input/input7 [ 35.356608][ T1243] loop3: detected capacity change from 0 to 512 [ 35.424440][ T1243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.480145][ T1243] EXT4-fs (loop3): 1 truncate cleaned up [ 35.492314][ T1243] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.582581][ T1267] loop3: detected capacity change from 0 to 256 [ 35.682646][ T1267] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 35.734818][ T1277] tun0: tun_chr_ioctl cmd 2148553947 [ 35.738158][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.756458][ T1278] EXT4-fs (loop5): Ignoring removed nobh option [ 35.782096][ T1278] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 35.808421][ T1278] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.069303][ T1307] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 36.069303][ T1307] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.069303][ T1307] [ 36.087652][ T1307] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.103689][ T473] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.116251][ T1307] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 36.129278][ T1307] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.413: invalid indirect mapped block 2683928664 (level 1) [ 36.146461][ T1307] EXT4-fs (loop3): Remounting filesystem read-only [ 36.153941][ T1307] EXT4-fs (loop3): 1 truncate cleaned up [ 36.164355][ T1307] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,inode_readahead_blks=0x0000000000000800,errors=remount-ro,,. Quota mode: writeback. [ 36.191890][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.203606][ T1307] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.413: invalid indirect mapped block 4294967295 (level 0) [ 36.217730][ T1307] EXT4-fs (loop3): Remounting filesystem read-only [ 36.229628][ T1307] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.413: invalid indirect mapped block 65536 (level 1) [ 36.243750][ T1314] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.254564][ T1307] EXT4-fs (loop3): Remounting filesystem read-only [ 36.278168][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.293548][ T26] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.305259][ T26] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 36.305814][ T1314] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 36.316561][ T26] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 36.330504][ T1314] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 34 with error 28 [ 36.344732][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.356626][ T1314] EXT4-fs (loop5): This should not happen!! Data will be lost [ 36.356626][ T1314] [ 36.379799][ T1314] EXT4-fs (loop5): Total free blocks count 0 [ 36.385854][ T1314] EXT4-fs (loop5): Free/Dirty block details [ 36.391851][ T1314] EXT4-fs (loop5): free_blocks=4096 [ 36.397090][ T1314] EXT4-fs (loop5): dirty_blocks=512 [ 36.402360][ T1314] EXT4-fs (loop5): Block reservation details [ 36.402470][ T26] usb 1-1: config 1 interface 1 has no altsetting 0 [ 36.408397][ T1314] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 36.448517][ T316] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 36.460994][ T473] usb 3-1: not running at top speed; connect to a high speed hub [ 36.477783][ T316] EXT4-fs (loop5): This should not happen!! Data will be lost [ 36.477783][ T316] [ 36.522679][ T1329] SELinux: failed to load policy [ 36.542526][ T1335] binder: 1334:1335 ioctl 400c620e 0 returned -14 [ 36.548233][ T473] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.581306][ T473] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.596615][ T473] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.609716][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.643410][ T1349] tipc: Enabling of bearer rejected, failed to enable media [ 36.668603][ T26] usb 1-1: string descriptor 0 read error: -22 [ 36.675274][ T26] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 36.691304][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.701731][ T1355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 36.718651][ T1357] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.729067][ T1357] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 36.743038][ T1357] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 36.756561][ T1357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 36.767044][ T1357] System zones: 0-2, 18-18, 34-35 [ 36.773549][ T1357] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.795125][ T1357] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.853041][ T1364] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.869915][ T1364] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x0000000000000000,errors=continue,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 36.913132][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 36.913144][ T30] audit: type=1400 audit(1786987585.532:352): avc: denied { setopt } for pid=1371 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.946483][ T1374] exfat: Deprecated parameter 'utf8' [ 36.951911][ T1374] exfat: Deprecated parameter 'utf8' [ 36.957266][ T1374] exfat: Deprecated parameter 'utf8' [ 36.962634][ T1374] exfat: Deprecated parameter 'namecase' [ 36.978176][ T473] usb 3-1: string descriptor 0 read error: -71 [ 36.985338][ T473] usb 3-1: USB disconnect, device number 5 [ 36.996632][ T1374] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 37.054929][ T30] audit: type=1400 audit(1786987585.672:353): avc: denied { ioctl } for pid=1379 comm="syz.5.444" path="socket:[19212]" dev="sockfs" ino=19212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.149160][ T1384] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 37.156542][ T1384] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 37.164346][ T1384] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.179377][ T1384] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 37.202383][ T1384] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.226204][ T316] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 37.239809][ T316] EXT4-fs (loop5): Remounting filesystem read-only [ 37.308144][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.417876][ T30] audit: type=1400 audit(1786987586.032:354): avc: denied { write } for pid=1390 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.549445][ T1406] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 37.593880][ T1406] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.607958][ T306] usb 1-1: USB disconnect, device number 2 [ 37.622487][ T1406] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 37.630937][ T1406] System zones: 0-5 [ 37.635548][ T1406] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 37.688182][ T20] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.708800][ T20] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.722293][ T20] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.728574][ T30] audit: type=1400 audit(1786987586.352:355): avc: denied { setattr } for pid=1405 comm="syz.1.456" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.743027][ T20] usb 4-1: config 0 interface 0 has no altsetting 0 [ 37.776745][ T30] audit: type=1400 audit(1786987586.382:356): avc: denied { write } for pid=1405 comm="syz.1.456" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.811695][ T30] audit: type=1400 audit(1786987586.382:357): avc: denied { open } for pid=1405 comm="syz.1.456" path=2F202864656C6574656429 dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.828120][ T20] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 37.835217][ T30] audit: type=1400 audit(1786987586.392:358): avc: denied { link } for pid=1405 comm="syz.1.456" name="#20" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.864577][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.873178][ T30] audit: type=1400 audit(1786987586.422:359): avc: denied { unlink } for pid=285 comm="syz-executor" name=66696C6507 dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 37.896749][ T30] audit: type=1400 audit(1786987586.422:360): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.900633][ T20] usb 4-1: config 0 descriptor?? [ 37.969359][ T1426] EXT4-fs (loop5): Test dummy encryption mode enabled [ 37.975728][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-diskseq/193.tmp-b7:5' failed: Read-only file system [ 37.977963][ T1426] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 37.988145][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 38.030315][ T307] udevd[307]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 38.046328][ T1416] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 38.051713][ T307] udevd[307]: symlink '../../loop1' '/dev/disk/by-diskseq/192.tmp-b7:1' failed: Read-only file system [ 38.062661][ T368] udevd[368]: symlink '../../loop2' '/dev/disk/by-diskseq/194.tmp-b7:2' failed: Read-only file system [ 38.067979][ T313] udevd[313]: symlink '../../loop1' '/dev/disk/by-diskseq/192.tmp-b7:1' failed: Read-only file system [ 38.079109][ T1416] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 38.100397][ T1431] sd 0:0:1:0: PR command failed: 2 [ 38.112646][ T1431] sd 0:0:1:0: Sense Key : 0x5 [current] [ 38.117816][ T1416] F2FS-fs (loop2): invalid crc value [ 38.118740][ T1431] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 38.125062][ T1416] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.162622][ T30] audit: type=1400 audit(1786987586.782:361): avc: denied { bind } for pid=1438 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.181957][ T1416] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 38.194322][ T1416] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.260753][ T1416] attempt to access beyond end of device [ 38.260753][ T1416] loop2: rw=2049, want=45104, limit=40427 [ 38.284374][ T1416] attempt to access beyond end of device [ 38.284374][ T1416] loop2: rw=0, want=45104, limit=40427 [ 38.329039][ T291] attempt to access beyond end of device [ 38.329039][ T291] loop2: rw=2049, want=40968, limit=40427 [ 38.349386][ T1456] EXT4-fs (loop1): Ignoring removed orlov option [ 38.374764][ T1456] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 38.449085][ T20] hid-rmi 0003:1532:011D.0005: unbalanced collection at end of report description [ 38.458549][ T20] hid-rmi 0003:1532:011D.0005: parse failed [ 38.464456][ T20] hid-rmi: probe of 0003:1532:011D.0005 failed with error -22 [ 38.536563][ T1461] F2FS-fs (loop2): fault_injection options not supported [ 38.543794][ T1461] F2FS-fs (loop2): fault_type options not supported [ 38.551271][ T1461] F2FS-fs (loop2): invalid crc value [ 38.558190][ T289] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.575322][ T1461] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.611618][ T1461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.695731][ T39] usb 4-1: USB disconnect, device number 2 [ 38.926249][ T1491] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.947641][ T1491] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.966282][ T1491] EXT4-fs warning (device loop5): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 38.978704][ T289] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.980656][ T1491] EXT4-fs warning (device loop5): ext4_group_extend:1852: can't read last block, resize aborted [ 39.031024][ T1498] zero sized request [ 39.058304][ T289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.072452][ T289] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.263009][ T1500] set_capacity_and_notify: 15 callbacks suppressed [ 39.263025][ T1500] loop2: detected capacity change from 0 to 40427 [ 39.318327][ T1509] netpci0: tun_chr_ioctl cmd 1074025676 [ 39.345517][ T1509] netpci0: owner set to 60928 [ 39.394441][ T1500] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 39.438150][ T1500] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.467344][ T1500] F2FS-fs (loop2): invalid crc value [ 39.518506][ T1500] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.564976][ T1486] loop1: detected capacity change from 0 to 131072 [ 39.626403][ T1486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.653310][ T1500] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.671593][ T1500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.768621][ T1486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.823401][ T1530] loop3: detected capacity change from 0 to 512 [ 39.856762][ T1486] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 39.864482][ T1530] EXT4-fs (loop3): Ignoring removed oldalloc option [ 39.889672][ T1504] loop5: detected capacity change from 0 to 262144 [ 39.906471][ T1530] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,acl,oldalloc,delalloc,,errors=continue. Quota mode: writeback. [ 39.964817][ T1504] F2FS-fs (loop5): invalid crc value [ 39.988226][ T289] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 39.997577][ T289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.006653][ T1504] F2FS-fs (loop5): Found nat_bits in checkpoint [ 40.045014][ T1504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 40.063218][ T289] usb 1-1: Product: syz [ 40.067409][ T289] usb 1-1: Manufacturer: syz [ 40.080686][ T289] usb 1-1: SerialNumber: syz [ 40.087771][ T1542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'. [ 40.189101][ T1551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 40.348825][ T289] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.364404][ T1575] loop2: detected capacity change from 0 to 256 [ 40.371781][ T289] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.385135][ T289] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 40.404544][ T289] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.412480][ T289] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 40.495242][ T289] usb 1-1: USB disconnect, device number 3 [ 40.571130][ T1579] netlink: 36 bytes leftover after parsing attributes in process `syz.5.507'. [ 40.581400][ T1579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.507'. [ 40.759391][ T1590] loop5: detected capacity change from 0 to 40427 [ 40.769479][ T1590] F2FS-fs (loop5): invalid crc value [ 40.775771][ T1590] F2FS-fs (loop5): Found nat_bits in checkpoint [ 40.799882][ T1590] F2FS-fs (loop5): Start checkpoint disabled! [ 40.806526][ T1590] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 40.914299][ T405] attempt to access beyond end of device [ 40.914299][ T405] loop5: rw=2049, want=40968, limit=40427 [ 41.024827][ T289] kernel write not supported for file /avc/cache_threshold (pid: 289 comm: kworker/0:2) [ 41.316648][ T1624] loop5: detected capacity change from 0 to 40427 [ 41.332007][ T1624] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 41.340577][ T1624] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 41.364663][ T1624] F2FS-fs (loop5): invalid crc value [ 41.387932][ T1624] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.434424][ T1624] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 41.443701][ T1624] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 41.623090][ T1621] loop3: detected capacity change from 0 to 131072 [ 41.638534][ T1621] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 41.670039][ T1621] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.679124][ T1621] F2FS-fs (loop3): invalid crc value [ 41.680396][ T1641] loop5: detected capacity change from 0 to 2048 [ 41.695243][ T1621] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.743125][ T1621] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.750521][ T1621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 41.784902][ T1641] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.789813][ T1628] loop2: detected capacity change from 0 to 131072 [ 41.802122][ T1641] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.843095][ T1628] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 41.859160][ T1628] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 41.887654][ T1628] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.928080][ C0] sched: RT throttling activated [ 42.953956][ T1628] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 43.918174][ T1628] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 43.965173][ T1641] fs-verity (loop5, inode 13): Error -4 building Merkle tree [ 43.995079][ T1660] xt_TCPMSS: Only works on TCP SYN packets [ 44.027086][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 44.027099][ T30] audit: type=1400 audit(1786987592.642:376): avc: denied { mount } for pid=1661 comm="syz.1.553" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.056325][ T1662] devpts: called with bogus options [ 44.063906][ T1662] devpts: called with bogus options [ 44.112577][ T30] audit: type=1400 audit(1786987592.672:377): avc: denied { remount } for pid=1661 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.143802][ T30] audit: type=1400 audit(1786987592.732:378): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.326660][ T1678] loop5: detected capacity change from 0 to 512 [ 44.408986][ T1686] loop3: detected capacity change from 0 to 512 [ 44.426646][ T1678] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.558: inode #15: comm syz.5.558: iget: illegal inode # [ 44.426824][ T1690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 44.448963][ T1678] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.558: couldn't read orphan inode 15 (err -117) [ 44.485014][ T1678] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,jqfmt=vfsv0,min_batch_time=0x0000000000000007,noload,bsdgroups,noblock_validity,inode_readahead_blks=0x0000000000800000,inode_readahead_blks=0x0000000000000000,delalloc,,errors=continue. Quota mode: none. [ 44.540189][ T30] audit: type=1400 audit(1786987593.162:379): avc: denied { read } for pid=1697 comm="syz.2.565" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.572596][ T1702] loop1: detected capacity change from 0 to 512 [ 44.588693][ T1702] EXT4-fs (loop1): Ignoring removed oldalloc option [ 44.626470][ T30] audit: type=1400 audit(1786987593.242:380): avc: denied { read } for pid=1710 comm="syz.5.571" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.673658][ T1702] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,acl,oldalloc,delalloc,,errors=continue. Quota mode: writeback. [ 44.676788][ T30] audit: type=1400 audit(1786987593.242:381): avc: denied { open } for pid=1710 comm="syz.5.571" path="/128/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.713941][ T30] audit: type=1400 audit(1786987593.272:382): avc: denied { ioctl } for pid=1710 comm="syz.5.571" path="/128/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.839473][ T1728] loop2: detected capacity change from 0 to 512 [ 44.929938][ T1728] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 44.944369][ T1728] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.577: corrupted in-inode xattr [ 44.956722][ T1728] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.577: couldn't read orphan inode 15 (err -117) [ 44.981842][ T1728] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 45.014678][ T30] audit: type=1400 audit(1786987593.632:383): avc: denied { unlink } for pid=1727 comm="syz.2.577" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.096286][ T1746] loop2: detected capacity change from 0 to 512 [ 45.132156][ T1750] loop5: detected capacity change from 0 to 1024 [ 45.150019][ T1746] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.584: iget: bad i_size value: 38620345925642 [ 45.175543][ T1746] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.584: couldn't read orphan inode 15 (err -117) [ 45.188466][ T1746] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.205876][ T30] audit: type=1400 audit(1786987593.822:384): avc: denied { accept } for pid=1756 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.226215][ T10] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 45.243266][ T1750] EXT4-fs (loop5): Ignoring removed orlov option [ 45.249944][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 35 with max blocks 1 with error 28 [ 45.263179][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.263179][ T10] [ 45.273513][ T10] EXT4-fs (loop2): Total free blocks count 0 [ 45.280029][ T10] EXT4-fs (loop2): Free/Dirty block details [ 45.286058][ T10] EXT4-fs (loop2): free_blocks=0 [ 45.291212][ T10] EXT4-fs (loop2): dirty_blocks=1 [ 45.298137][ T1750] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 45.329733][ T10] EXT4-fs (loop2): Block reservation details [ 45.335762][ T10] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 45.339305][ T1764] tap0: tun_chr_ioctl cmd 1074025677 [ 45.348797][ T1764] tap0: linktype set to 1 [ 45.467821][ T1772] loop2: detected capacity change from 0 to 128 [ 45.473814][ T1773] loop1: detected capacity change from 0 to 1024 [ 45.514725][ T30] audit: type=1400 audit(1786987594.132:385): avc: denied { mounton } for pid=1770 comm="syz.2.594" path="/68/file0/file0" dev="loop2" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 45.566056][ T1773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.595149][ T1781] Restarting kernel threads ... done. [ 45.722910][ T1803] loop5: detected capacity change from 0 to 512 [ 45.757404][ T1803] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 45.768929][ T39] kernel write not supported for file /ppp (pid: 39 comm: kworker/1:1) [ 45.788351][ T1803] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 45.797496][ T1803] EXT4-fs (loop5): orphan cleanup on readonly fs [ 45.805084][ T1803] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:510: comm syz.5.608: Block bitmap for bg 0 marked uninitialized [ 45.820240][ T1803] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 45.830079][ T1803] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:510: comm syz.5.608: Block bitmap for bg 0 marked uninitialized [ 45.843941][ T1803] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 45.854912][ T1821] af_packet: tpacket_rcv: packet too big, clamped from 114 to 4294967272. macoff=96 [ 45.864413][ T1803] EXT4-fs (loop5): 1 orphan inode deleted [ 45.875391][ T1803] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.883906][ T1823] xt_hashlimit: size too large, truncated to 1048576 [ 46.061571][ T1834] loop1: detected capacity change from 0 to 512 [ 46.281055][ T1839] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 46.311673][ T1839] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 46.328847][ T1839] F2FS-fs (loop5): invalid crc value [ 46.340710][ T1839] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 46.359169][ T1851] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.381736][ T1851] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 46.397443][ T1839] F2FS-fs (loop5): Start checkpoint disabled! [ 46.407552][ T1851] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 46.419978][ T1839] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 46.428036][ T1839] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 46.531563][ T10] attempt to access beyond end of device [ 46.531563][ T10] loop5: rw=2049, want=45104, limit=40427 [ 46.539281][ T1862] EXT4-fs (loop0): Ignoring removed oldalloc option [ 46.568144][ T1862] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.628017][ T1862] EXT4-fs (loop0): 1 truncate cleaned up [ 46.662478][ T1862] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,abort,data_err=ignore,acl,oldalloc,errors=remount-ro,. Quota mode: none. [ 46.759279][ T1872] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.767098][ T1872] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.784514][ T1872] F2FS-fs (loop3): invalid crc value [ 46.838860][ T1872] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.921494][ T1885] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.644: invalid indirect mapped block 256 (level 2) [ 46.941977][ T1872] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.949908][ T1885] EXT4-fs (loop2): 2 truncates cleaned up [ 46.955641][ T1885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.969439][ T1872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.090028][ T1872] attempt to access beyond end of device [ 47.090028][ T1872] loop3: rw=2049, want=45104, limit=40427 [ 47.112835][ T1885] syz.2.644 (pid 1885) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 47.135578][ T1843] F2FS-fs (loop1): Test dummy encryption mode enabled [ 47.158270][ T1843] F2FS-fs (loop1): invalid crc value [ 47.166253][ T1885] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.644: bg 0: block 5: invalid block bitmap [ 47.182655][ T1872] attempt to access beyond end of device [ 47.182655][ T1872] loop3: rw=0, want=45104, limit=40427 [ 47.219290][ T1843] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.257741][ T286] attempt to access beyond end of device [ 47.257741][ T286] loop3: rw=2049, want=40968, limit=40427 [ 47.322603][ T1843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.368982][ T1897] pim6reg: tun_chr_ioctl cmd 1074025677 [ 47.380049][ T1897] pim6reg: linktype set to 778 [ 47.389388][ T1883] F2FS-fs (loop0): Test dummy encryption mode enabled [ 47.414490][ T1883] F2FS-fs (loop0): invalid crc value [ 47.464969][ T1883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.539596][ T1883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.722490][ T1916] netlink: 'syz.1.650': attribute type 34 has an invalid length. [ 47.826140][ T1922] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.851396][ T1922] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.887929][ T1914] F2FS-fs (loop3): invalid crc value [ 47.904034][ T1914] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.951684][ T1914] F2FS-fs (loop3): Start checkpoint disabled! [ 47.962554][ T1914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 47.978921][ T1930] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.000781][ T1930] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.471004][ T1961] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 48.529157][ T1961] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 48.548361][ T1961] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.632213][ T1932] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 48.643407][ T1932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.662630][ T1932] F2FS-fs (loop0): invalid crc value [ 48.683062][ T1968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 48.709969][ T1932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.772108][ T1932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.779247][ T1932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 48.852223][ T1980] netlink: 'syz.1.679': attribute type 12 has an invalid length. [ 48.868356][ T1980] netlink: 'syz.1.679': attribute type 29 has an invalid length. [ 48.876099][ T1980] netlink: 148 bytes leftover after parsing attributes in process `syz.1.679'. [ 48.894459][ T1980] netlink: 43 bytes leftover after parsing attributes in process `syz.1.679'. [ 48.960619][ T1952] F2FS-fs (loop5): Test dummy encryption mode enabled [ 48.981298][ T1952] F2FS-fs (loop5): invalid crc value [ 49.004049][ T1952] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.051507][ T1952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 49.273117][ T1993] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.459651][ T2006] mmap: syz.1.689 (2006) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 49.656409][ T2022] xt_hashlimit: size too large, truncated to 1048576 [ 49.668131][ T473] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.780380][ T2025] netlink: 232 bytes leftover after parsing attributes in process `syz.0.697'. [ 49.797591][ T2027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 49.912199][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 49.912212][ T30] audit: type=1400 audit(1786987598.532:403): avc: denied { setopt } for pid=2039 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.031603][ T2047] set_capacity_and_notify: 15 callbacks suppressed [ 50.031614][ T2047] loop0: detected capacity change from 0 to 128 [ 50.072820][ T2047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.083534][ T2047] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.098759][ T2047] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10) [ 50.148176][ T473] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 50.156484][ T30] audit: type=1400 audit(1786987598.772:404): avc: denied { ioctl } for pid=2050 comm="syz.0.708" path="socket:[22643]" dev="sockfs" ino=22643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.159754][ T473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 50.196970][ T473] usb 6-1: Product: syz [ 50.210167][ T473] usb 6-1: Manufacturer: syz [ 50.221415][ T2057] sch_tbf: burst 6 is lower than device veth0_to_bridge mtu (1514) ! [ 50.918951][ T2081] xt_hashlimit: size too large, truncated to 1048576 [ 50.968225][ T473] rndis_host 6-1:1.0: RNDIS init failed, -71 [ 50.974418][ T473] rndis_host: probe of 6-1:1.0 failed with error -71 [ 50.995344][ T473] usb 6-1: USB disconnect, device number 3 [ 51.047882][ T2088] netlink: 'syz.1.726': attribute type 2 has an invalid length. [ 51.133739][ T30] audit: type=1400 audit(1786987599.752:405): avc: denied { getopt } for pid=2094 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.164547][ T2101] netlink: 'syz.0.732': attribute type 12 has an invalid length. [ 51.174867][ T2101] netlink: 'syz.0.732': attribute type 29 has an invalid length. [ 51.183953][ T2101] netlink: 148 bytes leftover after parsing attributes in process `syz.0.732'. [ 51.193582][ T2101] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 51.201549][ T2101] netlink: 'syz.0.732': attribute type 2 has an invalid length. [ 51.257521][ T2110] tipc: Started in network mode [ 51.262466][ T2110] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 51.270271][ T2110] tipc: Enabled bearer , priority 10 [ 51.305025][ T2115] loop1: detected capacity change from 0 to 512 [ 51.406694][ T30] audit: type=1400 audit(1786987600.022:406): avc: denied { remount } for pid=2127 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.409514][ T2128] tmpfs: Too few inodes for current use [ 51.442403][ T2130] loop1: detected capacity change from 0 to 1024 [ 51.459092][ T30] audit: type=1400 audit(1786987600.082:407): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.479716][ T2130] EXT4-fs (loop1): Ignoring removed bh option [ 51.496550][ T2130] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,min_batch_time=0x000000007fffffff,barrier=0x0000000000000004,quota,debug_want_extra_isize=0x0000000000000080,errors=continue,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: writeback. [ 51.500905][ T2138] loop0: detected capacity change from 0 to 128 [ 51.529596][ T2130] EXT4-fs (loop1): shut down requested (2) [ 51.539968][ T2130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 51.549596][ T2130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 51.559722][ T2130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 51.614682][ T2156] loop1: detected capacity change from 0 to 256 [ 51.647613][ T2162] loop5: detected capacity change from 0 to 256 [ 51.661405][ T2156] attempt to access beyond end of device [ 51.661405][ T2156] loop1: rw=524288, want=276, limit=256 [ 51.672546][ T2156] attempt to access beyond end of device [ 51.672546][ T2156] loop1: rw=0, want=264, limit=256 [ 51.683682][ T2156] attempt to access beyond end of device [ 51.683682][ T2156] loop1: rw=0, want=264, limit=256 [ 51.697334][ T2162] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 51.714394][ T2155] attempt to access beyond end of device [ 51.714394][ T2155] loop1: rw=0, want=272, limit=256 [ 51.718192][ T2156] attempt to access beyond end of device [ 51.718192][ T2156] loop1: rw=0, want=264, limit=256 [ 51.759279][ T2156] attempt to access beyond end of device [ 51.759279][ T2156] loop1: rw=0, want=264, limit=256 [ 51.770177][ T2155] attempt to access beyond end of device [ 51.770177][ T2155] loop1: rw=0, want=272, limit=256 [ 51.779354][ T2156] attempt to access beyond end of device [ 51.779354][ T2156] loop1: rw=0, want=264, limit=256 [ 51.781474][ T30] audit: type=1400 audit(1786987600.392:408): avc: denied { nlmsg_read } for pid=2169 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.791777][ T2156] attempt to access beyond end of device [ 51.791777][ T2156] loop1: rw=0, want=264, limit=256 [ 51.791824][ T2156] attempt to access beyond end of device [ 51.791824][ T2156] loop1: rw=0, want=264, limit=256 [ 51.871251][ T2175] loop5: detected capacity change from 0 to 256 [ 51.929437][ T2175] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.963566][ T2175] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 51.976794][ T2175] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 52.039402][ T30] audit: type=1400 audit(1786987600.662:409): avc: denied { append } for pid=2174 comm="syz.5.764" path="/162/bus/memory.stat" dev="loop5" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.088165][ T30] audit: type=1400 audit(1786987600.702:410): avc: denied { write } for pid=2179 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.216606][ T2196] loop3: detected capacity change from 0 to 256 [ 52.249218][ T2196] FAT-fs (loop3): Directory bread(block 64) failed [ 52.260324][ T2196] FAT-fs (loop3): Directory bread(block 65) failed [ 52.266982][ T2198] loop5: detected capacity change from 0 to 1024 [ 52.273562][ T306] tipc: Node number set to 9349802 [ 52.279185][ T2196] FAT-fs (loop3): Directory bread(block 66) failed [ 52.285790][ T2196] FAT-fs (loop3): Directory bread(block 67) failed [ 52.293034][ T2196] FAT-fs (loop3): Directory bread(block 68) failed [ 52.299794][ T2196] FAT-fs (loop3): Directory bread(block 69) failed [ 52.306390][ T2196] FAT-fs (loop3): Directory bread(block 70) failed [ 52.313166][ T2196] FAT-fs (loop3): Directory bread(block 71) failed [ 52.319887][ T2196] FAT-fs (loop3): Directory bread(block 72) failed [ 52.326476][ T2196] FAT-fs (loop3): Directory bread(block 73) failed [ 52.348820][ T30] audit: type=1400 audit(1786987600.972:411): avc: denied { remount } for pid=2195 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.397224][ T2198] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,inlinecrypt,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 52.778178][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 52.799377][ T2227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.138181][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.212727][ T2236] loop0: detected capacity change from 0 to 131072 [ 53.308250][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.317964][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.319992][ T2236] F2FS-fs (loop0): invalid crc value [ 53.326283][ T26] usb 4-1: Product: syz [ 53.336252][ T26] usb 4-1: Manufacturer: syz [ 53.341083][ T26] usb 4-1: SerialNumber: syz [ 53.342434][ T2236] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.366437][ T2236] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 53.373400][ T2236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 53.482970][ T2250] netlink: 'syz.5.798': attribute type 34 has an invalid length. [ 53.599327][ T2264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.610678][ T2264] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.805: bad orphan inode 131083 [ 53.621364][ T2264] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 53.633931][ T30] audit: type=1400 audit(1786987602.242:412): avc: denied { bind } for pid=2266 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.643710][ T2264] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #2: block 13: comm syz.1.805: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 53.800687][ T2279] xt_hashlimit: size too large, truncated to 1048576 [ 53.985349][ T2296] erofs: (device loop1): mounted with root inode @ nid 36. [ 54.092710][ T2302] input: syz1 as /devices/virtual/input/input8 [ 54.268177][ T26] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 54.308225][ T26] cdc_ncm 4-1:1.0: bind() failure [ 54.316617][ T26] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 54.338780][ T26] cdc_ncm 4-1:1.1: bind() failure [ 54.347964][ T26] usb 4-1: USB disconnect, device number 3 [ 54.434650][ T2286] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 54.450838][ T2286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 54.470666][ T2286] F2FS-fs (loop5): invalid crc value [ 54.496941][ T2286] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.548322][ T2286] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 54.557800][ T2286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 54.630733][ T2286] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 54.742815][ T2327] [ 54.797864][ T2334] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.859340][ T2343] tap0: tun_chr_ioctl cmd 35108 [ 54.901415][ T2348] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 54.911684][ T2348] FAT-fs (loop3): Filesystem has been set read-only [ 54.926888][ T2348] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 54.939479][ T2348] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 55.023876][ T26] kernel write not supported for file /475/gid_map (pid: 26 comm: kworker/1:0) [ 55.122445][ T2371] set_capacity_and_notify: 5 callbacks suppressed [ 55.122461][ T2371] loop0: detected capacity change from 0 to 4096 [ 55.135958][ T2373] loop5: detected capacity change from 0 to 1024 [ 55.156003][ T2373] EXT4-fs (loop5): Ignoring removed oldalloc option [ 55.165086][ T2373] EXT4-fs (loop5): Ignoring removed orlov option [ 55.169359][ T2371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 55.217515][ T2373] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 55.232858][ T2373] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.256825][ T2373] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz.5.852: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 55.288606][ T2380] loop3: detected capacity change from 0 to 128 [ 55.298629][ T427] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /179/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 55.331438][ T2384] loop1: detected capacity change from 0 to 1024 [ 55.337905][ T427] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /179/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.375051][ T2380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.388818][ T2380] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.409879][ T2384] EXT4-fs (loop1): Ignoring removed oldalloc option [ 55.424718][ T2384] EXT4-fs (loop1): Ignoring removed bh option [ 55.447575][ T427] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.456233][ T2380] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x0c) [ 55.486540][ T2384] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 55.495369][ T427] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /179/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.504533][ T2384] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.534088][ T427] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.552877][ T427] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /179/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.576003][ T427] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.596034][ T2384] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.609507][ T427] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /179/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.638234][ T2384] EXT4-fs (loop1): Remounting filesystem read-only [ 55.644964][ T427] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.664843][ T2392] loop3: detected capacity change from 0 to 256 [ 55.673320][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 55.673333][ T30] audit: type=1400 audit(1786987604.302:418): avc: denied { map } for pid=2383 comm="syz.1.857" path="/226/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.673535][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.716518][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.724229][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.737736][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.744857][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.758771][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.765375][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.778981][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.785645][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.799135][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.805700][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.819195][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.825812][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.839331][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.845930][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.859413][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.866044][ T2393] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.879552][ T2393] EXT4-fs (loop1): Remounting filesystem read-only [ 55.992991][ T2399] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.060369][ T30] audit: type=1400 audit(1786987604.682:419): avc: denied { connect } for pid=2405 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.103591][ T2410] netlink: 72 bytes leftover after parsing attributes in process `syz.2.864'. [ 56.138444][ T30] audit: type=1400 audit(1786987604.682:420): avc: denied { read } for pid=2405 comm="syz.0.866" laddr=fe80::68f1:83ff:fe65:6ca8 lport=2 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.163616][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 56.196365][ T30] audit: type=1400 audit(1786987604.802:421): avc: denied { mounton } for pid=2415 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.289666][ T2426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 56.336465][ T2436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'. [ 56.351616][ T2434] netlink: 116 bytes leftover after parsing attributes in process `syz.2.875'. [ 56.367826][ T2438] loop1: detected capacity change from 0 to 256 [ 56.368141][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.376478][ T2438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 56.392132][ T2415] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.413723][ T2415] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.425154][ T2415] device bridge_slave_0 entered promiscuous mode [ 56.434233][ T2415] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.441285][ T2415] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.448696][ T2415] device bridge_slave_1 entered promiscuous mode [ 56.495148][ T45] device bridge_slave_1 left promiscuous mode [ 56.502469][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.510151][ T45] device bridge_slave_0 left promiscuous mode [ 56.516488][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.525860][ T45] device veth1_macvtap left promiscuous mode [ 56.532844][ T45] device veth0_vlan left promiscuous mode [ 56.626196][ T30] audit: type=1400 audit(1786987605.242:422): avc: denied { setopt } for pid=2461 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.645499][ T30] audit: type=1400 audit(1786987605.242:423): avc: denied { ioctl } for pid=2461 comm="syz.1.888" path="socket:[24437]" dev="sockfs" ino=24437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.716510][ T2415] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.723590][ T2415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.730877][ T2415] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.737899][ T2415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.758180][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.777304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.777628][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.794688][ T26] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 56.803899][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.804236][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.820107][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.820444][ T26] usb 4-1: config 0 descriptor?? [ 56.848516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.868925][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.875964][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.896366][ T2477] loop1: detected capacity change from 0 to 512 [ 56.903750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.912629][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.919673][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.927459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.935902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.936615][ T2468] loop0: detected capacity change from 0 to 40427 [ 56.955782][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.964512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.977166][ T2415] device veth0_vlan entered promiscuous mode [ 56.985470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.992450][ T2468] F2FS-fs (loop0): invalid crc value [ 57.004287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.013810][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.027844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.028796][ T2468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 57.044237][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.061239][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.071717][ T2415] device veth1_macvtap entered promiscuous mode [ 57.082268][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.088012][ T2468] F2FS-fs (loop0): Start checkpoint disabled! [ 57.090243][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.104133][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.114152][ T2468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 57.128422][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.144349][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.145962][ T30] audit: type=1400 audit(1786987605.762:424): avc: denied { lock } for pid=2467 comm="syz.0.891" path="/217/file0/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.177201][ T30] audit: type=1400 audit(1786987605.782:425): avc: denied { link } for pid=2467 comm="syz.0.891" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.208208][ T30] audit: type=1400 audit(1786987605.822:426): avc: denied { mount } for pid=2415 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.241687][ T10] handle_bad_sector: 24449 callbacks suppressed [ 57.241702][ T10] attempt to access beyond end of device [ 57.241702][ T10] loop0: rw=2049, want=40984, limit=40427 [ 57.243283][ T30] audit: type=1400 audit(1786987605.822:427): avc: denied { mounton } for pid=2415 comm="syz-executor" path="/root/syzkaller.ePUCro/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.303148][ T2488] loop1: detected capacity change from 0 to 512 [ 