last executing test programs: 3m30.70003228s ago: executing program 0 (id=444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000013000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000037e400000000000000000000000000000000fbffffff050000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200007c2c2f0ca229e43700000000000000000000000000000c0015005a073500c0"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 3m30.623611883s ago: executing program 0 (id=446): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) r2 = socket(0x2, 0x3, 0xff) fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b7050000000000007910a800000000003d0a000000000000950000000000000059b613a16ae2455781c6293636768edeb0b208be72b8fed277220970f9b3b90b1b0029d64fed55ed108041cf55ce60ed80cf15baa253c59460ad533ea544cdeb1000a9fecbc04e99428e60f1d7b86cb3a2bfc7a1e81833ba0b52dd62badf3e559635f8a01ffd7303f0000000f53762745b41d0e8ec14607248c3056eea2a9121d2e31782"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfdc5, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/129) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000600)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0xc5, 0x2, 0x0, 0x2}}, @code={0xa, 0x5e, {"b9800000c00f3235010000000f30660f326767470f01cbf365400f300f20d835080000000f22d8c462110b49080f1be966baf80cb8345c8c87ef66bafc0c66b80a0066ef0f01cb66b8b4008ed8"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x51d, 0xd911, 0x356d}}, @in_dx={0x69, 0x20, {0x20e7, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x38, {0x0, 0x0, [@rdmsr={0x66, 0x18, {0xb53}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x231, {0x3, 0x7, [@cpuid={0x64, 0x18, {0x1ff, 0x9}}, @out_dx={0x6a, 0x28, {0xda3a, 0x1, 0xffffffffffff8000}}, @nested_load_code={0x12e, 0x58, {0x1, "660f388033660f6af7430f31660f7686d1c20000c423c9781cbbcd2e0fc72df1ffffff430f22d0c4c14960e20f01cf66baf80cb88352c785ef66bafc0cb045ee"}}, @set_irq_handler={0xc8, 0x20, {0xa5, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x46}}, @nested_load_code={0x12e, 0x97, {0x0, "440f20c0350e000000440f22c0b9800000c00f3235001000000f3066ba410066edb9360a0000b898ce3594ba000000000f30420f09c744240000000000c744240204000000c7442406000000000f011c24642e66420f380bb7ae52f0b666bad00466b8e9d566efb9c3080000b8d6010000ba000000000f30c4c3a15e60af00"}}, @in_dx={0x69, 0x20, {0x1ddb, 0x1}}, @code={0xa, 0x5a, {"c4c2710b2166ba4200ec0f015d0bb9800000c00f3235000100000f30f30fbc7c8dc5b988080000b804000000ba000000000f3066ba430066b8840066ef66ba610066ed0f78290f01c9"}}, @out_dx={0x6a, 0x28, {0xfeac, 0x0, 0x372d}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xd4, 0x5, 0x1e92, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x9}}], 0x3cf}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0xffffffff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000540)="0f070fc75ea866b804010f00d0b9b1090000b8ab000000ba000000000f30b8e72b48980f23d00f21f8351000000f0f23f8f20f5f12b901090000b807000000ba008000000f300f01c866f2abb9800000c00f3235000100000f30", 0x5a}], 0x1, 0x81, &(0x7f00000005c0)=[@cr0={0x0, 0x6008000a}], 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500fe8000000000000000000000000000aa000004d53200000000000000fe8000000000000000000000000000aa00000000010000000000000000000000feffffffffffffff000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000300"/244], 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000000000000000000000ff02000000000000000000000000000100"], 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffb}}, {@commit={'commit', 0x3d, 0xb}}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") syz_emit_ethernet(0x23, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000000006b4fdbdc810040000011aaece1bcfb588864c30d318b814b68b18d32d9e4f8a27327a2e3742b3c0e506a6efd4ab5a0f73ce801c33ea089d0c9f69f3ad07896e814a843b32abe69d7454311a78bac896b74233bebf6329daf0cb05eee7cd705b60dd057d3a429328ac75487d471f7611ba0dd2329d941db3cd2f9dbd6714b1ba04c3e12cc103238605c9bcf0356ff39356faf829de7ec4a23016058b57ab4f1ab37d1403d91e3ee1890f6229936210ae088e46cdf"], 0x0) 3m30.255443836s ago: executing program 0 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) brk(0x689d80000003) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x8) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 3m29.404498815s ago: executing program 0 (id=453): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x555c, &(0x7f000000b3c0)="$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") setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2c24eea6cbc6ab3d71ee7000001aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff00000102009078000005026050835900000000fc0100000000000000000000000000001200000000000000000000000000000c00040009a002000000000000000000000000007802dd0661bbe59f9a6562361e29322ce0556bd69215fa438fed7c3fa26af9c297a134907d776b999717de7ef6260000000000"], 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e13000000000000000c000080eeb67c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 3m28.793749215s ago: executing program 0 (id=459): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) fsync(r0) 3m28.563430104s ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 3m28.283516043s ago: executing program 32 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff020006b800000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e21007d250c49004e24000008000200e000000234000315b0c313004e230000060002004e2400000600013a4e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000ff03000000000000000284000e"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 3m18.789160126s ago: executing program 4 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) brk(0x689d80000003) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000013aed50073113700850000000500000095000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3m17.878137127s ago: executing program 4 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3ffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x6, 0xfffe}, {0x20, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 3m17.842325918s ago: executing program 4 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 3m17.21125872s ago: executing program 4 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0x7, 0x3, 0x4, 0xfff}, {0x1, 0x9, 0x6, 0x9}, {0xcb76, 0x4, 0x9, 0x2}, {0xffcc, 0x2, 0x9, 0x3}, {0x8000, 0x6, 0x5, 0x1}, {0xa8, 0x3, 0xfd, 0x2}, {0x9, 0x7, 0x9, 0x4}, {0x0, 0x10, 0x0, 0x80000}, {0x2, 0xf9, 0x2}]}) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xfd, 0x2}, [@RTA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x20004000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) writev(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") gettid() r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_pidfd_open(r4, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=0x0, @ANYBLOB="0000651f7ab92f0445820000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x34, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x1008413, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffd}}]}, 0x0, 0x547, &(0x7f00000002c0)="$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") 3m16.215156644s ago: executing program 4 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) brk(0x689d80000003) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 3m16.109403617s ago: executing program 4 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 3m16.060308719s ago: executing program 33 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 1m0.24268832s ago: executing program 2 (id=1385): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000380)={0xa, 0xfffd, 0xc9, @local}, 0x1c) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0xcb, 0xa, &(0x7f00000003c0)="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"}) 1m0.191721552s ago: executing program 2 (id=1386): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) unshare(0x24020400) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000080000008000000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000009f8300"/21], 0x50) fsmount(0xffffffffffffffff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000100)={0x4, 0x1d, 0x4, 0x7, 0x2, 0x0, [{0xab4, 0x10, 0x8, '\x00', 0x280}, {0x0, 0x7fffffffffffffff, 0xff, '\x00', 0x703}]}) r3 = dup(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65d7a3cb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 1m0.075814156s ago: executing program 2 (id=1389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}}}, 0x24}}, 0x0) 59.975529139s ago: executing program 2 (id=1393): setresgid(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180700000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000000000000000001400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x5, 0x2, 0x17b3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x8, 0x7, 0x520, 0x80000001}}) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x4, 0x2, 0x1, 0x800003}}, 0x2e) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="08110000042004001c002b80080003001900000008000100", @ANYRES32, @ANYBLOB='\a\x00\b\x00', @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) stat(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 56.252144076s ago: executing program 2 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xa, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r0, &(0x7f0000001280), 0x0}, 0x20) (fail_nth: 1) 56.156971029s ago: executing program 2 (id=1414): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) r0 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x97, 0x240000c0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x821\x9f?\r\xf5q\xb8d\x1ct\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe\xb8\xbe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\a\x00\x00\x00\xa4O\x9f\x12@\x18\xbb&\xad\xf5a\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\x02p]\x87fg', &(0x7f0000000540)='\x00\x00\xdd\xf0\x11e6\x81|\xf9\x1b\xd5\x0f1!)\x94\x0fQM\x9b\a\xca&\x89A1\xfd\x8atU\xc9[+\xda2\x1c\xdd<[sC\xa4\x9bc\xac\x14\xe2\r\x15\xca\xa1\x91u+\xf5\n\xf5D\x0fX\xd1\xb4bW\xfe\xad\x05\xc3B\x1ae;\xbc\xc9\b\xe2\xe2fed\xff\x1b$\xb2\x0e\x16\xa3\x92\x93\xad\x88\xd3\xf8\xa5\xa9\a\xddb\x02\b\v\xca5\xc5O\b\xf3\xffB\xed\xd2\x18C\xfd\x80\x9a\xc8\x85\x8ebB>5\x97\xc5i\xf0\xfa\xaf\xd2\x9c\xe2FN\x15\x94\x99P\x10\x82\xdb\xc7\xa3\xc9$m\t#\xa1\xb7$,yo\x0f\x0f\xf9\t\x10N\xd2\xfa\x99\x9b\xab.\x12\xb4\xcfZL$\xb9K\x8b/\xf6\xb7\xa2\x021!', 0x0) r2 = socket(0x1, 0x5, 0x0) close(r2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x80000004}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020025bd7000fcdbdf250900001d0c0099000080ffff6e000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x3, 0x7, 0x4, 0x2, 0x5, 0x4, 0x8}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0x7fffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r9 = dup2(r8, r8) ioctl$BLKZEROOUT(r9, 0x127f, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES8=r6, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r10, &(0x7f0000001280), 0x0}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) 56.156789729s ago: executing program 34 (id=1414): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) r0 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x97, 0x240000c0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x821\x9f?\r\xf5q\xb8d\x1ct\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe\xb8\xbe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\a\x00\x00\x00\xa4O\x9f\x12@\x18\xbb&\xad\xf5a\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\x02p]\x87fg', &(0x7f0000000540)='\x00\x00\xdd\xf0\x11e6\x81|\xf9\x1b\xd5\x0f1!)\x94\x0fQM\x9b\a\xca&\x89A1\xfd\x8atU\xc9[+\xda2\x1c\xdd<[sC\xa4\x9bc\xac\x14\xe2\r\x15\xca\xa1\x91u+\xf5\n\xf5D\x0fX\xd1\xb4bW\xfe\xad\x05\xc3B\x1ae;\xbc\xc9\b\xe2\xe2fed\xff\x1b$\xb2\x0e\x16\xa3\x92\x93\xad\x88\xd3\xf8\xa5\xa9\a\xddb\x02\b\v\xca5\xc5O\b\xf3\xffB\xed\xd2\x18C\xfd\x80\x9a\xc8\x85\x8ebB>5\x97\xc5i\xf0\xfa\xaf\xd2\x9c\xe2FN\x15\x94\x99P\x10\x82\xdb\xc7\xa3\xc9$m\t#\xa1\xb7$,yo\x0f\x0f\xf9\t\x10N\xd2\xfa\x99\x9b\xab.\x12\xb4\xcfZL$\xb9K\x8b/\xf6\xb7\xa2\x021!', 0x0) r2 = socket(0x1, 0x5, 0x0) close(r2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x80000004}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020025bd7000fcdbdf250900001d0c0099000080ffff6e000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x3, 0x7, 0x4, 0x2, 0x5, 0x4, 0x8}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0x7fffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r9 = dup2(r8, r8) ioctl$BLKZEROOUT(r9, 0x127f, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES8=r6, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r10, &(0x7f0000001280), 0x0}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) 53.334041685s ago: executing program 6 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) fsync(r6) writev(r5, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) sendfile(r4, r4, 0x0, 0x20000023896) r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r7, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 52.422198846s ago: executing program 6 (id=1447): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0xffffffff, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000010000000000000000ff020000000000000000000000000001"], 0x0) 52.30768599s ago: executing program 6 (id=1449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000500)={0x74, 0x0, 0x51}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x33333000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0xd01, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000500)={0x74, 0x0, 0x51}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x33333000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0xd01, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) (async) 52.053373269s ago: executing program 6 (id=1451): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) getrlimit(0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x3], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) 51.168284979s ago: executing program 6 (id=1463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) r2 = getpgrp(0x0) ioctl$TIOCNXCL(r0, 0x540d) kcmp(r2, r2, 0x0, 0xffffffffffffffff, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_pts(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r8, 0x4, 0x5, 0x9, 0x7, 0x5, @empty, @mcast1, 0x7, 0x7f00, 0x7, 0x6e6f}}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000080}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = dup3(r3, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r9, &(0x7f0000000000)={0x80000001}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 51.059604862s ago: executing program 6 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002280)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000540)=""/144, 0x90}, 0x997}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000a00)=""/38, 0x26}], 0x4, &(0x7f0000000a80)=""/163, 0xa3}, 0x484}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/112, 0x70}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x3, &(0x7f0000000dc0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000e40)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/129, 0x81}], 0x6, &(0x7f0000001340)=""/206, 0xce}, 0x5}, {{&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/4096, 0x1000}], 0x4}, 0x3}, {{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/225, 0xe1}, {&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000008f40)=""/4096, 0x1000}, {&(0x7f0000009f40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/145, 0x91}, {&(0x7f000000af40)=""/4096, 0x1000}], 0x6, &(0x7f0000001940)=""/19, 0x13}, 0x9}, {{&(0x7f0000001980)=@xdp, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001a00)=""/208, 0xd0}, {&(0x7f0000001b00)=""/247, 0xf7}, {&(0x7f0000001c00)=""/192, 0xc0}, {&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/159, 0x9f}, {&(0x7f0000001e40)=""/132, 0x84}, {&(0x7f0000001f00)=""/28, 0x1c}, {&(0x7f0000001f40)=""/83, 0x53}, {0x0}, {&(0x7f0000002040)=""/84, 0x54}], 0xa, &(0x7f0000002180)=""/194, 0xc2}, 0x7}], 0x7, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r5, &(0x7f0000003f00)={0x2020}, 0x2020) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) setreuid(0xee01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x26, 0x0) 51.059347462s ago: executing program 35 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002280)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000540)=""/144, 0x90}, 0x997}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000a00)=""/38, 0x26}], 0x4, &(0x7f0000000a80)=""/163, 0xa3}, 0x484}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/112, 0x70}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x3, &(0x7f0000000dc0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000e40)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/129, 0x81}], 0x6, &(0x7f0000001340)=""/206, 0xce}, 0x5}, {{&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/4096, 0x1000}], 0x4}, 0x3}, {{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/225, 0xe1}, {&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000008f40)=""/4096, 0x1000}, {&(0x7f0000009f40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/145, 0x91}, {&(0x7f000000af40)=""/4096, 0x1000}], 0x6, &(0x7f0000001940)=""/19, 0x13}, 0x9}, {{&(0x7f0000001980)=@xdp, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001a00)=""/208, 0xd0}, {&(0x7f0000001b00)=""/247, 0xf7}, {&(0x7f0000001c00)=""/192, 0xc0}, {&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/159, 0x9f}, {&(0x7f0000001e40)=""/132, 0x84}, {&(0x7f0000001f00)=""/28, 0x1c}, {&(0x7f0000001f40)=""/83, 0x53}, {0x0}, {&(0x7f0000002040)=""/84, 0x54}], 0xa, &(0x7f0000002180)=""/194, 0xc2}, 0x7}], 0x7, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r5, &(0x7f0000003f00)={0x2020}, 0x2020) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) setreuid(0xee01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x26, 0x0) 10.231375121s ago: executing program 7 (id=1723): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc00, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp869,umask=00000000000000000000002,gid=', @ANYRESOCT=0x0, @ANYRES8=0x0], 0xfe, 0x1524, &(0x7f00000037c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 10.079585587s ago: executing program 7 (id=1726): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x36, 0x2, "5da5"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac2(r1, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xd, {0xd, 0x8, "b02d02e84ec22d45b1df01"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0x31, 0x4b, "010a16d10e2ec32c67c04e547117fae70ef6215b27acdcb9f96b900a995e123cb319cf2e34928d5b0d243af117d51523e382a8e2e10bd7f7268a9b31cf1ba73c835b80a4f5f154c17119d3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x81, 0x2, 'nO'}, &(0x7f0000000440)={0x20, 0x82, 0x2, "b3c5"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "dbafae"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "1a"}, &(0x7f0000000500)={0x20, 0x85, 0x3, '\"J,'}}) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) getsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000140)=""/213, &(0x7f0000000040)=0xd5) (async) socket$key(0xf, 0x3, 0x2) (async) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20ff23"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.971816233s ago: executing program 7 (id=1742): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0xffffffff, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000000000000000000000ff020000000000000000010000000001"], 0x0) 6.896828175s ago: executing program 7 (id=1743): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) unshare(0x24020400) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000080000008000000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000009f8300"/21], 0x50) fsmount(0xffffffffffffffff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000100)={0x4, 0x1d, 0x4, 0x7, 0x2, 0x0, [{0xab4, 0x10, 0x8, '\x00', 0x280}, {0x0, 0x7fffffffffffffff, 0xff, '\x00', 0x703}]}) r3 = dup(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 6.534259117s ago: executing program 3 (id=1744): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x187, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2e}}}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x2, 0x200, 0x8, 0x7, 0x2, 0x4790}) socket$vsock_stream(0x28, 0x1, 0x28) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000030000000102940000000000000000000000000c0015"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) 6.433708321s ago: executing program 7 (id=1745): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x187, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2e}}}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x2, 0x200, 0x8, 0x7, 0x2, 0x4790}) socket$vsock_stream(0x28, 0x1, 0x28) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r5, 0x58, &(0x7f0000004140)}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000030000000102940000000000000000000000000c0015"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) 5.206085863s ago: executing program 5 (id=1750): llistxattr(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001ec0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) syz_emit_ethernet(0x30, &(0x7f0000000000)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@generic={0x9300, "3cfdeb987777a74484850f2693552ffd963c457a5d6b975db212ede0d3db"}}}, &(0x7f0000000040)={0x1, 0x2, [0xd33, 0xbd3, 0x3a4, 0x490]}) 5.195821993s ago: executing program 5 (id=1751): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800000, &(0x7f0000000340)={[{@barrier_val={'barrier', 0x3d, 0x502a}}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") getsockopt(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = open(&(0x7f0000000100)='./file0\x00', 0x8060, 0x1a0) flock(0xffffffffffffffff, 0x1780f9c373410de4) flock(r5, 0x2) close(r5) sendmsg$802154_raw(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x4000840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x7, 0xa, 0x2, 0x3}, {0x0, 0x1, 0x58, 0xf118}, {0xf, 0x9, 0x8, 0x2f8}]}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.477735591s ago: executing program 5 (id=1755): syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) (fail_nth: 23) 3.288593828s ago: executing program 8 (id=1756): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000), 0xff91) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r0], 0x21c}}, 0x0) 2.951816149s ago: executing program 5 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000180)='./file0\x00', 0x8300, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x4c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.799662534s ago: executing program 1 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002280)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000540)=""/144, 0x90}, 0x997}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000a00)=""/38, 0x26}], 0x4, &(0x7f0000000a80)=""/163, 0xa3}, 0x484}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/112, 0x70}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x3, &(0x7f0000000dc0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000e40)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/129, 0x81}], 0x6, &(0x7f0000001340)=""/206, 0xce}, 0x5}, {{&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/4096, 0x1000}], 0x4}, 0x3}, {{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/225, 0xe1}, {&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000008f40)=""/4096, 0x1000}, {&(0x7f0000009f40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/145, 0x91}, {&(0x7f000000af40)=""/4096, 0x1000}], 0x6, &(0x7f0000001940)=""/19, 0x13}, 0x9}, {{&(0x7f0000001980)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000002180)=""/194, 0xc2}, 0x7}], 0x7, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r5, &(0x7f0000003f00)={0x2020}, 0x2020) 2.799466525s ago: executing program 5 (id=1759): capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x5460, 0x1000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000008500000088000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.755699966s ago: executing program 5 (id=1760): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x40, 0x21, 0xb3, {0xb3, 0xe, "efa3bbb7263feea4615138723e9c632375841c419d81d77fb819893420889bc52ae4ef159dd0d92cf7f0e3daf90766d4f916931397472abcfff5e5f84202ee8240098f137d9fe25329859bc47161ae8e484c9f801cf92e11d66b67f6a843a90c9504250b1b0045bb13cb9e984e74294b9516883107bd9ea4e8dda3c64475e2a01e0ddcb2dd2de00809d37ac8fdcf9038fb106c9d78d0813011a4018be52ca7fe6371c1d001383307f6c0b8d70a03c1ee37"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000440)={0x40, 0x7, 0x3b, "a9cefd10407d97decf1136b6937932d27be5f1f7bbaba92d3c4c9e9eca6b49ba235001e87c6441866c491b4fd9572d10e571e496e110fb10bca1c5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0xd, 0x401, 0x8000, 0x200, 0x9, 0x8, 0x100, 0x205, 0x1, 0x1, 0xfff8}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x8ce}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000c80)={0x20, 0x89, 0x2}}) socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x4, 0x70bd28, 0x2, {0x2, 0x10, 0x80}, [@RTA_TABLE={0x8}, @RTA_NH_ID={0x8, 0x12, 0x3}]}, 0x2c}}, 0x0) 2.286466712s ago: executing program 3 (id=1761): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x82100, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x80000001}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000c40), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x100}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x7ff, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@private=0xa010102, 0x3507, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)) 1.901985585s ago: executing program 1 (id=1762): timer_create(0x4, &(0x7f0000000240)={0x0, 0x19, 0x4}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10"], 0x50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) capget(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x6, 0x8, 0x80, 0xffffffff, 0xf, 0x9}) 1.883572046s ago: executing program 7 (id=1763): syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36d"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'perf_event'}]}, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x81, 0x1}, {0x5000, 0x6000, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x82, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x100000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280), 0xa2, 0x63d, &(0x7f0000000600)="$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") open(&(0x7f0000000380)='./file0\x00', 0x4000, 0x9) 1.789161299s ago: executing program 1 (id=1764): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 1.788643419s ago: executing program 8 (id=1765): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="3f0370c5260797c3045e840fed3d2b1f3ba23a73f77ec5a188f1fcc8c4562f79c78d1d0f42"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.73951555s ago: executing program 1 (id=1766): llistxattr(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001ec0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 1.45080486s ago: executing program 1 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002280)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000540)=""/144, 0x90}, 0x997}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000a00)=""/38, 0x26}], 0x4, &(0x7f0000000a80)=""/163, 0xa3}, 0x484}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/112, 0x70}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x3, &(0x7f0000000dc0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000e40)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/129, 0x81}], 0x6, &(0x7f0000001340)=""/206, 0xce}, 0x5}, {{&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/4096, 0x1000}], 0x4}, 0x3}, {{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/225, 0xe1}, {&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000008f40)=""/4096, 0x1000}, {&(0x7f0000009f40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/145, 0x91}, {&(0x7f000000af40)=""/4096, 0x1000}], 0x6, &(0x7f0000001940)=""/19, 0x13}, 0x9}, {{&(0x7f0000001980)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000002180)=""/194, 0xc2}, 0x7}], 0x7, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r5, &(0x7f0000003f00)={0x2020}, 0x2020) 1.4505086s ago: executing program 8 (id=1768): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000080)="b00c7037e07686acd2c8dd812560e8ae4712639d", 0x14}, {&(0x7f0000000180)="dbcaa81aa9dd539fbdeb08b07c", 0xd}], 0x3) 1.45031387s ago: executing program 8 (id=1769): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8442, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) openat$incfs(r0, 0x0, 0x0, 0x130) creat(0x0, 0xdafbe5d6891b6e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x1fc) ioctl$BLKGETNRZONES(r2, 0x80041285, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x324000, 0x800, 0xc, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xa5, 0x7fff0000}]}) exit(0xffff) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.355108334s ago: executing program 3 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000180)='./file0\x00', 0x8300, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x4c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.100158112s ago: executing program 3 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) brk(0x689d80000003) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000013aed50073113700850000000500000095000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 820.479832ms ago: executing program 1 (id=1772): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") pread64(r0, &(0x7f0000000100)=""/101, 0x65, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async, rerun: 64) r9 = syz_clone(0x11, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0) (rerun: 