last executing test programs: 1m9.134788273s ago: executing program 3 (id=120): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) execve(0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x4}}, 0x24, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000380)={0xfc, 0x5, 0x7, 0x0, 0x7}) 1m9.094131524s ago: executing program 3 (id=121): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0xfff5, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 1m9.036678376s ago: executing program 3 (id=122): setuid(0xee00) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='vfat\x00', 0x1004840, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x3, 0x9, 0x38, 0x67, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@ssrr={0x89, 0x13, 0xe9, [@multicast1, @private=0xa010101, @multicast1, @local]}, @ssrr={0x89, 0x3, 0xfe}, @timestamp_addr={0x44, 0x4, 0x9a, 0x1, 0x1}]}}, {0x22, 0x3, 0x0, @multicast1}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6d4d, 0x7f, 0xe5, 0x8}]}) 1m9.036408356s ago: executing program 3 (id=123): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000280)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\x00\x00\x00\x00\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) close(0xffffffffffffffff) r0 = gettid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)='deny', 0x4}], 0x1) futex_waitv(&(0x7f0000000540)=[{0x3, &(0x7f0000000580)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x1400c, &(0x7f0000000800)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000840)="$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") r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d40)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000d80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000e00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x24020000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1m8.667869165s ago: executing program 3 (id=127): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000340)=0x4, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x0, 0xfff, 0x0, 0x2}, 0x4e, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x4, 0x9ee, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2a, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x7, 0x4, 0x0, 0x4, 0x0, 0x2000000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x20000000, 0x0, 0xfffffffd, 0xcff, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x9, 0x2, 0xfffffffb, 0x0, 0x7, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x9, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x7, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x8, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0xfffffffd], [0xfffffffe, 0xfffefffe, 0x4, 0xbbdc, 0x8098, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x7f, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = getpid() r5 = syz_io_uring_setup(0x141c, &(0x7f0000002a40)={0x0, 0x327a, 0x800, 0x1, 0x29}, &(0x7f0000002ac0)=0x0, &(0x7f0000002b00)=0x0, &(0x7f0000002b40)=0x0) syz_io_uring_submit$UBLK(r6, r7, r8, &(0x7f0000002b80)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x1, 0x12b, 0x0, 0x0}}) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000002c00)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x2, 0x27fd, 0x0, 0x0, 0x1000, 0x5000000, r4, 0x0, 0xa8}}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x2a, &(0x7f0000000980)=""/37, &(0x7f00000009c0)=0x25) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x4076cbba9945d516, &(0x7f0000000080)={0x0, 0x14}}, 0x0) io_setup(0x2, &(0x7f0000000880)=0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r10, 0x1, &(0x7f00000008c0)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x6, r11, &(0x7f0000000940)="da", 0x1}]) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x28a) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r12, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r12], 0x40}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r12, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x25}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) io_uring_enter(r5, 0x317d, 0x5, 0x2, 0x0, 0x0) 1m8.44542432s ago: executing program 3 (id=129): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x0, 0x8010, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") r2 = syz_io_uring_setup(0x3772, &(0x7f00000003c0)={0x0, 0x125c, 0x200, 0x1, 0x22f}, &(0x7f00000001c0), &(0x7f0000000240), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/mtrr\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='base=', 0x5) syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0) unshare(0x2020600) mount$incfs(0x0, 0x0, 0x0, 0xc002, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x8) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000380)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x5422, 0x0) 1m8.44209214s ago: executing program 32 (id=129): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x0, 0x8010, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") r2 = syz_io_uring_setup(0x3772, &(0x7f00000003c0)={0x0, 0x125c, 0x200, 0x1, 0x22f}, &(0x7f00000001c0), &(0x7f0000000240), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/mtrr\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='base=', 0x5) syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0) unshare(0x2020600) mount$incfs(0x0, 0x0, 0x0, 0xc002, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x8) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000380)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x5422, 0x0) 48.018320469s ago: executing program 0 (id=269): inotify_init() r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001a00)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x100, 0x2, 0x1ff, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 48.00691683s ago: executing program 0 (id=270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x1000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x1000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 47.948599171s ago: executing program 0 (id=272): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = gettid() timer_create(0x3, &(0x7f0000000100)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000200)) r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000006c0)={0x1000001d}) timer_settime(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2100000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e21000008000700000003e808000300000000080c00058008000100524153000c00068008"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000002010701000000f88c41b3319209751800000000020300000ab5abeee3cef3159c952424374041c6d7b981d02daba728f6241413650478f76858fbe7a7460eded7433f4b58565acdd8a39295dcfcc4ce8151127f60d3b88fd524790b4181ee4dc6e34830442f3494cd9ed6b6b75f943f65b27dc65b7d"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r6 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) recvmmsg(r6, &(0x7f0000000540), 0x6f5, 0x2000000022, &(0x7f0000000580)={0x77359400}) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f00000005c0)=0xfd83, 0x4) sendmsg$key(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7, 0x8}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)='r', 0x1}], 0x2}, 0x0) 46.074878016s ago: executing program 0 (id=284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x701, 0x3, 0x228, 0x1c0, 0xb, 0x108, 0x108, 0x1000000, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 46.020406017s ago: executing program 0 (id=286): personality(0x60000a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) unshare(0x6020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000007c0)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000800)=0x4, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@generic={0xdc, 0x0, 0x0, 0x0, 0x8000040}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11035}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20011}, 0x8000002) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x4, {0x10}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4044890) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000480)=0x63ba, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f00000004c0)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000500)=0xa0, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x10004004, &(0x7f0000000540)={0xa, 0x4e21, 0x765, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6}, 0x1c) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/130, 0xfffffef7}, 0xdb2a}], 0x1, 0x40032060, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r3, 0x4000, r0}, 0x18) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x180000000000) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) 46.020220607s ago: executing program 0 (id=287): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x50) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x8c000, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80000000) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x600000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8000, &(0x7f0000000140)={0x2, 0x0, 0x100000}, 0x20) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xa, 0x16, 0xb4, 0x3, 0x1}, 0x50) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xe, 0x10, 0x10, 0xffff, 0x13, 0xf, 0x10, 0x10, 0x3, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x66020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f00000001c0)={0x84, 0x77, 0x80000}, 0x20) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) 40.114693029s ago: executing program 1 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000010940)='./sys\x00', 0xbc) mount(0x0, &(0x7f0000010980)='./sys\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000010a00)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x9) write$tcp_mem(r0, &(0x7f0000010a40)={0xfff, 0x20, 0x0, 0x20, 0x8000000000010001}, 0x48) 40.114511429s ago: executing program 1 (id=351): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r1], 0x1, 0x3ae, &(0x7f00000009c0)="$eJzs3c9rY9UXAPDTzPTnd9p08UVQES+zcxPa+g9MkRkQC0qdyDgL8Y1Nx9A3TUlCJYPoLAS3/gfuB5fuBPEf6EL37tx143IWw0SSNG3SybRif8TBzwfCO3n3nOS+XPK4m8fZv/Pdg63NRmkza0bhRopCRBSeRCx2o56Jg2OhG0/FoEfxVvHO7298+PHd91bX1m6up3Rr9fbbKymlhTd//uLLH67/0vzfRz8u/DQde4uf7P+58sfeK3uv7j+7/Xm1kaqNtF1rpizdq9Wa2b28kjaqja1SSh/klaxRSdXtRqU+NL6Z13Z2Winb3pif26lXGo2UbbfSVqWVmrXUrLdSdj+rbqdSqZTm54LTlB+vr2ervXjmhLwblzUhLkC9vpp1/sPTz42UH49lQgDAWJ1p/98fOHX/f7cwsP+fiRfu/yfD/v9cTP69tMH9/z/+EP7lOvv/qYP/7zD7fwAAAAAAAAAAAAAAeBk8abeL7Xa72D+2+w8JH7wf8/S4YM+t/7HXqJqpy58mF2Tgwb2ZiPzb3fJuuXfsja9uRjXyqMRSFONp57bQ14tvvbt2cyl1Lcb8g6+79dd/jShfGa5fjmIsjq5f7tWnw/roHCdjbrB+JT6N/4+uXxlZPxVL3w/Ul6IYv30Wtchjo3t7O6r/ajmld95fO1Y/3c0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L+hlPpej17f+91yxGzsHvTvLx0lLA73x+/VH/bXX4piPB3dn39pZH/+q/Ha1fFeOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0NVoPt7I8r9QvK+j3/M/yfCKmesFJVRO99EfHhmZjOHn6tM85Y1A4NScKR2dmO1O+FjEi+Vm73e4G9785h4kVDn7N3pmZy13KswSTnUm/OKc9dF1n+a5rETF45spwznREnOUr2iddRSdY6C7Tuf6GVy5lmcZwMwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAxO2z63XkzMe7ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC6N1sOtLM8r9QsMxn2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL5O/AgAA//9EvgVb") sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00'}, 0x27) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$overlay(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), 0x40, &(0x7f00000004c0)={[{@userxattr}, {@xino_auto}], [{@fowner_lt={'fowner<', r6}}]}) unshare(0x2020600) mount$incfs(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0xc002, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40481, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc4c03d12, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000084c, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r11, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r12, @ANYRES16=r10, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000003200)='./file1\x00', 0x200) unshare(0x2020600) 39.130173242s ago: executing program 1 (id=353): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x102f, [{0x800000000}, {0x0, 0x100000000000000}]}, 0x68) 39.125150002s ago: executing program 1 (id=354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./sys\x00', 0x800714, &(0x7f0000000200), 0xf7, 0x485, &(0x7f0000000240)="$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") lsetxattr$system_posix_acl(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x15e) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000880)={0x18, {"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", 0x1000}}, 0x1006) syz_clone3(&(0x7f0000000180)={0x801400, &(0x7f00000018c0), 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) 39.054957894s ago: executing program 1 