57.309462][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.309488][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.309508][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.309529][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.341598][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.349502][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.364033][ T26] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 57.373451][ T26] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 57.380606][ T2488] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.387085][ T26] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 57.408141][ T2488] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.899: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 57.440754][ T2488] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.511814][ T2488] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 57.541993][ T2488] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.591817][ T2501] loop0: detected capacity change from 0 to 4096 [ 57.604622][ T26] usb 4-1: USB disconnect, device number 4 [ 57.618147][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -2 [ 57.627838][ T2501] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 57.645385][ T2501] EXT4-fs (loop0): Test dummy encryption mode enabled [ 57.655461][ T2501] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 57.655461][ T2501] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 57.655461][ T2501] [ 57.707376][ T2501] EXT4-fs (loop0): Ignoring removed oldalloc option [ 57.716762][ T2501] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 57.716762][ T2501] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 57.716762][ T2501] [ 57.756395][ T2501] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,test_dummy_encryption=v1,minixdf,journal_dev=0x0000000000000006,noacl,nombcache,resgid=0x000000000000ee00,nodioread_nolock,errors=remount-ro,oldalloc,nolazytime,nouser_xattr,. Quota mode: writeback. [ 57.901775][ T2522] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.082341][ T2494] F2FS-fs (loop2): Test dummy encryption mode enabled [ 58.101046][ T2494] F2FS-fs (loop2): invalid crc value [ 58.124509][ T2494] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.188745][ T2560] tipc: New replicast peer: 255.255.255.255 [ 58.198463][ T2494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.200822][ T2560] tipc: Enabled bearer , priority 10 [ 58.262468][ T2560] tipc: MTU too low for tipc bearer [ 58.488183][ T2592] capability: warning: `syz.1.941' uses 32-bit capabilities (legacy support in use) [ 58.719080][ T2628] netlink: 'syz.2.958': attribute type 2 has an invalid length. [ 58.911489][ T2636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 58.920497][ T2636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 58.930025][ T2631] F2FS-fs (loop2): invalid crc value [ 58.946092][ T2631] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.988502][ T2641] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.002031][ T2631] F2FS-fs (loop2): Start checkpoint disabled! [ 59.009233][ T2631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 59.107913][ T1762] attempt to access beyond end of device [ 59.107913][ T1762] loop2: rw=2049, want=40968, limit=40427 [ 59.130309][ T1762] attempt to access beyond end of device [ 59.130309][ T1762] loop2: rw=2049, want=41008, limit=40427 [ 59.330334][ T2651] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.337450][ T2651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.648965][ T473] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.812040][ T2709] MTRR 1 not used [ 59.871931][ T2719] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 59.879618][ T2719] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.887569][ T2719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 59.895556][ T473] usb 7-1: Using ep0 maxpacket: 16 [ 59.896684][ T2719] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 59.910235][ T2719] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 59.919241][ T2719] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 59.948124][ T306] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 60.028698][ T2723] exfat: Deprecated parameter 'utf8' [ 60.034112][ T2723] exfat: Deprecated parameter 'utf8' [ 60.039569][ T2723] exfat: Deprecated parameter 'utf8' [ 60.044865][ T2723] exfat: Deprecated parameter 'namecase' [ 60.058164][ T473] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.069214][ T473] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.079132][ T473] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 60.092132][ T473] usb 7-1: config 0 interface 0 has no altsetting 0 [ 60.098768][ T473] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 60.107802][ T473] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.116292][ T473] usb 7-1: config 0 descriptor?? [ 60.130786][ T2723] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 60.236007][ T2732] netlink: 'syz.1.1004': attribute type 12 has an invalid length. [ 60.243941][ T2732] netlink: 'syz.1.1004': attribute type 29 has an invalid length. [ 60.252010][ T2732] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1004'. [ 60.261232][ T2732] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 60.268978][ T2732] netlink: 'syz.1.1004': attribute type 2 has an invalid length. [ 60.308237][ T306] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 60.316696][ T306] usb 3-1: config 0 has no interface number 0 [ 60.344349][ T2742] set_capacity_and_notify: 8 callbacks suppressed [ 60.344361][ T2742] loop3: detected capacity change from 0 to 512 [ 60.391172][ T2742] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 60.400862][ T2742] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.419623][ T2742] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,dioread_nolock,data_err=ignore,,errors=continue. Quota mode: writeback. [ 60.438545][ T2742] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.451910][ T2742] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.1009: corrupted inode contents [ 60.463896][ T2742] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #2: comm syz.3.1009: mark_inode_dirty error [ 60.475505][ T2742] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.1009: corrupted inode contents [ 60.478254][ T306] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 60.488745][ T2742] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.1009: corrupted inode contents [ 60.496520][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.516069][ T306] usb 3-1: Product: syz [ 60.520294][ T306] usb 3-1: Manufacturer: syz [ 60.524883][ T306] usb 3-1: SerialNumber: syz [ 60.530223][ T306] usb 3-1: config 0 descriptor?? [ 60.608534][ T473] hid (null): unknown global tag 0xe [ 60.613962][ T473] hid (null): global environment stack underflow [ 60.623314][ T473] hid (null): invalid report_size 1765707594 [ 60.629545][ T473] hid (null): global environment stack underflow [ 60.636174][ T473] hid (null): unknown global tag 0xe [ 60.642472][ T473] hid (null): unknown global tag 0x62 [ 60.647893][ T473] hid (null): unknown global tag 0xe [ 60.649073][ T473] hid (null): unknown global tag 0x48 [ 60.721995][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 60.722008][ T30] audit: type=1400 audit(1786987609.342:451): avc: denied { mounton } for pid=2764 comm="syz.3.1018" path="/170/file0" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 60.774751][ T2767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=2767 comm=syz.0.1019 [ 60.820426][ T6] usb 7-1: USB disconnect, device number 2 [ 60.841366][ T2774] loop0: detected capacity change from 0 to 256 [ 60.887211][ T2774] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99e017bc, utbl_chksum : 0xe619d30d) [ 60.989397][ T2778] loop0: detected capacity change from 0 to 256 [ 61.011556][ T2778] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 61.034146][ T2778] exFAT-fs (loop0): hint_cluster is invalid (17) [ 61.042213][ T2778] exFAT-fs (loop0): error, broken FAT chain. [ 61.048295][ T2778] exFAT-fs (loop0): Filesystem has been set read-only [ 61.055081][ T2778] exFAT-fs (loop0): error, failed to bmap (inode : ffff888129151ab0 iblock : 24, err : -5) [ 61.065341][ T2778] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 61.142953][ T2782] loop0: detected capacity change from 0 to 4096 [ 61.184270][ T2782] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.212605][ T2782] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 61.223175][ T2782] System zones: 0-5 [ 61.235703][ T2782] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,noload,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 61.276401][ T2782] EXT4-fs (loop0): shut down requested (0) [ 61.386914][ T30] audit: type=1400 audit(1786987610.002:452): avc: denied { read write } for pid=2811 comm="syz.1.1038" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.420666][ T30] audit: type=1400 audit(1786987610.002:453): avc: denied { open } for pid=2811 comm="syz.1.1038" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.456495][ T306] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.477142][ T306] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 61.506336][ T306] asix: probe of 3-1:0.251 failed with error -71 [ 61.517340][ T306] usb 3-1: USB disconnect, device number 6 [ 61.543696][ T2828] loop6: detected capacity change from 0 to 2048 [ 61.570903][ T2835] loop0: detected capacity change from 0 to 512 [ 61.577831][ T30] audit: type=1400 audit(1786987610.192:454): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 61.618972][ T2837] loop3: detected capacity change from 0 to 128 [ 61.627784][ T2828] Alternate GPT is invalid, using primary GPT. [ 61.644704][ T2828] loop6: p2 p3 p7 [ 61.650580][ T2841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 61.671771][ T2835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.685955][ T101] Alternate GPT is invalid, using primary GPT. [ 61.688194][ T2835] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.693574][ T101] loop6: p2 p3 p7 [ 61.808282][ T307] udevd[307]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 61.819115][ T313] udevd[313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 61.829950][ T367] udevd[367]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 61.855953][ T368] udevd[368]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 61.871169][ T307] udevd[307]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 61.882205][ T313] udevd[313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 61.998473][ T2869] loop3: detected capacity change from 0 to 7 [ 62.006198][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.017114][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.025684][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.036589][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.044461][ T313] loop3: unable to read partition table [ 62.050935][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.061843][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.070842][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.081752][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.089750][ T2869] loop3: unable to read partition table [ 62.090264][ T2872] loop6: detected capacity change from 0 to 256 [ 62.095524][ T2869] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 62.120782][ T2846] loop1: detected capacity change from 0 to 40427 [ 62.127240][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.138122][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.148116][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.159006][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.166972][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.169452][ T30] audit: type=1400 audit(1786987610.792:455): avc: denied { load_policy } for pid=2875 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.177852][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.208150][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.215658][ T2876] SELinux: failed to load policy [ 62.219020][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.236403][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.247309][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 62.293001][ T30] audit: type=1400 audit(1786987610.912:456): avc: denied { map } for pid=2882 comm="syz.6.1069" path="socket:[25572]" dev="sockfs" ino=25572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.332912][ T2846] F2FS-fs (loop1): invalid crc value [ 62.360983][ T30] audit: type=1400 audit(1786987610.942:457): avc: denied { read } for pid=2882 comm="syz.6.1069" path="socket:[25572]" dev="sockfs" ino=25572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.361958][ T2881] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 62.408517][ T2846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.571715][ T2846] F2FS-fs (loop1): Start checkpoint disabled! [ 62.608274][ T2846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 62.667843][ T2902] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 62.688220][ T2902] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.826923][ T45] attempt to access beyond end of device [ 62.826923][ T45] loop1: rw=2049, want=40968, limit=40427 [ 62.856685][ T2912] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 62.859229][ T45] attempt to access beyond end of device [ 62.859229][ T45] loop1: rw=2049, want=40984, limit=40427 [ 62.868533][ T2912] netlink: 5696 bytes leftover after parsing attributes in process `syz.2.1080'. [ 62.983245][ T30] audit: type=1400 audit(1786987611.602:458): avc: denied { getopt } for pid=2925 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.013673][ T2920] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 63.084694][ T30] audit: type=1400 audit(1786987611.702:459): avc: denied { sys_module } for pid=2936 comm="syz.0.1092" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.153591][ T2935] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.177031][ T2949] tipc: Started in network mode [ 63.192158][ T2949] tipc: Node identity ac14140f, cluster identity 4711 [ 63.201864][ T2951] ip_tables: iptables: counters copy to user failed while replacing table [ 63.222400][ T2949] tipc: New replicast peer: 255.255.255.255 [ 63.229160][ T2949] tipc: Enabled bearer , priority 10 [ 63.253160][ T30] audit: type=1400 audit(1786987611.872:460): avc: denied { ioctl } for pid=2953 comm="syz.0.1100" path="socket:[26545]" dev="sockfs" ino=26545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.295254][ T2939] F2FS-fs (loop1): invalid crc value [ 63.310647][ T2963] EXT4-fs (loop2): Ignoring removed bh option [ 63.323914][ T2939] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 63.359343][ T2963] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 63.439991][ T2939] F2FS-fs (loop1): Start checkpoint disabled! [ 63.471055][ T2939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 63.509272][ T2987] netlink: 'syz.6.1111': attribute type 12 has an invalid length. [ 63.527261][ T2987] netlink: 'syz.6.1111': attribute type 29 has an invalid length. [ 63.539092][ T2987] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1111'. [ 63.628907][ T2997] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 63.651086][ T2992] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 63.815010][ T3022] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1125'. [ 63.919058][ T3033] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 63.936440][ T3033] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.989826][ T3033] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 64.034711][ T3033] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.066819][ T3075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1149'. [ 64.093705][ T3068] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 64.156933][ T3068] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1145: bg 0: block 393: padding at end of block bitmap is not set [ 64.181488][ T3068] EXT4-fs (loop1): Remounting filesystem read-only [ 64.188410][ T3068] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 64.218269][ T3068] EXT4-fs (loop1): Remounting filesystem read-only [ 64.228177][ T39] tipc: Node number set to 2886997007 [ 64.230517][ T3068] EXT4-fs (loop1): 2 truncates cleaned up [ 64.239438][ T3068] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 64.245512][ T3101] netlink: 384 bytes leftover after parsing attributes in process `syz.3.1160'. [ 64.293072][ T3068] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1479: inode #12: block 7: comm syz.1.1145: path /297/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 64.317174][ T3068] EXT4-fs (loop1): Remounting filesystem read-only [ 64.346661][ T3109] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 64.368327][ T3109] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.382776][ T3109] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #2: comm syz.6.1164: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.418400][ T3109] EXT4-fs (loop6): Remounting filesystem read-only [ 64.425169][ T3119] futex_wake_op: syz.1.1168 tries to shift op by 36; fix this program [ 64.428068][ T3109] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #2: comm syz.6.1164: corrupted inode contents [ 64.445297][ T3109] EXT4-fs (loop6): Remounting filesystem read-only [ 64.452654][ T3109] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #2: comm syz.6.1164: mark_inode_dirty error [ 64.464928][ T3109] EXT4-fs (loop6): Remounting filesystem read-only [ 64.477135][ T3109] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #2: comm syz.6.1164: corrupted inode contents [ 64.512611][ T3109] EXT4-fs (loop6): Remounting filesystem read-only [ 64.540129][ T3109] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1164: mark_inode_dirty error [ 64.553875][ T3109] EXT4-fs (loop6): Remounting filesystem read-only [ 64.602990][ T3121] F2FS-fs (loop3): invalid crc value [ 64.619072][ T3121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.680561][ T3121] F2FS-fs (loop3): Start checkpoint disabled! [ 64.694979][ T3121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 64.703999][ T3146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1180'. [ 64.723646][ T3146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1180'. [ 64.732909][ T3146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1180'. [ 64.735427][ T1762] attempt to access beyond end of device [ 64.735427][ T1762] loop3: rw=2049, want=40984, limit=40427 [ 64.743140][ T3146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1180'. [ 64.809173][ T3143] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 64.828279][ T3143] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.885880][ T3166] exfat: Deprecated parameter 'utf8' [ 64.904511][ T3166] exfat: Deprecated parameter 'namecase' [ 64.917180][ T3166] exfat: Deprecated parameter 'namecase' [ 64.941785][ T3166] exfat: Deprecated parameter 'utf8' [ 64.955294][ T3166] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 64.990276][ T3172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.000987][ T3172] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.038796][ T286] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /195/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 65.168846][ T3201] EXT4-fs (loop0): Ignoring removed orlov option [ 65.214179][ T3201] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,noblock_validity,orlov,. Quota mode: none. [ 65.269655][ T3197] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.290483][ T3201] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.422579][ T3226] set_capacity_and_notify: 17 callbacks suppressed [ 65.422594][ T3226] loop6: detected capacity change from 0 to 512 [ 65.560172][ T3226] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 65.607825][ T3226] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1212: bg 0: block 393: padding at end of block bitmap is not set [ 65.623097][ T3226] EXT4-fs (loop6): Remounting filesystem read-only [ 65.641698][ T3256] loop3: detected capacity change from 0 to 256 [ 65.642922][ T3226] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 65.656910][ T3226] EXT4-fs (loop6): Remounting filesystem read-only [ 65.663698][ T3226] EXT4-fs (loop6): 2 truncates cleaned up [ 65.669615][ T3226] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 65.704424][ T3226] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1479: inode #12: block 7: comm syz.6.1212: path /69/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 65.724016][ T3263] loop0: detected capacity change from 0 to 256 [ 65.726223][ T3226] EXT4-fs (loop6): Remounting filesystem read-only [ 65.752903][ T3263] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.763812][ T3263] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 65.773826][ T3263] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 65.814412][ T3269] loop3: detected capacity change from 0 to 512 [ 65.820791][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.844459][ T3277] loop0: detected capacity change from 0 to 16 [ 65.870224][ T3277] erofs: (device loop0): mounted with root inode @ nid 36. [ 65.890855][ T3277] attempt to access beyond end of device [ 65.890855][ T3277] loop0: rw=524288, want=1348714520, limit=16 [ 65.902755][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 65.902768][ T30] audit: type=1326 audit(1786987870.524:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3280 comm="syz.2.1237" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a2071b0d9 code=0x0 [ 65.905161][ T3277] attempt to access beyond end of device [ 65.905161][ T3277] loop0: rw=524288, want=1348714848, limit=16 [ 65.984700][ T3269] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 65.997927][ T3269] System zones: 0-2, 18-18, 34-35 [ 66.005238][ T30] audit: type=1326 audit(1786987870.624:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8dfa4e0d9 code=0x7ffc0000 [ 66.012991][ T3269] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.030246][ T3292] loop6: detected capacity change from 0 to 1024 [ 66.041391][ T30] audit: type=1326 audit(1786987870.624:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff8dfa4e0d9 code=0x7ffc0000 [ 66.052432][ T3269] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.079621][ T30] audit: type=1326 audit(1786987870.624:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8dfa4e0d9 code=0x7ffc0000 [ 66.108110][ T30] audit: type=1326 audit(1786987870.624:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff8dfa4e0d9 code=0x7ffc0000 [ 66.133034][ T3292] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 66.140744][ T3292] EXT4-fs (loop6): Ignoring removed bh option [ 66.147228][ T30] audit: type=1326 audit(1786987870.624:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8dfa4de42 code=0x7ffc0000 [ 66.172084][ T30] audit: type=1326 audit(1786987870.634:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff8dfa0e90e code=0x7ffc0000 [ 66.196844][ T30] audit: type=1326 audit(1786987870.634:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff8dfa4df07 code=0x7ffc0000 [ 66.203653][ T3292] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,mblk_io_submit,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 66.221852][ T30] audit: type=1326 audit(1786987870.634:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8dfa0e90e code=0x7ffc0000 [ 66.269499][ T30] audit: type=1326 audit(1786987870.634:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.6.1242" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8dfa4dd6b