64) r10 = syz_open_procfs(r9, &(0x7f0000000100)='oom_score\x00') pread64(r10, &(0x7f0000000500)=""/31, 0x1f, 0x6677) getdents64(r4, 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x18, r3, 0x647479a3a98fcee3, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008030}, 0x0) (rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40015}, 0x4000000) 819.846102ms ago: executing program 8 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 667.545287ms ago: executing program 8 (id=1774): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) eventfd(0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x7, 0x1a}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000a51000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000002c0)="0f01df64f30f060f20e06635000400000f22e066b99b00004066b80030000066ba000000000f300f20d86635200000000f22d80f01d765859e003066b9800000c00f326635000400000f30266561bad104b076ee", 0x54}], 0x1, 0x70, &(0x7f0000000240)=[@efer, @cstype0={0x4, 0x4}], 0x2) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800002, &(0x7f0000001080)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@delalloc}, {@auto_da_alloc}, {@test_dummy_encryption}, {@errors_continue}, {@nouid32}, {@delalloc}, {@barrier}, {@grpquota}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@obj_role={'obj_role', 0x3d, '/--\\^},'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2100, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025fdae8fd62ac72500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x169a7e, 0x68) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086610, &(0x7f0000000200)={@desc={0x1, 0x0, @auto="0602aa6233b48e02"}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000000200000000000007000000000000000000000001050000000800000000000000000000030000000001000000020000000000000000006100"], 0x0, 0x50}, 0x28) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f0000000840)={[{@jqfmt_vfsold}, {@bh}, {@delalloc}, {@prjquota}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1a}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xfe, 0x483, &(0x7f00000027c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 237.676091ms ago: executing program 3 (id=1775): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc00, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp869,umask=00000000000000000000002,gid=', @ANYRESOCT=0x0, @ANYRES8=0x0], 0xfe, 0x1524, &(0x7f00000037c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 0s ago: executing program 3 (id=1776): r0 = syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000d80)='./file0\x00', 0x210240, &(0x7f0000000180)=ANY=[], 0x1, 0x105f8, &(0x7f0000010600)="$eJzs3EtvG1UUAODrpOmLUiLEgl1HQkiJVFt1khbYBUgFSKREPBaswLEdy60fUewkpggRWCOW/SOwYs+eP8EOsUBiVwSaueMoCa0IqeskzfdJ4zP3eubMuZal5MxIDsCZNZ38+UchXA2XQgiTIYQrIWT7hXzLLMbwcgjhWghhYs9WyOd3J86HEC6HEK6myWPOQv7WVw92lh8Oli/nWa8fz4qBk+DVEEJ7Pe5vt2PsNmK8m89XtppZbC9s5TG+0b6Xj7sxbtdXswzbleFxlSzON+Lx3fXNXhrXWpVqGhvNtWx+vRMv2NtqDPNkJ9ytbGTjWn11WO5Odt79OBjk8X6vH/PU8nxfZOlDvz+Mcb4+uBDXs34vi9VOP5/vxvpq9UEat/LYi9Oh2m3VsjpWj/ghn3gX87hV3+g1u53kZqn8eql864Pma0vp9EKx0q7dWkhmGq1mZ3NQ7Ncr7cVGt9to1UvVbns2mWlUq8VyOZlZqq82K52kXC7Nl24Ub87me9eTd+58krRqyUwa32p2NvvNVi9Z624k8YzZZK40/8Zs8ko5+Wh5JVn58Pbt5ZWPP1v69M6by++9nR80LKtY3ujW6v36QjIzd2Nurli+UZwrz/7PJf+1f/h+urDkwPp3LzS29ad/osez/sd8A+BICsddAMDpk/X/l8Le/j8dpv8LPK3+/8ufHvy+9G3lF/0/nGGnqf9v5g350fv/elyP/v9fTkj/O77+/xDr/+YMrV//zxPR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFm/Tv3wbrYzHcfP5fPP51Mv5uNCCGEihPD3I0yG8/tyTuZ5ph5z/NSBGn4uhCxDeo0L+XY5hLCYbw9feHTt50b6SQAAAMCz6ceda9/Hbj2+TB93QYxTvGkzceXzEeUrhBCmpn8bUbaJ9OWlESXLvt/nwuBoJ58/OJHdwLr45FVl8ptiX0+OKN9hTO4LF/eEQgwTYywGAAAYk/2dgCfqAAAAz67vjrsARu8wz+8KYfgoc/cR54UY8geCl/aNAAAAgFOocNwFAAAAAE9d1v+f5t//AwAAAP5b/P0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH3buJjdtIIoD+LPBLf1SUdVlpV6lOzhGj9Bll4gD9BIcgV4hF+AMZJcjRDjCYxQcESkKY6Og30/yx1jw5xmxeTPIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Kfbaj3/v/j579ycXX2ePHcDAAAAnLKt1vPmZJrGn9rrX9pL39pxERFlRJzq3UfxrpM5anOqZ15fPanhJqJJ2H/G+3b7GBG/2u3+a9/fAgAAAFyvzXI1S9162k0vXRBDSpM25effmfKKiKimd5nSyv3ue6aw5vc9jr+Z0poJrEmmsDTlNs6V9iKjzmFydCjSoRy0HAAAYBDdTmDYLgQAAIAh/Tk6X1ywDgZWxGEp87AW3Pzz/nFB8ENnBAAAALxBxaULAAAAAHrX9P+e/wcAAADXLT3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5tq/V8s1zNzs3Z1a/wY5LeXNd1hlsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe2J93FAiBMAiDves7k7n/YaVBY0OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePG7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBiZ15SIASCIArmjP+d9P0PKwm68gRCBDQ8qqgGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G62sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZ2f7A6RrlEC9WLFSUWyy9ReClx6E4EHwJB6XdFNWtyptDrYENBcPgv+BF732IgQEqQf/gh482WO9VJAcKnjwpLz5EadN0Km6s7vx84E375vJy7zvm0DId94kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOyez6cquI0HvpF3CnP/XB3az32t+7rozvD6ydji3HSbtoLpxvv0fKsswAAAOCwS6v6PoRwO9tZi32nn9f/T1VjYs2/9VARV/X8/XV/1Ve1f2w3vv3yzb2J+sU8WQjh6/5ktNraCufb6YbjTjQYkz9LKJ7QpPm3rfP69iO7WX7Xk89u3nytl4dH/l3GAMB/4WzVl8FG8nH++9HGeDIazDIxABZX9+8/XQ2p6v+030JeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO2ux2ereIkhPBY9884unV3a/2g/s7w+smqnXj70U/q14yXyEIIG+PJ6GiLa5lnpxuOu3L12rvDyWR0+YGCx//RVwkWJEjnIw3BLIMp/4ACAOBQycoW6/rb2c5aPJcshfD7F/fW/2dqcWhY/383vnGmPle9/h+0tsL51rT+X9m89MHKlavXnhtfGl4cXRy9d27wwuDl1VdeHLy0Eu/nanGccrYAAAAsql7Z6vV/Z2n//v/xWhwa1v/f//TWz/W5UvX/Pg++/z/lhAAAAP7HHj716y/JAeeTXi98ONzcvDwojnsfnyuOM0j1rx3bf+pI2er1f7o0g9wAAACA1u1uJ/fs/1+oxaHh/v83z/z2ef2aafkIYmM8GZ1df39yob3lzK39+//9A8dV+/+dEMK0/py4heUCAADQqo/2omNlq+//Z/n7/50nqjGx5nz6ySIu/w1go/r/1e6n5+uz1t//f76NZc6xznJxP5q8/5+PXQ6hu9xCYgAAABxKR8sW6/8fs521d746/kbP+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwB/tzb5swEMZx+PUlUeI2GSG9xccMNFQIVgAkJEuegQFYiIaK1mIRWAEkONd0huJ5mv+vuOJeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4e9enLz4ioojUZYo03f6dPyPiK9KubSff9yz2l1Pz88jF4TjL+Rvz/zIiyij6OAcAoHdVtznWm3o1yDvMO8o7zluVTb185acBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLEDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIwVAAD//62nU7s=") r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x210000, &(0x7f00000006c0)={[{@delalloc}, {@data_err_abort}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x45b}}, {@nolazytime}, {@oldalloc}, {@errors_remount}, {@grpquota}, {@jqfmt_vfsv1}, {@user_xattr}, {@auto_da_alloc}, {@sysvgroups}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/107, 0x6b}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4c, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000800)=r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0xc6, 0x6, @remote}, 0x14) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)=ANY=[], 0xdd12}], 0x1}, 0x2802) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f00000005c0)={@host}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="000327bd7000fbdbdf251b0000000400cc00"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x29) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x1000, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x1, &(0x7f0000000080)=0x400, 0x4) sendmmsg$inet(r10, &(0x7f0000000dc0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000600)="5bdd9f312cfe820b3b766da6a1a2384a054eb8f0cc9aafb355a15c3da8633268c660a9a355f6e03cb41afaa0014901b33f4c08da1098aa36bd71bf0969d138e83cad66ea5064cf3f4b61d191498b151ad4806f144024e98b6459f85c19d71f8ed39c08cc905505b3f3042eb2528a05ba37a41d66eba42ab876f78328a8ec1ad25c529ac20df8a9cb", 0x88}, {&(0x7f0000000580)="4f2fcc1c1fab556a74be81e060e3869f2f92085ed047ccffc813614943e8551b207de8406b7902fa4a8ccb28d5feae9fd5f0f7ad1c62", 0x36}, {&(0x7f0000000940)="fc709bf6ad889ef7b7b54186cd0832ab761deff4586df8ddd40d585e430e119cbe99a6413ef1c0d2b7bea0d839145022750653cfcfec9bed83ef1e0238fd74493722ca2d6eae49b2ab52a3a22e5eeddc85b3cbbef4f4f5aa922c77c38f1a3019b88dbd4cd9f4f9b36be7983437a0cd44073b7a360d228df8ccc9fc4804846b6f130e368ae67b64a2bc24400323a6a298b72f412ee449efecaa3ea3d6739efa5c370fbddff73fb084b637b85931127b4ac02c930add5ccabc863fff16af2b7625f27abcff22e238432d", 0xc9}, {&(0x7f0000000a40)="c139507e7d226916b3fcdbaf5ca91a83b7979d9e2a7daac42cd64e8e58be1b37fd5429ba3ccc100d80c3243a797085f074d35315079133c93ed4601866d676f1a7b49392bf5c69617d93a8b0356e45474cbe1c1ea4e7e5fcbbfa8bb8bfcc6430e6b0b80b36d296001780feb88508a4769313af40343a315f7273663c530b81732956124bc4d0ac3785de70a51345b72f9f3c248be0196c", 0x97}, {&(0x7f0000000780)="68d22100a192937c53d3a3b74e3652d6841ae3d4fe98c3a6b654a90a567360676e94b00f0ee329fc34b69e66079c5ac0886e388cad9be0c3d8cf963a3a7da452ef918ee388a8242b8ec6f6e7c21280537c59e8e8a07eb9dbb5d140a1694825d8fccb0688f33f62b70687bd9cb17970e1eba21466da", 0x75}, {&(0x7f0000000b00)="24a0e24c62b478858e243b71c4ef0326acdec313080e1d24326865774defd40520ba1042800412ae", 0x28}, {&(0x7f0000000b40)="7e2abc95923a3fb93149a9c0c2fc090581a9d2434277a18a69285cd2b3e2d87c518ef09db732db9f8548c9835b2a1dc01e9cabfce679cc6c7f157e5533a17ca1c5731e788d5e3b0b5c0f2f0d124856330028e3336b200ebb60c759c023d6285b54cb8438d1e89aa8d00ec48e09533cdf795fe4a1a418126c4af98c2813a83cd983ac37ad13c92c5bfdd92660fc55f283ce1246e19d456cd96893764ba37234c0db2edbface9f5d8262f92f719afd82be06a617c355454754b4339c077a07e741801dd81f", 0xc4}, {&(0x7f0000000c40)="0cbbd7776ab2d1c99403d0f8c4cd261995f42697f5d584a8c6546afd68e7c0dbcf237b47fd68713963de48378efd83e3ee80f3ff4dcea9e9a01dd17e015050e1e7a34c5e60dc6bfcb5c495d9e70cb72cb975306c8bf9052afb8b196a0c93c0f4c4f37fdc59ad633f8197d546883b565c584a49749fd1e982dcdc569aff25a1b6997d8c9642796d1aec26b6e7f1cba365cc3e264e036e2baf2da9f2cf98c7fedf6a25c144ec69d30c96a09c184255ef8d828dcccabf19c1120844a94694", 0xbd}], 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="14000000000000000000000001000000000000000000000011000000000000000000000001000000090000000000000010000000000000000000000000edf9ff1cec866c631cc479cab1937352ca2791d2419c8b5ab721918251eb72365da77284a904f791059375c96aefa14e779b1991d54e5e933034a24126a8f761e7d19eb14687d86c341a197060596798d23a4efa29cb2a9f20e34c792c0b5d9616e8e61000783030d67c35110f688948928193f8cf41505d25913acf74318f13ca564f25e9378231070000000e261d"], 0x40}}], 0x1, 0x8808) kernel console output (not intermixed with test programs): 4-1: new high-speed USB device number 32 using dummy_hcd [ 242.982175][ T5169] input: syz1 as /devices/virtual/input/input76 [ 243.201027][ T5125] udc-core: couldn't find an available UDC or it's busy [ 243.215625][ T5169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.230332][ T5125] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 243.240142][ T5169] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.1373: invalid indirect mapped block 9 (level 0) [ 243.254882][ T5169] EXT4-fs (loop1): 1 truncate cleaned up [ 243.260775][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue [ 243.311946][ T952] usb 3-1: USB disconnect, device number 35 [ 243.559563][ T412] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 243.569642][ T412] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 243.584693][ T412] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.650226][ T5185] __nla_validate_parse: 1 callbacks suppressed [ 243.650235][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 243.672694][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 243.700018][ T5182] erofs: (device loop5): mounted with root inode @ nid 36. [ 243.721035][ T5182] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 243.733418][ T5182] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 243.743014][ T5182] attempt to access beyond end of device [ 243.743014][ T5182] loop5: rw=524288, want=1072, limit=16 [ 243.769574][ T412] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 243.780971][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.801708][ T5182] attempt to access beyond end of device [ 243.801708][ T5182] loop5: rw=524288, want=24, limit=16 [ 243.815834][ T412] usb 4-1: Product: syz [ 243.829723][ T412] usb 4-1: Manufacturer: syz [ 243.841017][ T412] usb 4-1: SerialNumber: syz [ 243.859565][ T5147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 243.866553][ T5147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 243.923894][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 244.093216][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 244.105729][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 244.129570][ T703] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 244.132840][ T5220] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 244.146175][ T952] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 244.369506][ T703] usb 7-1: Using ep0 maxpacket: 32 [ 244.399592][ T952] usb 2-1: Using ep0 maxpacket: 32 [ 244.420727][ T5228] erofs: (device loop5): mounted with root inode @ nid 36. [ 244.450775][ T5227] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 244.460901][ T5227] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 244.470500][ T5227] attempt to access beyond end of device [ 244.470500][ T5227] loop5: rw=524288, want=1072, limit=16 [ 244.489856][ T5227] attempt to access beyond end of device [ 244.489856][ T5227] loop5: rw=524288, want=24, limit=16 [ 244.516484][ T5227] attempt to access beyond end of device [ 244.516484][ T5227] loop5: rw=0, want=1064, limit=16 [ 244.529558][ T703] usb 7-1: unable to get BOS descriptor or descriptor too short [ 244.529568][ T952] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 244.529583][ T952] usb 2-1: config 0 has no interface number 0 [ 244.609573][ T703] usb 7-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 244.620104][ T703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.624688][ T5147] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 244.628957][ T703] usb 7-1: config 1 has no interface number 0 [ 244.628984][ T703] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 244.739639][ T952] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 244.751103][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.759152][ T952] usb 2-1: Product: syz [ 244.763353][ T952] usb 2-1: Manufacturer: syz [ 244.767944][ T952] usb 2-1: SerialNumber: syz [ 244.773794][ T952] usb 2-1: config 0 descriptor?? [ 244.810059][ T952] smsc95xx v2.0.0 [ 244.829707][ T703] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 244.838799][ T703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.846818][ T703] usb 7-1: Product: syz [ 244.851071][ T703] usb 7-1: Manufacturer: syz [ 244.855656][ T703] usb 7-1: SerialNumber: syz [ 245.089748][ T24] audit: type=1326 audit(1774714580.189:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.118790][ T24] audit: type=1326 audit(1774714580.189:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.142408][ T24] audit: type=1326 audit(1774714580.189:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e8f50e04e code=0x7ffc0000 [ 245.166021][ T24] audit: type=1326 audit(1774714580.189:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.189689][ T24] audit: type=1326 audit(1774714580.189:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.213140][ T24] audit: type=1326 audit(1774714580.189:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.225009][ T5240] EXT4-fs (loop5): Ignoring removed oldalloc option [ 245.236480][ T24] audit: type=1326 audit(1774714580.189:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.243066][ T5240] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 245.266542][ T24] audit: type=1326 audit(1774714580.189:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.273680][ T5240] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.310478][ T5240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 245.314688][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1398'. [ 245.318610][ T5240] System zones: [ 245.327667][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 245.327676][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 245.327696][ T5245] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1398'. [ 245.338935][ T24] audit: type=1326 audit(1774714580.189:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.340191][ T5240] 0-1, 3-36 [ 245.349454][ T5240] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 245.379159][ T24] audit: type=1326 audit(1774714580.189:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 245.570349][ T5247] EXT4-fs (loop3): Test dummy encryption mode enabled [ 245.582804][ T5247] EXT4-fs (loop3): Ignoring removed orlov option [ 245.610904][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue [ 245.659617][ T952] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 245.670478][ T952] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 245.699612][ T952] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 245.710632][ T952] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 245.719138][ T952] usb 2-1: USB disconnect, device number 25 [ 246.001869][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 246.110954][ T5258] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 246.118419][ T5258] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.131099][ T5258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c018, mo2=0003] [ 246.139202][ T5258] System zones: 0-1, 3-36 [ 246.144750][ T5258] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,nogrpid,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 246.176457][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 246.202470][ T5265] FAULT_INJECTION: forcing a failure. [ 246.202470][ T5265] name failslab, interval 1, probability 0, space 0, times 0 [ 246.294849][ T5265] CPU: 0 PID: 5265 Comm: syz.1.1404 Not tainted syzkaller #0 [ 246.302237][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.312278][ T5265] Call Trace: [ 246.315563][ T5265] __dump_stack+0x21/0x24 [ 246.319880][ T5265] dump_stack_lvl+0x1a7/0x208 [ 246.324545][ T5265] ? show_regs_print_info+0x18/0x18 [ 246.329727][ T5265] dump_stack+0x15/0x1c [ 246.333868][ T5265] should_fail+0x3c1/0x510 [ 246.338361][ T5265] ? igmp6_group_dropped+0x445/0xa80 [ 246.343649][ T5265] __should_failslab+0xa4/0xe0 [ 246.348403][ T5265] should_failslab+0x9/0x20 [ 246.352893][ T5265] kmem_cache_alloc_trace+0x3a/0x2e0 [ 246.358167][ T5265] igmp6_group_dropped+0x445/0xa80 [ 246.363274][ T5265] ? __ipv6_dev_mc_inc+0x9b0/0x9b0 [ 246.368370][ T5265] ? _raw_write_lock_bh+0x94/0xf0 [ 246.373383][ T5265] __ipv6_dev_mc_dec+0x22d/0x450 [ 246.378308][ T5265] ipv6_dev_mc_dec+0x7d/0xc0 [ 246.382885][ T5265] br_multicast_leave_snoopers+0x1d2/0x250 [ 246.388675][ T5265] ? br_multicast_join_snoopers+0x250/0x250 [ 246.394553][ T5265] ? del_timer_sync+0x144/0x1a0 [ 246.399387][ T5265] br_dev_stop+0x89/0xd0 [ 246.403617][ T5265] ? br_dev_open+0xe0/0xe0 [ 246.408055][ T5265] __dev_close_many+0x288/0x360 [ 246.412895][ T5265] ? dev_close_many+0x4d0/0x4d0 [ 246.417729][ T5265] dev_close_many+0x221/0x4d0 [ 246.422393][ T5265] ? kmem_cache_free+0x100/0x2d0 [ 246.427313][ T5265] ? __dev_open+0x500/0x500 [ 246.431801][ T5265] ? __kasan_check_read+0x11/0x20 [ 246.436816][ T5265] unregister_netdevice_many+0x45e/0x1a80 [ 246.442520][ T5265] ? unregister_netdevice_queue+0xd1/0x370 [ 246.448312][ T5265] ? unregister_netdevice_queue+0x1aa/0x370 [ 246.454189][ T5265] ? alloc_netdev_mqs+0xc80/0xc80 [ 246.459197][ T5265] ? list_netdevice+0x4c0/0x4c0 [ 246.464034][ T5265] ? sysfs_remove_group+0x286/0x2a0 [ 246.469215][ T5265] ? br_dev_delete+0xfc/0x110 [ 246.473875][ T5265] ? rtnl_dellink+0x4e4/0x770 [ 246.478538][ T5265] ? nbp_backup_change+0x2c0/0x2c0 [ 246.483632][ T5265] rtnl_dellink+0x4f5/0x770 [ 246.488117][ T5265] ? rtnl_newlink+0x18f0/0x18f0 [ 246.492951][ T5265] ? __sched_text_start+0x8/0x8 [ 246.497788][ T5265] ? avc_has_perm_noaudit+0x172/0x260 [ 246.503144][ T5265] ? avc_denied+0x1b0/0x1b0 [ 246.507631][ T5265] ? __kasan_check_read+0x11/0x20 [ 246.512639][ T5265] ? preempt_schedule_irq+0xca/0x120 [ 246.517913][ T5265] ? mutex_trylock+0xa0/0xa0 [ 246.522483][ T5265] ? ns_capable+0x8c/0xf0 [ 246.526800][ T5265] ? netlink_net_capable+0x125/0x160 [ 246.532067][ T5265] ? rtnl_newlink+0x18f0/0x18f0 [ 246.536900][ T5265] rtnetlink_rcv_msg+0xa31/0xcc0 [ 246.541824][ T5265] ? rtnetlink_bind+0x80/0x80 [ 246.546484][ T5265] ? finish_task_switch+0x12e/0x5a0 [ 246.551663][ T5265] ? switch_mm_irqs_off+0x75f/0x990 [ 246.556844][ T5265] ? __switch_to_asm+0x34/0x60 [ 246.561590][ T5265] ? __schedule+0xb5b/0x1320 [ 246.566166][ T5265] ? __sched_text_start+0x8/0x8 [ 246.571001][ T5265] ? __kasan_check_read+0x11/0x20 [ 246.576012][ T5265] ? preempt_schedule_irq+0xca/0x120 [ 246.581277][ T5265] ? preempt_schedule_notrace+0x120/0x120 [ 246.586979][ T5265] ? __kasan_check_write+0x14/0x20 [ 246.592075][ T5265] ? irqentry_exit+0x56/0x60 [ 246.596647][ T5265] ? sysvec_reschedule_ipi+0x69/0x70 [ 246.601914][ T5265] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 246.607535][ T5265] netlink_rcv_skb+0x1f5/0x440 [ 246.612281][ T5265] ? rtnetlink_bind+0x80/0x80 [ 246.616939][ T5265] ? netlink_ack+0xb70/0xb70 [ 246.621516][ T5265] ? __rcu_read_unlock+0xa0/0xa0 [ 246.626437][ T5265] ? audit_tree_destroy_watch+0x20/0x20 [ 246.631983][ T5265] ? __netlink_lookup+0x387/0x3b0 [ 246.637000][ T5265] rtnetlink_rcv+0x1c/0x20 [ 246.641397][ T5265] netlink_unicast+0x876/0xa40 [ 246.646144][ T5265] netlink_sendmsg+0x89c/0xb50 [ 246.650892][ T5265] ? netlink_getsockopt+0x530/0x530 [ 246.656072][ T5265] ? kasan_set_track+0x5b/0x70 [ 246.660815][ T5265] ? slab_free_freelist_hook+0xc5/0x190 [ 246.666344][ T5265] ? security_socket_sendmsg+0x82/0xa0 [ 246.671787][ T5265] ? netlink_getsockopt+0x530/0x530 [ 246.676969][ T5265] ____sys_sendmsg+0x5b7/0x8f0 [ 246.681717][ T5265] ? __sys_sendmsg_sock+0x40/0x40 [ 246.686723][ T5265] ? import_iovec+0x7c/0xb0 [ 246.691211][ T5265] ___sys_sendmsg+0x236/0x2e0 [ 246.695873][ T5265] ? __sys_sendmsg+0x280/0x280 [ 246.700617][ T5265] ? rw_verify_area+0x1c0/0x360 [ 246.705453][ T5265] ? __fdget+0x1a1/0x230 [ 246.709682][ T5265] __x64_sys_sendmsg+0x1f9/0x2c0 [ 246.714602][ T5265] ? fput+0x1a/0x20 [ 246.718397][ T5265] ? ___sys_sendmsg+0x2e0/0x2e0 [ 246.723228][ T5265] ? debug_smp_processor_id+0x17/0x20 [ 246.728584][ T5265] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 246.734623][ T5265] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 246.740227][ T5265] do_syscall_64+0x31/0x40 [ 246.744619][ T5265] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 246.750483][ T5265] RIP: 0033:0x7fb3f2a7a819 [ 246.754871][ T5265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.774445][ T5265] RSP: 002b:00007fb3f14d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.782831][ T5265] RAX: ffffffffffffffda RBX: 00007fb3f2cf3fa0 RCX: 00007fb3f2a7a819 [ 246.790775][ T5265] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 246.798748][ T5265] RBP: 00007fb3f14d5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.806695][ T5265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.814639][ T5265] R13: 00007fb3f2cf4038 R14: 00007fb3f2cf3fa0 R15: 00007ffc5ab981a8 [ 246.860163][ T703] usb 7-1: unknown sample rate [ 246.872835][ T5267] EXT4-fs (loop3): Ignoring removed bh option [ 246.878923][ T5267] EXT4-fs (loop3): Ignoring removed oldalloc option [ 246.885567][ T5267] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 246.892867][ T5267] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.905310][ T703] usb 7-1: USB disconnect, device number 21 [ 246.912058][ T5267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 246.920349][ T5267] System zones: 0-1, 3-36 [ 246.925473][ T5267] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 246.927929][ T5271] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 247.563655][ T5289] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.571396][ T952] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 247.603635][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 247.612909][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 247.621976][ T5288] attempt to access beyond end of device [ 247.621976][ T5288] loop3: rw=524288, want=1072, limit=16 [ 247.624178][ T412] rtl8150 4-1:1.0: couldn't reset the device [ 247.633062][ T5288] attempt to access beyond end of device [ 247.633062][ T5288] loop3: rw=524288, want=24, limit=16 [ 247.661323][ T412] rtl8150: probe of 4-1:1.0 failed with error -5 [ 247.678075][ T412] usb 4-1: USB disconnect, device number 32 [ 247.684126][ T5] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 247.849563][ T952] usb 2-1: Using ep0 maxpacket: 32 [ 247.939503][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 247.982011][ T952] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 247.990276][ T952] usb 2-1: config 0 has no interface number 0 [ 248.095900][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.103197][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.110798][ T5] usb 6-1: unable to get BOS descriptor or descriptor too short [ 248.117054][ T5297] device bridge_slave_0 entered promiscuous mode [ 248.131544][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.138591][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.146257][ T5297] device bridge_slave_1 entered promiscuous mode [ 248.189527][ T15] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 248.199655][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 248.209620][ T952] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.226730][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.244913][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.251978][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.259232][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.266392][ T5297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.286273][ T952] usb 2-1: Product: syz [ 248.287927][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.290738][ T952] usb 2-1: Manufacturer: syz [ 248.302895][ T952] usb 2-1: SerialNumber: syz [ 248.305178][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.311550][ T952] usb 2-1: config 0 descriptor?? [ 248.319896][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.333272][ T5302] netlink: 'syz.3.1417': attribute type 4 has an invalid length. [ 248.342786][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.351347][ T702] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.358371][ T702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.367614][ T952] smsc95xx v2.0.0 [ 248.369605][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.379982][ T702] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.387002][ T702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.396780][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.404609][ T5] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 248.413246][ T5304] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 248.413696][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.429384][ T5] usb 6-1: Product: syz [ 248.431425][ T5304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 248.433596][ T5] usb 6-1: Manufacturer: syz [ 248.452704][ T5] usb 6-1: SerialNumber: syz [ 248.458477][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.463048][ T5304] EXT4-fs (loop3): 1 orphan inode deleted [ 248.472115][ T5304] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 248.479512][ T15] usb 7-1: Using ep0 maxpacket: 16 [ 248.504167][ T5304] incfs: Can't find or create .index dir in ./file0 [ 248.504777][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.510859][ T5304] incfs: mount failed -28 [ 248.526413][ T5297] device veth0_vlan entered promiscuous mode [ 248.532820][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.541266][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.548640][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.572867][ T5304] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1418: invalid indirect mapped block 234881024 (level 0) [ 248.573145][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.596269][ T5297] device veth1_macvtap entered promiscuous mode [ 248.605338][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.616970][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.683126][ T5310] FAT-fs (loop7): Directory bread(block 64) failed [ 248.689862][ T5310] FAT-fs (loop7): Directory bread(block 65) failed [ 248.696401][ T5310] FAT-fs (loop7): Directory bread(block 66) failed [ 248.697252][ T5283] udc-core: couldn't find an available UDC or it's busy [ 248.703718][ T5310] FAT-fs (loop7): Directory bread(block 67) failed [ 248.710454][ T5283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 248.716814][ T5310] FAT-fs (loop7): Directory bread(block 68) failed [ 248.724394][ T15] usb 7-1: config 1 interface 0 has no altsetting 0 [ 248.731273][ T5310] FAT-fs (loop7): Directory bread(block 69) failed [ 248.746516][ T5310] FAT-fs (loop7): Directory bread(block 70) failed [ 248.753334][ T5310] FAT-fs (loop7): Directory bread(block 71) failed [ 248.760083][ T5310] FAT-fs (loop7): Directory bread(block 72) failed [ 248.766590][ T5310] FAT-fs (loop7): Directory bread(block 73) failed [ 248.774325][ T7] device bridge_slave_1 left promiscuous mode [ 248.784496][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.800026][ T7] device bridge_slave_0 left promiscuous mode [ 248.812549][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.861524][ T7] device veth1_macvtap left promiscuous mode [ 248.867541][ T7] device veth0_vlan left promiscuous mode [ 248.904469][ T5] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 248.949954][ T5] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 248.958563][ T15] usb 7-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 248.967943][ T5] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 249.055598][ T771] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 249.206422][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.214695][ T15] usb 7-1: Manufacturer: 㖈梲聢㜻噊镬逸嘿겅词⒒넋萷偹灺酊Ấ䏶瞱없？