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000780)={0x9, {"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", 0x1000}}, 0x1006) tkill(r0, 0x12) ptrace(0x4208, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xb305e06d8eb44a71}, 0x48800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2d) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r8, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) r10 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r9, 0x8000000) munmap$IORING_OFF_SQ_RING(r10, 0x1) munmap$IORING_OFF_CQ_RING(r10, 0x2f51) mount(&(0x7f0000000100)=@md0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='fuse\x00', 0x80080, &(0x7f00000002c0)='bond0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 38.928967967s ago: executing program 1 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x10040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0x0, 0x3, 0x1]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040804}, 0x800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a30080601103c80180a000068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000) 38.928828337s ago: executing program 33 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x10040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0x0, 0x3, 0x1]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040804}, 0x800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x110, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000) 31.026256976s ago: executing program 34 (id=287): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x50) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x8c000, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80000000) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x600000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8000, &(0x7f0000000140)={0x2, 0x0, 0x100000}, 0x20) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xa, 0x16, 0xb4, 0x3, 0x1}, 0x50) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xe, 0x10, 0x10, 0xffff, 0x13, 0xf, 0x10, 0x10, 0x3, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x66020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f00000001c0)={0x84, 0x77, 0x80000}, 0x20) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) 15.552608427s ago: executing program 4 (id=604): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$(\'(-\\]/#{'}}]}, 0x1, 0x504, &(0x7f0000000c40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$packet(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x40016, [0x0, 0x0, 0x1, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x4003, 0x20, 0x403, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x6, 0x0, 0x0, 0x7c1, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8001, 0x200080, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1fe, 0x7, 0xfffffffc, 0x0, 0x0, 0xb, 0x0, 0xfffffffc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x4, 0x0, 0x3, 0x80000005, 0xfffffffd, 0x7, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffe, 0xfffffffc, 0x80000, 0x0, 0xfffffffd, 0x20000, 0x7, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xfffc], [0x8, 0x2, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x9, 0x1, 0x4000000, 0xfffffffe, 0x7, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffdfffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xe, 0x0, 0x20, 0xfffffffe, 0x0, 0x5, 0xfffffffe, 0x2, 0x0, 0x4, 0x1000000, 0x6, 0x1, 0x0, 0xbda2, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3], [0x40000000, 0x0, 0x74e2, 0x1, 0x0, 0x3, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x16c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffff4]}, 0x45c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000011907800000000003900000000004e20000890"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000780100000080119078ac141424e000000100004e20006490780200000002000000000000006e2bf0518cac42dd42fa2e99cf63d19d9b0d31351d7055f17143d60daeff5bcbbfe548c37a88b665572a987024aba2341691219b1678b3cec94e5c0aa517ed7c86bf4abd9a1cf98ba1f231d7e2c6241067ea6a393ea8852915594c5b768aa55a03"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000020000000200000079000000008000001dbb1ffb723f56c212e457a924d7fd07bbdc9b441d53f35ac1a48f82d8a5", @ANYRES64=r0, @ANYBLOB="5d0000000000000000000000000000000000000072a907d424fc6d2feb358e29b0e44577adad63cb173cfb7b2d00cbffc5fd6861ca2e3690bf09303308c351e79e8bde2912e309a920d36587f5039c006250f92c16aa45a785afe5db37c3ff699584d83dd20aa448907b4000ca9227291221c6f65afa146193f8be78ea65947ebfd1a3bff3505677f0ee6a8a1b0cd41bf95836626118f9dad4fc8fdf6f6baf643c2c0351b47c8dc123995ed422dc3060fc2c83a1a3e0f600"/198, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000010300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r5}, &(0x7f0000001280), &(0x7f00000012c0)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000001300)={0x0, 0x6000, &(0x7f0000001340)=[{&(0x7f0000001380)='U', 0xa00120}], 0x1}, 0x3) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100402"], 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f0000001900)='\x00\x00\x03\x01\xff\xff\xfc\xfe\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1s]\xaba\xf93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\x19\x8d\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdcU\x00\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-ox\xdb;\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x13$\t\xa8\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\vf\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf66\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6\x02\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xed\x16\xbcL\x10\x8d\x10\x9c<\x0e\x94\x13}\xbe\xd0\x89\xee\x90p%\x1bV\x89\an\x11Lc\xf8\xe6\'\x84\xfd\x01K/\x15\xce\x8dh}\x00q\xe7\x7f\x19r\xc4z>\xfcX\x98\xccd13S#\'y\xab\xe4\x1fW\xd3\xa1g\x1d\x8eGa\xa2\xab&\xf1\x96\xb5\x1b\xdb\xb0\x8a\x0fVM,\xf5\xcd5\xaaKt8\'\x046\x15\x94\xfa\xc4\x9e\xfc\xa2C\x1e\xd3%,1\x80.\x91h\xeeIb\x82\xd7\xa99\x86O\x9c\x14b\xbeA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xacC\x95\xf0\x9d\xe8\x80G\xc2\xc1zL\xd0\x1f\x8c0\xf5\xec\v\xed\xad\x1d#\xde\x98\xf9\v\x02Y\x89\xb2\'\xeaH\xbc{o\xbc\b?