code=0x7ffc0000 [ 66.324271][ T3301] loop3: detected capacity change from 0 to 256 [ 66.368196][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.424629][ T3303] loop3: detected capacity change from 0 to 2048 [ 66.441364][ T3303] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 66.456022][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.456105][ T3303] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.467257][ T20] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 66.509924][ T20] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 66.524999][ T20] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 66.536433][ T3312] loop6: detected capacity change from 0 to 4096 [ 66.539136][ T20] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 66.558289][ T20] usb 2-1: config 1 interface 1 has no altsetting 0 [ 66.567351][ T3312] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.581826][ T3312] EXT4-fs (loop6): shut down requested (2) [ 66.588330][ T3312] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 66.666709][ T3320] loop6: detected capacity change from 0 to 512 [ 66.700182][ T3320] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 66.710207][ T3320] FAT-fs (loop6): Filesystem has been set read-only [ 66.798207][ T20] usb 2-1: string descriptor 0 read error: -22 [ 66.805547][ T20] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 66.814936][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.894770][ T3341] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1261: bad orphan inode 15 [ 66.905700][ T3341] ext4_test_bit(bit=14, block=18) = 1 [ 66.928172][ T3341] is_bad_inode(inode)=0 [ 66.930950][ T3348] __nla_validate_parse: 16 callbacks suppressed [ 66.930964][ T3348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 66.932425][ T3341] NEXT_ORPHAN(inode)=1023 [ 66.952320][ T3341] max_ino=32 [ 66.955572][ T3341] i_nlink=0 [ 66.962713][ T3341] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #15: comm syz.2.1261: corrupted xattr block 19 [ 66.983916][ T3341] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -117) [ 66.993324][ T3341] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.008548][ T3341] ext4 filesystem being mounted at /153/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 67.034995][ T3341] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1261: path /153/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 67.248181][ T306] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.250384][ T3373] EXT4-fs (loop6): Ignoring removed bh option [ 67.263487][ T3373] EXT4-fs error (device loop6): ext4_iget_extra_inode:4604: inode #15: comm syz.6.1276: corrupted in-inode xattr [ 67.280374][ T3373] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1276: couldn't read orphan inode 15 (err -117) [ 67.292579][ T3373] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 67.424533][ T3389] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000002,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.461327][ T3396] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 67.493774][ T291] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 67.512074][ T291] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 67.518147][ T306] usb 1-1: Using ep0 maxpacket: 8 [ 67.574471][ T3404] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,abort,,errors=continue. Quota mode: none. [ 67.606698][ T3404] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.648202][ T306] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.659919][ T306] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 67.660012][ T3404] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop6' because it doesn't have stable inode numbers [ 67.671069][ T306] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.697346][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.704022][ T306] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 67.713157][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.731703][ T306] usb 1-1: config 0 descriptor?? [ 67.748188][ T3356] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.758160][ T20] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 67.769307][ T20] usb 2-1: Warning! Unlikely big volume range (=11853), cval->res is probably wrong. [ 67.781056][ T20] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = -11853/0/1 [ 67.794223][ T20] usb 2-1: USB disconnect, device number 2 [ 67.824707][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.831812][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.839508][ T3415] device bridge_slave_0 entered promiscuous mode [ 67.847223][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.857162][ T3415] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.865618][ T3415] device bridge_slave_1 entered promiscuous mode [ 67.902709][ T3420] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 67.991691][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.999530][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.038391][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.069579][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.080349][ T1762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.087396][ T1762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.095077][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.103798][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.112396][ T1762] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.119454][ T1762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.127109][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.143332][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.171641][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.183071][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.200166][ T45] device bridge_slave_1 left promiscuous mode [ 68.206618][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.214287][ T45] device bridge_slave_0 left promiscuous mode [ 68.215747][ T306] input: HID 1b96:000a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B96:000A.0008/input/input9 [ 68.220525][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.240528][ T306] ntrig 0003:1B96:000A.0008: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 68.240740][ T45] device veth1_macvtap left promiscuous mode [ 68.256683][ T3414] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 68.258762][ T45] device veth0_vlan left promiscuous mode [ 68.277605][ T3414] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 68.294614][ T3414] F2FS-fs (loop3): invalid crc value [ 68.321827][ T3414] F2FS-fs (loop3): Found nat_bits in checkpoint [ 68.359608][ T3414] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 68.366710][ T3414] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 68.391364][ T3415] device veth0_vlan entered promiscuous mode [ 68.398043][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.406315][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.413814][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.418210][ T306] ntrig 0003:1B96:000A.0008: Firmware version: 2.11.10.15.1 (ed15 f141) [ 68.434276][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.449330][ T3415] device veth1_macvtap entered promiscuous mode [ 68.462670][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.473059][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.628280][ T20] usb 1-1: USB disconnect, device number 4 [ 68.816450][ T3456] tipc: Started in network mode [ 68.821450][ T3456] tipc: Node identity ac14140f, cluster identity 4711 [ 68.828430][ T3456] tipc: New replicast peer: 255.255.255.255 [ 68.834501][ T3456] tipc: Enabled bearer , priority 10 [ 69.296200][ T3490] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.329069][ T3490] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.371813][ T3490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.420237][ T3522] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 69.460480][ T3490] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.470831][ T3490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.562100][ T3505] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 69.585236][ T3505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.603510][ T3505] F2FS-fs (loop1): invalid crc value [ 69.619095][ T3505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.671374][ T3505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 69.678476][ T3505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.790566][ T3540] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1344: iget: bad i_size value: 38620345925642 [ 69.803615][ T3540] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1344: couldn't read orphan inode 15 (err -117) [ 69.819777][ T3494] F2FS-fs (loop6): invalid crc value [ 69.820669][ T3543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'. [ 69.835649][ T3543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'. [ 69.843016][ T3540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.861419][ T3540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1344: bg 0: block 5: invalid block bitmap [ 69.886213][ T3494] F2FS-fs (loop6): Found nat_bits in checkpoint [ 69.911096][ T3494] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 69.938360][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 69.969538][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 69.990629][ T3551] EXT4-fs (loop3): Ignoring removed oldalloc option [ 70.002248][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 70.019321][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 70.038193][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 70.039002][ T3551] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000001,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 70.059268][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 70.076975][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 70.093707][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 70.105998][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 70.122989][ T20] tipc: Node number set to 2886997007 [ 70.242585][ T3568] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.350803][ T3577] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 70.351132][ T3575] EXT4-fs (loop6): Test dummy encryption mode enabled [ 70.382859][ T3575] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1347: inode has both inline data and extents flags [ 70.399082][ T3575] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1347: couldn't read orphan inode 15 (err -117) [ 70.413685][ T3575] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 70.446324][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 70.482579][ T3581] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.489528][ T3581] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 70.523339][ T3581] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 70.538219][ T3581] System zones: 0-5 [ 70.544472][ T3581] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 70.639233][ T3597] set_capacity_and_notify: 18 callbacks suppressed [ 70.639248][ T3597] loop7: detected capacity change from 0 to 256 [ 70.690508][ T3597] exfat: Deprecated parameter 'namecase' [ 70.696234][ T3597] exfat: Deprecated parameter 'namecase' [ 70.714840][ T3597] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 70.744564][ T3597] exFAT-fs (loop7): hint_cluster is invalid (4278190089) [ 70.757244][ T3597] exFAT-fs (loop7): error, failed to bmap (inode : ffff888129150dc0 iblock : 8, err : -5) [ 70.769664][ T3597] exFAT-fs (loop7): error, invalid access to FAT (entry 0xff000008) [ 70.777795][ T3597] exFAT-fs (loop7): error, invalid access to FAT (entry 0xff000008) [ 70.800123][ T316] attempt to access beyond end of device [ 70.800123][ T316] loop7: rw=1, want=34225520826, limit=256 [ 70.811684][ T316] Buffer I/O error on dev loop7, logical block 34225520825, lost async page write [ 70.821169][ T316] attempt to access beyond end of device [ 70.821169][ T316] loop7: rw=1, want=34225520827, limit=256 [ 70.832497][ T316] Buffer I/O error on dev loop7, logical block 34225520826, lost async page write [ 70.841842][ T316] attempt to access beyond end of device [ 70.841842][ T316] loop7: rw=1, want=34225520828, limit=256 [ 70.853334][ T316] Buffer I/O error on dev loop7, logical block 34225520827, lost async page write [ 70.862648][ T316] attempt to access beyond end of device [ 70.862648][ T316] loop7: rw=1, want=34225520829, limit=256 [ 70.874208][ T316] Buffer I/O error on dev loop7, logical block 34225520828, lost async page write [ 70.883482][ T316] attempt to access beyond end of device [ 70.883482][ T316] loop7: rw=1, want=34225520830, limit=256 [ 70.894800][ T316] Buffer I/O error on dev loop7, logical block 34225520829, lost async page write [ 70.904045][ T316] attempt to access beyond end of device [ 70.904045][ T316] loop7: rw=1, want=34225520831, limit=256 [ 70.917979][ T316] Buffer I/O error on dev loop7, logical block 34225520830, lost async page write [ 70.928141][ T2478] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 70.929471][ T316] attempt to access beyond end of device [ 70.929471][ T316] loop7: rw=1, want=34225520832, limit=256 [ 70.947117][ T316] Buffer I/O error on dev loop7, logical block 34225520831, lost async page write [ 71.000734][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 71.000748][ T30] audit: type=1400 audit(1786987875.624:528): avc: denied { watch watch_reads } for pid=3631 comm="syz.7.1379" path="/10" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.265269][ T3663] loop6: detected capacity change from 0 to 40427 [ 71.308257][ T2478] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 71.316534][ T2478] usb 4-1: config 127 has no interface number 0 [ 71.323380][ T2478] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 71.335104][ T3663] F2FS-fs (loop6): invalid crc value [ 71.341498][ T3663] F2FS-fs (loop6): Found nat_bits in checkpoint [ 71.362047][ T3663] F2FS-fs (loop6): Start checkpoint disabled! [ 71.368782][ T3663] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 71.396996][ T316] attempt to access beyond end of device [ 71.396996][ T316] loop6: rw=2049, want=45104, limit=40427 [ 71.408195][ T473] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.458153][ T306] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 71.488207][ T2478] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 71.497259][ T2478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.505333][ T2478] usb 4-1: Product: syz [ 71.509511][ T2478] usb 4-1: Manufacturer: syz [ 71.514100][ T2478] usb 4-1: SerialNumber: syz [ 71.538199][ T3602] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.768165][ T473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.779503][ T473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.789267][ T473] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 71.798305][ T473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.806855][ T473] usb 2-1: config 0 descriptor?? [ 71.842399][ T3684] device erspan0 entered promiscuous mode [ 71.868461][ T306] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 71.879529][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 71.886311][ T306] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 71.895709][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.904316][ T306] usb 1-1: config 0 descriptor?? [ 71.928230][ T3657] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 71.979423][ T3602] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.218210][ T2478] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 72.289071][ T473] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 72.296474][ T473] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 72.304144][ T473] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 72.311580][ T473] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 72.318984][ T473] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 72.326894][ T473] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 72.389732][ T306] wacom 0003:056A:032F.000A: unknown main item tag 0x2 [ 72.396629][ T306] wacom 0003:056A:032F.000A: unknown main item tag 0x1 [ 72.403579][ T306] wacom 0003:056A:032F.000A: ignoring exceeding usage max [ 72.412121][ T306] wacom 0003:056A:032F.000A: hidraw1: USB HID v0.81 Device [HID 056a:032f] on usb-dummy_hcd.0-1/input0 [ 72.438164][ T2478] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 72.448637][ T2478] asix 4-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 72.459145][ T2478] asix: probe of 4-1:127.57 failed with error -71 [ 72.466333][ T2478] usb 4-1: USB disconnect, device number 5 [ 72.508216][ T473] playstation 0003:054C:0DF2.0009: Invalid reportID received, expected 9 got 0 [ 72.517364][ T473] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 72.528243][ T473] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 72.536920][ T473] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 72.545063][ T473] playstation: probe of 0003:054C:0DF2.0009 failed with error -22 [ 72.596278][ T306] usb 1-1: USB disconnect, device number 5 [ 72.712776][ T20] usb 2-1: USB disconnect, device number 3 [ 72.975662][ T3710] loop3: detected capacity change from 0 to 128 [ 73.003267][ T3710] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.013937][ T3710] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.130655][ T30] audit: type=1400 audit(1786987877.754:529): avc: denied { bind } for pid=3713 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.197247][ T3720] MTRR 1 not used [ 75.010130][ T3727] loop7: detected capacity change from 0 to 512 [ 75.079643][ T3727] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 75.079643][ T3727] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 75.079643][ T3727] [ 75.114344][ T3741] sch_fq: defrate 0 ignored. [ 75.118165][ T3727] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.161341][ T3727] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 75.169648][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 2683928664 (level 1) [ 75.188399][ T3727] EXT4-fs (loop7): 1 truncate cleaned up [ 75.196700][ T3727] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.abort,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,dioread_nolock,inlinecrypt,,,errors=continue. Quota mode: writeback. [ 75.239493][ T3727] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2037609061: comm syz.7.1423: invalid block [ 75.254785][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 1669132791 (level 1) [ 75.279089][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 27745 (level 0) [ 75.319184][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 1819042155 (level 0) [ 75.340756][ T3727] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.1423: Invalid block bitmap block 3 in block_group 0 [ 75.355023][ T3727] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.366199][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 1669132790 (level 0) [ 75.387824][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 4294967295 (level 0) [ 75.406485][ T3769] loop6: detected capacity change from 0 to 512 [ 75.413105][ T3727] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1423: invalid indirect mapped block 65536 (level 1) [ 75.489538][ T3769] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.523497][ T3715] loop3: detected capacity change from 0 to 131072 [ 75.534838][ T3715] F2FS-fs (loop3): Test dummy encryption mode enabled [ 75.536494][ T3769] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #4: comm syz.6.1442: pblk 0 bad header/extent: invalid magic - magic f380, entries 1, max 4(0), depth 0(0) [ 75.559750][ T3769] EXT4-fs error (device loop6): ext4_quota_enable:6438: comm syz.6.1442: Bad quota inode: 4, type: 1 [ 75.571059][ T3715] F2FS-fs (loop3): invalid crc value [ 75.571055][ T3769] EXT4-fs warning (device loop6): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.571501][ T3769] EXT4-fs (loop6): mount failed [ 75.584185][ T3781] loop7: detected capacity change from 0 to 512 [ 75.596931][ T3715] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.610289][ T3781] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1446: invalid indirect mapped block 256 (level 2) [ 75.623846][ T3781] EXT4-fs (loop7): Remounting filesystem read-only [ 75.630835][ T3781] EXT4-fs (loop7): 2 truncates cleaned up [ 75.633806][ T3715] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 75.636559][ T3781] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 75.643671][ T3781] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1479: inode #12: block 7: comm syz.7.1446: path /16/file3/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 75.652236][ T3715] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 75.658330][ T3781] EXT4-fs (loop7): Remounting filesystem read-only [ 75.679732][ T3715] F2FS-fs (loop3): Start checkpoint disabled! [ 75.717983][ T3715] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 75.728884][ T3769] SELinux: failed to load policy [ 75.750215][ T3786] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.768876][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.802069][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 75.949983][ T3808] loop7: detected capacity change from 0 to 512 [ 75.967089][ T3808] EXT4-fs (loop7): Ignoring removed oldalloc option [ 75.973854][ T3808] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.007422][ T3808] EXT4-fs (loop7): 1 truncate cleaned up [ 76.013498][ T3808] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000c90,minixdf,auto_da_alloc,data=journal,lazytime,oldalloc,max_batch_time=0x000000007fffffff,auto_da_alloc,,errors=continue. Quota mode: none. [ 76.131669][ T3831] loop0: detected capacity change from 0 to 1024 [ 76.157911][ T3831] EXT4-fs (loop0): Ignoring removed oldalloc option [ 76.168178][ T3831] EXT4-fs (loop0): Ignoring removed orlov option [ 76.190037][ T3841] xt_hashlimit: size too large, truncated to 1048576 [ 76.192942][ T3831] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 76.211928][ T3831] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.238733][ T3847] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 76.265614][ T3831] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.1467: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.301509][ T3831] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 76.351676][ T3831] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.351676][ T3831] [ 76.358306][ T3850] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1467: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.367829][ T3852] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.1475'. [ 76.429439][ T316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 76.450052][ T316] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 76.478129][ T316] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.478129][ T316] [ 76.497596][ T316] EXT4-fs (loop0): Total free blocks count 0 [ 76.503857][ T316] EXT4-fs (loop0): Free/Dirty block details [ 76.509920][ T316] EXT4-fs (loop0): free_blocks=0 [ 76.514924][ T316] EXT4-fs (loop0): dirty_blocks=48 [ 76.520291][ T316] EXT4-fs (loop0): Block reservation details [ 76.526335][ T316] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 76.562598][ T3866] netem: incorrect ge model size [ 76.567551][ T3866] netem: change failed [ 76.657394][ T3876] device vlan2 entered promiscuous mode [ 