鲍᲋㩬륝榱槳㣊ᦃ⌫볝︱冄ᇁ䬒硪⼫ꌌ洽蹬ꤽ買ﶗϔج뼑瑈퇫抢Ჲꚁ夽䯎䅃鮦铅왝퇄扩핑ꎕ軮₋ᔖ頃틂酃Ṱꒃ籜虥協黬錜䈛╷ [ 249.240631][ T15] usb 7-1: SerialNumber: э [ 249.245292][ T5317] 9pnet: Insufficient options for proto=fd [ 249.255898][ T5] usb 6-1: USB disconnect, device number 16 [ 249.389646][ T952] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 249.400488][ T952] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.429586][ T952] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 249.440861][ T952] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 249.450154][ T952] usb 2-1: USB disconnect, device number 26 [ 249.523739][ T296] udevd[296]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 249.535759][ T771] usb 4-1: Using ep0 maxpacket: 8 [ 249.548694][ T5326] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 249.556578][ T5326] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.570668][ T5326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 249.581826][ T5326] System zones: 0-1, 3-36 [ 249.590767][ T5326] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 249.759571][ T771] usb 4-1: unable to get BOS descriptor or descriptor too short [ 249.859593][ T771] usb 4-1: config 1 interface 0 has no altsetting 0 [ 249.898837][ T15] usb 7-1: USB disconnect, device number 22 [ 249.983070][ T5350] FAT-fs (loop7): Directory bread(block 64) failed [ 249.990299][ T5350] FAT-fs (loop7): Directory bread(block 65) failed [ 250.001042][ T5350] FAT-fs (loop7): Directory bread(block 66) failed [ 250.009622][ T5350] FAT-fs (loop7): Directory bread(block 67) failed [ 250.016747][ T5350] FAT-fs (loop7): Directory bread(block 68) failed [ 250.030390][ T771] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 250.045743][ T5350] FAT-fs (loop7): Directory bread(block 69) failed [ 250.062703][ T771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.098574][ T5350] FAT-fs (loop7): Directory bread(block 70) failed [ 250.119808][ T771] usb 4-1: Product: syz [ 250.124056][ T771] usb 4-1: Manufacturer: syz [ 250.141391][ T5360] erofs: (device loop5): mounted with root inode @ nid 36. [ 250.157051][ T5360] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 250.166059][ T5360] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 250.175291][ T5360] handle_bad_sector: 1 callbacks suppressed [ 250.175318][ T5360] attempt to access beyond end of device [ 250.175318][ T5360] loop5: rw=524288, want=1072, limit=16 [ 250.192429][ T5360] attempt to access beyond end of device [ 250.192429][ T5360] loop5: rw=524288, want=24, limit=16 [ 250.204429][ T5360] attempt to access beyond end of device [ 250.204429][ T5360] loop5: rw=0, want=1064, limit=16 [ 250.299453][ T5350] FAT-fs (loop7): Directory bread(block 71) failed [ 250.306091][ T5350] FAT-fs (loop7): Directory bread(block 72) failed [ 250.312650][ T5350] FAT-fs (loop7): Directory bread(block 73) failed [ 250.329561][ T771] usb 4-1: SerialNumber: syz [ 250.501913][ T5365] erofs: (device loop1): mounted with root inode @ nid 36. [ 250.519339][ T5365] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 250.528364][ T5365] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 250.537695][ T5365] attempt to access beyond end of device [ 250.537695][ T5365] loop1: rw=524288, want=1072, limit=16 [ 250.549074][ T5365] attempt to access beyond end of device [ 250.549074][ T5365] loop1: rw=524288, want=24, limit=16 [ 250.561009][ T5365] attempt to access beyond end of device [ 250.561009][ T5365] loop1: rw=0, want=1064, limit=16 [ 250.859524][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 251.031008][ T771] usbhid 4-1:1.0: can't add hid device: -71 [ 251.038383][ T771] usbhid: probe of 4-1:1.0 failed with error -71 [ 251.064982][ T771] usb 4-1: USB disconnect, device number 33 [ 251.129531][ T446] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 251.295234][ T5376] FAULT_INJECTION: forcing a failure. [ 251.295234][ T5376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.308310][ T5376] CPU: 1 PID: 5376 Comm: syz.1.1441 Not tainted syzkaller #0 [ 251.315660][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.325694][ T5376] Call Trace: [ 251.328961][ T5376] __dump_stack+0x21/0x24 [ 251.333281][ T5376] dump_stack_lvl+0x1a7/0x208 [ 251.337946][ T5376] ? thaw_kernel_threads+0x220/0x220 [ 251.343215][ T5376] ? show_regs_print_info+0x18/0x18 [ 251.348389][ T5376] dump_stack+0x15/0x1c [ 251.352519][ T5376] should_fail+0x3c1/0x510 [ 251.356912][ T5376] should_fail_usercopy+0x1a/0x20 [ 251.361909][ T5376] iov_iter_copy_from_user_atomic+0x32e/0xb00 [ 251.367947][ T5376] generic_perform_write+0x334/0x540 [ 251.373205][ T5376] ? atime_needs_update+0x5b0/0x5b0 [ 251.378375][ T5376] ? grab_cache_page_write_begin+0xb0/0xb0 [ 251.384152][ T5376] ? file_remove_privs+0x5b0/0x5b0 [ 251.389234][ T5376] ? __kasan_check_write+0x14/0x20 [ 251.394316][ T5376] ? down_write+0xb2/0x120 [ 251.398706][ T5376] __generic_file_write_iter+0x24b/0x480 [ 251.404309][ T5376] ? generic_write_checks+0x3d4/0x480 [ 251.409653][ T5376] generic_file_write_iter+0xa9/0x1d0 [ 251.414993][ T5376] vfs_write+0x758/0xdc0 [ 251.419206][ T5376] ? kernel_write+0x3c0/0x3c0 [ 251.423853][ T5376] ? __fget_files+0x2c4/0x320 [ 251.428500][ T5376] ? __fdget_pos+0x1f7/0x380 [ 251.433059][ T5376] ? ksys_write+0x71/0x250 [ 251.437444][ T5376] ksys_write+0x149/0x250 [ 251.441743][ T5376] ? __ia32_sys_read+0x90/0x90 [ 251.446477][ T5376] ? debug_smp_processor_id+0x17/0x20 [ 251.451826][ T5376] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 251.457859][ T5376] __x64_sys_write+0x7b/0x90 [ 251.462422][ T5376] do_syscall_64+0x31/0x40 [ 251.466811][ T5376] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 251.472679][ T5376] RIP: 0033:0x7fb3f2a3b04e [ 251.477069][ T5376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.496644][ T5376] RSP: 002b:00007fb3f14d4da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.505028][ T5376] RAX: ffffffffffffffda RBX: 00007fb3f14d56c0 RCX: 00007fb3f2a3b04e [ 251.512990][ T5376] RDX: 0000000000040000 RSI: 00007fb3e90b5000 RDI: 0000000000000008 [ 251.520948][ T5376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.528900][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 251.536847][ T5376] R13: 00007fb3f14d4ee0 R14: 00007fb3f14d4ea0 R15: 00007fb3e90b5000 [ 251.570361][ T5376] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 251.580257][ T5376] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 251.590327][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.599516][ T446] usb 6-1: Using ep0 maxpacket: 16 [ 251.601516][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.616373][ T5376] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 251.629204][ T5376] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 251.637244][ T5376] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e02c, mo2=0000] [ 251.648043][ T5376] EXT4-fs (loop1): orphan cleanup on readonly fs [ 251.656627][ T5376] EXT4-fs warning (device loop1): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 251.671447][ T5376] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 251.678689][ T5376] EXT4-fs (loop1): 1 truncate cleaned up [ 251.684644][ T5376] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,errors=remount-ro,noblock_validity, [ 251.709621][ T54] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.718698][ T54] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 251.726738][ T54] usb 8-1: Manufacturer: syz [ 251.732839][ T54] usb 8-1: config 0 descriptor?? [ 251.750432][ T446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.761622][ T446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.771654][ T446] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.780406][ T54] usbhid 8-1:0.0: can't add hid device: -22 [ 251.784459][ T446] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.790713][ T54] usbhid: probe of 8-1:0.0 failed with error -22 [ 251.799648][ T446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.820103][ T5390] ip6_tunnel: non-ECT from 0000:0000:0000:0001:0000:0000:0000:0000 with DS=0x7 [ 251.824859][ T5392] FAULT_INJECTION: forcing a failure. [ 251.824859][ T5392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.842322][ T5392] CPU: 0 PID: 5392 Comm: syz.1.1448 Not tainted syzkaller #0 [ 251.849682][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.859710][ T5392] Call Trace: [ 251.862978][ T5392] __dump_stack+0x21/0x24 [ 251.867281][ T5392] dump_stack_lvl+0x1a7/0x208 [ 251.871930][ T5392] ? show_regs_print_info+0x18/0x18 [ 251.877107][ T5392] ? format_decode+0x1bb/0x1520 [ 251.881934][ T5392] dump_stack+0x15/0x1c [ 251.886060][ T5392] should_fail+0x3c1/0x510 [ 251.890447][ T5392] should_fail_usercopy+0x1a/0x20 [ 251.895441][ T5392] _copy_from_user+0x20/0xd0 [ 251.900001][ T5392] kstrtouint_from_user+0xd3/0x220 [ 251.905079][ T5392] ? kstrtol_from_user+0x2a0/0x2a0 [ 251.910166][ T5392] ? memset+0x35/0x40 [ 251.914120][ T5392] ? avc_policy_seqno+0x1b/0x70 [ 251.918941][ T5392] ? selinux_file_permission+0x2a5/0x510 [ 251.924545][ T5392] proc_fail_nth_write+0x8b/0x200 [ 251.929540][ T5392] ? proc_fail_nth_read+0x220/0x220 [ 251.934711][ T5392] ? rw_verify_area+0x1c0/0x360 [ 251.939534][ T5392] ? proc_fail_nth_read+0x220/0x220 [ 251.944705][ T5392] vfs_write+0x338/0xdc0 [ 251.948919][ T5392] ? kernel_write+0x3c0/0x3c0 [ 251.953567][ T5392] ? __kasan_check_write+0x14/0x20 [ 251.958658][ T5392] ? mutex_lock+0x92/0xf0 [ 251.962958][ T5392] ? mutex_trylock+0xa0/0xa0 [ 251.967519][ T5392] ? __fget_files+0x2c4/0x320 [ 251.972166][ T5392] ? __fdget_pos+0x2d2/0x380 [ 251.976727][ T5392] ? ksys_write+0x71/0x250 [ 251.981112][ T5392] ksys_write+0x149/0x250 [ 251.985411][ T5392] ? __ia32_sys_read+0x90/0x90 [ 251.990147][ T5392] ? debug_smp_processor_id+0x17/0x20 [ 251.995487][ T5392] __x64_sys_write+0x7b/0x90 [ 252.000048][ T5392] do_syscall_64+0x31/0x40 [ 252.004451][ T5392] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.010311][ T5392] RIP: 0033:0x7fb3f2a3b04e [ 252.014699][ T5392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.034274][ T5392] RSP: 002b:00007fb3f14d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.042659][ T5392] RAX: ffffffffffffffda RBX: 00007fb3f14d56c0 RCX: 00007fb3f2a3b04e [ 252.050605][ T5392] RDX: 0000000000000001 RSI: 00007fb3f14d50a0 RDI: 0000000000000003 [ 252.058552][ T5392] RBP: 00007fb3f14d5090 R08: 0000000000000000 R09: 0000000000000000 [ 252.066496][ T5392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.074440][ T5392] R13: 00007fb3f2cf4038 R14: 00007fb3f2cf3fa0 R15: 00007ffc5ab981a8 [ 252.099595][ T446] usb 6-1: config 0 descriptor?? [ 252.108950][ T54] usb 8-1: USB disconnect, device number 2 [ 252.152997][ T409] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 252.459576][ T409] usb 4-1: Using ep0 maxpacket: 8 [ 252.501169][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 252.510234][ T5404] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.583136][ T24] kauditd_printk_skb: 86 callbacks suppressed [ 252.583147][ T24] audit: type=1400 audit(1774714587.679:2020): avc: denied { rename } for pid=5403 comm="syz.1.1452" name="#14" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.584021][ T5409] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 252.589351][ T24] audit: type=1400 audit(1774714587.679:2021): avc: denied { unlink } for pid=5403 comm="syz.1.1452" name="#15" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.669718][ T409] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.685833][ T446] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0020/input/input78 [ 252.697289][ T409] usb 4-1: config 179 has no interface number 0 [ 252.706210][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 252.721667][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 252.732944][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.744264][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 252.755828][ T409] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.769107][ T409] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 252.778194][ T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.792602][ T446] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 252.804739][ T5388] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 252.863934][ T5424] __nla_validate_parse: 3 callbacks suppressed [ 252.863944][ T5424] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1459'. [ 252.900665][ T5432] usb usb8: usbfs: process 5432 (syz.1.1461) did not claim interface 0 before use [ 252.912799][ T5431] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.923518][ T5431] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 252.933379][ T5434] udc-core: couldn't find an available UDC or it's busy [ 252.933738][ T5431] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 252.941637][ T5434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 253.041681][ T54] usb 6-1: USB disconnect, device number 17 [ 253.210634][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.212451][ T5443] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 253.217665][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.218027][ T5438] device bridge_slave_0 entered promiscuous mode [ 253.225294][ T5443] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.251587][ T5443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 253.259914][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.259979][ T5443] System zones: [ 253.266956][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.267166][ T5443] 0-1 [ 253.271223][ T5438] device bridge_slave_1 entered promiscuous mode [ 253.277533][ T5443] , 3-36 [ 253.278252][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 253.310780][ T5443] FAULT_INJECTION: forcing a failure. [ 253.310780][ T5443] name failslab, interval 1, probability 0, space 0, times 0 [ 253.325577][ T5443] CPU: 1 PID: 5443 Comm: syz.1.1465 Not tainted syzkaller #0 [ 253.328911][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.332943][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.332947][ T5443] Call Trace: [ 253.332964][ T5443] __dump_stack+0x21/0x24 [ 253.332980][ T5443] dump_stack_lvl+0x1a7/0x208 [ 253.340125][ T5438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.350144][ T5443] ? show_regs_print_info+0x18/0x18 [ 253.350156][ T5443] dump_stack+0x15/0x1c [ 253.350165][ T5443] should_fail+0x3c1/0x510 [ 253.350182][ T5443] ? ext4_find_extent+0x36b/0xe20 [ 253.353539][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.357752][ T5443] __should_failslab+0xa4/0xe0 [ 253.362411][ T5438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.369558][ T5443] should_failslab+0x9/0x20 [ 253.369567][ T5443] __kmalloc+0x60/0x330 [ 253.369582][ T5443] ext4_find_extent+0x36b/0xe20 [ 253.389063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.395280][ T5443] ext4_ext_map_blocks+0x20b/0x5dd0 [ 253.395292][ T5443] ? __kasan_slab_alloc+0xcf/0xf0 [ 253.395302][ T5443] ? slab_post_alloc_hook+0x5d/0x2f0 [ 253.395310][ T5443] ? kmem_cache_alloc+0x162/0x2d0 [ 253.395327][ T5443] ? security_inode_alloc+0x33/0x110 [ 253.453509][ T5443] ? new_inode_pseudo+0x91/0x210 [ 253.458422][ T5443] ? proc_pident_lookup+0x1c0/0x270 [ 253.463592][ T5443] ? proc_tid_base_lookup+0x2b/0x30 [ 253.468612][ T15] usb 4-1: USB disconnect, device number 34 [ 253.468780][ T5443] ? path_openat+0x1140/0x31c0 [ 253.479374][ T5443] ? do_filp_open+0x1e2/0x410 [ 253.484025][ T5443] ? do_sys_openat2+0x19f/0x750 [ 253.488842][ T5443] ? __x64_sys_openat+0x136/0x160 [ 253.493835][ T5443] ? do_syscall_64+0x31/0x40 [ 253.498393][ T5443] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 253.504432][ T5443] ? ext4_ext_release+0x10/0x10 [ 253.509271][ T5443] ext4_map_blocks+0x3b1/0x1bd0 [ 253.514095][ T5443] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 253.519259][ T5443] ? 0xffffffffa002c000 [ 253.523386][ T5443] ? is_bpf_text_address+0x177/0x190 [ 253.528642][ T5443] ext4_bread_batch+0x133/0x790 [ 253.533465][ T5443] ? ext4_buffer_uptodate+0x100/0x100 [ 253.538807][ T5443] ? stack_trace_save+0xa6/0xf0 [ 253.543625][ T5443] __ext4_find_entry+0xf7a/0x1aa0 [ 253.548706][ T5443] ? __kasan_slab_alloc+0xcf/0xf0 [ 253.553708][ T5443] ? __kasan_slab_alloc+0xbd/0xf0 [ 253.558701][ T5443] ? filename_create+0x1d5/0x680 [ 253.563610][ T5443] ? ext4_ci_compare+0x3f0/0x3f0 [ 253.568518][ T5443] ? ext4_fname_setup_ci_filename+0x70/0x470 [ 253.574469][ T5443] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 253.580604][ T5443] ext4_lookup+0x305/0x8d0 [ 253.585017][ T5443] ? ext4_add_entry+0xfa0/0xfa0 [ 253.589856][ T5443] ? __d_alloc+0x4b8/0x6a0 [ 253.594255][ T5443] ? _raw_spin_unlock+0x4d/0x70 [ 253.599085][ T5443] ? d_alloc+0x1f5/0x260 [ 253.603315][ T5443] __lookup_hash+0x114/0x250 [ 253.607910][ T5443] filename_create+0x1d5/0x680 [ 253.607921][ T5443] ? kern_path_create+0x40/0x40 [ 253.607930][ T5443] ? getname_flags+0x206/0x500 [ 253.607945][ T5443] do_mkdirat+0x5e/0x340 [ 253.626469][ T5443] __x64_sys_mkdir+0x60/0x70 [ 253.626479][ T5443] do_syscall_64+0x31/0x40 [ 253.626497][ T5443] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 253.641307][ T5443] RIP: 0033:0x7fb3f2a7a819 [ 253.641318][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.641332][ T5443] RSP: 002b:00007fb3f14d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 253.665307][ T5443] RAX: ffffffffffffffda RBX: 00007fb3f2cf3fa0 RCX: 00007fb3f2a7a819 [ 253.665313][ T5443] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000080 [ 253.665318][ T5443] RBP: 00007fb3f14d5090 R08: 0000000000000000 R09: 0000000000000000 [ 253.665323][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.665328][ T5443] R13: 00007fb3f2cf4038 R14: 00007fb3f2cf3fa0 R15: 00007ffc5ab981a8 [ 253.665443][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 253.667042][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.675658][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.722112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.722248][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.722256][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.722355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.722490][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.722498][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.732333][ T5448] bridge_slave_0: FDB only supports static addresses [ 253.785935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.786102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.817158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.817386][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.817542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.817720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.818002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.818150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.818612][ T5438] device veth0_vlan entered promiscuous mode [ 253.823250][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.823442][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.825389][ T5438] device veth1_macvtap entered promiscuous mode [ 253.837185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.837468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.837641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.838644][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.838849][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.858687][ T5454] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 253.878391][ T5454] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 253.878824][ T5454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.879075][ T5454] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1468: Inode bitmap for bg 0 marked uninitialized [ 253.879210][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 253.886390][ T24] audit: type=1326 audit(1774714588.979:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 253.892435][ T24] audit: type=1326 audit(1774714588.979:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83e4de904e code=0x7ffc0000 [ 254.063583][ T24] audit: type=1326 audit(1774714588.979:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 254.063598][ T24] audit: type=1326 audit(1774714588.979:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 254.063612][ T24] audit: type=1326 audit(1774714588.979:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 254.063635][ T24] audit: type=1326 audit(1774714588.979:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 254.063650][ T24] audit: type=1326 audit(1774714588.979:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 254.063663][ T24] audit: type=1326 audit(1774714588.979:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f83e4e28819 code=0x7ffc0000 [ 254.164645][ T5462] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 254.294368][ T5468] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 254.444164][ T5473] erofs: (device loop1): mounted with root inode @ nid 36. [ 254.461158][ T5473] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 254.470147][ T5473] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 254.479351][ T5473] attempt to access beyond end of device [ 254.479351][ T5473] loop1: rw=524288, want=1072, limit=16 [ 254.490571][ T5473] attempt to access beyond end of device [ 254.490571][ T5473] loop1: rw=524288, want=24, limit=16 [ 254.502297][ T5473] attempt to access beyond end of device [ 254.502297][ T5473] loop1: rw=0, want=1064, limit=16 [ 254.568026][ T5461] EXT4-fs (loop8): Ignoring removed oldalloc option [ 254.577393][ T5461] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 254.607678][ T5461] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.687451][ T5468] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1471'. [ 254.706755][ T5468] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1471'. [ 254.729526][ T5461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 254.737701][ T5461] System zones: 0-1, 3-36 [ 254.744355][ T9] device bridge_slave_1 left promiscuous mode [ 254.754783][ T5461] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 254.772837][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.780573][ T9] device bridge_slave_0 left promiscuous mode [ 254.793064][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.801506][ T9] device veth1_macvtap left promiscuous mode [ 254.807524][ T9] device veth0_vlan left promiscuous mode [ 254.904065][ T5495] erofs: (device loop5): mounted with root inode @ nid 36. [ 254.912365][ T5495] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 254.921357][ T5495] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 254.930374][ T5495] attempt to access beyond end of device [ 254.930374][ T5495] loop5: rw=524288, want=1072, limit=16 [ 255.287343][ T5493] EXT4-fs (loop3): Ignoring removed oldalloc option [ 255.313238][ T5493] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 255.371563][ T5493] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.459777][ T5493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 255.489562][ T5493] System zones: 0-1, 3-36 [ 255.506659][ T5493] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 255.619090][ T5505] FAULT_INJECTION: forcing a failure. [ 255.619090][ T5505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.664482][ T5505] CPU: 1 PID: 5505 Comm: syz.1.1480 Not tainted syzkaller #0 [ 255.671874][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.681920][ T5505] Call Trace: [ 255.685202][ T5505] __dump_stack+0x21/0x24 [ 255.689518][ T5505] dump_stack_lvl+0x1a7/0x208 [ 255.694187][ T5505] ? show_regs_print_info+0x18/0x18 [ 255.699373][ T5505] ? vfs_write+0xb27/0xdc0 [ 255.703779][ T5505] dump_stack+0x15/0x1c [ 255.707920][ T5505] should_fail+0x3c1/0x510 [ 255.712322][ T5505] should_fail_usercopy+0x1a/0x20 [ 255.717334][ T5505] _copy_from_user+0x20/0xd0 [ 255.721920][ T5505] __se_sys_bpf+0x1bb/0x740 [ 255.726413][ T5505] ? __x64_sys_bpf+0x90/0x90 [ 255.730998][ T5505] ? debug_smp_processor_id+0x17/0x20 [ 255.736361][ T5505] __x64_sys_bpf+0x7b/0x90 [ 255.740766][ T5505] do_syscall_64+0x31/0x40 [ 255.745177][ T5505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 255.751052][ T5505] RIP: 0033:0x7fb3f2a7a819 [ 255.755452][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.775050][ T5505] RSP: 002b:00007fb3f14d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.783458][ T5505] RAX: ffffffffffffffda RBX: 00007fb3f2cf3fa0 RCX: 00007fb3f2a7a819 [ 255.791422][ T5505] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 255.799383][ T5505] RBP: 00007fb3f14d5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.807342][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.815309][ T5505] R13: 00007fb3f2cf4038 R14: 00007fb3f2cf3fa0 R15: 00007ffc5ab981a8 [ 256.050397][ T5509] netlink: 216 bytes leftover after parsing attributes in process `syz.7.1482'. [ 256.120574][ T5507] handle_bad_sector: 2 callbacks suppressed [ 256.120588][ T5507] attempt to access beyond end of device [ 256.120588][ T5507] loop1: rw=2049, want=1041, limit=128 [ 256.240530][ T5507] attempt to access beyond end of device [ 256.240530][ T5507] loop1: rw=524288, want=369, limit=128 [ 256.279749][ T5507] attempt to access beyond end of device [ 256.279749][ T5507] loop1: rw=0, want=153, limit=128 [ 256.299619][ T5507] attempt to access beyond end of device [ 256.299619][ T5507] loop1: rw=0, want=153, limit=128 [ 256.311655][ T5507] attempt to access beyond end of device [ 256.311655][ T5507] loop1: rw=0, want=153, limit=128 [ 256.322593][ T5507] attempt to access beyond end of device [ 256.322593][ T5507] loop1: rw=0, want=153, limit=128 [ 256.334721][ T5507] attempt to access beyond end of device [ 256.334721][ T5507] loop1: rw=0, want=153, limit=128 [ 256.348667][ T5507] attempt to access beyond end of device [ 256.348667][ T5507] loop1: rw=0, want=153, limit=128 [ 256.364068][ T5518] F2FS-fs (loop5): Invalid segment/section count (24 != 3 * 1) [ 256.374792][ T5518] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 256.410860][ T5507] attempt to access beyond end of device [ 256.410860][ T5507] loop1: rw=0, want=153, limit=128 [ 256.422995][ T5518] F2FS-fs (loop5): invalid crc value [ 256.461839][ T5507] attempt to access beyond end of device [ 256.461839][ T5507] loop1: rw=0, want=153, limit=128 [ 256.486644][ T5524] tipc: Invalid UDP bearer configuration [ 256.486667][ T5524] tipc: Enabling of bearer rejected, failed to enable media [ 256.525668][ T5507] Buffer I/O error on dev loop1, logical block 145, async page read [ 256.543967][ T5507] Buffer I/O error on dev loop1, logical block 146, async page read [ 256.562217][ T5518] F2FS-fs (loop5): Found nat_bits in checkpoint [ 256.582009][ T5507] Buffer I/O error on dev loop1, logical block 147, async page read [ 256.592526][ T5507] Buffer I/O error on dev loop1, logical block 148, async page read [ 256.602453][ T5507] Buffer I/O error on dev loop1, logical block 149, async page read [ 256.612384][ T5507] Buffer I/O error on dev loop1, logical block 150, async page read [ 256.624017][ T5507] Buffer I/O error on dev loop1, logical block 151, async page read [ 256.635285][ T5507] Buffer I/O error on dev loop1, logical block 152, async page read [ 256.647182][ T5507] Buffer I/O error on dev loop1, logical block 145, async page read [ 256.658385][ T5507] Buffer I/O error on dev loop1, logical block 146, async page read [ 256.672989][ T5518] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 256.692541][ T5518] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 256.792539][ T5534] FAULT_INJECTION: forcing a failure. [ 256.792539][ T5534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.819561][ T5534] CPU: 0 PID: 5534 Comm: syz.8.1487 Not tainted syzkaller #0 [ 256.826962][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.837009][ T5534] Call Trace: [ 256.840295][ T5534] __dump_stack+0x21/0x24 [ 256.844612][ T5534] dump_stack_lvl+0x1a7/0x208 [ 256.848277][ T5518] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 256.849279][ T5534] ? show_regs_print_info+0x18/0x18 [ 256.849296][ T5534] ? vfs_write+0xb27/0xdc0 [ 256.867692][ T5534] dump_stack+0x15/0x1c [ 256.871834][ T5534] should_fail+0x3c1/0x510 [ 256.876243][ T5534] should_fail_usercopy+0x1a/0x20 [ 256.881264][ T5534] _copy_from_user+0x20/0xd0 [ 256.885841][ T5534] __sys_bind+0x1f5/0x410 [ 256.890172][ T5534] ? __ia32_sys_socketpair+0xb0/0xb0 [ 256.895454][ T5534] ? debug_smp_processor_id+0x17/0x20 [ 256.899004][ T5518] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 256.900815][ T5534] __x64_sys_bind+0x7a/0x90 [ 256.900825][ T5534] do_syscall_64+0x31/0x40 [ 256.900838][ T5534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 256.900846][ T5534] RIP: 0033:0x7f83e4e28819 [ 256.900863][ T5534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.948479][ T5534] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 256.956886][ T5534] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 256.964860][ T5534] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.972821][ T5534] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 256.980784][ T5534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.988745][ T5534] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 257.279708][ T54] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 257.602981][ T5550] erofs: (device loop7): mounted with root inode @ nid 36. [ 257.631262][ T24] kauditd_printk_skb: 42 callbacks suppressed [ 257.631273][ T24] audit: type=1326 audit(1774714592.729:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.645907][ T5557] FAULT_INJECTION: forcing a failure. [ 257.645907][ T5557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.661643][ T24] audit: type=1326 audit(1774714592.729:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.677691][ T5556] ipt_REJECT: TCP_RESET invalid for non-tcp [ 257.697417][ T5549] erofs: (device loop7): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 257.712723][ T5549] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 257.727559][ T5557] CPU: 1 PID: 5557 Comm: syz.8.1493 Not tainted syzkaller #0 [ 257.732448][ T24] audit: type=1400 audit(1774714592.779:2074): avc: denied { connect } for pid=5552 comm="syz.3.