\xd9\x81\'\x0f7Xl\xcc\x93I3 \x0e\xc190`\xd9\xe46w\x1d\xdeV\xbf\xc9\x9e\xb4\xde\xe6\xa3\x97%D]\xd1Vd]\x03\x89J\xa8 \x99\xef\x9b\x00'/2064) ioctl$HIDIOCSREPORT(r7, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x10020, &(0x7f0000000080), 0x1, 0x518, &(0x7f00000013c0)="$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") 13.846345348s ago: executing program 6 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x1, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x1, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 13.818349348s ago: executing program 6 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) getxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000b00)=""/4096, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r5, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) mprotect(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0xd) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000280)={&(0x7f000081a000/0x2000)=nil, &(0x7f0000ba0000/0x6000)=nil, 0x2000}) 12.885881981s ago: executing program 6 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbfs(&(0x7f00000000c0), 0x81, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pimreg0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./bus\x00', 0x1820c51, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x400) chdir(&(0x7f00000005c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x103a40, 0x32) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000540)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) 11.957403653s ago: executing program 4 (id=632): getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r0 = socket$inet6(0xa, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000006, 0x110, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000380)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000400)={0x1, r3}) syz_clone3(&(0x7f0000000140)={0x8040000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x45, 0x0, 0x0}, 0x58) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000004c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) r4 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./tracing\x00', 0x0, 0x18}, 0x18) gettid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x33}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c08d2c9}, {0x0, 0xfffffffffffffffc}, 0x7, 0x6e6bb4, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4d8, 0x33}, 0xa, @in=@loopback, 0x4000, 0x0, 0x1, 0x3}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing\x00', 0x1ff) ptrace$peekuser(0x3, r4, 0x9) mount(0x0, &(0x7f0000000b80)='./tracing\x00', &(0x7f0000000bc0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./tracing/events/sched/filter\x00', 0x1, 0x0) 11.938230414s ago: executing program 4 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f0000000280)="b800000500000000", &(0x7f00000002c0)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000002cc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x11, 0x14, &(0x7f0000002e00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002e80)={r4}, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000002ec0)={0xa, 0x4e22}, 0x1c) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r6, 0x0, 0x31, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000002f00)=0x1, 0x4) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000004b54989c7c7f0503626b6a8e2b0000000000aa4e234e220000ce157fbfcd4a5070596fe73bfeb40e85b32d2bf1a0222489603a65de8dc715722cdf236e0cb51f2582973f73951c81a811cc649624ce5a65b82b53e6c4d7a75b73537a357616b3063c50de9048fa9ac0c0c150b3b9b2de3b723894ce7fc8375a6511d7b09991df3c362e5bab95da6b87c8802245", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000190780000"], 0x0) r7 = fsopen(&(0x7f0000000780)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000003040)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x4000}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000002f9078000000e07f000001b48065580000000210000800000086dd080088be002000001000000088f7ffff00000000080222eb00000000200000000200000000000000000000000800655800000000"], 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1, 0xc}, &(0x7f0000000380)='R\x10rust\xe3c*sgrVex:Di', 0x0) read(r10, &(0x7f0000000800)=""/1016, 0x3f8) 11.877908915s ago: executing program 4 (id=636): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42140, 0x187) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c1341, 0x0) fcntl$getflags(r2, 0x401) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 11.811328657s ago: executing program 4 (id=638): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x3e, 0x2c, 0x1, 0x0, 0x7, 0x4, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYRES64, @ANYRES8=r1, @ANYRES8=r3, @ANYRESOCT, @ANYRES16], 0x40) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000380)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r10, &(0x7f00000003c0)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5833, 0x2, 0x6, 0xbd}}], 0x1, &(0x7f00000006c0)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x826, 0x0, 0x0}}, 0x0) 11.810015717s ago: executing program 6 (id=640): syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x18008, &(0x7f00000009c0)={[{@errors_continue}, {@norecovery}, {@noblock_validity}]}, 0x1, 0x7c0, &(0x7f0000000a00)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000000080), 0x1, 0x474, &(0x7f0000000240)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0x0, 0x83) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) syz_clone(0x11, 0x0, 0x56, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x7) r3 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) setresuid(0x0, 0x0, 0xee01) (async) setresuid(0x0, 0x0, 0xee01) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000001200)='.\x00', &(0x7f0000001240)='proc\x00', 0x0, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000001280)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000008c0)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000008c0)=0x0) sched_getparam(r6, &(0x7f0000000900)) (async) sched_getparam(r6, &(0x7f0000000900)) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000001c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/35, 0x23}], 0x1}, 0x10040) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000007c0)=@v2={0x2, @adiantum, 0x0, '\x00', @b}) 10.324693983s ago: executing program 4 (id=646): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000500)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000000c00)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x6a, 0x4) syz_mount_image$fuse(&(0x7f0000001840), &(0x7f0000001880)='.