76.669640][ T3876] device bridge0 entered promiscuous mode [ 76.676924][ T3859] loop3: detected capacity change from 0 to 40427 [ 76.697553][ T3859] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 76.715867][ T3859] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 76.724922][ T3859] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 76.747940][ T3859] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.802268][ T3859] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 76.809553][ T3859] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.851379][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.883989][ T3906] loop1: detected capacity change from 0 to 16 [ 76.913625][ T3912] ------------[ cut here ]------------ [ 76.919092][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 76.929490][ T3912] Modules linked in: [ 76.933757][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Not tainted syzkaller #0 [ 76.941105][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.951153][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 76.956965][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 76.976568][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 76.982616][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 76.990570][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 76.998522][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 77.006481][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001d2 [ 77.014436][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 77.022393][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 77.031303][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.037870][ T3912] CR2: 00007f1995501ff8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 77.045824][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.053774][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.061726][ T3912] Call Trace: [ 77.064984][ T3912] [ 77.067900][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 77.073522][ T3912] ? __kasan_check_write+0x14/0x20 [ 77.078628][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 77.083286][ T3912] rb_buffer_peek+0x60/0x7a0 [ 77.087861][ T3912] ring_buffer_peek+0x184/0x3b0 [ 77.092784][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 77.098324][ T3912] __find_next_entry+0x34d/0x6b0 [ 77.103249][ T3912] ? rb_advance_reader+0x39c/0x6b0 [ 77.108342][ T3912] ? trace_find_next_entry+0x370/0x370 [ 77.113783][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 77.119310][ T3912] ? print_trace_line+0x385/0x690 [ 77.124314][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 77.129232][ T3912] ? s_show+0x320/0x320 [ 77.133370][ T3912] vfs_read+0x28c/0xc20 [ 77.137509][ T3912] ? kernel_read+0x1f0/0x1f0 [ 77.142083][ T3912] ? __kasan_check_write+0x14/0x20 [ 77.147176][ T3912] ? mutex_lock+0x9b/0x1c0 [ 77.151580][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 77.158154][ T3912] ? __fget_files+0x2e1/0x340 [ 77.162815][ T3912] ? __fdget_pos+0x2d2/0x380 [ 77.167386][ T3912] ? ksys_read+0x70/0x260 [ 77.171695][ T3912] ksys_read+0x14a/0x260 [ 77.175916][ T3912] ? vfs_write+0xfd0/0xfd0 [ 77.180309][ T3912] ? __kasan_check_write+0x14/0x20 [ 77.185402][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 77.190497][ T3912] __x64_sys_read+0x7b/0x90 [ 77.194982][ T3912] x64_sys_call+0x96d/0x9a0 [ 77.199469][ T3912] do_syscall_64+0x4c/0xa0 [ 77.203864][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 77.208520][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 77.213178][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.219054][ T3912] RIP: 0033:0x7f1996aa90d9 [ 77.223456][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.243042][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.251441][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 77.259398][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 77.267351][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 77.275305][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.283255][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 77.291212][ T3912] [ 77.294215][ T3912] ---[ end trace 4c50ab8a19f714dc ]--- [ 77.299667][ T3912] ================================================================== [ 77.307708][ T3912] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0 [ 77.314890][ T3912] Read of size 4 at addr ffff8881133a31e2 by task syz.0.1503/3912 [ 77.322671][ T3912] [ 77.324979][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G W syzkaller #0 [ 77.333719][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.343754][ T3912] Call Trace: [ 77.347015][ T3912] [ 77.349932][ T3912] __dump_stack+0x21/0x30 [ 77.354252][ T3912] dump_stack_lvl+0x110/0x170 [ 77.358912][ T3912] ? show_regs_print_info+0x20/0x20 [ 77.364093][ T3912] ? load_image+0x3f0/0x3f0 [ 77.368579][ T3912] print_address_description+0x7f/0x2c0 [ 77.374107][ T3912] ? rb_buffer_peek+0x71a/0x7a0 [ 77.378939][ T3912] kasan_report+0x10f/0x150 [ 77.383425][ T3912] ? rb_buffer_peek+0x71a/0x7a0 [ 77.388258][ T3912] __asan_report_load4_noabort+0x14/0x20 [ 77.393871][ T3912] rb_buffer_peek+0x71a/0x7a0 [ 77.398529][ T3912] ring_buffer_peek+0x184/0x3b0 [ 77.403361][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 77.408888][ T3912] __find_next_entry+0x34d/0x6b0 [ 77.413805][ T3912] ? rb_advance_reader+0x39c/0x6b0 [ 77.418902][ T3912] ? trace_find_next_entry+0x370/0x370 [ 77.424341][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 77.429865][ T3912] ? print_trace_line+0x385/0x690 [ 77.434873][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 77.439793][ T3912] ? s_show+0x320/0x320 [ 77.443928][ T3912] vfs_read+0x28c/0xc20 [ 77.448064][ T3912] ? kernel_read+0x1f0/0x1f0 [ 77.452653][ T3912] ? __kasan_check_write+0x14/0x20 [ 77.457748][ T3912] ? mutex_lock+0x9b/0x1c0 [ 77.462145][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 77.468712][ T3912] ? __fget_files+0x2e1/0x340 [ 77.473369][ T3912] ? __fdget_pos+0x2d2/0x380 [ 77.477938][ T3912] ? ksys_read+0x70/0x260 [ 77.482244][ T3912] ksys_read+0x14a/0x260 [ 77.486465][ T3912] ? vfs_write+0xfd0/0xfd0 [ 77.490864][ T3912] ? __kasan_check_write+0x14/0x20 [ 77.495957][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 77.501052][ T3912] __x64_sys_read+0x7b/0x90 [ 77.505533][ T3912] x64_sys_call+0x96d/0x9a0 [ 77.510016][ T3912] do_syscall_64+0x4c/0xa0 [ 77.514413][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 77.519073][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 77.523727][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.529598][ T3912] RIP: 0033:0x7f1996aa90d9 [ 77.534000][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.553589][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.561986][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 77.569943][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 77.577998][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 77.585952][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.593903][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 77.601862][ T3912] [ 77.604865][ T3912] [ 77.607171][ T3912] Allocated by task 101: [ 77.611389][ T3912] __kasan_slab_alloc+0xb7/0xe0 [ 77.616225][ T3912] slab_post_alloc_hook+0x4f/0x2b0 [ 77.621320][ T3912] kmem_cache_alloc+0xf7/0x260 [ 77.626063][ T3912] getname_flags+0xba/0x510 [ 77.630546][ T3912] getname+0x19/0x20 [ 77.634421][ T3912] do_sys_openat2+0xeb/0x7f0 [ 77.638989][ T3912] __x64_sys_openat+0x136/0x160 [ 77.643822][ T3912] x64_sys_call+0x219/0x9a0 [ 77.648304][ T3912] do_syscall_64+0x4c/0xa0 [ 77.652699][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.658744][ T3912] [ 77.661045][ T3912] Freed by task 101: [ 77.664913][ T3912] kasan_set_track+0x4a/0x70 [ 77.669483][ T3912] kasan_set_free_info+0x23/0x40 [ 77.674402][ T3912] ____kasan_slab_free+0x125/0x160 [ 77.679493][ T3912] __kasan_slab_free+0x11/0x20 [ 77.684237][ T3912] slab_free_freelist_hook+0xc2/0x190 [ 77.689587][ T3912] kmem_cache_free+0x100/0x320 [ 77.694332][ T3912] putname+0x111/0x160 [ 77.698384][ T3912] do_sys_openat2+0x6df/0x7f0 [ 77.703040][ T3912] __x64_sys_openat+0x136/0x160 [ 77.707867][ T3912] x64_sys_call+0x219/0x9a0 [ 77.712349][ T3912] do_syscall_64+0x4c/0xa0 [ 77.716745][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.722619][ T3912] [ 77.724921][ T3912] The buggy address belongs to the object at ffff8881133a2200 [ 77.724921][ T3912] which belongs to the cache names_cache of size 4096 [ 77.739043][ T3912] The buggy address is located 4066 bytes inside of [ 77.739043][ T3912] 4096-byte region [ffff8881133a2200, ffff8881133a3200) [ 77.752471][ T3912] The buggy address belongs to the page: [ 77.758086][ T3912] page:ffffea00044ce800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1133a0 [ 77.768307][ T3912] head:ffffea00044ce800 order:3 compound_mapcount:0 compound_pincount:0 [ 77.776609][ T3912] flags: 0x4000000000010200(slab|head|zone=1) [ 77.782664][ T3912] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881001c4300 [ 77.791230][ T3912] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 77.799790][ T3912] page dumped because: kasan: bad access detected [ 77.806185][ T3912] page_owner tracks the page as allocated [ 77.811874][ T3912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 75846255451, free_ts 75824039908 [ 77.832281][ T3912] post_alloc_hook+0x192/0x1b0 [ 77.837046][ T3912] prep_new_page+0x1c/0x110 [ 77.841543][ T3912] get_page_from_freelist+0x2c3a/0x2cd0 [ 77.847073][ T3912] __alloc_pages+0x1a2/0x460 [ 77.851652][ T3912] new_slab+0xa0/0x4d0 [ 77.855703][ T3912] ___slab_alloc+0x3ac/0x840 [ 77.860275][ T3912] __slab_alloc+0x49/0x90 [ 77.864591][ T3912] kmem_cache_alloc+0x138/0x260 [ 77.869421][ T3912] getname_flags+0xba/0x510 [ 77.873904][ T3912] user_path_at_empty+0x2f/0x1c0 [ 77.878822][ T3912] do_readlinkat+0xd9/0x490 [ 77.883305][ T3912] __x64_sys_readlink+0x7f/0x90 [ 77.888134][ T3912] x64_sys_call+0x93c/0x9a0 [ 77.892620][ T3912] do_syscall_64+0x4c/0xa0 [ 77.897029][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.902922][ T3912] page last free stack trace: [ 77.907576][ T3912] free_unref_page_prepare+0x5fa/0x600 [ 77.913027][ T3912] free_unref_page+0xae/0x540 [ 77.917689][ T3912] __free_pages+0x6c/0x100 [ 77.922089][ T3912] __free_slab+0xe5/0x1e0 [ 77.926407][ T3912] __unfreeze_partials+0x15a/0x190 [ 77.931498][ T3912] put_cpu_partial+0xc6/0x120 [ 77.936154][ T3912] __slab_free+0x1d4/0x290 [ 77.940556][ T3912] ___cache_free+0x104/0x120 [ 77.945137][ T3912] qlink_free+0x4d/0x90 [ 77.949271][ T3912] qlist_free_all+0x5f/0xb0 [ 77.953757][ T3912] kasan_quarantine_reduce+0x14a/0x170 [ 77.959196][ T3912] __kasan_slab_alloc+0x2f/0xe0 [ 77.964026][ T3912] slab_post_alloc_hook+0x4f/0x2b0 [ 77.969121][ T3912] kmem_cache_alloc+0xf7/0x260 [ 77.973866][ T3912] __d_alloc+0x2d/0x690 [ 77.978002][ T3912] d_alloc_parallel+0xe5/0x1380 [ 77.982843][ T3912] [ 77.985149][ T3912] Memory state around the buggy address: [ 77.990753][ T3912] ffff8881133a3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.998791][ T3912] ffff8881133a3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.006827][ T3912] >ffff8881133a3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.014860][ T3912] ^ [ 78.022029][ T3912] ffff8881133a3200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.030080][ T3912] ffff8881133a3280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.038116][ T3912] ================================================================== [ 78.046152][ T3912] Disabling lock debugging due to kernel taint [ 78.053213][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 78.056919][ T3912] ------------[ cut here ]------------ [ 78.064640][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 78.066257][ T3788] Bluetooth: hci0: sending frame failed (-49) [ 78.074877][ T3912] Modules linked in: [ 78.074889][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 78.074905][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.074913][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 78.074934][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 78.074947][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010002 [ 78.074962][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 78.074975][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 78.074987][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 78.075001][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001d2 [ 78.075013][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 78.075024][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 78.075039][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.075052][ T3912] CR2: 000000110c2eebb4 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 78.075067][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.206255][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.214213][ T3912] Call Trace: [ 78.217497][ T3912] [ 78.220414][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 78.226033][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.231130][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 78.235790][ T3912] rb_buffer_peek+0x60/0x7a0 [ 78.240357][ T3912] ring_buffer_consume+0x1aa/0x370 [ 78.245448][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 78.250971][ T3912] ? print_trace_line+0x385/0x690 [ 78.255976][ T3912] tracing_read_pipe+0x599/0xab0 [ 78.260891][ T3912] ? s_show+0x320/0x320 [ 78.265025][ T3912] vfs_read+0x28c/0xc20 [ 78.269162][ T3912] ? kernel_read+0x1f0/0x1f0 [ 78.273730][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.278823][ T3912] ? mutex_lock+0x9b/0x1c0 [ 78.283217][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 78.289786][ T3912] ? __fget_files+0x2e1/0x340 [ 78.294440][ T3912] ? __fdget_pos+0x2d2/0x380 [ 78.299007][ T3912] ? ksys_read+0x70/0x260 [ 78.303318][ T3912] ksys_read+0x14a/0x260 [ 78.307542][ T3912] ? vfs_write+0xfd0/0xfd0 [ 78.311939][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.317029][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 78.322125][ T3912] __x64_sys_read+0x7b/0x90 [ 78.326608][ T3912] x64_sys_call+0x96d/0x9a0 [ 78.331090][ T3912] do_syscall_64+0x4c/0xa0 [ 78.335483][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 78.340147][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 78.344808][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.350688][ T3912] RIP: 0033:0x7f1996aa90d9 [ 78.355086][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.374672][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.383067][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 78.391022][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 78.398978][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 78.406929][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.414880][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 78.422921][ T3912] [ 78.425924][ T3912] ---[ end trace 4c50ab8a19f714dd ]--- [ 78.431395][ T3912] ------------[ cut here ]------------ [ 78.436842][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 78.447086][ T3912] Modules linked in: [ 78.450959][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 78.459715][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.469749][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 78.475544][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 78.495133][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 78.501182][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 78.509149][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 78.517106][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 78.525060][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001d2 [ 78.533038][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 78.540988][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 78.549912][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.556476][ T3912] CR2: 000000110c2eebb4 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 78.564431][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.572381][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.580855][ T3912] Call Trace: [ 78.584112][ T3912] [ 78.587031][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 78.592649][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.597741][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 78.602394][ T3912] rb_advance_reader+0x2b/0x6b0 [ 78.607224][ T3912] ring_buffer_consume+0x1e7/0x370 [ 78.612316][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 78.617842][ T3912] ? print_trace_line+0x385/0x690 [ 78.622846][ T3912] tracing_read_pipe+0x599/0xab0 [ 78.627767][ T3912] ? s_show+0x320/0x320 [ 78.631901][ T3912] vfs_read+0x28c/0xc20 [ 78.636039][ T3912] ? kernel_read+0x1f0/0x1f0 [ 78.640608][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.645699][ T3912] ? mutex_lock+0x9b/0x1c0 [ 78.650096][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 78.656663][ T3912] ? __fget_files+0x2e1/0x340 [ 78.661317][ T3912] ? __fdget_pos+0x2d2/0x380 [ 78.665898][ T3912] ? ksys_read+0x70/0x260 [ 78.670252][ T3912] ksys_read+0x14a/0x260 [ 78.674506][ T3912] ? vfs_write+0xfd0/0xfd0 [ 78.678912][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.684148][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 78.689257][ T3912] __x64_sys_read+0x7b/0x90 [ 78.693745][ T3912] x64_sys_call+0x96d/0x9a0 [ 78.698229][ T3912] do_syscall_64+0x4c/0xa0 [ 78.702630][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 78.707295][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 78.711963][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.717842][ T3912] RIP: 0033:0x7f1996aa90d9 [ 78.722240][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.741822][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.750216][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 78.758168][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 78.766117][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 78.774067][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.782020][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 78.789981][ T3912] [ 78.792988][ T3912] ---[ end trace 4c50ab8a19f714de ]--- [ 78.805446][ T3912] ------------[ cut here ]------------ [ 78.810918][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 78.813686][ T3906] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.821169][ T3912] Modules linked in: [ 78.821181][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 78.821199][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.821209][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 78.856801][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 78.876401][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 78.882477][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 78.890449][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 78.898407][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 78.906360][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001d6 [ 78.914317][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 78.922277][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 78.931189][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.937758][ T3912] CR2: 00007f1996af67c0 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 78.945718][ T3912] Call Trace: [ 78.948984][ T3912] [ 78.951909][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 78.957527][ T3912] ? __kasan_check_write+0x14/0x20 [ 78.962620][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 78.967284][ T3912] rb_buffer_peek+0x60/0x7a0 [ 78.971862][ T3912] ring_buffer_peek+0x184/0x3b0 [ 78.976693][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 78.982220][ T3912] ? preempt_schedule+0xbc/0xd0 [ 78.987051][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 78.992665][ T3912] __find_next_entry+0x34d/0x6b0 [ 78.997587][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 79.002942][ T3912] ? trace_find_next_entry+0x370/0x370 [ 79.008380][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 79.013907][ T3912] ? print_trace_line+0x385/0x690 [ 79.018910][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 79.023824][ T3912] ? s_show+0x320/0x320 [ 79.027957][ T3912] vfs_read+0x28c/0xc20 [ 79.032093][ T3912] ? kernel_read+0x1f0/0x1f0 [ 79.036747][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.041838][ T3912] ? mutex_lock+0x9b/0x1c0 [ 79.046234][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 79.052799][ T3912] ? __fget_files+0x2e1/0x340 [ 79.057458][ T3912] ? __fdget_pos+0x2d2/0x380 [ 79.062039][ T3912] ? ksys_read+0x70/0x260 [ 79.066348][ T3912] ksys_read+0x14a/0x260 [ 79.070568][ T3912] ? vfs_write+0xfd0/0xfd0 [ 79.075053][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.080144][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 79.085237][ T3912] __x64_sys_read+0x7b/0x90 [ 79.089719][ T3912] x64_sys_call+0x96d/0x9a0 [ 79.094204][ T3912] do_syscall_64+0x4c/0xa0 [ 79.098600][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 79.103257][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 79.107912][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.113781][ T3912] RIP: 0033:0x7f1996aa90d9 [ 79.118176][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.137758][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.146152][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 79.154102][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 79.162054][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 79.170008][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.177961][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 79.185920][ T3912] [ 79.188919][ T3912] ---[ end trace 4c50ab8a19f714df ]--- [ 79.195493][ T3912] ------------[ cut here ]------------ [ 79.200958][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 79.211200][ T3912] Modules linked in: [ 79.215082][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 79.223834][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.233888][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 79.239698][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 79.259291][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010006 [ 79.265336][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 79.273284][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 79.281232][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 79.289181][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001d6 [ 79.297146][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 79.305095][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 79.314004][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.320561][ T3912] CR2: 00007f94f343d060 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 79.328511][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.336461][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.344419][ T3912] Call Trace: [ 79.347676][ T3912] [ 79.350589][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 79.356213][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.361300][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 79.365953][ T3912] rb_buffer_peek+0x60/0x7a0 [ 79.370518][ T3912] ring_buffer_consume+0x1aa/0x370 [ 79.375604][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 79.381139][ T3912] ? print_trace_line+0x385/0x690 [ 79.386145][ T3912] tracing_read_pipe+0x599/0xab0 [ 79.391059][ T3912] ? s_show+0x320/0x320 [ 79.395186][ T3912] vfs_read+0x28c/0xc20 [ 79.399937][ T3912] ? kernel_read+0x1f0/0x1f0 [ 