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.734930][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.734934][ T5557] Call Trace: [ 257.734952][ T5557] __dump_stack+0x21/0x24 [ 257.734969][ T5557] dump_stack_lvl+0x1a7/0x208 [ 257.774013][ T24] audit: type=1326 audit(1774714592.819:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.776722][ T5557] ? show_regs_print_info+0x18/0x18 [ 257.776734][ T5557] dump_stack+0x15/0x1c [ 257.776750][ T5557] should_fail+0x3c1/0x510 [ 257.800506][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 257.805240][ T5557] should_fail_usercopy+0x1a/0x20 [ 257.805251][ T5557] strncpy_from_user+0x24/0x2e0 [ 257.805268][ T5557] bpf_prog_load+0x18c/0x14a0 [ 257.832541][ T24] audit: type=1326 audit(1774714592.819:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.834140][ T5557] ? avc_has_perm_noaudit+0x260/0x260 [ 257.834157][ T5557] ? map_freeze+0x320/0x320 [ 257.867308][ T5557] ? vfs_write+0xb27/0xdc0 [ 257.870430][ T24] audit: type=1326 audit(1774714592.819:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.871710][ T5557] ? selinux_bpf+0xc7/0xf0 [ 257.871727][ T5557] ? security_bpf+0x82/0xa0 [ 257.895281][ T24] audit: type=1326 audit(1774714592.969:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.899258][ T5557] __se_sys_bpf+0x49a/0x740 [ 257.899272][ T5557] ? __x64_sys_bpf+0x90/0x90 [ 257.903936][ T24] audit: type=1326 audit(1774714592.969:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.927057][ T5557] ? debug_smp_processor_id+0x17/0x20 [ 257.927066][ T5557] __x64_sys_bpf+0x7b/0x90 [ 257.927075][ T5557] do_syscall_64+0x31/0x40 [ 257.927088][ T5557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 257.927096][ T5557] RIP: 0033:0x7f83e4e28819 [ 257.927108][ T5557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.927114][ T5557] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.927133][ T5557] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 257.939632][ T24] audit: type=1326 audit(1774714593.029:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 257.959752][ T5557] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 257.959759][ T5557] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 257.959765][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.959772][ T5557] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 257.983089][ T5561] ip6_tunnel: non-ECT from 0000:0000:0001:0000:0000:0000:0000:0000 with DS=0x7 [ 257.997036][ T24] audit: type=1326 audit(1774714593.029:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 258.189786][ T54] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 258.198253][ T54] usb 6-1: config 0 has no interface number 0 [ 258.530851][ T5574] FAULT_INJECTION: forcing a failure. [ 258.530851][ T5574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.543960][ T5574] CPU: 1 PID: 5574 Comm: syz.7.1502 Not tainted syzkaller #0 [ 258.551309][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.561336][ T5574] Call Trace: [ 258.564605][ T5574] __dump_stack+0x21/0x24 [ 258.568902][ T5574] dump_stack_lvl+0x1a7/0x208 [ 258.573547][ T5574] ? thaw_kernel_threads+0x220/0x220 [ 258.578800][ T5574] ? vsnprintf+0x189c/0x1990 [ 258.583367][ T5574] ? show_regs_print_info+0x18/0x18 [ 258.588533][ T5574] dump_stack+0x15/0x1c [ 258.592657][ T5574] should_fail+0x3c1/0x510 [ 258.597041][ T5574] should_fail_usercopy+0x1a/0x20 [ 258.599685][ T2321] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 258.602042][ T5574] _copy_to_user+0x20/0x90 [ 258.602053][ T5574] simple_read_from_buffer+0xe9/0x160 [ 258.602070][ T5574] proc_fail_nth_read+0x1a6/0x220 [ 258.624281][ T5574] ? proc_fault_inject_write+0x310/0x310 [ 258.629880][ T5574] ? rw_verify_area+0x1c0/0x360 [ 258.634708][ T5574] ? proc_fault_inject_write+0x310/0x310 [ 258.640311][ T5574] vfs_read+0x209/0xa60 [ 258.644434][ T5574] ? kernel_read+0x70/0x70 [ 258.648817][ T5574] ? __kasan_check_write+0x14/0x20 [ 258.649617][ T54] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.653907][ T5574] ? mutex_lock+0x92/0xf0 [ 258.653917][ T5574] ? mutex_trylock+0xa0/0xa0 [ 258.653926][ T5574] ? __fget_files+0x2c4/0x320 [ 258.653935][ T5574] ? __fdget_pos+0x2d2/0x380 [ 258.653964][ T5574] ? ksys_read+0x71/0x250 [ 258.663307][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.667258][ T5574] ksys_read+0x149/0x250 [ 258.667268][ T5574] ? vfs_write+0xdc0/0xdc0 [ 258.667285][ T5574] ? debug_smp_processor_id+0x17/0x20 [ 258.672736][ T54] usb 6-1: Product: syz [ 258.676502][ T5574] __x64_sys_read+0x7b/0x90 [ 258.676513][ T5574] do_syscall_64+0x31/0x40 [ 258.676525][ T5574] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 258.676533][ T5574] RIP: 0033:0x7ffac1f3504e [ 258.676550][ T5574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.681523][ T54] usb 6-1: Manufacturer: syz [ 258.685420][ T5574] RSP: 002b:00007ffac09cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.685432][ T5574] RAX: ffffffffffffffda RBX: 00007ffac09cf6c0 RCX: 00007ffac1f3504e [ 258.685446][ T5574] RDX: 000000000000000f RSI: 00007ffac09cf0a0 RDI: 0000000000000004 [ 258.693758][ T54] usb 6-1: SerialNumber: syz [ 258.697615][ T5574] RBP: 00007ffac09cf090 R08: 0000000000000000 R09: 0000000000000000 [ 258.697621][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.697628][ T5574] R13: 00007ffac21ee038 R14: 00007ffac21edfa0 R15: 00007ffc4612ed68 [ 258.809612][ T54] usb 6-1: config 0 descriptor?? [ 258.850166][ T54] smsc95xx v2.0.0 [ 258.894932][ T882] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 258.944879][ T5583] netlink: 216 bytes leftover after parsing attributes in process `syz.8.1506'. [ 258.962706][ T5585] FAULT_INJECTION: forcing a failure. [ 258.962706][ T5585] name failslab, interval 1, probability 0, space 0, times 0 [ 258.975442][ T5585] CPU: 1 PID: 5585 Comm: syz.8.1507 Not tainted syzkaller #0 [ 258.982798][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.992824][ T5585] Call Trace: [ 258.996083][ T5585] __dump_stack+0x21/0x24 [ 259.000383][ T5585] dump_stack_lvl+0x1a7/0x208 [ 259.005031][ T5585] ? thaw_kernel_threads+0x220/0x220 [ 259.010296][ T5585] ? show_regs_print_info+0x18/0x18 [ 259.015464][ T5585] ? unwind_get_return_address+0x4d/0x90 [ 259.021078][ T5585] ? stack_trace_save+0xf0/0xf0 [ 259.025907][ T5585] dump_stack+0x15/0x1c [ 259.030031][ T5585] should_fail+0x3c1/0x510 [ 259.034418][ T5585] ? __get_vm_area_node+0x113/0x450 [ 259.039583][ T5585] __should_failslab+0xa4/0xe0 [ 259.044315][ T5585] should_failslab+0x9/0x20 [ 259.048789][ T5585] kmem_cache_alloc_trace+0x3a/0x2e0 [ 259.054039][ T5585] __get_vm_area_node+0x113/0x450 [ 259.059032][ T5585] __vmalloc_node_range+0xe0/0x790 [ 259.064112][ T5585] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.069632][ T5585] ? _kstrtoull+0x3c0/0x4d0 [ 259.074117][ T5585] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.079644][ T5585] __vmalloc+0x79/0x90 [ 259.083684][ T5585] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.089207][ T5585] bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.089588][ T2321] usb 2-1: device descriptor read/64, error -71 [ 259.094566][ T5585] ? bpf_prog_alloc+0x17/0x1f0 [ 259.094577][ T5585] bpf_prog_alloc+0x21/0x1f0 [ 259.094593][ T5585] bpf_prog_load+0x7c4/0x14a0 [ 259.114751][ T5585] ? map_freeze+0x320/0x320 [ 259.119229][ T5585] ? vfs_write+0xb27/0xdc0 [ 259.123616][ T5585] ? selinux_bpf+0xc7/0xf0 [ 259.127999][ T5585] ? security_bpf+0x82/0xa0 [ 259.132482][ T5585] __se_sys_bpf+0x49a/0x740 [ 259.136964][ T5585] ? __x64_sys_bpf+0x90/0x90 [ 259.141613][ T5585] ? debug_smp_processor_id+0x17/0x20 [ 259.146956][ T5585] __x64_sys_bpf+0x7b/0x90 [ 259.151347][ T5585] do_syscall_64+0x31/0x40 [ 259.155737][ T5585] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 259.161601][ T5585] RIP: 0033:0x7f83e4e28819 [ 259.166023][ T5585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.185600][ T5585] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.193984][ T5585] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 259.201929][ T5585] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 259.209871][ T5585] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 259.217810][ T5585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.225754][ T5585] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 259.234940][ T5585] syz.8.1507: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 259.249757][ T54] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 259.253760][ T5585] CPU: 1 PID: 5585 Comm: syz.8.1507 Not tainted syzkaller #0 [ 259.261507][ T54] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 259.267203][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.267208][ T5585] Call Trace: [ 259.267269][ T5585] __dump_stack+0x21/0x24 [ 259.267283][ T5585] dump_stack_lvl+0x1a7/0x208 [ 259.267302][ T5585] ? show_regs_print_info+0x18/0x18 [ 259.283019][ T54] usb 6-1: USB disconnect, device number 18 [ 259.283914][ T5585] ? pr_cont_kernfs_name+0xe3/0xf0 [ 259.312250][ T5585] dump_stack+0x15/0x1c [ 259.316378][ T5585] warn_alloc+0x1dc/0x200 [ 259.320679][ T5585] ? __get_vm_area_node+0x113/0x450 [ 259.325847][ T5585] ? zone_watermark_ok_safe+0x250/0x250 [ 259.331370][ T5585] ? __get_vm_area_node+0x345/0x450 [ 259.336541][ T5585] __vmalloc_node_range+0x27d/0x790 [ 259.341709][ T5585] ? _kstrtoull+0x3c0/0x4d0 [ 259.346181][ T5585] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.351725][ T5585] __vmalloc+0x79/0x90 [ 259.355770][ T5585] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.361301][ T5585] bpf_prog_alloc_no_stats+0x3b/0x250 [ 259.366641][ T5585] ? bpf_prog_alloc+0x17/0x1f0 [ 259.371376][ T5585] bpf_prog_alloc+0x21/0x1f0 [ 259.375935][ T5585] bpf_prog_load+0x7c4/0x14a0 [ 259.380589][ T5585] ? map_freeze+0x320/0x320 [ 259.385064][ T5585] ? vfs_write+0xb27/0xdc0 [ 259.389449][ T5585] ? selinux_bpf+0xc7/0xf0 [ 259.393840][ T5585] ? security_bpf+0x82/0xa0 [ 259.398314][ T5585] __se_sys_bpf+0x49a/0x740 [ 259.402791][ T5585] ? __x64_sys_bpf+0x90/0x90 [ 259.407351][ T5585] ? debug_smp_processor_id+0x17/0x20 [ 259.412695][ T5585] __x64_sys_bpf+0x7b/0x90 [ 259.417091][ T5585] do_syscall_64+0x31/0x40 [ 259.421477][ T5585] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 259.427372][ T5585] RIP: 0033:0x7f83e4e28819 [ 259.431762][ T5585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.451342][ T5585] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.459727][ T5585] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 259.467669][ T5585] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 259.475619][ T5585] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 259.483563][ T5585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.491507][ T5585] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 259.500369][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.500409][ T5585] Mem-Info: [ 259.514434][ T5585] active_anon:158 inactive_anon:15912 isolated_anon:0 [ 259.514434][ T5585] active_file:15527 inactive_file:7140 isolated_file:0 [ 259.514434][ T5585] unevictable:0 dirty:98 writeback:0 [ 259.514434][ T5585] slab_reclaimable:8364 slab_unreclaimable:73802 [ 259.514434][ T5585] mapped:31829 shmem:6572 pagetables:747 bounce:0 [ 259.514434][ T5585] free:1547576 free_pcp:1429 free_cma:0 [ 259.515809][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.551658][ T5585] Node 0 active_anon:632kB inactive_anon:63648kB active_file:62108kB inactive_file:28560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127316kB dirty:392kB writeback:0kB shmem:26288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4704kB all_unreclaimable? no [ 259.562967][ T882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.590995][ T5585] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1432kB free_cma:0kB [ 259.603640][ T15] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 259.632443][ T5585] lowmem_reserve[]: 0 3941 3941 [ 259.644544][ T5585] Normal free:3209056kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:432kB inactive_anon:61548kB active_file:62108kB inactive_file:28560kB unevictable:0kB writepending:392kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:2988kB bounce:0kB free_pcp:2776kB local_pcp:1492kB free_cma:0kB [ 259.661954][ T882] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.684266][ T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.685272][ T5585] lowmem_reserve[]: [ 259.695612][ T882] usb 4-1: config 0 descriptor?? [ 259.701746][ T5585] 0 0 0 [ 259.707398][ T5585] DMA32: 7*4kB (UM) 5*8kB (M) 5*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 259.724154][ T2321] usb 2-1: device descriptor read/64, error -71 [ 259.730555][ T5585] Normal: 360*4kB (UME) 623*8kB (UME) 306*16kB (UME) 427*32kB (UME) 252*64kB (UME) 231*128kB (UME) 85*256kB (UME) 44*512kB (UME) 20*1024kB (UME) 10*2048kB (UME) 750*4096kB (UM) = 3227928kB [ 259.749906][ T5585] 24745 total pagecache pages [ 259.754647][ T5585] 561 pages in swap cache [ 259.759015][ T5585] Swap cache stats: add 3606, delete 3045, find 1543/1543 [ 259.767108][ T5585] Free swap = 122376kB [ 259.772024][ T5585] Total swap = 124996kB [ 259.776225][ T5585] 2097051 pages RAM [ 259.780158][ T5585] 0 pages HighMem/MovableOnly [ 259.784879][ T5585] 341390 pages reserved [ 259.789007][ T5585] 0 pages cma reserved [ 259.793654][ T5591] exfat: Deprecated parameter 'namecase' [ 259.799398][ T5591] exfat: Deprecated parameter 'namecase' [ 259.828625][ T5591] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2a40b14e, utbl_chksum : 0xe619d30d) [ 259.975208][ T5605] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 259.996333][ T5605] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 260.004356][ T2321] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 260.010025][ T5605] EXT4-fs (loop8): orphan cleanup on readonly fs [ 260.018422][ T5605] EXT4-fs error (device loop8): ext4_read_inode_bitmap:168: comm syz.8.1514: Inode bitmap for bg 0 marked uninitialized [ 260.031468][ T5605] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 260.056867][ T5605] FAULT_INJECTION: forcing a failure. [ 260.056867][ T5605] name failslab, interval 1, probability 0, space 0, times 0 [ 260.069781][ T5605] CPU: 0 PID: 5605 Comm: syz.8.1514 Not tainted syzkaller #0 [ 260.077150][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.087190][ T5605] Call Trace: [ 260.090464][ T5605] __dump_stack+0x21/0x24 [ 260.094765][ T5605] dump_stack_lvl+0x1a7/0x208 [ 260.099420][ T5605] ? thaw_kernel_threads+0x220/0x220 [ 260.104681][ T5605] ? show_regs_print_info+0x18/0x18 [ 260.109857][ T5605] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 260.116417][ T5605] dump_stack+0x15/0x1c [ 260.120545][ T5605] should_fail+0x3c1/0x510 [ 260.124937][ T5605] ? getname_flags+0xb9/0x500 [ 260.129589][ T5605] __should_failslab+0xa4/0xe0 [ 260.134329][ T5605] should_failslab+0x9/0x20 [ 260.138805][ T5605] kmem_cache_alloc+0x3d/0x2d0 [ 260.143541][ T5605] getname_flags+0xb9/0x500 [ 260.148015][ T5605] getname+0x19/0x20 [ 260.151883][ T5605] do_sys_openat2+0xde/0x750 [ 260.156447][ T5605] ? __kasan_check_write+0x14/0x20 [ 260.161547][ T5605] ? fput_many+0x15a/0x1a0 [ 260.165957][ T5605] ? do_sys_open+0xe0/0xe0 [ 260.170354][ T5605] ? fput+0x1a/0x20 [ 260.174144][ T5605] ? ksys_write+0x1f4/0x250 [ 260.178622][ T5605] ? __ia32_sys_read+0x90/0x90 [ 260.183362][ T5605] ? ____fput+0x15/0x20 [ 260.187491][ T5605] __x64_sys_open+0x11c/0x140 [ 260.192159][ T5605] do_syscall_64+0x31/0x40 [ 260.196555][ T5605] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.202419][ T5605] RIP: 0033:0x7f83e4e28819 [ 260.206810][ T5605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.226393][ T5605] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 260.234780][ T5605] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 260.242725][ T5605] RDX: 0000000000000009 RSI: 0000000000004000 RDI: 0000200000000380 [ 260.250671][ T5605] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 260.258616][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.266560][ T5605] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 260.289629][ T15] usb 8-1: unable to get BOS descriptor or descriptor too short [ 260.320024][ T5572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.344619][ T5612] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1515'. [ 260.357087][ T5572] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 260.377236][ T5572] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2797: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 260.390474][ T5572] EXT4-fs (loop3): 1 truncate cleaned up [ 260.396093][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue [ 260.399680][ T15] usb 8-1: config 163 has an invalid interface number: 231 but max is 0 [ 260.441160][ T5620] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 260.448493][ T15] usb 8-1: config 163 has no interface number 0 [ 260.448542][ T5620] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.454765][ T15] usb 8-1: config 163 interface 231 has no altsetting 0 [ 260.467873][ T5620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 260.474609][ T882] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x4 [ 260.482335][ T5620] System zones: 0-1, 3-36 [ 260.489962][ T2321] usb 2-1: device descriptor read/64, error -71 [ 260.494770][ T5620] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 260.500236][ T882] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 260.518424][ T5620] FAULT_INJECTION: forcing a failure. [ 260.518424][ T5620] name failslab, interval 1, probability 0, space 0, times 0 [ 260.529566][ T882] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 260.544315][ T5620] CPU: 1 PID: 5620 Comm: syz.8.1518 Not tainted syzkaller #0 [ 260.557663][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.567960][ T5620] Call Trace: [ 260.571230][ T5620] __dump_stack+0x21/0x24 [ 260.575532][ T5620] dump_stack_lvl+0x1a7/0x208 [ 260.580185][ T5620] ? show_regs_print_info+0x18/0x18 [ 260.585363][ T5620] dump_stack+0x15/0x1c [ 260.589496][ T5620] should_fail+0x3c1/0x510 [ 260.593889][ T5620] ? mempool_alloc_slab+0x1d/0x30 [ 260.598892][ T5620] __should_failslab+0xa4/0xe0 [ 260.603636][ T5620] should_failslab+0x9/0x20 [ 260.608112][ T5620] kmem_cache_alloc+0x3d/0x2d0 [ 260.612852][ T5620] mempool_alloc_slab+0x1d/0x30 [ 260.617675][ T5620] ? mempool_free+0x340/0x340 [ 260.622326][ T5620] mempool_alloc+0x11e/0x460 [ 260.626887][ T5620] ? mempool_resize+0x840/0x840 [ 260.631712][ T5620] ? _raw_spin_lock+0x94/0xf0 [ 260.636362][ T5620] ? __kasan_check_write+0x14/0x20 [ 260.641451][ T5620] bio_alloc_bioset+0x18c/0x570 [ 260.646276][ T5620] ? write_boundary_block+0x150/0x150 [ 260.651619][ T5620] submit_bh_wbc+0x1c6/0x6f0 [ 260.656181][ T5620] ? __wait_on_buffer+0x80/0x80 [ 260.660998][ T5620] submit_bh+0x2a/0x40 [ 260.665038][ T5620] ext4_read_bh_nowait+0x15c/0x1e0 [ 260.670119][ T5620] ext4_read_bh_lock+0x9a/0xb0 [ 260.674858][ T5620] ext4_bread_batch+0x402/0x790 [ 260.679683][ T5620] ? ext4_buffer_uptodate+0x100/0x100 [ 260.685026][ T5620] ? stack_trace_save+0xa6/0xf0 [ 260.689846][ T5620] __ext4_find_entry+0xf7a/0x1aa0 [ 260.694930][ T5620] ? __kasan_slab_alloc+0xcf/0xf0 [ 260.699923][ T5620] ? __kasan_slab_alloc+0xbd/0xf0 [ 260.704920][ T5620] ? filename_create+0x1d5/0x680 [ 260.709829][ T5620] ? ext4_ci_compare+0x3f0/0x3f0 [ 260.714740][ T5620] ? ext4_fname_setup_ci_filename+0x70/0x470 [ 260.720690][ T5620] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 260.726813][ T5620] ext4_lookup+0x305/0x8d0 [ 260.731203][ T5620] ? ext4_add_entry+0xfa0/0xfa0 [ 260.736029][ T5620] ? __d_alloc+0x4b8/0x6a0 [ 260.740416][ T5620] ? _raw_spin_unlock+0x4d/0x70 [ 260.745233][ T5620] ? d_alloc+0x1f5/0x260 [ 260.749447][ T5620] __lookup_hash+0x114/0x250 [ 260.754011][ T5620] filename_create+0x1d5/0x680 [ 260.758745][ T5620] ? kern_path_create+0x40/0x40 [ 260.763567][ T5620] ? getname_flags+0x206/0x500 [ 260.768299][ T5620] do_mkdirat+0x5e/0x340 [ 260.772514][ T5620] __x64_sys_mkdir+0x60/0x70 [ 260.777074][ T5620] do_syscall_64+0x31/0x40 [ 260.781474][ T5620] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.787336][ T5620] RIP: 0033:0x7f83e4e28819 [ 260.791728][ T5620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.811314][ T5620] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 260.819699][ T5620] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 260.827649][ T5620] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000080 [ 260.835592][ T5620] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 260.843534][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.851479][ T5620] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 260.896577][ T446] usb 4-1: USB disconnect, device number 35 [ 260.907201][ T5624] fido_id[5624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 260.979587][ T15] usb 8-1: New USB device found, idVendor=19d2, idProduct=1108, bcdDevice=ea.be [ 260.988670][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.996676][ T15] usb 8-1: Product: syz [ 261.000963][ T15] usb 8-1: Manufacturer: syz [ 261.005547][ T15] usb 8-1: SerialNumber: syz [ 261.040123][ T5633] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 261.052392][ T5637] udc-core: couldn't find an available UDC or it's busy [ 261.060260][ T5637] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 261.074168][ T5633] EXT4-fs error (device loop8): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 261.088872][ T5633] EXT4-fs (loop8): 1 orphan inode deleted [ 261.094703][ T5633] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 261.125535][ T5633] incfs: Can't find or create .index dir in ./file0 [ 261.132279][ T5633] incfs: mount failed -28 [ 261.137549][ T5633] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.1520: invalid indirect mapped block 234881024 (level 0) [ 261.242539][ T5644] FAULT_INJECTION: forcing a failure. [ 261.242539][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 261.257408][ T5644] CPU: 1 PID: 5644 Comm: syz.8.1525 Not tainted syzkaller #0 [ 261.264774][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.274810][ T5644] Call Trace: [ 261.278108][ T5644] __dump_stack+0x21/0x24 [ 261.282432][ T5644] dump_stack_lvl+0x1a7/0x208 [ 261.287100][ T5644] ? show_regs_print_info+0x18/0x18 [ 261.292293][ T5644] ? __get_vm_area_node+0x113/0x450 [ 261.297490][ T5644] dump_stack+0x15/0x1c [ 261.301639][ T5644] should_fail+0x3c1/0x510 [ 261.306052][ T5644] ? alloc_vmap_area+0x178/0x1a20 [ 261.311070][ T5644] __should_failslab+0xa4/0xe0 [ 261.315832][ T5644] should_failslab+0x9/0x20 [ 261.320324][ T5644] kmem_cache_alloc+0x3d/0x2d0 [ 261.325073][ T5644] alloc_vmap_area+0x178/0x1a20 [ 261.329908][ T5644] ? vm_map_ram+0x9c0/0x9c0 [ 261.334400][ T5644] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 261.340020][ T5644] ? __get_vm_area_node+0x113/0x450 [ 261.345197][ T5644] __get_vm_area_node+0x147/0x450 [ 261.350199][ T5644] __vmalloc_node_range+0xe0/0x790 [ 261.355285][ T5644] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 261.360810][ T5644] ? _kstrtoull+0x3c0/0x4d0 [ 261.365296][ T5644] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 261.370829][ T5644] __vmalloc+0x79/0x90 [ 261.374871][ T5644] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 261.380392][ T5644] bpf_prog_alloc_no_stats+0x3b/0x250 [ 261.385737][ T5644] ? bpf_prog_alloc+0x17/0x1f0 [ 261.390473][ T5644] bpf_prog_alloc+0x21/0x1f0 [ 261.395037][ T5644] bpf_prog_load+0x7c4/0x14a0 [ 261.399687][ T5644] ? map_freeze+0x320/0x320 [ 261.404164][ T5644] ? vfs_write+0xb27/0xdc0 [ 261.408559][ T5644] ? selinux_bpf+0xc7/0xf0 [ 261.412957][ T5644] ? security_bpf+0x82/0xa0 [ 261.417433][ T5644] __se_sys_bpf+0x49a/0x740 [ 261.421912][ T5644] ? __x64_sys_bpf+0x90/0x90 [ 261.426483][ T5644] ? debug_smp_processor_id+0x17/0x20 [ 261.431833][ T5644] __x64_sys_bpf+0x7b/0x90 [ 261.436223][ T5644] do_syscall_64+0x31/0x40 [ 261.440616][ T5644] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 261.446484][ T5644] RIP: 0033:0x7f83e4e28819 [ 261.450876][ T5644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.470454][ T5644] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.478844][ T5644] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 261.486791][ T5644] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 261.494739][ T5644] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 261.502685][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.510639][ T5644] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 261.521595][ T2321] usb usb2-port1: attempt power cycle [ 261.527496][ T15] usb 8-1: USB disconnect, device number 3 [ 261.533765][ T5646] EXT4-fs (loop5): dax option not supported [ 261.970374][ T5653] erofs: (device loop8): mounted with root inode @ nid 36. [ 262.017162][ T5653] erofs: (device loop8): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 262.026209][ T5653] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 262.035538][ T5653] handle_bad_sector: 4718 callbacks suppressed [ 262.035557][ T5653] attempt to access beyond end of device [ 262.035557][ T5653] loop8: rw=524288, want=1072, limit=16 [ 262.052949][ T5653] attempt to access beyond end of device [ 262.052949][ T5653] loop8: rw=524288, want=24, limit=16 [ 262.071442][ T5653] attempt to access beyond end of device [ 262.071442][ T5653] loop8: rw=0, want=1064, limit=16 [ 262.138419][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1531'. [ 262.185039][ T5667] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 262.195080][ T5667] EXT4-fs error (device loop7): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 262.209772][ T5667] EXT4-fs (loop7): 1 orphan inode deleted [ 262.215573][ T5667] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 262.237286][ T2321] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 262.269705][ T5667] incfs: Can't find or create .index dir in ./file0 [ 262.284295][ T5667] incfs: mount failed -28 [ 262.293997][ T5675] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1536'. [ 262.308006][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1536'. [ 262.316176][ T5677] FAULT_INJECTION: forcing a failure. [ 262.316176][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 262.321396][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1536'. [ 262.329638][ T5677] CPU: 1 PID: 5677 Comm: syz.3.1538 Not tainted syzkaller #0 [ 262.338575][ T5675] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1536'. [ 262.345617][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.345622][ T5677] Call Trace: [ 262.345640][ T5677] __dump_stack+0x21/0x24 [ 262.345649][ T5677] dump_stack_lvl+0x1a7/0x208 [ 262.345658][ T5677] ? thaw_kernel_threads+0x220/0x220 [ 262.345667][ T5677] ? show_regs_print_info+0x18/0x18 [ 262.345676][ T5677] dump_stack+0x15/0x1c [ 262.345685][ T5677] should_fail+0x3c1/0x510 [ 262.345696][ T5677] ? __vmalloc_node_range+0x29f/0x790 [ 262.345707][ T5677] __should_failslab+0xa4/0xe0 [ 262.345716][ T5677] should_failslab+0x9/0x20 [ 262.345725][ T5677] __kmalloc+0x60/0x330 [ 262.345743][ T5677] __vmalloc_node_range+0x29f/0x790 [ 262.419722][ T5677] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 262.425244][ T5677] __vmalloc+0x79/0x90 [ 262.429285][ T5677] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 262.434800][ T5677] bpf_prog_alloc_no_stats+0x3b/0x250 [ 262.440156][ T5677] ? bpf_prog_alloc+0x17/0x1f0 [ 262.444909][ T5677] bpf_prog_alloc+0x21/0x1f0 [ 262.449570][ T5677] bpf_prog_load+0x7c4/0x14a0 [ 262.454219][ T5677] ? map_freeze+0x320/0x320 [ 262.458701][ T5677] ? vfs_write+0xb27/0xdc0 [ 262.463095][ T5677] ? selinux_bpf+0xc7/0xf0 [ 262.467486][ T5677] ? security_bpf+0x82/0xa0 [ 262.471964][ T5677] __se_sys_bpf+0x49a/0x740 [ 262.476444][ T5677] ? __x64_sys_bpf+0x90/0x90 [ 262.481015][ T5677] ? debug_smp_processor_id+0x17/0x20 [ 262.486358][ T5677] __x64_sys_bpf+0x7b/0x90 [ 262.490750][ T5677] do_syscall_64+0x31/0x40 [ 262.495141][ T5677] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 262.501017][ T5677] RIP: 0033:0x7f9f63b60819 [ 262.505428][ T5677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.525021][ T5677] RSP: 002b:00007f9f625bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.533424][ T5677] RAX: ffffffffffffffda RBX: 00007f9f63dd9fa0 RCX: 00007f9f63b60819 [ 262.541382][ T5677] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 262.549340][ T5677] RBP: 00007f9f625bb090 R08: 0000000000000000 R09: 0000000000000000 [ 262.557295][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.565258][ T5677] R13: 00007f9f63dda038 R14: 00007f9f63dd9fa0 R15: 00007fff47a32448 [ 262.635997][ T5679] erofs: (device loop8): mounted with root inode @ nid 36. [ 262.659551][ T2321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.700785][ T5679] erofs: (device loop8): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 262.701045][ T2321] usb 2-1: not running at top speed; connect to a high speed hub [ 262.709821][ T5679] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 262.726871][ T5679] attempt to access beyond end of device [ 262.726871][ T5679] loop8: rw=524288, want=1072, limit=16 [ 262.738495][ T5679] attempt to access beyond end of device [ 262.738495][ T5679] loop8: rw=524288, want=24, limit=16 [ 262.749629][ T5679] attempt to access beyond end of device [ 262.749629][ T5679] loop8: rw=0, want=1064, limit=16 [ 262.778380][ T5684] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue [ 262.789539][ T2321] usb 2-1: config 8 has an invalid interface number: 5 but max is 0 [ 262.789615][ T2321] usb 2-1: config 8 has an invalid descriptor of length 223, skipping