\x00', 0x84406d, &(0x7f00000018c0)=ANY=[], 0x0, 0x0, 0x0) 10.280116073s ago: executing program 35 (id=646): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000500)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000000c00)="$eJzs3M9vFFUcAPDvbLulgNiK+AMEqSKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM2KX7oy3dsoX9fJLdvrfzuu99Z+bNvJk3bQBdayh9SyIeiIg/ImIgy95eYCj7cfP6xYl/rl+cSKJSefvvpFruxvWLE0XR4ve2ZplKJc9valDvpfcixmdmps7l+ZH5Mx+OzJ2/8OL0mfFTU6emzo4dO3b40J6+o2NH2hJnGteNXZ/M7t55/N3Lb06cuPz+z0kpsrhjSRztMpSt3Yb2t7uyDttWk0560/f+PLf318UljfYEOqknItLNVa72/4Hoic3/LxuI1z/vaOOAdVWpVCotjsoLFeA+lkSnWwB0RnGiT69/i9ddGnpsCNdeyS6A0rhv5q9sSW+UssTe8pLr23YaiogTC7eupK9Yp/sQAAC1vk/HPy80Gv+V4tEs0Ze+PZjPoQxGxEMRsT0iHo6IHRHxSES17GMR8fgq6186Q1I//ildvePgViAd/72cz23dPv4rFUUGe/Lctmr85eTk9MzUwXydHIjyppPTydRoizp+eO33L5stq47/isH4wq0raf3FWDBvx9XeJTfoJsfnx9cSc61rn0Xs6m0Uf1KdF4h8Xm9nROy6wzqmn+ttuqx2/HuiYfwtNP/aFat8HfFstv0XYkn8haTp/OToS0fHjoz0x8zUwZFir6j3y2+X3mpW/5rib4N0+2+pxl9cC9bFP5j0R8ydv3C6Ol87t/o6Lv35RdNrmuXjv23/P74t3//7kneqH/TlCz4en58/NxrRl7xR//nY4rcV+aJ8Gv+BfY37//ZYXBNPRMTuiNgTEU+mF4V525+KiKcjYl+L+H969ZkPVh9/47vy5Rb13Ik0/smGx7+a7R+123/1iZ7TP363fPz9EdFs+x+upg7kn6zk+LfSBq5l3QEAAMC9InsGPikNL6aT4eHsGf4dsaU0Mzs3//zJ2Y/OTmbPyg9GuVTc6RqouR86mt8bLvJjS/KH8vvGX/VsruaHJ2ZnJjsdPHS5rXX9v1RK+3/qr55Otw5Yd22YRwPuUfo/dC/9H7pTsmz/b/cjR8BG4vwP3atR//+0aenhb9e1McBd5fwP3WsF/X8h+9F8VADcm5z/oXvp/9CVmv5tfGlNf/Lf1sSeb7K2tirzb/4vVDZKm+//RJQ2RDPu/0Rv639msT8ilvmecn1frgxkfSr9ZFPD3+roYQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/gsAAP//90bgLQ==") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x6a, 0x4) syz_mount_image$fuse(&(0x7f0000001840), &(0x7f0000001880)='.\x00', 0x84406d, &(0x7f00000018c0)=ANY=[], 0x0, 0x0, 0x0) 10.100669677s ago: executing program 6 (id=651): r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @local}, 0x8) write(r1, &(0x7f0000000280)='trac', 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xf3}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x800804, &(0x7f0000000ac0)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@shortname_winnt}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@utf8no}, {@rodir}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000000300)="$eJzs3c1qO1UUAPAz+c6/i2ThSoQO6MJVaX2CFqkgFgQlC3WhxaYgTSi0EKiKsSufwCdw48u4EV/AB1Dc2YU4kk4+yyS2kjbF/++3upxzT+fcm9t0NbefvdY/Ozm/PL3++tdoNJIo7cd+3CTRjlJMfBuFfvm9OA4APHM3WRZ/ZLl6HrpanFFdUlkpPXpzAMCjmP/7v+leAICn8eFHH793cHR0+EGaNiL63w06SURjlj84jS+iF93YjVb8FZFN5eN33j06jEo60o43+sNBZ9CJ6H/606T+t4jb+r1oRbu4fi/NzdUPB51qvBg/f78X3fd/iFa8Ulz/VkF9dGrx5utz/e9EK37+PM6jFyfj3ib13+yl6dvZ939+9ckoOqpPhoNOfTpvPLv8ZB8KAAAAAAAAAAAAAAAAAAAAAAD/ezvpVHvx/p3Jxf8r8ivuBxrO3c+zm6ZpluTzZ/WVeLUSlU2uHQAAAAAAAAAAAAAAAAAAAJ6Ly6svz457ve7FWgeT1/oLUvH3YqQeEff5yfXC1Pb9G8v7ifK4tV4S8bB1VaN+W/nvk8sP3LHmqJ/uRVKJ9X0EyTTSnE9tR/6sUaSZD+Yi937Ej1v5Lt5NNfLI5HSdHSfRLa3csUbRIVnDICs4fuWlVbW7kWYUL3CUWvH02tZ/6jlrLUklEVGdbubinNtfshezA1ld7x4Wfl3UHuErCAAAAAAAAAAAAAAAAAAAGJu99FuQvN5AQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAbP///+AwXBcvGxOVh4NKjGObHiJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAT+CQAA///Zl1yY") unshare(0x64060600) io_setup(0x3ff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x1e5b, 0x10000000, 0x0, 0x3, 0x4, "04ad7d2ed56d7f7f598d90590de9d3000d00", 0x400002, 0x205}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbf725030000005800018044000400200001000a004e23000000000000000000004008002000000000000100000000200002000a0000000000000000000000000000000000ffffe0000001000000000d000100"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000090) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) 10.055654179s ago: executing program 6 (id=653): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000001c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000240)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000340)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000800)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f00000014c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r1, 0x5452, &(0x7f0000002580)=0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f00000007c0)="000000bbf8e9d0b733d59e5f4aa0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x50) 10.00471801s ago: executing program 36 (id=653): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000001c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000240)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000340)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000800)="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", 0xcb3}], 0x5, &(0x7f00000014c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r1, 0x5452, &(0x7f0000002580)=0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f00000007c0)="000000bbf8e9d0b733d59e5f4aa0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x50) 3.703840321s ago: executing program 7 (id=707): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="c60d9e996ac7c22c5bf3c3c0a28715d03ac677fc049017295895dc40de2bdee658a7067285418c5b522d2b7a41cc19bb43250d19a021ce1f0f9cc6ea3c4c8d6bb7620d8b08e7cb9feee252dc1a9c849ccd19cc1b97ea7df0a3ef16736f5d76798f3f1b8924", 0x65}, {&(0x7f0000000180)="1471faa1a7b3cd3a0df32db504be0c58be3e0261e270cf6552254976ce406feaea6d3ac280c99d4b0fbf077322a1c14015d57e9561700ccbd11d4846d25e1a8d4784b17c71cd3f596ca13b6b370a6952a7f211770084cc7cac9d8fcbe3f27c2721583119a1aa70391d9375d507ee849fc9fdf4422389ea30f4b06cfa2a0eaa20bd303804737fb1e1bf4a61c1e2fc048454e59fc459b1b58ad13a2254017ca42ac00342560e0ff022d0d9b2330f9baa215c1e57936ae5c4112266ff1c9c31085ba98d97005f721e10b46726b466c45b0ffd965c4e27961193206371d38327cb181413b643", 0xe4}, {&(0x7f0000000400)="404e2ae12ad0ca560fa51841e1a0bf6f2373d64808eb0aebc2d915c561188936f7345332060dd86e7c492983c8a8998e0db1c9c7d2aaf73c19cc066840b6c32f86d80e7d46f17fd806e2c70c52b36f3cfab90eb48330eeb02c697ae1aaa570314d2b84004672597cb762754ce018b3c2abc59bbba3840e51de9fecd8c348d2c188bb4ebc59104fc14a8832c569f3a1f2fb8dcd77568af64af5bab9abf686d80807ec2fd5880d3414bc644d53bb87e7d037146ad5adf8f291abee0a8b79f6beb15aa6432f0509d019cc1dba065be0cc518ce7313204b32fee765980ca4b5e485316faec31a0f6d774935956bd78202b25e5fba651baddcd11c72fc7b90adbe6", 0xff}], 0x4, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_retopts={{0x118, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xda, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0x5, [{@local, 