79.404497][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.409584][ T3912] ? mutex_lock+0x9b/0x1c0 [ 79.413991][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 79.420555][ T3912] ? __fget_files+0x2e1/0x340 [ 79.425206][ T3912] ? __fdget_pos+0x2d2/0x380 [ 79.429770][ T3912] ? ksys_read+0x70/0x260 [ 79.434078][ T3912] ksys_read+0x14a/0x260 [ 79.438293][ T3912] ? vfs_write+0xfd0/0xfd0 [ 79.442680][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.447765][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 79.452848][ T3912] __x64_sys_read+0x7b/0x90 [ 79.457324][ T3912] x64_sys_call+0x96d/0x9a0 [ 79.461797][ T3912] do_syscall_64+0x4c/0xa0 [ 79.466185][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 79.470834][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 79.475484][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.481353][ T3912] RIP: 0033:0x7f1996aa90d9 [ 79.485755][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.505334][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.513725][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 79.521677][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 79.529648][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 79.537599][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.545545][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 79.553494][ T3912] [ 79.556487][ T3912] ---[ end trace 4c50ab8a19f714e0 ]--- [ 79.561941][ T3912] ------------[ cut here ]------------ [ 79.567363][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 79.577576][ T3912] Modules linked in: [ 79.581448][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 79.590177][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.600206][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 79.605991][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 79.625571][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 79.631617][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 79.639562][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 79.647514][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 79.655470][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001d6 [ 79.663417][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 79.671361][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 79.680273][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.686848][ T3912] CR2: 00007f94f343d060 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 79.694807][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.702759][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.710708][ T3912] Call Trace: [ 79.713975][ T3912] [ 79.716884][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 79.722495][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.727580][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 79.732234][ T3912] rb_advance_reader+0x2b/0x6b0 [ 79.737062][ T3912] ring_buffer_consume+0x1e7/0x370 [ 79.742151][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 79.747671][ T3912] ? print_trace_line+0x385/0x690 [ 79.752671][ T3912] tracing_read_pipe+0x599/0xab0 [ 79.757582][ T3912] ? s_show+0x320/0x320 [ 79.761733][ T3912] vfs_read+0x28c/0xc20 [ 79.765875][ T3912] ? kernel_read+0x1f0/0x1f0 [ 79.770439][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.775524][ T3912] ? mutex_lock+0x9b/0x1c0 [ 79.779916][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 79.786476][ T3912] ? __fget_files+0x2e1/0x340 [ 79.791128][ T3912] ? __fdget_pos+0x2d2/0x380 [ 79.795689][ T3912] ? ksys_read+0x70/0x260 [ 79.800011][ T3912] ksys_read+0x14a/0x260 [ 79.804238][ T3912] ? vfs_write+0xfd0/0xfd0 [ 79.808634][ T3912] ? __kasan_check_write+0x14/0x20 [ 79.813721][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 79.818820][ T3912] __x64_sys_read+0x7b/0x90 [ 79.823299][ T3912] x64_sys_call+0x96d/0x9a0 [ 79.827776][ T3912] do_syscall_64+0x4c/0xa0 [ 79.832169][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 79.836821][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 79.841473][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.847339][ T3912] RIP: 0033:0x7f1996aa90d9 [ 79.851730][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.871321][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.879722][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 79.887674][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 79.895623][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 79.903573][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.911527][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 79.919483][ T3912] [ 79.922479][ T3912] ---[ end trace 4c50ab8a19f714e1 ]--- [ 79.932191][ T3912] ------------[ cut here ]------------ [ 79.937658][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 79.947893][ T3912] Modules linked in: [ 79.951773][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 79.960512][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.970553][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 79.976354][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 79.995942][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 80.001998][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 80.009954][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 80.017904][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 80.025855][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001da [ 80.033806][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 80.041762][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 80.050675][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.057240][ T3912] CR2: 00005555589ad4e8 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 80.065192][ T3912] Call Trace: [ 80.068471][ T3912] [ 80.071388][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 80.077006][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.082099][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 80.086757][ T3912] rb_buffer_peek+0x60/0x7a0 [ 80.091327][ T3912] ring_buffer_peek+0x184/0x3b0 [ 80.096161][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 80.101685][ T3912] ? preempt_schedule+0xbc/0xd0 [ 80.106517][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 80.112129][ T3912] __find_next_entry+0x34d/0x6b0 [ 80.117047][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 80.122405][ T3912] ? trace_find_next_entry+0x370/0x370 [ 80.127847][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 80.133372][ T3912] ? print_trace_line+0x385/0x690 [ 80.138379][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 80.143298][ T3912] ? s_show+0x320/0x320 [ 80.147433][ T3912] vfs_read+0x28c/0xc20 [ 80.151571][ T3912] ? kernel_read+0x1f0/0x1f0 [ 80.156146][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.161235][ T3912] ? mutex_lock+0x9b/0x1c0 [ 80.165634][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 80.172201][ T3912] ? __fget_files+0x2e1/0x340 [ 80.176859][ T3912] ? __fdget_pos+0x2d2/0x380 [ 80.181427][ T3912] ? ksys_read+0x70/0x260 [ 80.185738][ T3912] ksys_read+0x14a/0x260 [ 80.189962][ T3912] ? vfs_write+0xfd0/0xfd0 [ 80.194363][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.199453][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 80.204546][ T3912] __x64_sys_read+0x7b/0x90 [ 80.209031][ T3912] x64_sys_call+0x96d/0x9a0 [ 80.213516][ T3912] do_syscall_64+0x4c/0xa0 [ 80.217914][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 80.222576][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 80.227232][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.233105][ T3912] RIP: 0033:0x7f1996aa90d9 [ 80.237500][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.257084][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.265478][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 80.273434][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 80.281384][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 80.289333][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.297283][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 80.305237][ T3912] [ 80.308239][ T3912] ---[ end trace 4c50ab8a19f714e2 ]--- [ 80.319806][ T3912] ------------[ cut here ]------------ [ 80.321649][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 80.325270][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 80.332902][ T3788] Bluetooth: hci0: sending frame failed (-49) [ 80.341442][ T3912] Modules linked in: [ 80.341454][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 80.341470][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.341479][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 80.341502][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 80.395577][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010002 [ 80.401634][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 80.409598][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 80.417547][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 80.425500][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001da [ 80.433451][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 80.441400][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 80.450307][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.456869][ T3912] CR2: 00007fa190a602f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 80.464819][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.472786][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.480733][ T3912] Call Trace: [ 80.483993][ T3912] [ 80.486904][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 80.492528][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.497618][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 80.502273][ T3912] rb_buffer_peek+0x60/0x7a0 [ 80.506839][ T3912] ring_buffer_consume+0x1aa/0x370 [ 80.511933][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 80.517457][ T3912] ? print_trace_line+0x385/0x690 [ 80.522454][ T3912] tracing_read_pipe+0x599/0xab0 [ 80.527365][ T3912] ? s_show+0x320/0x320 [ 80.531494][ T3912] vfs_read+0x28c/0xc20 [ 80.535627][ T3912] ? kernel_read+0x1f0/0x1f0 [ 80.540190][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.545279][ T3912] ? mutex_lock+0x9b/0x1c0 [ 80.549670][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 80.556235][ T3912] ? __fget_files+0x2e1/0x340 [ 80.560887][ T3912] ? __fdget_pos+0x2d2/0x380 [ 80.565450][ T3912] ? ksys_read+0x70/0x260 [ 80.569771][ T3912] ksys_read+0x14a/0x260 [ 80.573989][ T3912] ? vfs_write+0xfd0/0xfd0 [ 80.578380][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.583503][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 80.588592][ T3912] __x64_sys_read+0x7b/0x90 [ 80.593076][ T3912] x64_sys_call+0x96d/0x9a0 [ 80.597567][ T3912] do_syscall_64+0x4c/0xa0 [ 80.601971][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 80.606624][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 80.611275][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.617140][ T3912] RIP: 0033:0x7f1996aa90d9 [ 80.621537][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.641120][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.649509][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 80.657459][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 80.665409][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 80.673356][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.681302][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 80.689254][ T3912] [ 80.692252][ T3912] ---[ end trace 4c50ab8a19f714e3 ]--- [ 80.697706][ T3912] ------------[ cut here ]------------ [ 80.703191][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 80.713421][ T3912] Modules linked in: [ 80.717298][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 80.726043][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.736078][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 80.741872][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 80.761458][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 80.767505][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 80.775453][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 80.783403][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 80.791354][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001da [ 80.799323][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 80.807273][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 80.816175][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.822739][ T3912] CR2: 00007fa190a602f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 80.830714][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.838662][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.846611][ T3912] Call Trace: [ 80.849868][ T3912] [ 80.852781][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 80.858399][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.863503][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 80.868154][ T3912] rb_advance_reader+0x2b/0x6b0 [ 80.872980][ T3912] ring_buffer_consume+0x1e7/0x370 [ 80.878068][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 80.883603][ T3912] ? print_trace_line+0x385/0x690 [ 80.888602][ T3912] tracing_read_pipe+0x599/0xab0 [ 80.893515][ T3912] ? s_show+0x320/0x320 [ 80.897646][ T3912] vfs_read+0x28c/0xc20 [ 80.901780][ T3912] ? kernel_read+0x1f0/0x1f0 [ 80.906350][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.911448][ T3912] ? mutex_lock+0x9b/0x1c0 [ 80.915848][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 80.922411][ T3912] ? __fget_files+0x2e1/0x340 [ 80.927062][ T3912] ? __fdget_pos+0x2d2/0x380 [ 80.931625][ T3912] ? ksys_read+0x70/0x260 [ 80.935926][ T3912] ksys_read+0x14a/0x260 [ 80.940141][ T3912] ? vfs_write+0xfd0/0xfd0 [ 80.944542][ T3912] ? __kasan_check_write+0x14/0x20 [ 80.949628][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 80.954721][ T3912] __x64_sys_read+0x7b/0x90 [ 80.959206][ T3912] x64_sys_call+0x96d/0x9a0 [ 80.963683][ T3912] do_syscall_64+0x4c/0xa0 [ 80.968091][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 80.972753][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 80.977402][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.983282][ T3912] RIP: 0033:0x7f1996aa90d9 [ 80.987674][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.007253][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.015657][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 81.023608][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 81.031563][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 81.039524][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.047472][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 81.055423][ T3912] [ 81.058417][ T3912] ---[ end trace 4c50ab8a19f714e4 ]--- [ 81.067975][ T3912] ------------[ cut here ]------------ [ 81.073440][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 81.083661][ T3912] Modules linked in: [ 81.087544][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 81.096276][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.106306][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 81.112091][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 81.131676][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010006 [ 81.137727][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 81.145680][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 81.153636][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 81.161598][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001de [ 81.169549][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 81.177504][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 81.186522][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.193088][ T3912] CR2: 00007fa190a602f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 81.201056][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.209024][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.216976][ T3912] Call Trace: [ 81.220234][ T3912] [ 81.223148][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 81.228760][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.233847][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 81.238521][ T3912] rb_buffer_peek+0x60/0x7a0 [ 81.243090][ T3912] ring_buffer_peek+0x184/0x3b0 [ 81.247915][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 81.253797][ T3912] ? preempt_schedule+0xbc/0xd0 [ 81.258626][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 81.264252][ T3912] __find_next_entry+0x34d/0x6b0 [ 81.269169][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 81.274532][ T3912] ? trace_find_next_entry+0x370/0x370 [ 81.279981][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 81.285502][ T3912] ? print_trace_line+0x385/0x690 [ 81.290501][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 81.295414][ T3912] ? s_show+0x320/0x320 [ 81.299557][ T3912] vfs_read+0x28c/0xc20 [ 81.303701][ T3912] ? kernel_read+0x1f0/0x1f0 [ 81.308264][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.313367][ T3912] ? mutex_lock+0x9b/0x1c0 [ 81.317760][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 81.324334][ T3912] ? __fget_files+0x2e1/0x340 [ 81.328991][ T3912] ? __fdget_pos+0x2d2/0x380 [ 81.333552][ T3912] ? ksys_read+0x70/0x260 [ 81.337858][ T3912] ksys_read+0x14a/0x260 [ 81.342094][ T3912] ? vfs_write+0xfd0/0xfd0 [ 81.346497][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.351594][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 81.356684][ T3912] __x64_sys_read+0x7b/0x90 [ 81.361162][ T3912] x64_sys_call+0x96d/0x9a0 [ 81.365637][ T3912] do_syscall_64+0x4c/0xa0 [ 81.370026][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 81.374680][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 81.379330][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.385204][ T3912] RIP: 0033:0x7f1996aa90d9 [ 81.389597][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.409199][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.417604][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 81.425554][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 81.433506][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 81.441453][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.449399][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 81.457350][ T3912] [ 81.460347][ T3912] ---[ end trace 4c50ab8a19f714e5 ]--- [ 81.466424][ T3912] ------------[ cut here ]------------ [ 81.471900][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 81.482133][ T3912] Modules linked in: [ 81.486003][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 81.494734][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.504762][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 81.510550][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 81.530148][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010002 [ 81.536204][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 81.544153][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 81.552099][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 81.560065][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001de [ 81.568015][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 81.575965][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 81.584877][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.591444][ T3912] CR2: 00007fa190a602f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 81.599408][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.607358][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.615307][ T3912] Call Trace: [ 81.618571][ T3912] [ 81.621486][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 81.627104][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.632197][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 81.636854][ T3912] rb_buffer_peek+0x60/0x7a0 [ 81.641423][ T3912] ring_buffer_consume+0x1aa/0x370 [ 81.646518][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 81.652043][ T3912] ? print_trace_line+0x385/0x690 [ 81.657048][ T3912] tracing_read_pipe+0x599/0xab0 [ 81.661967][ T3912] ? s_show+0x320/0x320 [ 81.666099][ T3912] vfs_read+0x28c/0xc20 [ 81.670236][ T3912] ? kernel_read+0x1f0/0x1f0 [ 81.674804][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.679900][ T3912] ? mutex_lock+0x9b/0x1c0 [ 81.684299][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 81.690871][ T3912] ? __fget_files+0x2e1/0x340 [ 81.695529][ T3912] ? __fdget_pos+0x2d2/0x380 [ 81.700096][ T3912] ? ksys_read+0x70/0x260 [ 81.704407][ T3912] ksys_read+0x14a/0x260 [ 81.708626][ T3912] ? vfs_write+0xfd0/0xfd0 [ 81.713021][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.718115][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 81.723207][ T3912] __x64_sys_read+0x7b/0x90 [ 81.727689][ T3912] x64_sys_call+0x96d/0x9a0 [ 81.732184][ T3912] do_syscall_64+0x4c/0xa0 [ 81.736594][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 81.741252][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 81.745918][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.751799][ T3912] RIP: 0033:0x7f1996aa90d9 [ 81.756201][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.776137][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.784533][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 81.792484][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 81.800435][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 81.808414][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.816373][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 81.824334][ T3912] [ 81.827336][ T3912] ---[ end trace 4c50ab8a19f714e6 ]--- [ 81.832811][ T3912] ------------[ cut here ]------------ [ 81.838252][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 81.848478][ T3912] Modules linked in: [ 81.852349][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 81.861091][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.871128][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 81.876925][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 81.896511][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 81.902558][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 81.910512][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 81.918463][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 81.926571][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001de [ 81.934535][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 81.942493][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 81.951409][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.957972][ T3912] CR2: 00007fa190a602f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 81.965943][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.973894][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.981849][ T3912] Call Trace: [ 81.985110][ T3912] [ 81.988025][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 81.993645][ T3912] ? __kasan_check_write+0x14/0x20 [ 81.998741][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 82.003399][ T3912] rb_advance_reader+0x2b/0x6b0 [ 82.008229][ T3912] ring_buffer_consume+0x1e7/0x370 [ 82.013319][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 82.018843][ T3912] ? print_trace_line+0x385/0x690 [ 82.023847][ T3912] tracing_read_pipe+0x599/0xab0 [ 82.028770][ T3912] ? s_show+0x320/0x320 [ 82.032925][ T3912] vfs_read+0x28c/0xc20 [ 82.037061][ T3912] ? kernel_read+0x1f0/0x1f0 [ 82.041628][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.046720][ T3912] ? mutex_lock+0x9b/0x1c0 [ 82.051116][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 