remainder of the config [ 262.808625][ T5684] tipc: Started in network mode [ 262.814727][ T2321] usb 2-1: config 8 has no interface number 0 [ 262.817115][ T5684] tipc: Own node identity 84e, cluster identity 4711 [ 262.821404][ T2321] usb 2-1: config 8 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 262.828546][ T5684] tipc: 32-bit node address hash set to 84e [ 262.840348][ T2321] usb 2-1: config 8 interface 5 has no altsetting 0 [ 262.919543][ T446] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 262.955683][ T5703] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 262.964398][ T5703] EXT4-fs error (device loop7): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 262.978799][ T5703] EXT4-fs (loop7): 1 orphan inode deleted [ 262.984641][ T5703] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 263.008815][ T5703] incfs: Can't find or create .index dir in ./file0 [ 263.015985][ T5703] incfs: mount failed -28 [ 263.016283][ T2321] usb 2-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=87.a6 [ 263.029405][ T2321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.037453][ T2321] usb 2-1: Product: syz [ 263.041651][ T2321] usb 2-1: Manufacturer: syz [ 263.046237][ T2321] usb 2-1: SerialNumber: syz [ 263.219508][ T15] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 263.294641][ T5712] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1549'. [ 263.303785][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1549'. [ 263.312796][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1549'. [ 263.349566][ T446] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.360095][ T5714] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 263.367564][ T5714] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.380278][ T5714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 263.388414][ T5714] System zones: 0-1, 3-36 [ 263.391034][ T2321] usb 2-1: USB disconnect, device number 29 [ 263.400575][ T409] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 263.408552][ T5714] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 263.429585][ T446] usb 4-1: config 163 has an invalid interface number: 231 but max is 0 [ 263.438086][ T446] usb 4-1: config 163 has no interface number 0 [ 263.444792][ T446] usb 4-1: config 163 interface 231 has no altsetting 0 [ 263.469519][ T15] usb 6-1: Using ep0 maxpacket: 32 [ 263.512604][ T5718] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 263.589542][ T15] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 263.597650][ T15] usb 6-1: config 0 has no interface number 0 [ 263.619574][ T446] usb 4-1: New USB device found, idVendor=19d2, idProduct=1108, bcdDevice=ea.be [ 263.628660][ T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.636913][ T446] usb 4-1: Product: syz [ 263.641175][ T446] usb 4-1: Manufacturer: syz [ 263.645754][ T446] usb 4-1: SerialNumber: syz [ 263.759557][ T409] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 263.767577][ T409] usb 8-1: config 0 has no interface number 0 [ 263.773670][ T409] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 263.784370][ T409] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 263.795327][ T409] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 263.806093][ T409] usb 8-1: config 0 interface 2 has no altsetting 0 [ 263.810691][ T15] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 263.821775][ T882] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 263.829427][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.837482][ T15] usb 6-1: Product: syz [ 263.841712][ T15] usb 6-1: Manufacturer: syz [ 263.846294][ T15] usb 6-1: SerialNumber: syz [ 263.853836][ T15] usb 6-1: config 0 descriptor?? [ 263.891167][ T15] smsc95xx v2.0.0 [ 263.970449][ T446] usb 4-1: USB disconnect, device number 36 [ 263.989565][ T409] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 263.998648][ T409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.006651][ T409] usb 8-1: Product: syz [ 264.010967][ T409] usb 8-1: Manufacturer: syz [ 264.015531][ T409] usb 8-1: SerialNumber: syz [ 264.020741][ T409] usb 8-1: config 0 descriptor?? [ 264.039564][ T5709] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 264.046566][ T5709] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 264.099848][ T882] usb 9-1: device descriptor read/64, error -71 [ 264.149591][ T54] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 264.299891][ T5706] udc-core: couldn't find an available UDC or it's busy [ 264.306970][ T5706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 264.317613][ T5706] udc-core: couldn't find an available UDC or it's busy [ 264.324665][ T5706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 264.334587][ T409] usb 8-1: USB disconnect, device number 4 [ 264.339594][ T15] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 264.351451][ T15] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.499554][ T882] usb 9-1: device descriptor read/64, error -71 [ 264.559636][ T54] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.771858][ T15] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 264.782731][ T882] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 264.790435][ T15] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 264.798079][ T15] usb 6-1: USB disconnect, device number 19 [ 264.804209][ T54] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 264.815069][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.826931][ T54] usb 2-1: Product: syz [ 264.831227][ T54] usb 2-1: Manufacturer: syz [ 264.835955][ T54] usb 2-1: SerialNumber: syz [ 265.059509][ T882] usb 9-1: device descriptor read/64, error -71 [ 265.089514][ T409] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 265.316342][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 265.316353][ T24] audit: type=1400 audit(1774714600.409:2129): avc: denied { execute_no_trans } for pid=5738 comm="syz.3.1560" path="/289/file1" dev="tmpfs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 265.329541][ T409] usb 8-1: Using ep0 maxpacket: 32 [ 265.431001][ T5744] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.440885][ T5744] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 265.450059][ T882] usb 9-1: device descriptor read/64, error -71 [ 265.450441][ T5744] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 265.464633][ T5744] System zones: 0-2, 18-18, 34-35 [ 265.470216][ T5744] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 265.519547][ T409] usb 8-1: unable to get BOS descriptor or descriptor too short [ 265.549650][ T15] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 265.579615][ T882] usb usb9-port1: attempt power cycle [ 265.599589][ T409] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.609826][ T409] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.619205][ T409] usb 8-1: config 1 has no interface number 0 [ 265.625850][ T409] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 265.636699][ T409] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.711135][ T54] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 265.714041][ T5753] FAT-fs (loop1): Directory bread(block 64) failed [ 265.724794][ T5753] FAT-fs (loop1): Directory bread(block 65) failed [ 265.731454][ T5753] FAT-fs (loop1): Directory bread(block 66) failed [ 265.737941][ T5753] FAT-fs (loop1): Directory bread(block 67) failed [ 265.744589][ T5753] FAT-fs (loop1): Directory bread(block 68) failed [ 265.749168][ T54] usb 2-1: USB disconnect, device number 30 [ 265.759614][ T5753] FAT-fs (loop1): Directory bread(block 69) failed [ 265.766225][ T5753] FAT-fs (loop1): Directory bread(block 70) failed [ 265.772811][ T5753] FAT-fs (loop1): Directory bread(block 71) failed [ 265.779342][ T5753] FAT-fs (loop1): Directory bread(block 72) failed [ 265.785940][ T5753] FAT-fs (loop1): Directory bread(block 73) failed [ 265.799586][ T446] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 265.889550][ T409] usb 8-1: string descriptor 0 read error: -22 [ 265.895786][ T409] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 265.904953][ T409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.939567][ T15] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.949773][ T15] usb 6-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.962819][ T15] usb 6-1: config 1 interface 0 has no altsetting 0 [ 265.970067][ T3668] udevd[3668]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 265.989549][ T882] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 266.039514][ T446] usb 4-1: Using ep0 maxpacket: 16 [ 266.049599][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.058712][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 266.066745][ T15] usb 6-1: SerialNumber: syz [ 266.110278][ T15] usb 6-1: bad CDC descriptors [ 266.159613][ T882] usb 9-1: device descriptor read/8, error -71 [ 266.169726][ T446] usb 4-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 266.180055][ T446] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.315764][ T5743] __nla_validate_parse: 1 callbacks suppressed [ 266.315771][ T5743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1562'. [ 266.331895][ T952] usb 6-1: USB disconnect, device number 20 [ 266.339773][ T446] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.348856][ T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.356859][ T446] usb 4-1: Product: syz [ 266.361186][ T446] usb 4-1: Manufacturer: syz [ 266.365757][ T446] usb 4-1: SerialNumber: syz [ 266.459555][ T882] usb 9-1: device descriptor read/8, error -71 [ 266.601438][ T5735] udc-core: couldn't find an available UDC or it's busy [ 266.608526][ T5735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.625540][ T5744] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 266.627715][ T24] audit: type=1400 audit(1774714601.719:2130): avc: denied { execute } for pid=5738 comm="syz.3.1560" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.656207][ T24] audit: type=1400 audit(1774714601.719:2131): avc: denied { execute_no_trans } for pid=5738 comm="syz.3.1560" path="/289/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.680582][ T24] audit: type=1400 audit(1774714601.739:2132): avc: denied { getopt } for pid=5738 comm="syz.3.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.694386][ T2321] usb 8-1: USB disconnect, device number 5 [ 266.829705][ T15] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 266.833954][ T5765] erofs: (device loop8): mounted with root inode @ nid 36. [ 266.846539][ T5765] erofs: (device loop8): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 266.855571][ T5765] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 266.864613][ T5765] attempt to access beyond end of device [ 266.864613][ T5765] loop8: rw=524288, want=1072, limit=16 [ 266.875709][ T5765] attempt to access beyond end of device [ 266.875709][ T5765] loop8: rw=524288, want=24, limit=16 [ 266.887347][ T24] audit: type=1326 audit(1774714601.989:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 266.906771][ T5768] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 266.910882][ T5765] attempt to access beyond end of device [ 266.910882][ T5765] loop8: rw=0, want=1064, limit=16 [ 266.918337][ T24] audit: type=1326 audit(1774714601.989:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 266.930803][ T5768] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue [ 266.956504][ T24] audit: type=1326 audit(1774714601.989:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e8f54d582 code=0x7ffc0000 [ 266.987098][ T24] audit: type=1326 audit(1774714601.989:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e8f50e04e code=0x7ffc0000 [ 267.010509][ T24] audit: type=1326 audit(1774714601.989:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e8f54d647 code=0x7ffc0000 [ 267.034031][ T24] audit: type=1326 audit(1774714601.989:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e8f50e04e code=0x7ffc0000 [ 267.159887][ T5778] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3358: comm syz.5.1570: Allocating blocks 497-513 which overlap fs metadata [ 267.178053][ T5778] EXT4-fs (loop5): pa ffff88811a428498: logic 256, phys. 385, len 8 [ 267.186131][ T5778] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 267.192160][ T5782] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1573'. [ 267.217193][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1573'. [ 267.229579][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.246059][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1573'. [ 267.255192][ T15] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.269532][ T5782] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1573'. [ 267.278645][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.288048][ T15] usb 2-1: config 0 descriptor?? [ 267.330355][ T5784] EXT4-fs (loop7): Test dummy encryption mode enabled [ 267.350712][ T5784] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 267.373328][ T5784] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.482943][ T5793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1574'. [ 267.760297][ T15] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 267.773431][ T15] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input81 [ 267.829510][ T882] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 267.862206][ T15] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 268.070013][ T882] usb 9-1: Using ep0 maxpacket: 8 [ 268.190332][ T882] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.200768][ T882] usb 9-1: config 179 has no interface number 0 [ 268.210352][ T882] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.227886][ T882] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 268.245809][ T882] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.264646][ T882] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 268.284089][ T882] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.298324][ T882] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.307548][ T882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.316952][ T5798] udc-core: couldn't find an available UDC or it's busy [ 268.327990][ T5798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.339552][ T5792] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 268.349768][ T446] usb 4-1: 0:2 : does not exist [ 268.364161][ T446] usb 4-1: USB disconnect, device number 37 [ 268.541118][ T5798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 268.563186][ T5792] udc-core: couldn't find an available UDC or it's busy [ 268.586558][ T5792] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.802875][ T15] usb 9-1: USB disconnect, device number 6 [ 268.819503][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 268.929589][ T2321] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 268.951884][ T5812] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 268.966172][ T5812] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1584'. [ 268.979527][ T446] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 269.359607][ C0] Mem-Info: [ 269.362781][ C0] active_anon:47 inactive_anon:11462 isolated_anon:0 [ 269.362781][ C0] active_file:15547 inactive_file:7129 isolated_file:0 [ 269.362781][ C0] unevictable:0 dirty:253 writeback:0 [ 269.362781][ C0] slab_reclaimable:7842 slab_unreclaimable:79723 [ 269.362781][ C0] mapped:30506 shmem:181 pagetables:731 bounce:0 [ 269.362781][ C0] free:1546889 free_pcp:1094 free_cma:0 [ 269.399604][ C0] Node 0 active_anon:196kB inactive_anon:45844kB active_file:62188kB inactive_file:28516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122052kB dirty:1012kB writeback:0kB shmem:724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4864kB all_unreclaimable? no [ 269.428596][ C0] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1464kB free_cma:0kB [ 269.457125][ C0] lowmem_reserve[]: 0 3941 3941 [ 269.462001][ C0] Normal free:3204464kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:196kB inactive_anon:45844kB active_file:62188kB inactive_file:28516kB unevictable:0kB writepending:1012kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3044kB bounce:0kB free_pcp:1308kB local_pcp:472kB free_cma:0kB [ 269.492434][ C0] lowmem_reserve[]: 0 0 0 [ 269.496755][ C0] DMA32: 7*4kB (UM) 5*8kB (M) 5*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 269.512616][ C0] Normal: 978*4kB (UE) 1109*8kB (UME) 786*16kB (UME) 438*32kB (UME) 179*64kB (UME) 129*128kB (UME) 74*256kB (UME) 36*512kB (UME) 17*1024kB (UME) 7*2048kB (ME) 749*4096kB (UM) = 3204368kB [ 269.530997][ C0] 23410 total pagecache pages [ 269.535648][ C0] 561 pages in swap cache [ 269.539950][ C0] Swap cache stats: add 3606, delete 3045, find 1543/1543 [ 269.547027][ C0] Free swap = 122376kB [ 269.551160][ C0] Total swap = 124996kB [ 269.555286][ C0] 2097051 pages RAM [ 269.559064][ C0] 0 pages HighMem/MovableOnly [ 269.563713][ C0] 341390 pages reserved [ 269.567836][ C0] 0 pages cma reserved [ 269.637161][ T952] usb 2-1: USB disconnect, device number 31 [ 269.649663][ T446] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.670180][ T446] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 269.683543][ T446] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 269.692939][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.714415][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 269.726956][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 269.778312][ T5832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5832 comm=syz.1.1590 [ 269.790814][ T2321] usb 8-1: unable to get BOS descriptor or descriptor too short [ 269.987928][ T54] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 269.995986][ T5808] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.019340][ T5808] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,noauto_da_alloc,errors=remount-ro, [ 270.059732][ T2321] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 270.068861][ T2321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.076904][ T2321] usb 8-1: Product: syz [ 270.081234][ T2321] usb 8-1: Manufacturer: syz [ 270.085867][ T2321] usb 8-1: SerialNumber: syz [ 270.100932][ T5841] kvm [5840]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 270.110223][ T5841] kvm [5840]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 270.122295][ T5841] APIC base relocation is unsupported by KVM [ 270.190217][ T5844] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 270.203602][ T5844] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.216067][ T5844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 270.224203][ T5844] System zones: 0-1, 3-36 [ 270.229318][ T5844] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 270.252249][ T54] usb 9-1: Using ep0 maxpacket: 16 [ 270.379620][ T54] usb 9-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 270.388697][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.401662][ T54] usb 9-1: config 0 descriptor?? [ 270.406944][ T24] kauditd_printk_skb: 12748 callbacks suppressed [ 270.406954][ T24] audit: type=1326 audit(1774714605.499:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.437526][ T24] audit: type=1326 audit(1774714605.499:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e8f50e04e code=0x7ffc0000 [ 270.450365][ T2321] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 270.461551][ T24] audit: type=1326 audit(1774714605.499:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.479590][ T2321] usb 8-1: unit 0 not found! [ 270.491712][ T24] audit: type=1326 audit(1774714605.499:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.500510][ T2321] usb 8-1: USB disconnect, device number 6 [ 270.526940][ T24] audit: type=1326 audit(1774714605.499:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.564923][ T24] audit: type=1326 audit(1774714605.499:14892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.588838][ T24] audit: type=1326 audit(1774714605.499:14893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.612537][ T24] audit: type=1326 audit(1774714605.499:14894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.615904][ T5851] EXT4-fs (loop5): Ignoring removed oldalloc option [ 270.642685][ T5851] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 270.650000][ T5851] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.662543][ T24] audit: type=1326 audit(1774714605.499:14895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.664335][ T446] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 270.686215][ T24] audit: type=1326 audit(1774714605.499:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 270.717722][ T5851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 270.725873][ T5851] System zones: 0-1, 3-36 [ 270.731089][ T5851] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 270.754726][ T446] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input82 [ 270.850399][ T446] input: failed to attach handler kbd to device input82, error: -5 [ 270.859355][ T2409] udevd[2409]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 271.072203][ T5863] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 271.081666][ T5863] EXT4-fs error (device loop7): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 271.096577][ T5863] EXT4-fs (loop7): 1 orphan inode deleted [ 271.102568][ T5863] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 271.141045][ T5863] incfs: Can't find or create .index dir in ./file0 [ 271.147856][ T5863] incfs: mount failed -28 [ 271.169384][ T5863] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.1598: invalid indirect mapped block 234881024 (level 0) [ 271.225455][ T54] wacom 0003:056A:00CE.0023: unknown main item tag 0x0 [ 271.232433][ T54] wacom 0003:056A:00CE.0023: unknown main item tag 0x0 [ 271.239411][ T54] wacom 0003:056A:00CE.0023: unknown main item tag 0x0 [ 271.246666][ T54] wacom 0003:056A:00CE.0023: unknown main item tag 0x0 [ 271.253595][ T54] wacom 0003:056A:00CE.0023: unknown main item tag 0x0 [ 271.259578][ T308] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 271.260925][ T54] wacom 0003:056A:00CE.0023: unknown main item tag 0x0 [ 271.274850][ T54] wacom 0003:056A:00CE.0023: unexpected long global item [ 271.281970][ T54] wacom 0003:056A:00CE.0023: parse failed [ 271.287720][ T54] wacom: probe of 0003:056A:00CE.0023 failed with error -22 [ 271.296481][ T54] usb 9-1: USB disconnect, device number 7 [ 271.634218][ T5870] erofs: (device loop5): mounted with root inode @ nid 36. [ 271.673112][ T5868] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 271.682336][ T5868] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 271.683602][ T2321] usb 4-1: USB disconnect, device number 38 [ 271.691436][ T5868] attempt to access beyond end of device [ 271.691436][ T5868] loop5: rw=524288, want=1072, limit=16 [ 271.708387][ T5868] attempt to access beyond end of device [ 271.708387][ T5868] loop5: rw=524288, want=24, limit=16 [ 271.719885][ T5868] attempt to access beyond end of device [ 271.719885][ T5868] loop5: rw=0, want=1064, limit=16 [ 271.730842][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.969554][ T308] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 271.978706][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.986746][ T308] usb 2-1: Product: syz [ 271.991029][ T308] usb 2-1: Manufacturer: syz [ 271.995634][ T308] usb 2-1: SerialNumber: syz [ 272.175029][ T5905] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 272.189081][ T5905] EXT4-fs error (device loop5): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 272.203577][ T5905] EXT4-fs (loop5): 1 orphan inode deleted [ 272.209349][ T5905] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 272.232729][ T5905] incfs: Can't find or create .index dir in ./file0 [ 272.239453][ T5905] incfs: mount failed -28 [ 272.255366][ T5905] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #13: comm syz.5.1609: invalid indirect mapped block 234881024 (level 0) [ 272.318774][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.326380][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.333835][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.341278][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.348666][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.356456][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.363879][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.371289][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.378681][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.386105][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.393503][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.400927][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.408312][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.415847][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.423244][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.430656][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.438036][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.445443][ T446] hid-generic 4003:000F:0000.0024: unknown main item tag 0x0 [ 272.453240][ T446] hid-generic 4003:000F:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 272.493554][ T5917] fido_id[5917]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.710201][ T5923] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 272.717571][ T5923] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.730305][ T5923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 272.738480][ T5923] System zones: 0-1, 3-36 [ 272.743941][ T5923] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 272.776287][ T5929] FAULT_INJECTION: forcing a failure. [ 272.776287][ T5929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.782173][ T5923] FAULT_INJECTION: forcing a failure. [ 272.782173][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 272.789803][ T5929] CPU: 1 PID: 5929 Comm: syz.1.1617 Not tainted syzkaller #0 [ 272.809459][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.819500][ T5929] Call Trace: [ 272.822774][ T5929] __dump_stack+0x21/0x24 [ 272.827083][ T5929] dump_stack_lvl+0x1a7/0x208 [ 272.831741][ T5929] ? show_regs_print_info+0x18/0x18 [ 272.836917][ T5929] dump_stack+0x15/0x1c [ 272.841058][ T5929] should_fail+0x3c1/0x510 [ 272.845458][ T5929] should_fail_alloc_page+0x4f/0x60 [ 272.850633][ T5929] __alloc_pages_nodemask+0x119/0x620 [ 272.855978][ T5929] ? 0xffffffffa002c000 [ 272.860120][ T5929] ? is_bpf_text_address+0x177/0x190 [ 272.865382][ T5929] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 272.870902][ T5929] ? __kernel_text_address+0xa0/0x100 [ 272.876250][ T5929] ? stack_trace_save+0xf0/0xf0 [ 272.881079][ T5929] ? arch_stack_walk+0xee/0x140 [ 272.885906][ T5929] kmalloc_order+0x4c/0x160 [ 272.890385][ T5929] ? stack_trace_save+0xa6/0xf0 [ 272.895214][ T5929] kmalloc_order_trace+0x16/0x80 [ 272.900131][ T5929] __kmalloc+0x1eb/0x330 [ 272.904350][ T5929] kvmalloc_node+0x88/0x130 [ 272.908828][ T5929] bpf_check+0x15e/0xdb10 [ 272.913141][ T5929] ? __vmalloc+0x79/0x90 [ 272.917364][ T5929] ? bpf_prog_alloc_no_stats+0x3b/0x250 [ 272.922890][ T5929] ? bpf_prog_alloc+0x21/0x1f0 [ 272.927638][ T5929] ? bpf_get_btf_vmlinux+0x60/0x60 [ 272.932725][ T5929] ? 