0xe}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x918833d}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x5c, 0x3, 0xc, [{@local, 0xfffffff0}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1}, {@multicast1, 0xfffffff8}, {@remote, 0xa}, {@local, 0x4}, {@multicast2, 0x400}]}, @rr={0x7, 0x1b, 0x82, [@loopback, @multicast1, @rand_addr=0x64010102, @empty, @rand_addr=0x64010101, @empty]}, @ssrr={0x89, 0x17, 0x2e, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xd2, [@empty]}, @cipso={0x86, 0x3b, 0x3, [{0x5, 0x12, "b7e25266adcf8b13bc9071568894b518"}, {0x6, 0x10, "f457e600b69f001fd2e69db454d0"}, {0x5, 0x3, "11"}, {0x5, 0x10, "d1efb6b515ac0724f7c5f02d7ba3"}]}, @lsrr={0x83, 0x1f, 0x22, [@multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1200000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x198}}, {{&(0x7f0000000700)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000740)="057d639e10222b4cb60a72861c72c415a8b66f8ba6106f187188a878a0daace3f47e98e0cf5e267ce90163de24d18ef6e2784b7106d894f3591b0840e52676c3ca5ebf4bf6adb48f1f62b8d0806deab9c649f84b923c96b392313d2d88711f4449c6dc5065779ceef490c25d5c7e184de218c909214f050a6126488e4070384881d16eeb179ab899bfe90ded9fac12a888c0a973e8e8d204d202d5130ed49ba55b8b1c43c29e428afe47f134b8348f68d6e13a9103ca487fcefa8d6bd9f810119fb2dff5c8d64c1b0ebec0c69c7d46b4cc1e0c52d369d41503fd4837cf2db80f7efb", 0xe2}, {&(0x7f0000000840)="6bb2a928198b9ec96fbe846efe4aceb35adb7695b631a269fc5f70bb82e2f3255d7dceb874cfea60c4072b6e4aac4988f6bdb07b732939705017ea03e0c2799f2b3aba871f67", 0x46}, {&(0x7f00000008c0)="c8feeb1068596d156d4bef2c3ff30781e88289c7661b10f82a5555ea81185d87", 0x20}, {&(0x7f0000000900)="e296d3f8fc713f299f9c6488436230ed5736fa06277d30abde689df8c1c02daadd69b6769aee44d51b521f9f7248ddd5a95906e2712512c2c36c822d40f3c545440ccce24ea9cb9145e04912ef7fbaaed9c6189244f00df70ad18e875c988979a405640a28849f389f3f23f94a8fc060a8ee20c061337b37b04cf318a88423ce2f23367e5c8c650f2f40b2d2ea263a0bb31fc2f2d389a7fca1b29c082929fcd8abc3281930722227c9786870b825749a1a056ec5784a08f2385f63f970c02aca62d95828caefe45d7706fa4acc9a4851fbcf2a5a52072701013fee199b665cd0623c4259fcba5011e29020647501cfd92a24876f2c6389", 0xf7}, {&(0x7f0000000a00)="c6aeb2a7a80faaba05b576bd260df495b42fe3697aaf5a80a6f62349284a9c26b8d64c580be65de2dc0b7540eeb853560977a5a5b4ab43bd39159c16d74538fa76f12d682a55211b5fdf76647e2dcb0351a8a403be24048f027997dec82e4a1560b7fca84603a725585429f7823e34375affa7a0e15056f56adba717782ffbfd9ca1119871d92ab10f6fc66b94a27f3f8d6451f006f43c1b3bd036f64b4e1d1cdf5ee493aefbb42607abc5d85ba9d2b4c071a4ce8588f4ef85c65cba716919fe309c0021fc55d5ac09390df818037fa3385b0a815fdcaa57a12e75e5fda31e3da378918067665d4ea2942e68", 0xec}, {&(0x7f0000000e40)="390e1bd2aae457466a83ad0ba6e26a9c80598f23fa70cd23f8d7e24aa3f83f7b7456c30d22622bf29ee0633344769bdcdef579360ed8c45ca3099cb3d4c49b74d59709ee375ceca8d682", 0x4a}, {&(0x7f0000000ec0)="c80e204fea2a3fa390c4149c2b4e82e80604852c01f7d9aff1f1bc3c2b5809ccba69aee460d81dd5faa0bad888feebd6", 0x30}, {&(0x7f0000000f00)="ae9ea41a2c969e39a12c80d259a361a6d2301bbfd54bbfba0d6b04caebed94811a9c0eeaee6d1a3230938094d82e570e026ccd5717364b0008fd89790287902f662fcede9e4188c1ccb84c9bd2cf657a603c1c092e482a8d59f9ae4bfcf211a93cf77b2cc082a443f56d6a6c892fc95073bce1df2d4f8f00e1d5febbdbf42de3d1108d9ecb8c1a862040751dd665acd7e7413745cf83901b6e84b3202ecdace205f111b597948bd392be502d5395319fde6dc68438edc5054ac7aa5318a2eda1d729c2147e60d39386fe5b", 0xcb}, {&(0x7f0000001000)="c6db62ef326f4a08be29eb2f7fc39642aa9e41b4602c0f7dbae99b0b58b20c31d8f14bdbb49f82bf9cacc1f2a1162fd9aeff621343419785542160ceab471321a38f8485ebfd2512f38116ada1c1c112f6b8b049d5c074818e7cf322071ba131268ff80bca7714438e3592100ae51305f95b60ab11d0153b3bdb038295674230d1a6901d2b7725a2e8ae1a21e2441e10049dd45fe4bdeb7e9f1ff734a0c6c42ced0e45de08139d9aac55526533d6002caf09ddd70ed1e5228caa3bb20cf406291149c330f5204dc740408ecb064d788037619858e6", 0xd5}], 0x9, &(0x7f00000011c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@cipso={0x86, 0x4a, 0x3, [{0x7, 0x12, "465615d5d83a7748e315981da7793c8f"}, {0x710721bb42b4bf4f, 0x12, "ba427be5be21361a2cc4af0020ffea7d"}, {0x0, 0x7, "993b25a501"}, {0x0, 0x9, "dca0b2c07e56fc"}, {0x6, 0x3, "d7"}, {0x7, 0xd, "e68ccab68df5db4a521a5c"}]}, @timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x57}]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x2}, {@remote, 0x4}]}, @ssrr={0x89, 0xb, 0xcb, [@multicast1, @empty]}, @rr={0x7, 0x1b, 0x61, [@local, @multicast2, @multicast2, @loopback, @rand_addr=0x64010101, @multicast1]}, @rr={0x7, 0x27, 0x56, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x110}}, {{&(0x7f0000001300)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001340)="e5d1784f80dd60a34222a28eceb2b6552f5fa4473755790fa78991b91aa598731579f2a53417847d9e923bd2ef86ce956bdf62ac37032a5cd7074122c29161e4bdbdae5fb969f351e3e41d09866eef27b0327110aba992dbeb8bb90e9321c4c8b3fc0236783d89796c8eb6b7efc8b3eeef68f686a15d56d28af86959fcbd2a183ba7f883e18a14356e74fa030698f60b22313701f4b221f997022e458f673906b2c1bd020249b04d7d16f1ff7a606c1fd755e20f4a818c123b7f052f315e6a0045f2387c5db64ede37671fa3b1943a97272bcf9218a0bedae8a61376cbdc3a10ec5fedf4b90d10feb39a5d867b4560430c26173d", 0xf4}], 0x1}}], 0x4, 0xf00) 3.620819723s ago: executing program 7 (id=708): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x3e, 0x2c, 0x1, 0x0, 0x7, 0x4, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYRES64, @ANYRES8=r1, @ANYRES8=r3, @ANYRESOCT, @ANYRES16], 0x40) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000380)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r10, &(0x7f00000003c0)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5833, 0x2, 0x6, 0xbd}}], 0x1, &(0x7f00000006c0)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x826, 0x0, 0x0}}, 0x0) 3.600034334s ago: executing program 9 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbf725030000005800018044000400200001000a004e23000000000000000000004008002000000000000100000000200002000a0000000000000000000000000000000000ffffe0000001000000000d000100"], 0x6c}}, 0x0) 3.569147274s ago: executing program 9 (id=710): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001a00)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x100, 0x2, 0x1ff, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.557818235s ago: executing program 7 (id=711): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x25, 0x4, 0xb, "b0d339c61b703e25a59f5f906a9f12b9", "6669852b3a0b74c6adc0791952acf5c8"}, 