82.057683][ T3912] ? __fget_files+0x2e1/0x340 [ 82.062340][ T3912] ? __fdget_pos+0x2d2/0x380 [ 82.066906][ T3912] ? ksys_read+0x70/0x260 [ 82.071212][ T3912] ksys_read+0x14a/0x260 [ 82.075437][ T3912] ? vfs_write+0xfd0/0xfd0 [ 82.079832][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.084924][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 82.090103][ T3912] __x64_sys_read+0x7b/0x90 [ 82.094587][ T3912] x64_sys_call+0x96d/0x9a0 [ 82.099070][ T3912] do_syscall_64+0x4c/0xa0 [ 82.103464][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 82.108118][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 82.112776][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.118652][ T3912] RIP: 0033:0x7f1996aa90d9 [ 82.123045][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.142632][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.151024][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 82.158976][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 82.166927][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 82.174875][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.182826][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 82.190780][ T3912] [ 82.193782][ T3912] ---[ end trace 4c50ab8a19f714e7 ]--- [ 82.200043][ T3912] ------------[ cut here ]------------ [ 82.205503][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 82.215746][ T3912] Modules linked in: [ 82.219620][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 82.228356][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.238390][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 82.244188][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 82.263785][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 82.269840][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 82.277805][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 82.285766][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 82.293722][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001e2 [ 82.301684][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 82.309641][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 82.318553][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.325117][ T3912] CR2: 000055557330c4e8 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 82.333072][ T3912] Call Trace: [ 82.336332][ T3912] [ 82.339248][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 82.344870][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.350395][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 82.355052][ T3912] rb_buffer_peek+0x60/0x7a0 [ 82.359620][ T3912] ring_buffer_peek+0x184/0x3b0 [ 82.364451][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 82.369974][ T3912] ? preempt_schedule+0xbc/0xd0 [ 82.374820][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 82.380452][ T3912] __find_next_entry+0x34d/0x6b0 [ 82.385370][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 82.390725][ T3912] ? trace_find_next_entry+0x370/0x370 [ 82.396169][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 82.401692][ T3912] ? print_trace_line+0x385/0x690 [ 82.406699][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 82.411616][ T3912] ? s_show+0x320/0x320 [ 82.415752][ T3912] vfs_read+0x28c/0xc20 [ 82.419887][ T3912] ? kernel_read+0x1f0/0x1f0 [ 82.424455][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.429547][ T3912] ? mutex_lock+0x9b/0x1c0 [ 82.433942][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 82.440508][ T3912] ? __fget_files+0x2e1/0x340 [ 82.445164][ T3912] ? __fdget_pos+0x2d2/0x380 [ 82.449734][ T3912] ? ksys_read+0x70/0x260 [ 82.454042][ T3912] ksys_read+0x14a/0x260 [ 82.458265][ T3912] ? vfs_write+0xfd0/0xfd0 [ 82.462658][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.467751][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 82.472844][ T3912] __x64_sys_read+0x7b/0x90 [ 82.477326][ T3912] x64_sys_call+0x96d/0x9a0 [ 82.481807][ T3912] do_syscall_64+0x4c/0xa0 [ 82.486200][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 82.490858][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 82.495515][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.501389][ T3912] RIP: 0033:0x7f1996aa90d9 [ 82.505789][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.525374][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.533790][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 82.541742][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 82.549691][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 82.557655][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.565614][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 82.573579][ T3912] [ 82.576581][ T3912] ---[ end trace 4c50ab8a19f714e8 ]--- [ 82.585386][ T3912] ------------[ cut here ]------------ [ 82.586047][ T3408] Bluetooth: hci0: command 0x1009 tx timeout [ 82.590844][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 82.590874][ T3912] Modules linked in: [ 82.590885][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 82.590902][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.590912][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 82.590930][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 82.655053][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010002 [ 82.661105][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 82.669062][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 82.677021][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 82.684973][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001e2 [ 82.692936][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 82.700919][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 82.709841][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.716407][ T3912] CR2: 00007fe5c6cca2f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 82.724362][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.732312][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.740263][ T3912] Call Trace: [ 82.743525][ T3912] [ 82.746440][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 82.752066][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.757177][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 82.761852][ T3912] rb_buffer_peek+0x60/0x7a0 [ 82.766429][ T3912] ring_buffer_consume+0x1aa/0x370 [ 82.771534][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 82.777074][ T3912] ? print_trace_line+0x385/0x690 [ 82.782084][ T3912] tracing_read_pipe+0x599/0xab0 [ 82.787008][ T3912] ? s_show+0x320/0x320 [ 82.791151][ T3912] vfs_read+0x28c/0xc20 [ 82.795288][ T3912] ? kernel_read+0x1f0/0x1f0 [ 82.799858][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.804953][ T3912] ? mutex_lock+0x9b/0x1c0 [ 82.809351][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 82.815920][ T3912] ? __fget_files+0x2e1/0x340 [ 82.820579][ T3912] ? __fdget_pos+0x2d2/0x380 [ 82.825148][ T3912] ? ksys_read+0x70/0x260 [ 82.829469][ T3912] ksys_read+0x14a/0x260 [ 82.833691][ T3912] ? vfs_write+0xfd0/0xfd0 [ 82.838093][ T3912] ? __kasan_check_write+0x14/0x20 [ 82.843194][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 82.848303][ T3912] __x64_sys_read+0x7b/0x90 [ 82.852791][ T3912] x64_sys_call+0x96d/0x9a0 [ 82.857279][ T3912] do_syscall_64+0x4c/0xa0 [ 82.861681][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 82.866339][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 82.870996][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.876877][ T3912] RIP: 0033:0x7f1996aa90d9 [ 82.881276][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.900861][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.909262][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 82.917212][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 82.925164][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 82.933115][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.941071][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 82.949026][ T3912] [ 82.952024][ T3912] ---[ end trace 4c50ab8a19f714e9 ]--- [ 82.957497][ T3912] ------------[ cut here ]------------ [ 82.962925][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 82.973151][ T3912] Modules linked in: [ 82.977023][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 82.985759][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.995792][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 83.001583][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 83.021255][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 83.027303][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 83.035255][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 83.043207][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 83.051161][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001e2 [ 83.059113][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 83.067065][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 83.075976][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.082540][ T3912] CR2: 00007fe5c6cca2f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 83.090493][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.098443][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.106395][ T3912] Call Trace: [ 83.109663][ T3912] [ 83.112580][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 83.118200][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.123292][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 83.127951][ T3912] rb_advance_reader+0x2b/0x6b0 [ 83.132779][ T3912] ring_buffer_consume+0x1e7/0x370 [ 83.137877][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 83.143404][ T3912] ? print_trace_line+0x385/0x690 [ 83.148414][ T3912] tracing_read_pipe+0x599/0xab0 [ 83.153335][ T3912] ? s_show+0x320/0x320 [ 83.157468][ T3912] vfs_read+0x28c/0xc20 [ 83.161603][ T3912] ? kernel_read+0x1f0/0x1f0 [ 83.166174][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.171270][ T3912] ? mutex_lock+0x9b/0x1c0 [ 83.175677][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 83.182241][ T3912] ? __fget_files+0x2e1/0x340 [ 83.186899][ T3912] ? __fdget_pos+0x2d2/0x380 [ 83.191466][ T3912] ? ksys_read+0x70/0x260 [ 83.195776][ T3912] ksys_read+0x14a/0x260 [ 83.199998][ T3912] ? vfs_write+0xfd0/0xfd0 [ 83.204393][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.209485][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 83.214583][ T3912] __x64_sys_read+0x7b/0x90 [ 83.219069][ T3912] x64_sys_call+0x96d/0x9a0 [ 83.223557][ T3912] do_syscall_64+0x4c/0xa0 [ 83.227955][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 83.232613][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 83.237269][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.243140][ T3912] RIP: 0033:0x7f1996aa90d9 [ 83.247537][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.267122][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.275518][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 83.283471][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 83.291422][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 83.299374][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.307323][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 83.315278][ T3912] [ 83.318278][ T3912] ---[ end trace 4c50ab8a19f714ea ]--- [ 83.324563][ T3912] ------------[ cut here ]------------ [ 83.330020][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 83.340249][ T3912] Modules linked in: [ 83.344119][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 83.352860][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.362894][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 83.368684][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 83.388269][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010012 [ 83.394316][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 83.402281][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 83.410231][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 83.418183][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001e6 [ 83.426135][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 83.434088][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 83.442999][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.449562][ T3912] CR2: 000055557330c4e8 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 83.457516][ T3912] Call Trace: [ 83.460778][ T3912] [ 83.463693][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 83.469312][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.474408][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 83.479067][ T3912] rb_buffer_peek+0x60/0x7a0 [ 83.483636][ T3912] ring_buffer_peek+0x184/0x3b0 [ 83.488465][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 83.493988][ T3912] ? preempt_schedule+0xbc/0xd0 [ 83.498819][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 83.504434][ T3912] __find_next_entry+0x34d/0x6b0 [ 83.509350][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 83.514715][ T3912] ? trace_find_next_entry+0x370/0x370 [ 83.520155][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 83.525680][ T3912] ? print_trace_line+0x385/0x690 [ 83.530686][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 83.535602][ T3912] ? s_show+0x320/0x320 [ 83.539734][ T3912] vfs_read+0x28c/0xc20 [ 83.543869][ T3912] ? kernel_read+0x1f0/0x1f0 [ 83.548437][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.553530][ T3912] ? mutex_lock+0x9b/0x1c0 [ 83.557928][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 83.564498][ T3912] ? __fget_files+0x2e1/0x340 [ 83.569155][ T3912] ? __fdget_pos+0x2d2/0x380 [ 83.573725][ T3912] ? ksys_read+0x70/0x260 [ 83.578033][ T3912] ksys_read+0x14a/0x260 [ 83.582254][ T3912] ? vfs_write+0xfd0/0xfd0 [ 83.586668][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.591761][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 83.596854][ T3912] __x64_sys_read+0x7b/0x90 [ 83.601336][ T3912] x64_sys_call+0x96d/0x9a0 [ 83.605821][ T3912] do_syscall_64+0x4c/0xa0 [ 83.610220][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 83.614877][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 83.619535][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.625406][ T3912] RIP: 0033:0x7f1996aa90d9 [ 83.629802][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.649387][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.657781][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 83.665732][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 83.673705][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 83.681658][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.689616][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 83.697570][ T3912] [ 83.700567][ T3912] ---[ end trace 4c50ab8a19f714eb ]--- [ 83.706607][ T3912] ------------[ cut here ]------------ [ 83.712062][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 83.722279][ T3912] Modules linked in: [ 83.726168][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 83.734902][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.744929][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 83.750712][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 83.770296][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010006 [ 83.776345][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 83.784320][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 83.792272][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 83.800220][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001e6 [ 83.808170][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 83.816124][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 83.825031][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.831593][ T3912] CR2: 00007fe5c6cca2f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 83.839544][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.847487][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.855445][ T3912] Call Trace: [ 83.858703][ T3912] [ 83.861610][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 83.867219][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.872305][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 83.876956][ T3912] rb_buffer_peek+0x60/0x7a0 [ 83.881620][ T3912] ring_buffer_consume+0x1aa/0x370 [ 83.886703][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 83.892223][ T3912] ? print_trace_line+0x385/0x690 [ 83.897223][ T3912] tracing_read_pipe+0x599/0xab0 [ 83.902131][ T3912] ? s_show+0x320/0x320 [ 83.906268][ T3912] vfs_read+0x28c/0xc20 [ 83.910408][ T3912] ? kernel_read+0x1f0/0x1f0 [ 83.914972][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.920060][ T3912] ? mutex_lock+0x9b/0x1c0 [ 83.924457][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 83.931023][ T3912] ? __fget_files+0x2e1/0x340 [ 83.935678][ T3912] ? __fdget_pos+0x2d2/0x380 [ 83.940260][ T3912] ? ksys_read+0x70/0x260 [ 83.944568][ T3912] ksys_read+0x14a/0x260 [ 83.948782][ T3912] ? vfs_write+0xfd0/0xfd0 [ 83.953181][ T3912] ? __kasan_check_write+0x14/0x20 [ 83.958269][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 83.963357][ T3912] __x64_sys_read+0x7b/0x90 [ 83.967835][ T3912] x64_sys_call+0x96d/0x9a0 [ 83.972310][ T3912] do_syscall_64+0x4c/0xa0 [ 83.976698][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 83.981346][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 83.986014][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.991880][ T3912] RIP: 0033:0x7f1996aa90d9 [ 83.996284][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.015863][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.024251][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 84.032203][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 84.040147][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 84.048094][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.056048][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 84.063999][ T3912] [ 84.066996][ T3912] ---[ end trace 4c50ab8a19f714ec ]--- [ 84.072453][ T3912] ------------[ cut here ]------------ [ 84.078053][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 84.088285][ T3912] Modules linked in: [ 84.092151][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 84.100893][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.110919][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 84.116720][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 84.136306][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 84.142351][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 84.150301][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 84.158246][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 84.166189][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001e6 [ 84.174132][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 84.182080][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 84.190980][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.197557][ T3912] CR2: 00007fe5c6cca2f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 84.205503][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.213469][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.221415][ T3912] Call Trace: [ 84.224669][ T3912] [ 84.227587][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 84.233222][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.238309][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 84.242962][ T3912] rb_advance_reader+0x2b/0x6b0 [ 84.247785][ T3912] ring_buffer_consume+0x1e7/0x370 [ 84.252878][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 84.258425][ T3912] ? print_trace_line+0x385/0x690 [ 84.263425][ T3912] tracing_read_pipe+0x599/0xab0 [ 84.268337][ T3912] ? s_show+0x320/0x320 [ 84.272463][ T3912] vfs_read+0x28c/0xc20 [ 84.276590][ T3912] ? kernel_read+0x1f0/0x1f0 [ 84.281155][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.286241][ T3912] ? mutex_lock+0x9b/0x1c0 [ 84.290632][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 84.297192][ T3912] ? __fget_files+0x2e1/0x340 [ 84.301841][ T3912] ? __fdget_pos+0x2d2/0x380 [ 84.306404][ T3912] ? ksys_read+0x70/0x260 [ 84.310704][ T3912] ksys_read+0x14a/0x260 [ 84.314919][ T3912] ? vfs_write+0xfd0/0xfd0 [ 84.319306][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.324393][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 84.329478][ T3912] __x64_sys_read+0x7b/0x90 [ 84.333960][ T3912] x64_sys_call+0x96d/0x9a0 [ 84.338438][ T3912] do_syscall_64+0x4c/0xa0 [ 84.342826][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 84.347476][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 84.352122][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.357999][ T3912] RIP: 0033:0x7f1996aa90d9 [ 84.362390][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.381987][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.390389][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 84.398335][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 84.406282][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 84.414226][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.422199][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 84.430155][ T3912] [ 84.433149][ T3912] ---[ end trace 4c50ab8a19f714ed ]--- [ 84.440513][ T3912] ------------[ cut here ]------------ [ 84.445974][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 84.456205][ T3912] Modules linked in: [ 84.460078][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 84.468817][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.478854][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 84.484646][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 84.504233][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 84.510282][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 84.518239][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 84.526188][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 84.534141][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001ea [ 84.542095][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 84.550045][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 84.558954][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.565517][ T3912] CR2: 00007fe5c6cca2f8 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 84.573469][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.581419][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.589371][ T3912] Call Trace: [ 84.592629][ T3912] [ 84.595550][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 84.601173][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.606289][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 84.610946][ T3912] rb_buffer_peek+0x60/0x7a0 [ 84.615517][ T3912] ring_buffer_peek+0x184/0x3b0 [ 84.620347][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 84.625870][ T3912] ? preempt_schedule+0xbc/0xd0 [ 84.630704][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 84.636317][ T3912] __find_next_entry+0x34d/0x6b0 [ 84.641234][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 84.646590][ T3912] ? trace_find_next_entry+0x370/0x370 [ 84.652460][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 84.657990][ T3912] ? print_trace_line+0x385/0x690 [ 84.663000][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 84.667919][ T3912] ? s_show+0x320/0x320 [ 84.672052][ T3912] vfs_read+0x28c/0xc20 [ 84.676190][ T3912] ? kernel_read+0x1f0/0x1f0 [ 84.680759][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.685851][ T3912] ? mutex_lock+0x9b/0x1c0 [ 