0xffffffffa002c000 [ 272.936865][ T5929] ? is_bpf_text_address+0x177/0x190 [ 272.942132][ T5929] ? selinux_bpf_prog_alloc+0x51/0x140 [ 272.947571][ T5929] ? __kernel_text_address+0xa0/0x100 [ 272.952919][ T5929] ? unwind_get_return_address+0x4d/0x90 [ 272.958528][ T5929] ? stack_trace_save+0xf0/0xf0 [ 272.963353][ T5929] ? arch_stack_walk+0xee/0x140 [ 272.968182][ T5929] ? stack_trace_save+0xa6/0xf0 [ 272.973010][ T5929] ? stack_trace_snprint+0xf0/0xf0 [ 272.978099][ T5929] ? __kasan_slab_alloc+0x69/0xf0 [ 272.983109][ T5929] ? pcpu_block_update+0x3ec/0x900 [ 272.988199][ T5929] ? selinux_bpf_prog_alloc+0x51/0x140 [ 272.993644][ T5929] ? selinux_bpf_prog_alloc+0x51/0x140 [ 272.999085][ T5929] ? __kasan_kmalloc+0xec/0x110 [ 273.003917][ T5929] ? __kasan_kmalloc+0xda/0x110 [ 273.008746][ T5929] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 273.014269][ T5929] ? selinux_bpf_prog_alloc+0x51/0x140 [ 273.019707][ T5929] ? security_bpf_prog_alloc+0x62/0x90 [ 273.025149][ T5929] ? bpf_prog_load+0x9d8/0x14a0 [ 273.029975][ T5929] ? __se_sys_bpf+0x49a/0x740 [ 273.034639][ T5929] ? __x64_sys_bpf+0x7b/0x90 [ 273.039207][ T5929] ? do_syscall_64+0x31/0x40 [ 273.043781][ T5929] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 273.049835][ T5929] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 273.055363][ T5929] ? selinux_bpf_prog_alloc+0x51/0x140 [ 273.060807][ T5929] ? memset+0x35/0x40 [ 273.064766][ T5929] ? bpf_obj_name_cpy+0x193/0x1e0 [ 273.069775][ T5929] bpf_prog_load+0xfca/0x14a0 [ 273.074430][ T5929] ? map_freeze+0x320/0x320 [ 273.078911][ T5929] ? vfs_write+0xb27/0xdc0 [ 273.083308][ T5929] ? selinux_bpf+0xc7/0xf0 [ 273.087705][ T5929] ? security_bpf+0x82/0xa0 [ 273.092205][ T5929] __se_sys_bpf+0x49a/0x740 [ 273.096703][ T5929] ? __x64_sys_bpf+0x90/0x90 [ 273.101286][ T5929] ? debug_smp_processor_id+0x17/0x20 [ 273.106648][ T5929] __x64_sys_bpf+0x7b/0x90 [ 273.111045][ T5929] do_syscall_64+0x31/0x40 [ 273.115452][ T5929] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 273.121330][ T5929] RIP: 0033:0x7fb3f2a7a819 [ 273.125729][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.145318][ T5929] RSP: 002b:00007fb3f14d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.153715][ T5929] RAX: ffffffffffffffda RBX: 00007fb3f2cf3fa0 RCX: 00007fb3f2a7a819 [ 273.161675][ T5929] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 273.169626][ T5929] RBP: 00007fb3f14d5090 R08: 0000000000000000 R09: 0000000000000000 [ 273.177580][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.185532][ T5929] R13: 00007fb3f2cf4038 R14: 00007fb3f2cf3fa0 R15: 00007ffc5ab981a8 [ 273.193497][ T5923] CPU: 0 PID: 5923 Comm: syz.8.1615 Not tainted syzkaller #0 [ 273.200857][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.210890][ T5923] Call Trace: [ 273.214162][ T5923] __dump_stack+0x21/0x24 [ 273.218464][ T5923] dump_stack_lvl+0x1a7/0x208 [ 273.223114][ T5923] ? show_regs_print_info+0x18/0x18 [ 273.228287][ T5923] ? guard_bio_eod+0x11e/0x190 [ 273.233021][ T5923] dump_stack+0x15/0x1c [ 273.237149][ T5923] should_fail+0x3c1/0x510 [ 273.241545][ T5923] ? find_tree_dqentry+0x59/0xac0 [ 273.246543][ T5923] __should_failslab+0xa4/0xe0 [ 273.251282][ T5923] should_failslab+0x9/0x20 [ 273.255756][ T5923] __kmalloc+0x60/0x330 [ 273.259884][ T5923] find_tree_dqentry+0x59/0xac0 [ 273.264711][ T5923] ? make_kuid+0x680/0x680 [ 273.269098][ T5923] ? __kasan_check_write+0x14/0x20 [ 273.274183][ T5923] ? __brelse+0x5d/0x90 [ 273.278312][ T5923] find_tree_dqentry+0x3e3/0xac0 [ 273.283372][ T5923] find_tree_dqentry+0x3e3/0xac0 [ 273.288381][ T5923] qtree_read_dquot+0x13d/0x670 [ 273.293299][ T5923] v2_read_dquot+0xbe/0x110 [ 273.297780][ T5923] dquot_acquire+0x155/0x530 [ 273.302345][ T5923] ? __ext4_journal_start_sb+0x2e2/0x490 [ 273.307951][ T5923] ext4_acquire_dquot+0x2d9/0x4a0 [ 273.312951][ T5923] dqget+0x73e/0xde0 [ 273.316821][ T5923] __dquot_initialize+0x39c/0xb40 [ 273.321817][ T5923] ? dquot_initialize+0x20/0x20 [ 273.326640][ T5923] ? may_create+0x5d8/0x7d0 [ 273.331116][ T5923] dquot_initialize+0x1a/0x20 [ 273.335767][ T5923] ext4_mkdir+0x18f/0xc80 [ 273.340070][ T5923] ? ext4_symlink+0xc60/0xc60 [ 273.344720][ T5923] ? selinux_inode_mkdir+0x22/0x30 [ 273.349804][ T5923] ? security_inode_mkdir+0xbd/0x110 [ 273.355061][ T5923] vfs_mkdir+0x4c7/0x6a0 [ 273.359277][ T5923] do_mkdirat+0x14c/0x340 [ 273.363579][ T5923] __x64_sys_mkdir+0x60/0x70 [ 273.368146][ T5923] do_syscall_64+0x31/0x40 [ 273.372538][ T5923] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 273.378401][ T5923] RIP: 0033:0x7f83e4e28819 [ 273.382790][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.402368][ T5923] RSP: 002b:00007f83e3883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 273.410755][ T5923] RAX: ffffffffffffffda RBX: 00007f83e50a1fa0 RCX: 00007f83e4e28819 [ 273.418700][ T5923] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000080 [ 273.426646][ T5923] RBP: 00007f83e3883090 R08: 0000000000000000 R09: 0000000000000000 [ 273.434598][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.442591][ T5923] R13: 00007f83e50a2038 R14: 00007f83e50a1fa0 R15: 00007ffd6acae258 [ 273.451766][ T5923] VFS: Not enough memory for quota buffers. [ 273.457720][ T5923] EXT4-fs error (device loop8): ext4_acquire_dquot:6225: comm syz.8.1615: Failed to acquire dquot type 0 [ 273.475717][ T5928] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 273.495684][ T5928] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 273.509185][ T5928] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.515820][ T308] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 273.519068][ T5928] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1616: Inode bitmap for bg 0 marked uninitialized [ 273.523232][ T446] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 273.535252][ T5928] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 273.555416][ T5928] FAULT_INJECTION: forcing a failure. [ 273.555416][ T5928] name failslab, interval 1, probability 0, space 0, times 0 [ 273.568111][ T5928] CPU: 1 PID: 5928 Comm: syz.3.1616 Not tainted syzkaller #0 [ 273.575469][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.585494][ T5928] Call Trace: [ 273.588758][ T5928] __dump_stack+0x21/0x24 [ 273.593058][ T5928] dump_stack_lvl+0x1a7/0x208 [ 273.597706][ T5928] ? thaw_kernel_threads+0x220/0x220 [ 273.602960][ T5928] ? show_regs_print_info+0x18/0x18 [ 273.608128][ T5928] dump_stack+0x15/0x1c [ 273.612257][ T5928] should_fail+0x3c1/0x510 [ 273.616642][ T5928] ? __es_insert_extent+0x73c/0x1800 [ 273.621930][ T5928] __should_failslab+0xa4/0xe0 [ 273.626664][ T5928] should_failslab+0x9/0x20 [ 273.631143][ T5928] kmem_cache_alloc+0x3d/0x2d0 [ 273.635881][ T5928] ? ext4_ext_map_blocks+0x20b/0x5dd0 [ 273.641223][ T5928] ? ext4_map_blocks+0x3b1/0x1bd0 [ 273.646215][ T5928] ? ext4_bread_batch+0x133/0x790 [ 273.651214][ T5928] __es_insert_extent+0x73c/0x1800 [ 273.656302][ T5928] ? __kasan_check_write+0x14/0x20 [ 273.661384][ T5928] ? _raw_write_lock+0x94/0xf0 [ 273.666124][ T5928] ? _raw_write_trylock+0x150/0x150 [ 273.671300][ T5928] ext4_es_cache_extent+0x419/0x5d0 [ 273.676469][ T5928] ? __es_insert_extent+0x1800/0x1800 [ 273.681813][ T5928] ? __kmalloc+0x1a4/0x330 [ 273.686198][ T5928] ? ext4_find_extent+0x36b/0xe20 [ 273.691192][ T5928] ext4_find_extent+0x59d/0xe20 [ 273.696008][ T5928] ext4_ext_map_blocks+0x20b/0x5dd0 [ 273.701181][ T5928] ? stack_trace_save+0xf0/0xf0 [ 273.706000][ T5928] ? arch_stack_walk+0xee/0x140 [ 273.710819][ T5928] ? stack_trace_save+0xa6/0xf0 [ 273.715643][ T5928] ? stack_trace_snprint+0xf0/0xf0 [ 273.720721][ T5928] ? ext4_ext_release+0x10/0x10 [ 273.725541][ T5928] ext4_map_blocks+0x3b1/0x1bd0 [ 273.730378][ T5928] ? stack_trace_save+0xf0/0xf0 [ 273.735216][ T5928] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 273.740392][ T5928] ? stack_trace_save+0xa6/0xf0 [ 273.745214][ T5928] ? 0xffffffffa00164f0 [ 273.749341][ T5928] ? is_bpf_text_address+0x177/0x190 [ 273.754598][ T5928] ext4_bread_batch+0x133/0x790 [ 273.759420][ T5928] ? kmem_cache_alloc+0x162/0x2d0 [ 273.764440][ T5928] ? ext4_buffer_uptodate+0x100/0x100 [ 273.769796][ T5928] __ext4_find_entry+0xf7a/0x1aa0 [ 273.774796][ T5928] ? ext4_ci_compare+0x3f0/0x3f0 [ 273.779709][ T5928] ? slab_post_alloc_hook+0x7d/0x2f0 [ 273.784969][ T5928] ? __d_alloc+0x2d/0x6a0 [ 273.789269][ T5928] ? __d_lookup_rcu+0x651/0x6a0 [ 273.794091][ T5928] ? _raw_spin_trylock_bh+0x150/0x150 [ 273.799432][ T5928] ? ext4_fname_setup_ci_filename+0x70/0x470 [ 273.805380][ T5928] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 273.811501][ T5928] ext4_lookup+0x305/0x8d0 [ 273.815887][ T5928] ? ext4_add_entry+0xfa0/0xfa0 [ 273.820714][ T5928] ? ext4_add_entry+0xfa0/0xfa0 [ 273.825558][ T5928] path_openat+0x1140/0x31c0 [ 273.830121][ T5928] ? do_filp_open+0x410/0x410 [ 273.834768][ T5928] do_filp_open+0x1e2/0x410 [ 273.839239][ T5928] ? vfs_tmpfile+0x2c0/0x2c0 [ 273.843801][ T5928] ? get_unused_fd_flags+0x92/0xa0 [ 273.848879][ T5928] do_sys_openat2+0x19f/0x750 [ 273.853524][ T5928] ? __kasan_check_write+0x14/0x20 [ 273.858606][ T5928] ? fput_many+0x15a/0x1a0 [ 273.862990][ T5928] ? do_sys_open+0xe0/0xe0 [ 273.867373][ T5928] ? fput+0x1a/0x20 [ 273.871151][ T5928] ? ksys_write+0x1f4/0x250 [ 273.875624][ T5928] ? __ia32_sys_read+0x90/0x90 [ 273.880352][ T5928] ? ____fput+0x15/0x20 [ 273.884477][ T5928] __x64_sys_open+0x11c/0x140 [ 273.889122][ T5928] do_syscall_64+0x31/0x40 [ 273.890413][ T2321] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 273.893519][ T5928] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 273.893528][ T5928] RIP: 0033:0x7f9f63b60819 [ 273.893546][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.930791][ T5928] RSP: 002b:00007f9f625bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 273.939175][ T5928] RAX: ffffffffffffffda RBX: 00007f9f63dd9fa0 RCX: 00007f9f63b60819 [ 273.947115][ T5928] RDX: 0000000000000009 RSI: 0000000000004000 RDI: 0000200000000380 [ 273.955054][ T5928] RBP: 00007f9f625bb090 R08: 0000000000000000 R09: 0000000000000000 [ 273.962996][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.970936][ T5928] R13: 00007f9f63dda038 R14: 00007f9f63dd9fa0 R15: 00007fff47a32448 [ 273.982517][ T308] usb 2-1: USB disconnect, device number 32 [ 273.986588][ T5928] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1616: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 274.000233][ T5932] EXT4-fs (loop1): dax option not supported [ 274.110000][ T5943] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 274.124413][ T5943] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1623'. [ 274.191642][ T2409] udevd[2409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.299684][ T446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.311241][ T446] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.321282][ T446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.338163][ T446] usb 8-1: config 0 descriptor?? [ 274.369545][ T2321] usb 9-1: Using ep0 maxpacket: 32 [ 274.393969][ T5947] erofs: (device loop3): mounted with root inode @ nid 36. [ 274.431641][ T5946] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 274.440670][ T5946] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 274.450222][ T5946] attempt to access beyond end of device [ 274.450222][ T5946] loop3: rw=524288, want=1072, limit=16 [ 274.461642][ T5946] attempt to access beyond end of device [ 274.461642][ T5946] loop3: rw=524288, want=24, limit=16 [ 274.472913][ T5946] attempt to access beyond end of device [ 274.472913][ T5946] loop3: rw=0, want=1064, limit=16 [ 274.497351][ T5956] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 274.506143][ T5956] EXT4-fs error (device loop5): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 274.520550][ T2321] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 274.520736][ T5956] EXT4-fs (loop5): 1 orphan inode deleted [ 274.528754][ T2321] usb 9-1: config 0 has no interface number 0 [ 274.534788][ T5956] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,noblock_validity,debug_want_extra_isize=0x0000000000000036,nomblk_io_submit,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 274.540664][ T2321] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 274.567521][ T5959] EXT4-fs (loop1): Unrecognized mount option "obj_type=!" or missing value [ 274.585983][ T5956] incfs: Can't find or create .index dir in ./file0 [ 274.592741][ T5956] incfs: mount failed -28 [ 274.739597][ T2321] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 274.771649][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.779642][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.780340][ T2321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.787193][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.795394][ T2321] usb 9-1: Product: syz [ 274.802826][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.807184][ T2321] usb 9-1: Manufacturer: syz [ 274.814381][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.818695][ T2321] usb 9-1: SerialNumber: syz [ 274.826595][ T446] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 274.831945][ T2321] usb 9-1: config 0 descriptor?? [ 274.839063][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.852153][ T446] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0026/input/input83 [ 274.863851][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.871803][ T5936] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 274.879485][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.887214][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.894833][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.903997][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 274.912899][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.069013][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.076650][ T446] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 275.088782][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.098209][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.105642][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.113297][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.114143][ T5936] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 275.120711][ T771] hid-generic 4003:000F:0000.0025: unknown main item tag 0x0 [ 275.136116][ T771] hid-generic 4003:000F:0000.0025: hidraw1: HID v0.00 Device [syz0] on syz1 [ 275.260925][ T5978] fido_id[5978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.331702][ T5979] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 275.342559][ T5979] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 275.351817][ T5979] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.358419][ T5979] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1632: Inode bitmap for bg 0 marked uninitialized [ 275.371191][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 275.380764][ T5979] FAULT_INJECTION: forcing a failure. [ 275.380764][ T5979] name failslab, interval 1, probability 0, space 0, times 0 [ 275.393424][ T5979] CPU: 0 PID: 5979 Comm: syz.3.1632 Not tainted syzkaller #0 [ 275.393437][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.410821][ T5979] Call Trace: [ 275.410841][ T5979] __dump_stack+0x21/0x24 [ 275.410857][ T5979] dump_stack_lvl+0x1a7/0x208 [ 275.423059][ T5979] ? thaw_kernel_threads+0x220/0x220 [ 275.428317][ T5979] ? show_regs_print_info+0x18/0x18 [ 275.433503][ T5979] dump_stack+0x15/0x1c [ 275.433520][ T5979] should_fail+0x3c1/0x510 [ 275.442035][ T5979] ? __es_insert_extent+0x73c/0x1800 [ 275.447293][ T5979] __should_failslab+0xa4/0xe0 [ 275.452060][ T5979] should_failslab+0x9/0x20 [ 275.452073][ T5979] kmem_cache_alloc+0x3d/0x2d0 [ 275.452089][ T5979] ? ext4_ext_map_blocks+0x20b/0x5dd0 [ 275.466628][ T5979] ? ext4_map_blocks+0x3b1/0x1bd0 [ 275.471635][ T5979] ? ext4_bread_batch+0x133/0x790 [ 275.471652][ T5979] __es_insert_extent+0x73c/0x1800 [ 275.481733][ T5979] ? __kasan_check_write+0x14/0x20 [ 275.486820][ T5979] ? _raw_write_lock+0x94/0xf0 [ 275.491575][ T5979] ? _raw_write_trylock+0x150/0x150 [ 275.491593][ T5979] ext4_es_cache_extent+0x419/0x5d0 [ 275.501937][ T5979] ? __es_insert_extent+0x1800/0x1800 [ 275.507282][ T5979] ? __kmalloc+0x1a4/0x330 [ 275.511683][ T5979] ? ext4_find_extent+0x36b/0xe20 [ 275.511698][ T5979] ext4_find_extent+0x59d/0xe20 [ 275.521513][ T5979] ext4_ext_map_blocks+0x20b/0x5dd0 [ 275.526689][ T5979] ? 0xffffffffa002c000 [ 275.530845][ T5979] ? is_bpf_text_address+0x177/0x190 [ 275.536133][ T5979] ? __kernel_text_address+0xa0/0x100 [ 275.541502][ T5979] ? unwind_get_return_address+0x4d/0x90 [ 275.547125][ T5979] ? stack_trace_save+0xf0/0xf0 [ 275.551965][ T5979] ? arch_stack_walk+0xee/0x140 [ 275.556813][ T5979] ? ext4_ext_release+0x10/0x10 [ 275.556829][ T5979] ext4_map_blocks+0x3b1/0x1bd0 [ 275.556837][ T5979] ? stack_trace_save+0xf0/0xf0 [ 275.556853][ T5979] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 275.576477][ T5979] ? stack_trace_save+0xa6/0xf0 [ 275.576485][ T5979] ? 0xffffffffa002c000 [ 275.576501][ T5979] ? is_bpf_text_address+0x177/0x190 [ 275.590701][ T5979] ext4_bread_batch+0x133/0x790 [ 275.590719][ T5979] ? kmem_cache_alloc+0x162/0x2d0 [ 275.600526][ T5979] ? ext4_buffer_uptodate+0x100/0x100 [ 275.605869][ T5979] __ext4_find_entry+0xf7a/0x1aa0 [ 275.610879][ T5979] ? ext4_ci_compare+0x3f0/0x3f0 [ 275.610889][ T5979] ? slab_post_alloc_hook+0x7d/0x2f0 [ 275.610904][ T5979] ? __d_alloc+0x2d/0x6a0 [ 275.625347][ T5979] ? __d_lookup_rcu+0x651/0x6a0 [ 275.630180][ T5979] ? _raw_spin_trylock_bh+0x150/0x150 [ 275.635543][ T5979] ? ext4_fname_setup_ci_filename+0x70/0x470 [ 275.635554][ T5979] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 275.635568][ T5979] ext4_lookup+0x305/0x8d0 [ 275.652035][ T5979] ? ext4_add_entry+0xfa0/0xfa0 [ 275.652051][ T5979] ? ext4_add_entry+0xfa0/0xfa0 [ 275.661688][ T5979] path_openat+0x1140/0x31c0 [ 275.666249][ T5979] ? do_filp_open+0x410/0x410 [ 275.670908][ T5979] do_filp_open+0x1e2/0x410 [ 275.670925][ T5979] ? vfs_tmpfile+0x2c0/0x2c0 [ 275.679955][ T5979] ? get_unused_fd_flags+0x92/0xa0 [ 275.685035][ T5979] do_sys_openat2+0x19f/0x750 [ 275.689706][ T5979] ? __kasan_check_write+0x14/0x20 [ 275.694807][ T5979] ? fput_many+0x15a/0x1a0 [ 275.694816][ T5979] ? do_sys_open+0xe0/0xe0 [ 275.694823][ T5979] ? fput+0x1a/0x20 [ 275.694836][ T5979] ? ksys_write+0x1f4/0x250 [ 275.711847][ T5979] ? __ia32_sys_read+0x90/0x90 [ 275.711855][ T5979] ? ____fput+0x15/0x20 [ 275.711869][ T5979] __x64_sys_open+0x11c/0x140 [ 275.725360][ T5979] do_syscall_64+0x31/0x40 [ 275.729748][ T5979] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 275.735605][ T5979] RIP: 0033:0x7f9f63b60819 [ 275.739990][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.759566][ T5979] RSP: 002b:00007f9f625bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 275.767948][ T5979] RAX: ffffffffffffffda RBX: 00007f9f63dd9fa0 RCX: 00007f9f63b60819 [ 275.775894][ T5979] RDX: 0000000000000009 RSI: 0000000000004000 RDI: 0000200000000380 [ 275.783837][ T5979] RBP: 00007f9f625bb090 R08: 0000000000000000 R09: 0000000000000000 [ 275.791780][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.799719][ T5979] R13: 00007f9f63dda038 R14: 00007f9f63dd9fa0 R15: 00007fff47a32448 [ 275.811531][ T5979] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1632: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 275.877413][ T5982] udc-core: couldn't find an available UDC or it's busy [ 275.884620][ T5982] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.990012][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1614'. [ 276.239875][ T771] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 276.260827][ T5992] erofs: Unknown parameter './cgroup.net/syz1' [ 276.329573][ T2321] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 276.339795][ T2321] asix: probe of 9-1:0.188 failed with error -71 [ 276.354047][ T2321] usb 9-1: USB disconnect, device number 8 [ 276.492638][ T5997] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 276.506974][ T5997] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1637'. [ 276.509607][ C1] Mem-Info: [ 276.519138][ C1] active_anon:47 inactive_anon:13607 isolated_anon:0 [ 276.519138][ C1] active_file:15550 inactive_file:7131 isolated_file:0 [ 276.519138][ C1] unevictable:0 dirty:282 writeback:0 [ 276.519138][ C1] slab_reclaimable:7840 slab_unreclaimable:76065 [ 276.519138][ C1] mapped:33376 shmem:3083 pagetables:792 bounce:0 [ 276.519138][ C1] free:1547764 free_pcp:1411 free_cma:0 [ 276.555945][ C1] Node 0 active_anon:240kB inactive_anon:54308kB active_file:62224kB inactive_file:28524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133504kB dirty:1128kB writeback:0kB shmem:12332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4832kB all_unreclaimable? no [ 276.585096][ C1] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1432kB free_cma:0kB [ 276.613620][ C1] lowmem_reserve[]: 0 3941 3941 [ 276.618472][ C1] Normal free:3207672kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:240kB inactive_anon:54308kB active_file:62224kB inactive_file:28524kB unevictable:0kB writepending:1128kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3072kB bounce:0kB free_pcp:2776kB local_pcp:1364kB free_cma:0kB [ 276.648988][ C1] lowmem_reserve[]: 0 0 0 [ 276.653297][ C1] DMA32: 7*4kB (UM) 5*8kB (M) 5*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 276.669118][ C1] Normal: 812*4kB (UME) 927*8kB (UME) 697*16kB (UME) 270*32kB (UME) 254*64kB (UME) 155*128kB (UME) 84*256kB (UME) 39*512kB (UME) 17*1024kB (UME) 7*2048kB (ME) 749*4096kB (UM) = 3207672kB [ 276.687459][ C1] 26320 total pagecache pages [ 276.692105][ C1] 561 pages in swap cache [ 276.696401][ C1] Swap cache stats: add 3606, delete 3045, find 1543/1543 [ 276.703471][ C1] Free swap = 122376kB [ 276.707589][ C1] Total swap = 124996kB [ 276.711710][ C1] 2097051 pages RAM [ 276.715482][ C1] 0 pages HighMem/MovableOnly [ 276.720120][ C1] 341390 pages reserved [ 276.724242][ C1] 0 pages cma reserved [ 276.820487][ T6002] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.1639: inode #256: comm syz.5.1639: iget: illegal inode # [ 276.833876][ T6002] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1639: error while reading EA inode 256 err=-117 [ 276.846674][ T771] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.856783][ T771] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.866346][ T6002] EXT4-fs error (device loop5) in ext4_do_update_inode:5355: error 27 [ 276.874742][ T6002] EXT4-fs error (device loop5) in ext4_orphan_del:3292: error 27 [ 276.882688][ T6002] EXT4-fs error (device loop5) in ext4_do_update_inode:5355: error 27 [ 276.891131][ T6002] EXT4-fs error (device loop5): ext4_evict_inode:331: inode #15: comm syz.5.1639: mark_inode_dirty error [ 276.904112][ T6002] EXT4-fs (loop5): 1 orphan inode deleted [ 276.909909][ T6002] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,journal_dev=0x00000000040000ff,jqfmt=vfsv1,nodioread_nolock,prjquota,acl,grpjquota=,,errors=continue [ 276.929836][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 276.929848][ T24] audit: type=1326 audit(1774714612.029:14913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 276.959669][ T771] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.961036][ T24] audit: type=1326 audit(1774714612.029:14914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 276.969437][ T771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.993920][ T24] audit: type=1326 audit(1774714612.039:14915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f63b2104e code=0x7ffc0000 [ 277.001255][ T771] usb 2-1: SerialNumber: syz [ 277.028883][ T24] audit: type=1326 audit(1774714612.039:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.028936][ T2321] usb 8-1: USB disconnect, device number 7 [ 277.084988][ T24] audit: type=1326 audit(1774714612.039:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.113657][ T24] audit: type=1326 audit(1774714612.039:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.138098][ T24] audit: type=1326 audit(1774714612.039:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.161698][ T24] audit: type=1326 audit(1774714612.039:14920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.185494][ T24] audit: type=1326 audit(1774714612.039:14921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.209289][ T24] audit: type=1326 audit(1774714612.039:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f63b60819 code=0x7ffc0000 [ 277.215924][ T6014] EXT4-fs (loop3): Ignoring removed oldalloc option [ 277.239407][ T6014] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 277.246735][ T6014] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.276844][ T6014] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 277.285448][ T6014] System zones: 0-1, 3-36 [ 277.291203][ T6014] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 277.387844][ T771] usb 2-1: 0:2 : does not exist [ 277.402367][ T771] usb 2-1: USB disconnect, device number 33 [ 277.587790][ T6025] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0100 with DS=0x7 [ 277.781226][ T6021] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 277.788974][ T6021] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 277.824067][ T6021] F2FS-fs (loop7): invalid crc value [ 277.831053][ T6021] F2FS-fs (loop7): Found nat_bits in checkpoint [ 277.866418][ T6021] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 277.879666][ T6029] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 277.891132][ T6021] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 277.900048][ T6029] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 277.908427][ T6029] EXT4-fs (loop5): orphan cleanup on readonly fs [ 277.935573][ T6029] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.1648: Inode bitmap for bg 0 marked uninitialized [ 277.948511][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 277.976043][ T6029] EXT4-fs error (device loop5): ext4_search_dir:1521: inode #2: block 16: comm syz.5.1648: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 278.117398][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 278.148446][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 278.379636][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1644'. [ 278.388625][ T6050] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1644'. [ 278.398031][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1644'. [ 278.407037][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1644'. [ 278.416019][ T6050] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1644'. [ 278.454860][ T6058] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 278.463307][ T6058] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.485477][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.493350][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.500808][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.509722][ T6058] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,data=ordered,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 278.530772][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.538174][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.546103][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.553541][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.560986][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.568363][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.575770][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.583170][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.590594][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.598372][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.605790][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.613209][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.620649][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.628030][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.645414][ T5] hid-generic 4003:000F:0000.0027: unknown main item tag 0x0 [ 278.656388][ T6071] attempt to access beyond end of device [ 278.656388][ T6071] loop5: rw=0, want=1041, limit=128 [ 278.667465][ T5] hid-generic 4003:000F:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 278.674444][ T6071] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 278.684921][ T6071] FAT-fs (loop5): Filesystem has been set read-only [ 278.691737][ T6071] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 278.699792][ T6071] attempt to access beyond end of device [ 278.699792][ T6071] loop5: rw=2049, want=2073, limit=128 [ 278.778134][ T6078] fido_id[6078]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 279.084517][ T6087] EXT4-fs (loop7): Ignoring removed oldalloc option [ 279.092558][ T6087] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 279.099998][ T6087] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.112844][ T6087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 279.121067][ T6087] System zones: 0-1, 3-36 [ 279.126735][ T6087] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 279.159988][ T6091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 279.228470][ T6091] __nla_validate_parse: 25 callbacks suppressed [ 279.228479][ T6091] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1661'. [ 279.244411][ T6096] EXT4-fs (loop5): Test dummy encryption mode enabled [ 279.259397][ T6096] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue [ 279.275826][ T6096] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.515760][ T6108] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 279.586570][ T6108] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 279.605241][ T6108] EXT4-fs (loop1): orphan cleanup on readonly fs [ 279.609748][ T6121] exfat: Deprecated parameter 'utf8' [ 279.616882][ T6121] exfat: Deprecated parameter 'utf8' [ 279.625702][ T6108] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1665: Inode bitmap for bg 0 marked uninitialized [ 279.651609][ T6121] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 279.689907][ T6108] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 279.724129][ T6127] overlayfs: unrecognized mount option "uuid=off" or missing value [ 279.738631][ T6108] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.1665: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 279.859530][ T15] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 280.249501][ T15] usb 9-1: Using ep0 maxpacket: 8 [ 280.279525][ T5] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 280.409587][ T15] usb 9-1: unable to get BOS descriptor or descriptor too short [ 280.420967][ T6139] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 280.431017][ T6139] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 280.439218][ T6139] EXT4-fs (loop3): orphan cleanup on readonly fs [ 280.445842][ T6139] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1674: Inode bitmap for bg 0 marked uninitialized [ 280.458586][ T6139] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 280.468139][ T6139] FAULT_INJECTION: forcing a failure. [ 280.468139][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 280.480830][ T6139] CPU: 0 PID: 6139 Comm: syz.3.1674 Not tainted syzkaller #0 [ 280.488173][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.498197][ T6139] Call Trace: [ 280.501464][ T6139] __dump_stack+0x21/0x24 [ 280.505764][ T6139] dump_stack_lvl+0x1a7/0x208 [ 280.510417][ T6139] ? thaw_kernel_threads+0x220/0x220 [ 280.515674][ T6139] ? show_regs_print_info+0x18/0x18 [ 280.520843][ T6139] ? stack_trace_save+0xa6/0xf0 [ 280.525666][ T6139] ? stack_trace_snprint+0xf0/0xf0 [ 280.530749][ T6139] dump_stack+0x15/0x1c [ 280.534874][ T6139] should_fail+0x3c1/0x510 [ 280.539262][ T6139] ? __es_insert_extent+0x73c/0x1800 [ 280.544521][ T6139] __should_failslab+0xa4/0xe0 [ 280.549258][ T6139] should_failslab+0x9/0x20 [ 280.553738][ T6139] kmem_cache_alloc+0x3d/0x2d0 [ 280.558471][ T6139] ? memset+0x35/0x40 [ 280.562429][ T6139] __es_insert_extent+0x73c/0x1800 [ 280.567514][ T6139] ? _raw_write_trylock+0x150/0x150 [ 280.572685][ T6139] ext4_es_insert_extent+0x523/0x2b30 [ 280.578029][ T6139] ? __es_insert_extent+0x1800/0x1800 [ 280.583375][ T6139] ? ext4_es_scan_clu+0x240/0x240 [ 280.588377][ T6139] ? _raw_read_unlock+0x25/0x40 [ 280.593203][ T6139] ? ext4_es_find_extent_range+0xea/0x300 [ 280.598894][ T6139] ? trace_ext4_ext_convert_to_initialized_fastpath+0x140/0x140 [ 280.606491][ T6139] ext4_ext_map_blocks+0x1ebb/0x5dd0 [ 280.611746][ T6139] ? __kasan_slab_alloc+0xbd/0xf0 [ 280.616745][ T6139] ? find_get_entry+0x37b/0x3e0 [ 280.621567][ T6139] ? page_cache_prev_miss+0x290/0x290 [ 280.626909][ T6139] ? ext4_ext_release+0x10/0x10 [ 280.631733][ T6139] ? __kasan_check_write+0x14/0x20 [ 280.636818][ T6139] ext4_map_blocks+0x3b1/0x1bd0 [ 280.641642][ T6139] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 280.646816][ T6139] ext4_bread_batch+0x133/0x790 [ 280.651639][ T6139] ? kmem_cache_alloc+0x162/0x2d0 [ 280.656642][ T6139] ? ext4_buffer_uptodate+0x100/0x100 [ 280.661986][ T6139] __ext4_find_entry+0xf7a/0x1aa0 [ 280.666984][ T6139] ? ext4_ci_compare+0x3f0/0x3f0 [ 280.672157][ T6139] ? slab_post_alloc_hook+0x7d/0x2f0 [ 280.677415][ T6139] ? __d_alloc+0x2d/0x6a0 [ 280.681717][ T6139] ? __d_lookup_rcu+0x651/0x6a0 [ 280.686540][ T6139] ? _raw_spin_trylock_bh+0x150/0x150 [ 280.691882][ T6139] ? ext4_fname_setup_ci_filename+0x70/0x470 [ 280.697847][ T6139] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 280.703972][ T6139] ext4_lookup+0x305/0x8d0 [ 280.708362][ T6139] ? ext4_add_entry+0xfa0/0xfa0 [ 280.713191][ T6139] ? ext4_add_entry+0xfa0/0xfa0 [ 280.718013][ T6139] path_openat+0x1140/0x31c0 [ 280.722577][ T6139] ? do_filp_open+0x410/0x410 [ 280.727227][ T6139] do_filp_open+0x1e2/0x410 [ 280.731710][ T6139] ? vfs_tmpfile+0x2c0/0x2c0 [ 280.736275][ T6139] ? get_unused_fd_flags+0x92/0xa0 [ 280.741364][ T6139] do_sys_openat2+0x19f/0x750 [ 280.746018][ T6139] ? __kasan_check_write+0x14/0x20 [ 280.751099][ T6139] ? fput_many+0x15a/0x1a0 [ 280.755488][ T6139] ? do_sys_open+0xe0/0xe0 [ 280.759875][ T6139] ? fput+0x1a/0x20 [ 280.763654][ T6139] ? ksys_write+0x1f4/0x250 [ 280.768129][ T6139] ? __ia32_sys_read+0x90/0x90 [ 280.772864][ T6139] ? ____fput+0x15/0x20 [ 280.776996][ T6139] __x64_sys_open+0x11c/0x140 [ 280.781647][ T6139] do_syscall_64+0x31/0x40 [ 280.786035][ T6139] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 280.791906][ T6139] RIP: 0033:0x7f9f63b60819 [ 280.796303][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.815879][ T6139] RSP: 002b:00007f9f625bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 280.824357][ T6139] RAX: ffffffffffffffda RBX: 00007f9f63dd9fa0 RCX: 00007f9f63b60819 [ 280.832306][ T6139] RDX: 0000000000000009 RSI: 0000000000004000 RDI: 0000200000000380 [ 280.840255][ T6139] RBP: 00007f9f625bb090 R08: 0000000000000000 R09: 0000000000000000 [ 280.848199][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.856144][ T6139] R13: 00007f9f63dda038 R14: 00007f9f63dd9fa0 R15: 00007fff47a32448 [ 280.864262][ T6139] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1674: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 280.893730][ T15] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 281.049535][ T54] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 281.059919][ T15] usb 9-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 281.071582][ T15] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.079739][ T15] usb 9-1: Product: syz [ 281.083886][ T15] usb 9-1: Manufacturer: syz [ 281.088456][ T15] usb 9-1: SerialNumber: syz [ 281.241954][ T6149] erofs: (device loop3): mounted with root inode @ nid 36. [ 281.258098][ T6149] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 281.267084][ T6149] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 281.276320][ T6149] attempt to access beyond end of device [ 281.276320][ T6149] loop3: rw=524288, want=1072, limit=16 [ 281.287570][ T6149] attempt to access beyond end of device [ 281.287570][ T6149] loop3: rw=524288, want=24, limit=16 [ 281.299216][ T6149] attempt to access beyond end of device [ 281.299216][ T6149] loop3: rw=0, want=1064, limit=16 [ 281.479548][ T5] usb 8-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 281.488627][ T5] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.496678][ T5] usb 8-1: Product: syz [ 281.500856][ T5] usb 8-1: Manufacturer: syz [ 281.505442][ T5] usb 8-1: SerialNumber: syz [ 281.639617][ T54] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 281.648056][ T54] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 281.656610][ T6152] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 281.660410][ T54] usb 6-1: config 220 has no interface number 2 [ 281.678399][ T54] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 281.681768][ T6152] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1678'. [ 281.691760][ T54] usb 6-1: config 220 interface 0 has no altsetting 0 [ 281.707595][ T54] usb 6-1: config 220 interface 76 has no altsetting 0 [ 281.714554][ T54] usb 6-1: config 220 interface 1 has no altsetting 0 [ 281.765849][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.773367][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.780802][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.788167][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.796048][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.803711][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.811210][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.818590][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.826049][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.833510][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.841027][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.848386][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.855858][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.863280][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.870743][ T5] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 281.877449][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.884916][ T54] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 281.894006][ T5] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 281.900711][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.908081][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.915548][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.923552][ T54] usb 6-1: Product: syz [ 281.927701][ T54] usb 6-1: Manufacturer: syz [ 281.936716][ T5] usb 8-1: USB disconnect, device number 8 [ 281.942591][ T882] hid-generic 4003:000F:0000.0028: unknown main item tag 0x0 [ 281.961364][ T54] usb 6-1: SerialNumber: syz [ 281.966885][ T882] hid-generic 4003:000F:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 282.037043][ T5438] cgroup: fork rejected by pids controller in /syz8 [ 282.047813][ T6160] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 282.069309][ T6162] fido_id[6162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.139646][ T15] usb 9-1: unit 3 not found! [ 282.144339][ T15] usb 9-1: unit 255 not found! [ 282.172986][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.180982][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.188344][ T6167] device bridge_slave_0 entered promiscuous mode [ 282.192279][ T15] usb 9-1: USB disconnect, device number 9 [ 282.195815][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.207752][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.215482][ T6167] device bridge_slave_1 entered promiscuous mode [ 282.251529][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.258560][ T6167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.265819][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.272854][ T6167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.300780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.308707][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.316647][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.329838][ T54] usb 6-1: selecting invalid altsetting 0 [ 282.339828][ T54] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 282.347132][ T54] uvcvideo: No valid video chain found. [ 282.358068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.366385][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.373437][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.380939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.389046][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.396067][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.412888][ T54] usb 6-1: USB disconnect, device number 21 [ 282.421138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.429389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.437528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.448363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.456514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.464262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.474611][ T6167] device veth0_vlan entered promiscuous mode [ 282.479548][ T882] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 282.486586][ T6167] device veth1_macvtap entered promiscuous mode [ 282.495245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.506584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.517742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.740308][ T7] device bridge_slave_1 left promiscuous mode [ 282.747596][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.756656][ T7] device bridge_slave_0 left promiscuous mode [ 282.762955][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.772168][ T7] device veth1_macvtap left promiscuous mode [ 282.778230][ T7] device veth0_vlan left promiscuous mode [ 282.899608][ T882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.149656][ T882] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 283.163234][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.171999][ T882] usb 4-1: Product: syz [ 283.176170][ T882] usb 4-1: Manufacturer: syz [ 283.180967][ T882] usb 4-1: SerialNumber: syz [ 283.200473][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 283.200483][ T24] audit: type=1400 audit(1774714618.299:14967): avc: denied { setattr } for pid=6192 comm="syz.7.1691" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 283.265986][ T6191] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 283.310569][ T6191] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1690'. [ 283.326093][ T6193] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,usrquota,data_err=abort,,errors=continue [ 283.346047][ T6193] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.382981][ T6193] EXT4-fs error (device loop7): ext4_map_blocks:740: inode #15: comm syz.7.1691: lblock 0 mapped to illegal pblock 0 (length 6) [ 283.396883][ T6193] EXT4-fs error (device loop7): ext4_ext_remove_space:2924: inode #15: comm syz.7.1691: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 283.452052][ T6193] EXT4-fs error (device loop7): ext4_map_blocks:740: inode #15: comm syz.7.1691: lblock 0 mapped to illegal pblock 0 (length 1) [ 283.470778][ T6208] FAULT_INJECTION: forcing a failure. [ 283.470778][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 283.483593][ T6208] CPU: 1 PID: 6208 Comm: syz.1.1692 Not tainted syzkaller #0 [ 283.490950][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.500989][ T6208] Call Trace: [ 283.504269][ T6208] __dump_stack+0x21/0x24 [ 283.508582][ T6208] dump_stack_lvl+0x1a7/0x208 [ 283.513244][ T6208] ? show_regs_print_info+0x18/0x18 [ 283.518430][ T6208] ? skb_put+0x10e/0x1f0 [ 283.522667][ T6208] dump_stack+0x15/0x1c [ 283.526809][ T6208] should_fail+0x3c1/0x510 [ 283.531218][ T6208] ? netlink_trim+0x193/0x230 [ 283.535884][ T6208] __should_failslab+0xa4/0xe0 [ 283.540632][ T6208] should_failslab+0x9/0x20 [ 283.545109][ T6208] __kmalloc_track_caller+0x5f/0x320 [ 283.550396][ T6208] ? netlink_trim+0x193/0x230 [ 283.555050][ T6208] pskb_expand_head+0x123/0x1110 [ 283.559963][ T6208] netlink_trim+0x193/0x230 [ 283.564439][ T6208] netlink_broadcast_filtered+0x78/0x1270 [ 283.570141][ T6208] ? __kmalloc_track_caller+0x17e/0x320 [ 283.575657][ T6208] ? __kasan_check_write+0x14/0x20 [ 283.580739][ T6208] ? rtmsg_ifinfo_build_skb+0xd8/0x180 [ 283.586171][ T6208] nlmsg_notify+0xed/0x1b0 [ 283.590558][ T6208] rtnetlink_event+0x13a/0x1a0 [ 283.595292][ T6208] raw_notifier_call_chain+0x90/0x100 [ 283.600635][ T6208] dev_set_mac_address+0x320/0x430 [ 283.605715][ T6208] ? dev_pre_changeaddr_notify+0x1e0/0x1e0 [ 283.611490][ T6208] dev_set_mac_address_user+0x31/0x50 [ 283.616834][ T6208] dev_ifsioc+0x675/0xa90 [ 283.621133][ T6208] ? dev_ioctl+0xb80/0xb80 [ 283.625519][ T6208] ? dev_load+0x34/0xb0 [ 283.629646][ T6208] dev_ioctl+0x550/0xb80 [ 283.633856][ T6208] sock_do_ioctl+0x27b/0x380 [ 283.638428][ T6208] ? sock_show_fdinfo+0xa0/0xa0 [ 283.643252][ T6208] ? __kasan_check_read+0x11/0x20 [ 283.648247][ T6208] ? preempt_schedule_irq+0xca/0x120 [ 283.653502][ T6208] ? preempt_schedule_notrace+0xf1/0x120 [ 283.659106][ T6208] ? selinux_file_ioctl+0x3a0/0x4d0 [ 283.664276][ T6208] ? switch_mm_irqs_off+0x30c/0x990 [ 283.669444][ T6208] sock_ioctl+0x4bd/0x760 [ 283.673746][ T6208] ? sock_poll+0x350/0x350 [ 283.678134][ T6208] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 283.683737][ T6208] ? __se_sys_ioctl+0x62/0x1a0 [ 283.688471][ T6208] ? sock_poll+0x350/0x350 [ 283.692858][ T6208] __se_sys_ioctl+0x121/0x1a0 [ 283.697504][ T6208] __x64_sys_ioctl+0x7b/0x90 [ 283.702061][ T6208] do_syscall_64+0x31/0x40 [ 283.706452][ T6208] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 283.712315][ T6208] RIP: 0033:0x7fb3f2a7a819 [ 283.716702][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.736277][ T6208] RSP: 002b:00007fb3f1493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.744662][ T6208] RAX: ffffffffffffffda RBX: 00007fb3f2cf4180 RCX: 00007fb3f2a7a819 [ 283.752603][ T6208] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 283.760544][ T6208] RBP: 00007fb3f1493090 R08: 0000000000000000 R09: 0000000000000000 [ 283.768485][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.776429][ T6208] R13: 00007fb3f2cf4218 R14: 00007fb3f2cf4180 R15: 00007ffc5ab981a8 [ 283.788806][ T6193] EXT4-fs error (device loop7): ext4_ext_remove_space:2924: inode #15: comm syz.7.1691: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 283.807386][ T6200] EXT4-fs error (device loop7): ext4_map_blocks:740: inode #15: comm syz.7.1691: lblock 0 mapped to illegal pblock 0 (length 1) [ 283.821390][ T6200] EXT4-fs error (device loop7): ext4_ext_remove_space:2924: inode #15: comm syz.7.1691: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 283.839909][ T6205] EXT4-fs error (device loop7): ext4_map_blocks:740: inode #15: comm syz.7.1691: lblock 0 mapped to illegal pblock 0 (length 1) [ 283.853822][ T6205] EXT4-fs error (device loop7): ext4_ext_remove_space:2924: inode #15: comm syz.7.1691: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 283.856176][ T6210] EXT4-fs (loop8): Ignoring removed nobh option [ 283.878228][ T6210] EXT4-fs (loop8): Test dummy encryption mode enabled [ 283.887151][ T6210] ------------[ cut here ]------------ [ 283.892774][ T6210] EA inode 11 i_nlink=1026 [ 283.892888][ T6210] WARNING: CPU: 0 PID: 6210 at fs/ext4/xattr.c:1002 ext4_xattr_inode_update_ref+0x4f1/0x550 [ 283.907510][ T6210] Modules linked in: [ 283.911575][ T6210] CPU: 0 PID: 6210 Comm: syz.8.1695 Not tainted syzkaller #0 [ 283.918948][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.929224][ T6210] RIP: 0010:ext4_xattr_inode_update_ref+0x4f1/0x550 [ 283.935886][ T6210] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 b0 04 be ff 49 8b 37 48 c7 c7 20 dc 2c 85 89 da e8 ff b4 98 02 <0f> 0b 4c 8b 6c 24 10 4c 8b 7c 24 08 e9 ab fe ff ff e8 49 59 9c 02 [ 283.955857][ T6210] RSP: 0018:ffffc90000c57020 EFLAGS: 00010246 [ 283.962196][ T6210] RAX: ec121031312a3d00 RBX: 0000000000000402 RCX: 0000000000080000 [ 283.970920][ T6210] RDX: ffffc9000c6ed000 RSI: 000000000007ffff RDI: 0000000000080000 [ 283.978907][ T6210] RBP: ffffc90000c57110 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 283.987395][ T6210] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: dffffc0000000000 [ 283.995548][ T6210] R13: ffff88811a74f7b8 R14: 1ffff110234e9f23 R15: ffff88811a74f7f8 [ 284.003665][ T6210] FS: 00007fc250f936c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 284.012831][ T6210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.019444][ T6210] CR2: 000000110c2ef712 CR3: 000000010abe4000 CR4: 00000000003526b0 [ 284.027696][ T6210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.037950][ T6210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.046157][ T6210] Call Trace: [ 284.049575][ T6210] ? ext4_xattr_block_csum+0x560/0x560 [ 284.055161][ T6210] ? __kasan_check_write+0x14/0x20 [ 284.060513][ T6210] ? ext4_xattr_inode_iget+0x264/0x350 [ 284.066080][ T6210] ext4_xattr_set_entry+0xef3/0x3860 [ 284.071873][ T6210] ? __kasan_check_read+0x11/0x20 [ 284.076988][ T6210] ? __ext4_handle_dirty_metadata+0x388/0x7f0 [ 284.083101][ T6210] ? __kasan_check_write+0x14/0x20 [ 284.088383][ T6210] ? ext4_xattr_block_set+0xd4d/0x2a80 [ 284.093905][ T6210] ? ext4_xattr_ibody_set+0x360/0x360 [ 284.099440][ T6210] ext4_xattr_ibody_set+0x122/0x360 [ 284.104703][ T6210] ext4_expand_extra_isize_ea+0xf59/0x1930 [ 284.110828][ T6210] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 284.116515][ T6210] __ext4_mark_inode_dirty+0x3cf/0x610 [ 284.123027][ T6210] ext4_evict_inode+0xea1/0x1770 [ 284.129427][ T6210] ? _raw_spin_unlock+0x4d/0x70 [ 284.134817][ T6210] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 284.140656][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.141066][ T6210] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 284.148750][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.162192][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.169761][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.177271][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.184848][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.185704][ T6210] evict+0x4ae/0x930 [ 284.196421][ T6210] ? mode_strip_sgid+0x160/0x160 [ 284.202346][ T6210] ? __kasan_check_write+0x14/0x20 [ 284.202767][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.207529][ T6210] iput+0x638/0x7c0 [ 284.215255][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.218709][ T6210] ext4_orphan_cleanup+0x96c/0xd30 [ 284.226372][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.238778][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.246315][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.256584][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.264144][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.271963][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.279393][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.281992][ T6210] ext4_fill_super+0x865f/0x8d70 [ 284.287776][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.292133][ T6210] ? ext4_mount+0x40/0x40 [ 284.303494][ T6210] ? vscnprintf+0x80/0x80 [ 284.306096][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.307861][ T6210] ? set_blocksize+0x1ed/0x3b0 [ 284.315421][ T15] hid-generic 4003:000F:0000.0029: unknown main item tag 0x0 [ 284.320300][ T6210] ? sb_set_blocksize+0xaa/0xf0 [ 284.328205][ T15] hid-generic 4003:000F:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 284.341850][ T6210] mount_bdev+0x28b/0x3a0 [ 284.341861][ T6210] ? ext4_mount+0x40/0x40 [ 284.341869][ T6210] ext4_mount+0x34/0x40 [ 284.341880][ T6210] legacy_get_tree+0xed/0x190 [ 284.341896][ T6210] ? ext4_chksum+0x180/0x180 [ 284.364163][ T6210] vfs_get_tree+0x89/0x260 [ 284.368788][ T6210] do_new_mount+0x25a/0xa20 [ 284.373430][ T6210] path_mount+0x585/0xc90 [ 284.377794][ T6210] __se_sys_mount+0x320/0x390 [ 284.383339][ T6210] ? __x64_sys_mount+0xd0/0xd0 [ 284.388248][ T6210] ? debug_smp_processor_id+0x17/0x20 [ 284.394391][ T6210] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 284.401096][ T6210] __x64_sys_mount+0xbf/0xd0 [ 284.405700][ T6210] do_syscall_64+0x31/0x40 [ 284.410852][ T6210] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 284.416905][ T6210] RIP: 0033:0x7fc252539a8a [ 284.425734][ T6210] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.451410][ T6210] RSP: 002b:00007fc250f92e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.460781][ T6210] RAX: ffffffffffffffda RBX: 00007fc250f92ee0 RCX: 00007fc252539a8a [ 284.468936][ T6210] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fc250f92ea0 [ 284.499756][ T6210] RBP: 0000200000000180 R08: 00007fc250f92ee0 R09: 0000000000800718 [ 284.507754][ T6210] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 284.514714][ T6229] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0001:0000 with DS=0x7 [ 284.518558][ T6210] R13: 00007fc250f92ea0 R14: 00000000000004a3 R15: 0000200000000380 [ 284.533066][ T6210] ---[ end trace 22d0ddf460a62249 ]--- [ 284.547124][ T6230] fido_id[6230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 284.564333][ T6210] EXT4-fs (loop8): 1 orphan inode deleted [ 284.570296][ T6210] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,journal_dev=0x00000000040000ff,debug_want_extra_isize=0x0000000000000060,nobh,resgid=0x0000000000000000,resuid=0x0000000000000000,nombcache,test_dummy_encryption=v1,nodioread_nolock,noblock_validity,,errors=continue [ 284.619592][ T882] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 284.643965][ T882] usb 4-1: USB disconnect, device number 39 [ 284.879523][ T412] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 285.119506][ T412] usb 9-1: Using ep0 maxpacket: 32 [ 285.239560][ T412] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 285.247804][ T412] usb 9-1: config 0 has no interface number 0 [ 285.253913][ T412] usb 9-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 40480, setting to 1024 [ 285.265265][ T412] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 285.329522][ T409] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 285.439571][ T412] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 285.465700][ T412] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.473779][ T412] usb 9-1: Product: syz [ 285.477930][ T412] usb 9-1: Manufacturer: syz [ 285.483277][ T412] usb 9-1: SerialNumber: syz [ 285.488669][ T412] usb 9-1: config 0 descriptor?? [ 285.494377][ T6240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 285.509612][ T6210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 285.516129][ T6240] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1704'. [ 285.579517][ T409] usb 2-1: Using ep0 maxpacket: 32 [ 285.618376][ T6245] EXT4-fs (loop3): Unrecognized mount option "smackfsfloor=" or missing value [ 285.799625][ T308] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 285.882605][ T6210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 285.941878][ T6248] EXT4-fs (loop3): Invalid log block size: 256 [ 286.029586][ T409] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 286.038679][ T409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.046758][ T409] usb 2-1: Product: syz [ 286.050948][ T409] usb 2-1: Manufacturer: syz [ 286.055520][ T409] usb 2-1: SerialNumber: syz [ 286.100232][ T409] usb 2-1: Fast Track Pro switching to config #2 [ 286.159650][ T308] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.170600][ T308] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.180367][ T308] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 286.189384][ T308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.198259][ T308] usb 8-1: config 0 descriptor?? [ 286.219583][ T771] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 286.301418][ T409] usb 2-1: USB disconnect, device number 34 [ 286.489523][ T771] usb 4-1: device descriptor read/64, error -71 [ 286.569536][ T412] asix 9-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 286.670379][ T308] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 286.677905][ T308] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 286.780578][ T6210] EXT4-fs (loop8): re-mounted. Opts: (null) [ 286.809191][ T6252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6252 comm=syz.1.1707 [ 286.826518][ T24] audit: type=1326 audit(1774714621.919:14968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.1.1707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x0 [ 286.889522][ T771] usb 4-1: device descriptor read/64, error -71 [ 287.000007][ T6210] EXT4-fs (loop8): re-mounted. Opts: [ 287.009564][ T412] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 287.039584][ T412] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 287.049797][ T412] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 287.089606][ T412] asix: probe of 9-1:0.188 failed with error -71 [ 287.097037][ T412] usb 9-1: USB disconnect, device number 10 [ 287.159553][ T771] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 287.429532][ T771] usb 4-1: device descriptor read/64, error -71 [ 287.813578][ T6259] F2FS-fs (loop8): invalid crc value [ 287.819622][ T771] usb 4-1: device descriptor read/64, error -71 [ 287.826917][ T6259] F2FS-fs (loop8): Found nat_bits in checkpoint [ 287.849777][ T6259] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 287.879312][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 287.886751][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 287.929556][ T952] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 287.939693][ T771] usb usb4-port1: attempt power cycle [ 288.289625][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.300570][ T952] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.309517][ T882] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 288.309748][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.325950][ T952] usb 2-1: config 0 descriptor?? [ 288.349651][ T771] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 288.519601][ T771] usb 4-1: device descriptor read/8, error -71 [ 288.539562][ T308] cp2112 0003:10C4:EA90.002A: error requesting version [ 288.547856][ T308] cp2112: probe of 0003:10C4:EA90.002A failed with error -71 [ 288.556339][ T308] usb 8-1: USB disconnect, device number 9 [ 288.580495][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 288.680834][ T6273] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue [ 288.692322][ T6273] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.702885][ T882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.714375][ T882] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.723442][ T882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.731903][ T882] usb 9-1: config 0 descriptor?? [ 288.739547][ T771] usb 4-1: device descriptor read/8, error -71 [ 288.799988][ T952] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 288.809303][ T952] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002B/input/input87 [ 288.891426][ T952] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 288.909547][ T308] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 289.200143][ T882] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 289.209614][ T882] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.002C/input/input88 [ 289.229858][ T771] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 289.291216][ T882] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 289.309589][ T308] usb 8-1: unable to get BOS descriptor or descriptor too short [ 289.354420][ T6279] udc-core: couldn't find an available UDC or it's busy [ 289.361490][ T6279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 289.414962][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 289.519752][ T771] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.530749][ T771] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.543719][ C1] Mem-Info: [ 289.543750][ C1] active_anon:58 inactive_anon:10765 isolated_anon:0 [ 289.543750][ C1] active_file:15572 inactive_file:7135 isolated_file:0 [ 289.543750][ C1] unevictable:0 dirty:240 writeback:0 [ 289.543750][ C1] slab_reclaimable:8301 slab_unreclaimable:74741 [ 289.543750][ C1] mapped:30509 shmem:247 pagetables:766 bounce:0 [ 289.543750][ C1] free:1551839 free_pcp:1374 free_cma:0 [ 289.543780][ C1] Node 0 active_anon:232kB inactive_anon:43060kB active_file:62288kB inactive_file:28540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122036kB dirty:960kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4800kB all_unreclaimable? no [ 289.543818][ C1] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1432kB free_cma:0kB [ 289.543822][ C1] lowmem_reserve[]: 0 3941 3941 [ 289.543877][ C1] Normal free:3223720kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:232kB inactive_anon:43060kB active_file:62288kB inactive_file:28540kB unevictable:0kB writepending:960kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3064kB bounce:0kB free_pcp:2600kB local_pcp:1236kB free_cma:0kB [ 289.543881][ C1] lowmem_reserve[]: 0 0 0 [ 289.543899][ C1] DMA32: 7*4kB (UM) 5*8kB (M) 5*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 289.543988][ C1] Normal: 345*4kB (UM) 558*8kB (UME) 341*16kB (UME) 381*32kB (UME) 431*64kB (UME) 245*128kB (UME) 93*256kB (UME) 39*512kB (UME) 19*1024kB (UME) 9*2048kB (ME) 747*4096kB (UM) = 3223812kB [ 289.544085][ C1] 23504 total pagecache pages [ 289.544092][ C1] 561 pages in swap cache [ 289.544100][ C1] Swap cache stats: add 3606, delete 3045, find 1543/1543 [ 289.544104][ C1] Free swap = 122376kB [ 289.544108][ C1] Total swap = 124996kB [ 289.544112][ C1] 2097051 pages RAM [ 289.544115][ C1] 0 pages HighMem/MovableOnly [ 289.544119][ C1] 341390 pages reserved [ 289.544124][ C1] 0 pages cma reserved [ 289.757058][ T308] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 289.766102][ T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.766111][ T308] usb 8-1: Product: syz [ 289.766119][ T308] usb 8-1: Manufacturer: syz [ 289.766128][ T308] usb 8-1: SerialNumber: syz [ 289.766466][ T771] usb 4-1: config 1 interface 0 has no altsetting 0 [ 289.768809][ T6280] udc-core: couldn't find an available UDC or it's busy [ 289.803761][ T6280] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 289.885271][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1710'. [ 