0x25, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vlan1\x00', @local}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x6) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x250, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x30, 0x16}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x74a}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfd, 0xbe, "c01537e95b16acfa2ce70187819f19b238dd1a185cb28e7f291d41697c8abf64f98c73e3b0c342f21439ed9fdb92cbc49a6856b7f6003da20ec4c133305195bfde3f99db75b78d7e33e0460a3de388f426ab8d359ec8be92705448cef8ba92395f4aa9e67c0c025218553917b3ddd6c2243251c106a1374383508f103a903c50150cde4fc84bbb8e4e57803f1a97c3ec5e70c8bc4de3009357bd0322dbe112aec9bf72b211a2611585cec38213863dad68c319b5c4abfae591e601b9c3f1a9e74b99cf87b2a552e303936903df685ca0bbd873898b0d3bef44539f96f84fa79d52f2601dcdcfb34728c7dffa473ab5cc6ad547cf5cd3187d53"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe9, 0xbe, "77493e98bbcb74d3009bb69acbe3070ea7d8d82f71f898ef3ec1d2b12ce1304fae52ee5bc8215d721c8d64280264e99e80d282641f61ead40f40013e6e85d74051a29a0d41158d4eac1197a87da4f9f5eb2288e244b7c187aee644be9d324e84a3dd9426900959db2503e62b1282178e4e2e08a9041ad77237d58952af6cc3d4132807091ba90004e27b0cc55bea647617317d1c756dea1b1fb8f793f870a72a55e49c02c8c1aaae53d1d756cfd0a9f5c4ba69f2accf5716010481ab929040fb50d80f5f2f031294a709426c08594f6242599124741098188f4f15d64b985ab70e629f8eaa"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6e0}]}, 0x250}, 0x1, 0x0, 0x0, 0x44005}, 0x4008050) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x58050) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x10, r0, 0x62f0b000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000680)=[@nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0xc7d2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x83, 0x0, 0x0, 0x4}}, @nested_load_syzos={0x136, 0x60, {0x2, 0x1ff, [@out_dx={0x6a, 0x28, {0x4026, 0x0, 0x1}}, @cpuid={0x64, 0x18, {0x61e, 0x4d38}}]}}, @out_dx={0x6a, 0x28, {0x3b7a, 0xe, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x40000, 0x3285}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x43, {"450f783f0f3047df1966b837008ed8460f01df66ba2100ecc4c179c5fa0f66430fe9bf22000000660f388121c4c17e114b40"}}, @in_dx={0x69, 0x20, {0xb038}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0x2e70}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x200, 0x4, 0x7f}}, @nested_load_syzos={0x136, 0xf8, {0x1, 0x7, [@nested_create_vm={0x12d, 0x18, 0x1}, @uexit={0x0, 0x18, 0x5}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0xfffffffffffffffa}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x2194, 0x4, 0x9}}, @out_dx={0x6a, 0x28, {0x58d1, 0x0, 0x7}}]}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x10000, 0xf9db}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x86, 0xb21, 0x99, 0x8}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x55, {"c7442400e1000000c74424020b000000ff1c24b805000000b929dd63090f01c10fc75a00400f23bb67430f234dc401b1edc1460f0876f63e3ef22664f347f6ff0f38f920"}}, @nested_load_syzos={0x136, 0x103, {0x2, 0x633, [@cpuid={0x64, 0x18, {0x3, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x3ff8, 0x5de8}}, @code={0xa, 0x53, {"660f38825f00660fe4d6c744240035000000c744240200180000ff2c24f3420f1c4001400f06c462a9a8b9fd000000420f0013f281c184c5d5b466b803008ee8f2a5"}}, @nested_amd_invlpga={0x17d, 0x20, {0xffe, 0x6e95}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_syzos={0x136, 0x20, {0x0, 0x3}}]}}, @nested_load_code={0x12e, 0x4d, {0x1, "2e0f23a8c4e2790ecc66b84f000f00d8470f2041f243ad0f20c035000000200f22c0ccc443f55db00000000000360f01c3410f01cf"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x7921, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xa39}}, @wrmsr={0x65, 0x20, {0x342, 0x8}}, @nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x7}}, @wr_crn={0x67, 0x20, {0x0, 0x7fffffff}}], 0x620}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000d00)=@x86={0x7, 0x0, 0xf, 0x0, 0x1000, 0x6, 0x8, 0x4f, 0x9, 0x1, 0x9, 0xff, 0x0, 0x20, 0x4, 0xe, 0x5, 0x0, 0x2, '\x00', 0x9, 0x2}) sendmsg$tipc(r2, &(0x7f0000000fc0)={&(0x7f0000000d40)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x1}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000d80)="9f640033c31f90fc848c486ae3965f6a9085270cc438cd746c758df0f4506b7625547fa3be50a2eb72f0ef3e617bd39036", 0x31}, {&(0x7f0000000dc0)="9af18dcbdb502a76d432d4a52b11712a5ce1929b882aeac86b3aa7a7f1d275483c31af8d395925904893630d7196b820f3fd1679ff954626408bb219bf8921e45fa0f6157ef3935805c5392e423c9f4942d4878bd389160e5385d8de6a2b1d1b858c0edb96904bcf2186bca6d0b16db2bd87a18feaf783ad92aebf22022a64af8d7919476c5f74e7496bcfad12d75431f934ff8af29d0eb7eb649b970933d4000abbb7", 0xa3}, {&(0x7f0000000e80)="db15df20db94c72d60b5b3e07fdff5643bbd5961235856", 0x17}, {&(0x7f0000000ec0)="8a141e28d19a87b8b57b38a603d0b8731cf0b2983459b2626b1d82326da6696235bc241e3ff523d62fd20707aa0392a6052fbfcf598f63d950465a94d3fd5fed8dd5373b4960794d136e6ad3ad593160dc46ff3adcfa324e2fb59341bd85832ae1cbdca5b87cca056faeb6c384fafa64c41ed0f3bc3bb0cee18f24a959279ae9b60cea269e4c3d50d7457f3bc26ad89f6ca963faf48d0124d2c9287df812b8f48f61d9783e91d907b475899e", 0xac}], 0x4, 0x0, 0x0, 0x20000000}, 0x31) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(r1, 0x9, 0x0, &(0x7f0000001000)) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001040)='wg2\x00', 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000001080)={0x4, [0x0, 0x0, 0x0, 0x0]}) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000010c0)={0x22, 0x3, 0x0, {0x5, 0x1, 0x0, ','}}, 0x22) sendmsg$NFT_BATCH(r2, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x70, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8ae2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xde0d}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40881}, 0x1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x8, 0x8, 0x1, 0x10, 0xc000000000000000, 0x1}, {0xdd8, 0x546d, 0xe4af, 0x200, 0xdf26, 0x4}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000001480)={{0x84, @private=0xa010101, 0x4e22, 0x1, 'rr\x00', 0x4, 0x1, 0x16}, {@multicast2, 0x4e21, 0x0, 0x9, 0x1ff, 0x5a0d}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001500)={'wg1\x00', 0x0}) r8 = dup2(r5, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001580)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xe0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8082}, 