84.690247][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 84.696816][ T3912] ? __fget_files+0x2e1/0x340 [ 84.701473][ T3912] ? __fdget_pos+0x2d2/0x380 [ 84.706038][ T3912] ? ksys_read+0x70/0x260 [ 84.710345][ T3912] ksys_read+0x14a/0x260 [ 84.714573][ T3912] ? vfs_write+0xfd0/0xfd0 [ 84.718965][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.724056][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 84.729153][ T3912] __x64_sys_read+0x7b/0x90 [ 84.733670][ T3912] x64_sys_call+0x96d/0x9a0 [ 84.738168][ T3912] do_syscall_64+0x4c/0xa0 [ 84.742579][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 84.747246][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 84.751996][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.757875][ T3912] RIP: 0033:0x7f1996aa90d9 [ 84.762277][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.781868][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.790271][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 84.798242][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 84.806197][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 84.814150][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.822105][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 84.830062][ T3912] [ 84.833071][ T3912] ---[ end trace 4c50ab8a19f714ee ]--- [ 84.839579][ T3912] ------------[ cut here ]------------ [ 84.845036][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 84.855258][ T3912] Modules linked in: [ 84.859130][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 84.867866][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.877907][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 84.883704][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 84.903288][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010006 [ 84.909354][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 84.917308][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 84.925260][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 84.933213][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001ea [ 84.941170][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 84.949129][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 84.958035][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.964594][ T3912] CR2: 000055557330c4e8 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 84.972544][ T3912] Call Trace: [ 84.975799][ T3912] [ 84.978708][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 84.984320][ T3912] ? __kasan_check_write+0x14/0x20 [ 84.989408][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 84.994062][ T3912] rb_buffer_peek+0x60/0x7a0 [ 84.998630][ T3912] ring_buffer_consume+0x1aa/0x370 [ 85.003719][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 85.009243][ T3912] ? print_trace_line+0x385/0x690 [ 85.014239][ T3912] tracing_read_pipe+0x599/0xab0 [ 85.019155][ T3912] ? s_show+0x320/0x320 [ 85.023298][ T3912] vfs_read+0x28c/0xc20 [ 85.027433][ T3912] ? kernel_read+0x1f0/0x1f0 [ 85.031997][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.037081][ T3912] ? mutex_lock+0x9b/0x1c0 [ 85.041470][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 85.048031][ T3912] ? __fget_files+0x2e1/0x340 [ 85.052682][ T3912] ? __fdget_pos+0x2d2/0x380 [ 85.057242][ T3912] ? ksys_read+0x70/0x260 [ 85.061542][ T3912] ksys_read+0x14a/0x260 [ 85.065764][ T3912] ? vfs_write+0xfd0/0xfd0 [ 85.070153][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.075238][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 85.080324][ T3912] __x64_sys_read+0x7b/0x90 [ 85.084818][ T3912] x64_sys_call+0x96d/0x9a0 [ 85.089297][ T3912] do_syscall_64+0x4c/0xa0 [ 85.093685][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 85.098336][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 85.102984][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.108850][ T3912] RIP: 0033:0x7f1996aa90d9 [ 85.113239][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.132817][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.141221][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 85.149171][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 85.157116][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 85.165059][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.173016][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 85.180967][ T3912] [ 85.183960][ T3912] ---[ end trace 4c50ab8a19f714ef ]--- [ 85.189416][ T3912] ------------[ cut here ]------------ [ 85.194838][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 85.205051][ T3912] Modules linked in: [ 85.208923][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 85.217656][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.227704][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 85.233847][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 85.253430][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010002 [ 85.259495][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 85.267451][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 85.275399][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 85.283348][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000130001ea [ 85.291296][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 85.299243][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.308147][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.314711][ T3912] CR2: 000055557330c4e8 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 85.322661][ T3912] Call Trace: [ 85.325921][ T3912] [ 85.328832][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 85.334445][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.339551][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 85.344203][ T3912] rb_advance_reader+0x2b/0x6b0 [ 85.349049][ T3912] ring_buffer_consume+0x1e7/0x370 [ 85.354136][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 85.359669][ T3912] ? print_trace_line+0x385/0x690 [ 85.364676][ T3912] tracing_read_pipe+0x599/0xab0 [ 85.369600][ T3912] ? s_show+0x320/0x320 [ 85.373738][ T3912] vfs_read+0x28c/0xc20 [ 85.377867][ T3912] ? kernel_read+0x1f0/0x1f0 [ 85.382450][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.387537][ T3912] ? mutex_lock+0x9b/0x1c0 [ 85.391929][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 85.398492][ T3912] ? __fget_files+0x2e1/0x340 [ 85.403172][ T3912] ? __fdget_pos+0x2d2/0x380 [ 85.407735][ T3912] ? ksys_read+0x70/0x260 [ 85.412078][ T3912] ksys_read+0x14a/0x260 [ 85.416308][ T3912] ? vfs_write+0xfd0/0xfd0 [ 85.420702][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.425808][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 85.430899][ T3912] __x64_sys_read+0x7b/0x90 [ 85.435386][ T3912] x64_sys_call+0x96d/0x9a0 [ 85.439866][ T3912] do_syscall_64+0x4c/0xa0 [ 85.444257][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 85.448909][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 85.453560][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.459429][ T3912] RIP: 0033:0x7f1996aa90d9 [ 85.463820][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.483404][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.491796][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 85.499749][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 85.507703][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 85.515667][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.523613][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 85.531561][ T3912] [ 85.534554][ T3912] ---[ end trace 4c50ab8a19f714f0 ]--- [ 85.540780][ T3912] ------------[ cut here ]------------ [ 85.546241][ T3912] WARNING: CPU: 0 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 85.556472][ T3912] Modules linked in: [ 85.560348][ T3912] CPU: 0 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 85.569109][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.579159][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 85.585062][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 85.604672][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 85.610732][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 85.618686][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 85.626636][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 85.634587][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000136501ee [ 85.642542][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 85.650495][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.659430][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.665996][ T3912] CR2: 000055557330c4e8 CR3: 0000000125d25000 CR4: 00000000003506b0 [ 85.673959][ T3912] Call Trace: [ 85.677221][ T3912] [ 85.680138][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 85.685761][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.690857][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 85.695516][ T3912] rb_buffer_peek+0x60/0x7a0 [ 85.700168][ T3912] ring_buffer_peek+0x184/0x3b0 [ 85.705016][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 85.710554][ T3912] ? preempt_schedule+0xbc/0xd0 [ 85.715393][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 85.721012][ T3912] __find_next_entry+0x34d/0x6b0 [ 85.725939][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 85.731296][ T3912] ? trace_find_next_entry+0x370/0x370 [ 85.736749][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 85.742274][ T3912] ? print_trace_line+0x385/0x690 [ 85.747279][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 85.752196][ T3912] ? s_show+0x320/0x320 [ 85.756329][ T3912] vfs_read+0x28c/0xc20 [ 85.760467][ T3912] ? kernel_read+0x1f0/0x1f0 [ 85.765043][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.770152][ T3912] ? mutex_lock+0x9b/0x1c0 [ 85.774561][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 85.781138][ T3912] ? __fget_files+0x2e1/0x340 [ 85.785799][ T3912] ? __fdget_pos+0x2d2/0x380 [ 85.790367][ T3912] ? ksys_read+0x70/0x260 [ 85.794788][ T3912] ksys_read+0x14a/0x260 [ 85.799024][ T3912] ? vfs_write+0xfd0/0xfd0 [ 85.803441][ T3912] ? __kasan_check_write+0x14/0x20 [ 85.808551][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 85.813659][ T3912] __x64_sys_read+0x7b/0x90 [ 85.818164][ T3912] x64_sys_call+0x96d/0x9a0 [ 85.822662][ T3912] do_syscall_64+0x4c/0xa0 [ 85.827072][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 85.831734][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 85.836394][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.842277][ T3912] RIP: 0033:0x7f1996aa90d9 [ 85.846681][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.866271][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.874670][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 85.882624][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 85.890595][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 85.898559][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.906515][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 85.914480][ T3912] [ 85.917488][ T3912] ---[ end trace 4c50ab8a19f714f1 ]--- [ 85.931602][ T3912] ------------[ cut here ]------------ [ 85.937076][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 85.947318][ T3912] Modules linked in: [ 85.951195][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 85.959933][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.969986][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 85.975776][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 85.995373][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010006 [ 86.001441][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 86.009389][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 86.017345][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 86.025289][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000136501ee [ 86.033233][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 86.041180][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 86.050083][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.056641][ T3912] CR2: 00007f508aa93e80 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 86.064587][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.072535][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.080566][ T3912] Call Trace: [ 86.083821][ T3912] [ 86.086739][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 86.092353][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.097449][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 86.102102][ T3912] rb_buffer_peek+0x60/0x7a0 [ 86.106673][ T3912] ring_buffer_consume+0x1aa/0x370 [ 86.111767][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 86.117292][ T3912] ? print_trace_line+0x385/0x690 [ 86.122298][ T3912] tracing_read_pipe+0x599/0xab0 [ 86.127217][ T3912] ? s_show+0x320/0x320 [ 86.131362][ T3912] vfs_read+0x28c/0xc20 [ 86.135493][ T3912] ? kernel_read+0x1f0/0x1f0 [ 86.140054][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.145153][ T3912] ? mutex_lock+0x9b/0x1c0 [ 86.149541][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 86.156106][ T3912] ? __fget_files+0x2e1/0x340 [ 86.160755][ T3912] ? __fdget_pos+0x2d2/0x380 [ 86.165326][ T3912] ? ksys_read+0x70/0x260 [ 86.169645][ T3912] ksys_read+0x14a/0x260 [ 86.173865][ T3912] ? vfs_write+0xfd0/0xfd0 [ 86.178253][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.183335][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 86.188419][ T3912] __x64_sys_read+0x7b/0x90 [ 86.192895][ T3912] x64_sys_call+0x96d/0x9a0 [ 86.197393][ T3912] do_syscall_64+0x4c/0xa0 [ 86.201794][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 86.206446][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 86.211100][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.216972][ T3912] RIP: 0033:0x7f1996aa90d9 [ 86.221362][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.240958][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.249346][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 86.257307][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 86.265251][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 86.273195][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.281142][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 86.289091][ T3912] [ 86.292086][ T3912] ---[ end trace 4c50ab8a19f714f2 ]--- [ 86.297537][ T3912] ------------[ cut here ]------------ [ 86.302959][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 86.313172][ T3912] Modules linked in: [ 86.317037][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 86.325783][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.335813][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 86.341607][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 86.361214][ T3912] RSP: 0018:ffffc90000b17940 EFLAGS: 00010006 [ 86.367259][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 86.375207][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 86.383157][ T3912] RBP: ffffc90000b17aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 86.391105][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000136501ee [ 86.399069][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 86.407013][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 86.415918][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.422488][ T3912] CR2: 00007f508aa93e80 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 86.430439][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.438390][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.446333][ T3912] Call Trace: [ 86.449585][ T3912] [ 86.452495][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 86.458109][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.463206][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 86.467854][ T3912] rb_advance_reader+0x2b/0x6b0 [ 86.472686][ T3912] ring_buffer_consume+0x1e7/0x370 [ 86.477774][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 86.483291][ T3912] ? print_trace_line+0x385/0x690 [ 86.488291][ T3912] tracing_read_pipe+0x599/0xab0 [ 86.493213][ T3912] ? s_show+0x320/0x320 [ 86.497353][ T3912] vfs_read+0x28c/0xc20 [ 86.501478][ T3912] ? kernel_read+0x1f0/0x1f0 [ 86.506055][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.511139][ T3912] ? mutex_lock+0x9b/0x1c0 [ 86.515531][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 86.522089][ T3912] ? __fget_files+0x2e1/0x340 [ 86.526741][ T3912] ? __fdget_pos+0x2d2/0x380 [ 86.531303][ T3912] ? ksys_read+0x70/0x260 [ 86.535604][ T3912] ksys_read+0x14a/0x260 [ 86.539833][ T3912] ? vfs_write+0xfd0/0xfd0 [ 86.544225][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.549311][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 86.554395][ T3912] __x64_sys_read+0x7b/0x90 [ 86.558888][ T3912] x64_sys_call+0x96d/0x9a0 [ 86.563395][ T3912] do_syscall_64+0x4c/0xa0 [ 86.567783][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 86.572438][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 86.577112][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.582979][ T3912] RIP: 0033:0x7f1996aa90d9 [ 86.587367][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.606948][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.615340][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 86.623288][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 86.631233][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 86.639194][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.647139][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 86.655086][ T3912] [ 86.658080][ T3912] ---[ end trace 4c50ab8a19f714f3 ]--- [ 86.664700][ T3912] ------------[ cut here ]------------ [ 86.670159][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 86.680380][ T3912] Modules linked in: [ 86.684315][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 86.693089][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.703127][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 86.708919][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 86.728508][ T3912] RSP: 0018:ffffc90000b177e0 EFLAGS: 00010002 [ 86.734556][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 86.742513][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 86.750467][ T3912] RBP: ffffc90000b17958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 86.758419][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000136501f2 [ 86.766402][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 86.774366][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 86.783272][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.789847][ T3912] CR2: 00007f508aa93e80 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 86.797803][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.805750][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.813711][ T3912] Call Trace: [ 86.816979][ T3912] [ 86.819891][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 86.825528][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.830619][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 86.835274][ T3912] rb_buffer_peek+0x60/0x7a0 [ 86.839845][ T3912] ring_buffer_peek+0x184/0x3b0 [ 86.844674][ T3912] ? ring_buffer_iter_empty+0x370/0x370 [ 86.850199][ T3912] ? preempt_schedule+0xbc/0xd0 [ 86.855031][ T3912] ? schedule_preempt_disabled+0x20/0x20 [ 86.860644][ T3912] __find_next_entry+0x34d/0x6b0 [ 86.865564][ T3912] ? preempt_schedule_thunk+0x16/0x18 [ 86.870914][ T3912] ? trace_find_next_entry+0x370/0x370 [ 86.876350][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 86.881885][ T3912] ? print_trace_line+0x385/0x690 [ 86.886887][ T3912] tracing_read_pipe+0x3b8/0xab0 [ 86.891804][ T3912] ? s_show+0x320/0x320 [ 86.895945][ T3912] vfs_read+0x28c/0xc20 [ 86.900077][ T3912] ? kernel_read+0x1f0/0x1f0 [ 86.904730][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.909817][ T3912] ? mutex_lock+0x9b/0x1c0 [ 86.914241][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 86.920828][ T3912] ? __fget_files+0x2e1/0x340 [ 86.925489][ T3912] ? __fdget_pos+0x2d2/0x380 [ 86.930054][ T3912] ? ksys_read+0x70/0x260 [ 86.934359][ T3912] ksys_read+0x14a/0x260 [ 86.938598][ T3912] ? vfs_write+0xfd0/0xfd0 [ 86.943011][ T3912] ? __kasan_check_write+0x14/0x20 [ 86.948105][ T3912] ? switch_fpu_return+0x15d/0x2c0 [ 86.953212][ T3912] __x64_sys_read+0x7b/0x90 [ 86.957693][ T3912] x64_sys_call+0x96d/0x9a0 [ 86.962175][ T3912] do_syscall_64+0x4c/0xa0 [ 86.966571][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 86.971226][ T3912] ? clear_bhb_loop+0x50/0xa0 [ 86.975878][ T3912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.981748][ T3912] RIP: 0033:0x7f1996aa90d9 [ 86.986145][ T3912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.005727][ T3912] RSP: 002b:00007f1995502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.014121][ T3912] RAX: ffffffffffffffda RBX: 00007f1996d30fa0 RCX: 00007f1996aa90d9 [ 87.022072][ T3912] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003 [ 87.030022][ T3912] RBP: 00007f1996b40024 R08: 0000000000000000 R09: 0000000000000000 [ 87.037986][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.045934][ T3912] R13: 00007f1996d31038 R14: 00007f1996d30fa0 R15: 00007ffc8ba12848 [ 87.053883][ T3912] [ 87.056879][ T3912] ---[ end trace 4c50ab8a19f714f4 ]--- [ 87.063124][ T3912] ------------[ cut here ]------------ [ 87.068595][ T3912] WARNING: CPU: 1 PID: 3912 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 87.078816][ T3912] Modules linked in: [ 87.082687][ T3912] CPU: 1 PID: 3912 Comm: syz.0.1503 Tainted: G B W syzkaller #0 [ 87.091451][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.101487][ T3912] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 87.107293][ T3912] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 87.126879][ T3912] RSP: 0018:ffffc90000b17920 EFLAGS: 00010002 [ 87.132923][ T3912] RAX: 1ffff11020031d01 RBX: ffff888100052600 RCX: ffffffff816bf784 [ 87.140875][ T3912] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 87.148825][ T3912] RBP: ffffc90000b17a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 87.156797][ T3912] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000136501f2 [ 87.164755][ T3912] R13: 1ffff110200705c3 R14: 1ffff110200705c6 R15: dffffc0000000000 [ 87.172711][ T3912] FS: 00007f19955026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 87.181631][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.188199][ T3912] CR2: 00007f508aa93e80 CR3: 0000000125d25000 CR4: 00000000003506a0 [ 87.196157][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.204110][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.212063][ T3912] Call Trace: [ 87.215327][ T3912] [ 87.218242][ T3912] ? ring_buffer_read_page+0x1210/0x1210 [ 87.223863][ T3912] ? __kasan_check_write+0x14/0x20 [ 87.228959][ T3912] ? _raw_spin_lock+0x94/0xf0 [ 87.233622][ T3912] rb_buffer_peek+0x60/0x7a0 [ 87.238195][ T3912] ring_buffer_consume+0x1aa/0x370 [ 87.243288][ T3912] ? ring_buffer_iter_dropped+0x60/0x60 [ 87.248814][ T3912] ? print_trace_line+0x385/0x690 [ 87.253820][ T3912] tracing_read_pipe+0x599/0xab0 [ 87.258738][ T3912] ? s_show+0x320/0x320 [ 87.262873][ T3912] vfs_read+0x28c/0xc20 [ 87.267008][ T3912] ? kernel_read+0x1f0/0x1f0 [ 87.271577][ T3912] ? __kasan_check_write+0x14/0x20 [ 87.276669][ T3912] ? mutex_lock+0x9b/0x1c0 [ 87.281085][ T3912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 87.287659][ T3912] ? __fget_files+0x2e1/0x340 [ 87.292315][ T3912] ? __fdget_pos+0x2d2/0x380 [ 87.296883][ T3912] ? ksys_read+0x70/0x260 [ 87.301192][ T3912] ksys_read+0x14a/0x260