289.919592][ T771] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 289.928660][ T771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.936730][ T771] usb 4-1: Product: ъ [ 289.936741][ T771] usb 4-1: Manufacturer: 凰紇批颔닝ᾧ俺띺ꄤ杕滀䒍솙ѩ [ 289.936756][ T771] usb 4-1: SerialNumber: 犿ই⣘幙셚ត䎤݁ⵓ뚈⦛嘱䇸笸䎆攙汉๗౵⧒䋵ᣫ讃뽘퇧≪❼ட⪵ᖷ荿ᡚ躰櫕脹譀蟏昊ዐ炌૊錾閘쇛ⱦ뺒ÏⲨ願쌱盜땲瑁煍ঈ᱔凊㋂劐㓾鶏聠佹㭞颦泳䨄ᰘ묊 [ 290.429604][ C1] Mem-Info: [ 290.432757][ C1] active_anon:60 inactive_anon:11802 isolated_anon:0 [ 290.432757][ C1] active_file:15573 inactive_file:7135 isolated_file:0 [ 290.432757][ C1] unevictable:0 dirty:248 writeback:0 [ 290.432757][ C1] slab_reclaimable:8294 slab_unreclaimable:74823 [ 290.432757][ C1] mapped:30523 shmem:248 pagetables:775 bounce:0 [ 290.432757][ C1] free:1550776 free_pcp:1358 free_cma:0 [ 290.469457][ C1] Node 0 active_anon:240kB inactive_anon:47208kB active_file:62292kB inactive_file:28540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122092kB dirty:992kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4832kB all_unreclaimable? no [ 290.498355][ C1] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1432kB free_cma:0kB [ 290.526960][ C1] lowmem_reserve[]: 0 3941 3941 [ 290.531814][ C1] Normal free:3219716kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:240kB inactive_anon:47108kB active_file:62292kB inactive_file:28540kB unevictable:0kB writepending:992kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:2952kB bounce:0kB free_pcp:2568kB local_pcp:1272kB free_cma:0kB [ 290.562239][ C1] lowmem_reserve[]: 0 0 0 [ 290.566550][ C1] DMA32: 7*4kB (UM) 5*8kB (M) 5*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 290.582376][ C1] Normal: 360*4kB (UM) 570*8kB (UME) 333*16kB (UME) 246*32kB (UME) 433*64kB (UME) 245*128kB (UME) 93*256kB (UME) 39*512kB (UME) 19*1024kB (UME) 9*2048kB (ME) 747*4096kB (UM) = 3219648kB [ 290.600639][ C1] 23505 total pagecache pages [ 290.605291][ C1] 561 pages in swap cache [ 290.609588][ C1] Swap cache stats: add 3606, delete 3045, find 1543/1543 [ 290.616660][ C1] Free swap = 122376kB [ 290.620783][ C1] Total swap = 124996kB [ 290.624903][ C1] 2097051 pages RAM [ 290.628676][ C1] 0 pages HighMem/MovableOnly [ 290.633319][ C1] 341390 pages reserved [ 290.637439][ C1] 0 pages cma reserved [ 290.674050][ T412] usb 2-1: USB disconnect, device number 35 [ 290.759582][ T308] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 290.786930][ T308] usb 8-1: USB disconnect, device number 10 [ 291.025858][ T952] usb 9-1: USB disconnect, device number 11 [ 291.139570][ T308] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 291.189597][ T771] usbhid 4-1:1.0: can't add hid device: -71 [ 291.195709][ T771] usbhid: probe of 4-1:1.0 failed with error -71 [ 291.203991][ T771] usb 4-1: USB disconnect, device number 43 [ 291.399510][ T952] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 291.540416][ T308] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.551375][ T308] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.554445][ T6295] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 291.560474][ T771] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 291.560511][ T308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.568189][ T6295] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.576186][ T308] usb 8-1: config 0 descriptor?? [ 291.585273][ T6295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 291.608629][ T6295] System zones: 0-1, 3-36 [ 291.613698][ T6295] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 291.669572][ T952] usb 9-1: device descriptor read/64, error -71 [ 291.839520][ T771] usb 4-1: device descriptor read/64, error -71 [ 291.999539][ T882] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 292.059572][ T952] usb 9-1: device descriptor read/64, error -71 [ 292.070950][ T308] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 292.081280][ T308] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.002D/input/input89 [ 292.161472][ T308] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 292.229574][ T771] usb 4-1: device descriptor read/64, error -71 [ 292.259516][ T882] usb 2-1: Using ep0 maxpacket: 32 [ 292.329509][ T952] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 292.359523][ T412] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 292.399959][ T882] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 292.408130][ T882] usb 2-1: config 0 has no interface number 0 [ 292.499692][ T771] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 292.589596][ T882] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 292.598639][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.599788][ T952] usb 9-1: device descriptor read/64, error -71 [ 292.607180][ T412] usb 6-1: Using ep0 maxpacket: 8 [ 292.617934][ T882] usb 2-1: Product: syz [ 292.622117][ T882] usb 2-1: Manufacturer: syz [ 292.626691][ T882] usb 2-1: SerialNumber: syz [ 292.627674][ T6312] udc-core: couldn't find an available UDC or it's busy [ 292.632230][ T882] usb 2-1: config 0 descriptor?? [ 292.638643][ T6312] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.680018][ T882] smsc95xx v2.0.0 [ 292.704203][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1713'. [ 292.769763][ T771] usb 4-1: device descriptor read/64, error -71 [ 292.969548][ T412] usb 6-1: unable to get BOS descriptor or descriptor too short [ 292.999556][ T952] usb 9-1: device descriptor read/64, error -71 [ 293.029555][ T412] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 293.037249][ T412] usb 6-1: can't read configurations, error -71 [ 293.093331][ T24] audit: type=1326 audit(1774714628.189:14969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.131754][ T952] usb usb9-port1: attempt power cycle [ 293.137683][ T24] audit: type=1326 audit(1774714628.219:14970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.163683][ T24] audit: type=1326 audit(1774714628.219:14971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.188808][ T24] audit: type=1326 audit(1774714628.229:14972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.212876][ T24] audit: type=1326 audit(1774714628.229:14973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3f2a7a4ab code=0x7ffc0000 [ 293.212924][ T771] usb 4-1: device descriptor read/64, error -71 [ 293.236591][ T24] audit: type=1326 audit(1774714628.229:14974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3f2a7a4ab code=0x7ffc0000 [ 293.266250][ T24] audit: type=1326 audit(1774714628.259:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3f2a3b04e code=0x7ffc0000 [ 293.310205][ T6317] erofs: (device loop5): mounted with root inode @ nid 36. [ 293.345596][ T6316] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 293.354973][ T6316] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 293.364011][ T6316] attempt to access beyond end of device [ 293.364011][ T6316] loop5: rw=524288, want=1072, limit=16 [ 293.364331][ T24] audit: type=1326 audit(1774714628.459:14976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.375231][ T6316] attempt to access beyond end of device [ 293.375231][ T6316] loop5: rw=524288, want=24, limit=16 [ 293.399503][ T6301] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1719'. [ 293.410129][ T771] usb usb4-port1: attempt power cycle [ 293.423209][ T24] audit: type=1326 audit(1774714628.459:14977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.423982][ T6316] attempt to access beyond end of device [ 293.423982][ T6316] loop5: rw=0, want=1064, limit=16 [ 293.448108][ T24] audit: type=1326 audit(1774714628.499:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3f2a7a819 code=0x7ffc0000 [ 293.549525][ T952] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 293.560749][ T6319] EXT4-fs (loop1): Value of option "test_dummy_encryption=v1.journal_async_commit" is unrecognized [ 293.653266][ T6319] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 293.719575][ C1] Mem-Info: [ 293.722731][ C1] active_anon:56 inactive_anon:14613 isolated_anon:0 [ 293.722731][ C1] active_file:16582 inactive_file:7480 isolated_file:0 [ 293.722731][ C1] unevictable:0 dirty:96 writeback:0 [ 293.722731][ C1] slab_reclaimable:8358 slab_unreclaimable:74683 [ 293.722731][ C1] mapped:33370 shmem:3062 pagetables:799 bounce:0 [ 293.722731][ C1] free:1546906 free_pcp:1037 free_cma:0 [ 293.759439][ C1] Node 0 active_anon:224kB inactive_anon:54152kB active_file:66328kB inactive_file:29920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133480kB dirty:384kB writeback:0kB shmem:12248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4864kB all_unreclaimable? no [ 293.788506][ C1] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1432kB free_cma:0kB [ 293.817026][ C1] lowmem_reserve[]: 0 3941 3941 [ 293.821884][ C1] Normal free:3207900kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:224kB inactive_anon:54152kB active_file:66328kB inactive_file:29920kB unevictable:0kB writepending:384kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3048kB bounce:0kB free_pcp:1624kB local_pcp:356kB free_cma:0kB [ 293.852226][ C1] lowmem_reserve[]: 0 0 0 [ 293.856541][ C1] DMA32: 7*4kB (UM) 5*8kB (M) 5*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 293.872378][ C1] Normal: 41*4kB (UM) 22*8kB (UME) 160*16kB (UME) 476*32kB (UME) 467*64kB (UME) 165*128kB (UME) 89*256kB (UME) 36*512kB (UME) 19*1024kB (UME) 9*2048kB (ME) 747*4096kB (UM) = 3207956kB [ 293.890473][ C1] 27673 total pagecache pages [ 293.895129][ C1] 561 pages in swap cache [ 293.899428][ C1] Swap cache stats: add 3606, delete 3045, find 1543/1543 [ 293.906501][ C1] Free swap = 122376kB [ 293.910625][ C1] Total swap = 124996kB [ 293.914746][ C1] 2097051 pages RAM [ 293.918516][ C1] 0 pages HighMem/MovableOnly [ 293.923157][ C1] 341390 pages reserved [ 293.927277][ C1] 0 pages cma reserved [ 293.933639][ T54] usb 8-1: USB disconnect, device number 11 [ 293.941969][ T952] usb 9-1: device descriptor read/8, error -71 [ 294.009511][ T771] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 294.033463][ T6322] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 294.047494][ T6322] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1723'. [ 294.056621][ T6322] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1723'. [ 294.139607][ T771] usb 4-1: device descriptor read/8, error -71 [ 294.159564][ T952] usb 9-1: device descriptor read/8, error -71 [ 294.289522][ T412] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 294.379531][ T771] usb 4-1: device descriptor read/8, error -71 [ 294.499569][ T54] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 294.689554][ T412] usb 6-1: unable to get BOS descriptor or descriptor too short [ 294.769573][ T54] usb 8-1: device descriptor read/64, error -71 [ 294.775883][ T412] usb 6-1: config 163 has an invalid interface number: 231 but max is 0 [ 294.784431][ T412] usb 6-1: config 163 has no interface number 0 [ 294.790706][ T412] usb 6-1: config 163 interface 231 has no altsetting 0 [ 294.889517][ T771] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 294.949777][ T412] usb 6-1: New USB device found, idVendor=19d2, idProduct=1108, bcdDevice=ea.be [ 294.959593][ T412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.967575][ T412] usb 6-1: Product: syz [ 294.975774][ T412] usb 6-1: Manufacturer: syz [ 294.980419][ T412] usb 6-1: SerialNumber: syz [ 295.129562][ T771] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.139692][ T771] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.148531][ T771] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.169633][ T54] usb 8-1: device descriptor read/64, error -71 [ 295.311721][ T412] usb 6-1: USB disconnect, device number 23 [ 295.319788][ T771] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 295.328897][ T771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.336877][ T771] usb 4-1: Product: syz [ 295.341224][ T771] usb 4-1: Manufacturer: syz [ 295.345794][ T771] usb 4-1: SerialNumber: syz [ 295.350934][ T771] usb 4-1: config 0 descriptor?? [ 295.390020][ T771] uvcvideo: Found UVC 34.00 device syz (8086:0b5b) [ 295.396537][ T771] uvcvideo: No valid video chain found. [ 295.449525][ T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 295.529579][ T882] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 295.541506][ T882] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 295.569773][ T882] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 295.580896][ T882] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 295.598435][ T882] usb 2-1: USB disconnect, device number 36 [ 295.603666][ T771] usb 4-1: USB disconnect, device number 47 [ 295.729542][ T54] usb 8-1: device descriptor read/64, error -71 [ 295.779960][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1733'. [ 295.790558][ T6351] device vlan0 entered promiscuous mode [ 295.872287][ T6351] EXT4-fs (loop5): Test dummy encryption mode enabled [ 295.879185][ T6351] EXT4-fs (loop5): Ignoring removed orlov option [ 295.887163][ T6351] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue [ 296.089517][ T771] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 296.115747][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'. [ 296.124737][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 296.133622][ T54] usb 8-1: device descriptor read/64, error -71 [ 296.133862][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 296.148899][ T6359] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1736'. [ 296.229569][ T882] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 296.259634][ T54] usb usb8-port1: attempt power cycle [ 296.282289][ T6366] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 296.459602][ T771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.470545][ T771] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.479692][ T771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.488387][ T771] usb 9-1: config 0 descriptor?? [ 296.499572][ T882] usb 6-1: device descriptor read/64, error -71 [ 296.671495][ T54] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 296.777969][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000e94,max_dir_size_kb=0x0000000000000004,min_batch_time=0x000000000000000b,quota,,errors=continue [ 296.796513][ T6374] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.937654][ T54] usb 8-1: device descriptor read/8, error -71 [ 297.049913][ T882] usb 6-1: device descriptor read/64, error -71 [ 297.219622][ T54] usb 8-1: device descriptor read/8, error -71 [ 297.560276][ T6380] udc-core: couldn't find an available UDC or it's busy [ 297.567258][ T6380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 297.574036][ T882] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 297.590254][ T771] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 297.657688][ T771] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.002E/input/input90 [ 297.676515][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1734'. [ 297.709645][ T952] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 297.752433][ T771] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 297.899522][ T882] usb 6-1: device descriptor read/64, error -71 [ 297.989563][ T412] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 298.119536][ T952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.199544][ T952] usb 2-1: config 163 has an invalid interface number: 231 but max is 0 [ 298.207870][ T952] usb 2-1: config 163 has no interface number 0 [ 298.214176][ T952] usb 2-1: config 163 interface 231 has no altsetting 0 [ 298.279589][ T54] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 298.299537][ T882] usb 6-1: device descriptor read/64, error -71 [ 298.328249][ T771] usb 9-1: USB disconnect, device number 16 [ 298.379599][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.379609][ T952] usb 2-1: New USB device found, idVendor=19d2, idProduct=1108, bcdDevice=ea.be [ 298.379626][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.399528][ T412] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 298.399540][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.419593][ T882] usb usb6-port1: attempt power cycle [ 298.425135][ T952] usb 2-1: Product: syz [ 298.430183][ T412] usb 4-1: config 0 descriptor?? [ 298.434235][ T952] usb 2-1: Manufacturer: syz [ 298.443845][ T952] usb 2-1: SerialNumber: syz [ 298.505004][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 298.505015][ T24] audit: type=1400 audit(1774714633.599:14983): avc: denied { accept } for pid=6391 comm="syz.8.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.531345][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.533570][ T24] audit: type=1400 audit(1774714633.609:14984): avc: denied { mount } for pid=6393 comm="syz.8.1748" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 298.548256][ T54] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 298.565712][ T24] audit: type=1400 audit(1774714633.669:14985): avc: denied { unmount } for pid=6167 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 298.574098][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.604374][ T54] usb 8-1: config 0 descriptor?? [ 298.761716][ T952] usb 2-1: USB disconnect, device number 37 [ 298.859529][ T882] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 298.910038][ T412] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 298.919358][ T412] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002F/input/input91 [ 298.988876][ T24] audit: type=1326 audit(1774714634.079:14986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 299.002133][ T412] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 299.013010][ T24] audit: type=1326 audit(1774714634.089:14987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e8f50e04e code=0x7ffc0000 [ 299.024948][ T882] usb 6-1: device descriptor read/8, error -71 [ 299.048713][ T24] audit: type=1326 audit(1774714634.089:14988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 299.078104][ T24] audit: type=1326 audit(1774714634.089:14989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 299.102178][ T54] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 299.103663][ T24] audit: type=1326 audit(1774714634.089:14990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 299.112191][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0030/input/input92 [ 299.139081][ T24] audit: type=1326 audit(1774714634.089:14991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 299.229827][ T24] audit: type=1326 audit(1774714634.089:14992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8f54d819 code=0x7ffc0000 [ 299.289620][ T882] usb 6-1: device descriptor read/8, error -71 [ 299.308921][ T54] keytouch 0003:0926:3333.0030: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 299.351402][ T6404] EXT4-fs (loop5): Ignoring removed oldalloc option [ 299.358162][ T6404] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 299.365552][ T6404] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.515489][ T6404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e843c01c, mo2=0003] [ 299.523996][ T6404] System zones: 0-1, 3-36 [ 299.533148][ T6404] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x000000000000502a,delalloc,oldalloc,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 300.647607][ T6419] udc-core: couldn't find an available UDC or it's busy [ 300.665122][ T6419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.687770][ T6415] udc-core: couldn't find an available UDC or it's busy [ 300.734359][ T6415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.770918][ T6421] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 300.780405][ T6421] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.811964][ T6421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 300.827353][ T6421] System zones: 0-1, 3-36 [ 300.839800][ T6421] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 300.892938][ T6421] FAULT_INJECTION: forcing a failure. [ 300.892938][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 300.905907][ T6421] CPU: 0 PID: 6421 Comm: syz.5.1755 Tainted: G W syzkaller #0 [ 300.914665][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.924717][ T6421] Call Trace: [ 300.928012][ T6421] __dump_stack+0x21/0x24 [ 300.932337][ T6421] dump_stack_lvl+0x1a7/0x208 [ 300.937010][ T6421] ? show_regs_print_info+0x18/0x18 [ 300.942196][ T6421] ? out_of_line_wait_on_bit+0x1b8/0x230 [ 300.947823][ T6421] ? bit_wait+0xd0/0xd0 [ 300.951973][ T6421] ? __wait_on_bit+0x180/0x180 [ 300.956730][ T6421] dump_stack+0x15/0x1c [ 300.960877][ T6421] should_fail+0x3c1/0x510 [ 300.965271][ T6421] ? find_tree_dqentry+0x59/0xac0 [ 300.970269][ T6421] __should_failslab+0xa4/0xe0 [ 300.975008][ T6421] should_failslab+0x9/0x20 [ 300.979480][ T6421] __kmalloc+0x60/0x330 [ 300.983607][ T6421] find_tree_dqentry+0x59/0xac0 [ 300.988429][ T6421] ? make_kgid+0x660/0x660 [ 300.992818][ T6421] ? __kasan_check_write+0x14/0x20 [ 300.997900][ T6421] ? __brelse+0x5d/0x90 [ 301.002041][ T6421] find_tree_dqentry+0x3e3/0xac0 [ 301.006957][ T6421] qtree_read_dquot+0x13d/0x670 [ 301.011785][ T6421] v2_read_dquot+0xbe/0x110 [ 301.016259][ T6421] dquot_acquire+0x155/0x530 [ 301.020823][ T6421] ? __ext4_journal_start_sb+0x2e2/0x490 [ 301.026433][ T6421] ext4_acquire_dquot+0x2d9/0x4a0 [ 301.031518][ T6421] dqget+0x73e/0xde0 [ 301.035411][ T6421] __dquot_initialize+0x311/0xb40 [ 301.040426][ T6421] ? dquot_initialize+0x20/0x20 [ 301.045694][ T6421] ? may_create+0x5d8/0x7d0 [ 301.050175][ T6421] dquot_initialize+0x1a/0x20 [ 301.054826][ T6421] ext4_mkdir+0x18f/0xc80 [ 301.059129][ T6421] ? ext4_symlink+0xc60/0xc60 [ 301.063787][ T6421] ? selinux_inode_mkdir+0x22/0x30 [ 301.068871][ T6421] ? security_inode_mkdir+0xbd/0x110 [ 301.074126][ T6421] vfs_mkdir+0x4c7/0x6a0 [ 301.078342][ T6421] do_mkdirat+0x14c/0x340 [ 301.082645][ T6421] __x64_sys_mkdir+0x60/0x70 [ 301.087207][ T6421] do_syscall_64+0x31/0x40 [ 301.091597][ T6421] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 301.097459][ T6421] RIP: 0033:0x7f2e8f54d819 [ 301.101853][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.121434][ T6421] RSP: 002b:00007f2e8dfa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 301.129908][ T6421] RAX: ffffffffffffffda RBX: 00007f2e8f7c6fa0 RCX: 00007f2e8f54d819 [ 301.137849][ T6421] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000080 [ 301.145794][ T6421] RBP: 00007f2e8dfa8090 R08: 0000000000000000 R09: 0000000000000000 [ 301.153742][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.161686][ T6421] R13: 00007f2e8f7c7038 R14: 00007f2e8f7c6fa0 R15: 00007fff578a0e08 [ 301.170270][ T6421] VFS: Not enough memory for quota buffers. [ 301.176257][ T6421] EXT4-fs error (device loop5): ext4_acquire_dquot:6225: comm syz.5.1755: Failed to acquire dquot type 1 [ 301.230002][ T6428] FAT-fs (loop8): Unrecognized mount option "wireguard" or missing value [ 301.564179][ T6446] erofs: (device loop1): mounted with root inode @ nid 36. [ 301.579849][ T6446] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 301.588809][ T6446] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 301.598085][ T6446] attempt to access beyond end of device [ 301.598085][ T6446] loop1: rw=524288, want=1072, limit=16 [ 301.609410][ T6446] attempt to access beyond end of device [ 301.609410][ T6446] loop1: rw=524288, want=24, limit=16 [ 301.621316][ T6446] attempt to access beyond end of device [ 301.621316][ T6446] loop1: rw=0, want=1064, limit=16 [ 301.709564][ T952] usb 6-1: new high-speed USB device number 28 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 186) OK [ 301.869998][ T54] usb 4-1: USB disconnect, device number 48 Stopping crond: stopped /usr/sbin/crond (pid 179) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 133) [ 302.039582][ T952] usb 6-1: device descriptor read/64, error -71 [ 302.179039][ T771] usb 8-1: USB disconnect, device number 15 Stopping network: OK Stopping iptables: [ 302.408362][ T6486] bridge0: port 3(vlan2) entered blocking state OK [ 302.421446][ T6486] bridge0: port 3(vlan2) entered disabled state Stopping system message bus: [ 302.449598][ T952] usb 6-1: device descriptor read/64, error -71 done [ 302.641410][ T6501] erofs: (device loop1): mounted with root inode @ nid 36. [ 302.658653][ T6501] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 302.667686][ T6501] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 302.676942][ T6501] attempt to access beyond end of device [ 302.676942][ T6501] loop1: rw=524288, want=1072, limit=16 [ 302.688177][ T6501] attempt to access beyond end of device [ 302.688177][ T6501] loop1: rw=524288, want=24, limit=16 [ 302.700110][ T6501] attempt to access beyond end of device [ 302.700110][ T6501] loop1: rw=0, want=1064, limit=16 [ 302.789652][ T771] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 302.789685][ T952] usb 6-1: new high-speed USB device number 29 using dummy_hcd killall: can't kill pid 325: No such process Stopping klogd: OK Stopping acpid: [ 303.089577][ T952] usb 6-1: device descriptor read/64, error -71 [ 303.259787][ T771] usb 8-1: config 0 has an invalid interface number: 33 but max is 0 [ 303.267992][ T771] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.278285][ T771] usb 8-1: config 0 has no interface number 0 [ 303.329264][ T771] usb 8-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 303.343392][ T771] usb 8-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.413763][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1773'. [ 303.423099][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1773'. [ 303.432277][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1773'. [ 303.441273][ T6525] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1773'. [ 303.478061][ T6523] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.489433][ T6523] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (63167!=20869) [ 303.499347][ T6523] EXT4-fs error (device loop1): __ext4_get_inode_loc:4444: comm syz.1.1772: Invalid inode table block 0 in block_group 0 [ 303.512656][ T952] usb 6-1: device descriptor read/64, error -71 [ 303.519934][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 303.520034][ T24] audit: type=1400 audit(1774714638.619:15042): avc: denied { mounton } for pid=6527 comm="syz.8.1774" path="/21/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 303.520135][ T6523] EXT4-fs (loop1): no journal found [ 303.554829][ T771] usb 8-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 303.564022][ T6523] EXT4-fs (loop1): can't get journal size [ 303.568596][ T6528] EXT4-fs (loop8): error: journal path ./file0 is not a block device [ 303.570130][ T6523] EXT4-fs error (device loop1): __ext4_get_inode_loc:4444: comm syz.1.1772: Invalid inode table block 0 in block_group 0 [ 303.579213][ T771] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.598722][ T6523] EXT4-fs (loop1): get root inode failed [ 303.599556][ T771] usb 8-1: Product: syz [ 303.606049][ T6523] EXT4-fs (loop1): mount failed [ 303.608997][ T771] usb 8-1: Manufacturer: syz [ 303.617973][ T771] usb 8-1: SerialNumber: syz [ 303.624360][ T771] usb 8-1: config 0 descriptor?? [ 303.630090][ T952] usb usb6-port1: attempt power cycle [ 303.639572][ T6474] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 303.840158][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.847330][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.983676][ T6535] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 303.996025][ T6535] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 304.004929][ T6535] EXT4-fs (loop7): orphan cleanup on readonly fs [ 304.011716][ T6535] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.1763: Inode bitmap for bg 0 marked uninitialized [ 304.024488][ T6535] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 304.040363][ T952] usb 6-1: new high-speed USB device number 30 using dummy_hcd OK [ 304.052355][ T6534] EXT4-fs (loop8): Ignoring removed bh option [ 304.058620][ T6534] EXT4-fs (loop8): Test dummy encryption mode enabled [ 304.065515][ T6474] EXT4-fs error (device loop7): ext4_search_dir:1521: inode #2: block 16: comm syz.7.1763: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 304.085453][ T6534] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended Stopping syslogd: [ 304.096631][ T412] usb 8-1: USB disconnect, device number 16 [ 304.103027][ T6534] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 304.103027][ T6534] [ 304.115037][ T6539] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 304.119645][ T6534] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,bh,delalloc,prjquota,usrquota,min_batch_time=0x000000000000001a,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue stopped /sbin/syslogd (pid 77) OK [ 304.154680][ T6539] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1775'. [ 304.164576][ T6539] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1775'. umount: can't remount debugfs read-only [ 304.229567][ T952] usb 6-1: device descriptor read/8, error -71 Connection to 10.128.0.199 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going [ 304.425492][ T24] audit: type=1400 audit(1774714639.479:15043): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[1582]" dev="pipefs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 304.479655][ T952] usb 6-1: device descriptor read/8, error -71 [ 304.573862][ T9] tipc: Left network mode [ 305.370398][ T9] device veth1_macvtap left promiscuous mode [ 305.376385][ T9] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 306.031009][ T9] tipc: Left network mode [ 306.531303][ T6552] kvm: exiting hardware virtualization [ 306.537657][ T6552] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 306.544292][ T6552] ACPI: Preparing to enter system sleep state S5 [ 306.551984][ T6552] reboot: Power down serialport: VM disconnected.