0x20000000) 3.543752135s ago: executing program 9 (id=712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) chdir(&(0x7f00000001c0)='./cgroup\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0x5) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="11e758eab2c7860aa67ea06c356d7aa109"], 0x10) 3.473939637s ago: executing program 7 (id=713): add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x63, 0x39, 0x64, 0x65, 0x64, 0x66, 0x36, 0x38, 0x36, 0x62, 0x37, 0x31, 0x8, 0x34, 0x62, 0x34]}, &(0x7f00000004c0)={0x0, "83be91e3956f7eeab185c5532a737cbf86a019abc3c6c5b882e77c6b66c6d809ae8c0052697af3e28ee0d067c73f9e8f2c1af82447d244584968c7ffb982e9b4", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x38, 0x33]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x38, 0x33]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x66, 0x30, 0x30, 0x36]}, &(0x7f00000007c0)={0x0, "00112234445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233405566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x66, 0x30, 0x30, 0x36]}, &(0x7f00000007c0)={0x0, "00112234445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233405566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f0000000b40)={0x0, "fe1b5c4bf346207d87478c27b86bb51289055bc124bb60432572800f18aa4fd90aabed9d0fe61c88c11301a15ee3f0f5cdf737eba09fed73da1807ecb5b00d17", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x62, 0x37, 0x35, 0x38, 0x30, 0x30, 0x30, 0x62, 0x30, 0x42f52c3b5ed60cc6, 0x0, 0x38]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x13}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), 0x0, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x66, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000f00)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x1368f2d5086f6112, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x1368f2d5086f6112, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000001100), &(0x7f0000001140)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000001100), &(0x7f0000001140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x6f, 0x30, 0x50, 0x30, 0x8, 0x64]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49815a, 0x30, 0x30, 0x30, 0x30, 0x35, 0x65, 0x67, 0x36, 0x33, 0x33, 0x33, 0x30, 0x30, 0x33]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x0, 0x30, 0x62, 0x30, 0x30, 0x36, 0x30]}, &(0x7f0000001400)={0x0, "00ccddeeff00112233446b66778899aabbefddeeff0011221301006624d099aabbccddeeff001122334455ff0f0000aabbccddeeff00", 0x3f}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x0, 0x30, 0x62, 0x30, 0x30, 0x36, 0x30]}, &(0x7f0000001400)={0x0, "00ccddeeff00112233446b66778899aabbefddeeff0011221301006624d099aabbccddeeff001122334455ff0f0000aabbccddeeff00", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f00000014c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001580), &(0x7f00000015c0)={'fscrypt:', @desc2}, &(0x7f0000001600)={0x0, "bd79659c024f48b5e34a802d41dfdc553eea39517e4be298a5e6c7c1934111314bd6d38465a2326646832764d1609201f568517d108fe44375613ec929462ced", 0x15}, 0x48, r0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0xd44, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="2f3976022ad292e1e2d14ec82d94b7cf7e1cfa388b01843aa7d88ad167f6aefc2a929a464ee864ae50772a898dcb423502bcc72434e56d10870962c2d34c42ea710f8117f4e92bf02ce5f8536ee664b7ca2c6252fa8b3d2860aef2edec1fcf6e294cfb08169121a5e0d81883bb8387b79590d564467472e12ebbda0d862616fadfbe2d2abfd4ed2cdbf72be9d6661670d720d071d67ab009d044f8894cfaa38473a255db486bdbbafdf6b08cfbbbb07bbaaf14275badcd4c97dcab80b09b648b628d856016e8", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdd250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x440480c5) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="2f3976022ad292e1e2d14ec82d94b7cf7e1cfa388b01843aa7d88ad167f6aefc2a929a464ee864ae50772a898dcb423502bcc72434e56d10870962c2d34c42ea710f8117f4e92bf02ce5f8536ee664b7ca2c6252fa8b3d2860aef2edec1fcf6e294cfb08169121a5e0d81883bb8387b79590d564467472e12ebbda0d862616fadfbe2d2abfd4ed2cdbf72be9d6661670d720d071d67ab009d044f8894cfaa38473a255db486bdbbafdf6b08cfbbbb07bbaaf14275badcd4c97dcab80b09b648b628d856016e8", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdd250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x440480c5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000300), 0x4000190, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x62, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8040, &(0x7f0000000300)=ANY=[], 0x3, 0x276, &(0x7f00000008c0)="$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") 3.473754857s ago: executing program 9 (id=715): mkdirat(0xffffffffffffff9c, 0x0, 0xe) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000540)='./bus\x00') statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/231) 3.473130637s ago: executing program 7 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x16, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pimreg0\x00', {0x66, 0x0, 0xff, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@ipv6header={{0x28}, {0x5, 0x30}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x40000, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) sched_setscheduler(r0, 0x1, &(0x7f00000013c0)=0x5) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) syz_usb_connect$midi(0x4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x280440e, &(0x7f0000000000)={[{@debug}, {@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}], [{@pcr={'pcr', 0x3d, 0x2b}}, {@uid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'delalloc'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_gt}, {@uid_eq}]}, 0x1, 0xbdb, &(0x7f0000001c80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002880)='./bus\x00', 0x1001008, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000028c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002900)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002940)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000002980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002a80), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000002ac0), 0x80002c1, 0x2, 0x0) 3.419596398s ago: executing program 9 (id=718): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000340), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ftruncate(r1, 0xc2b) syz_clone3(&(0x7f0000000640)={0x2a0000, &(0x7f0000000080), &(0x7f0000000440), &(0x7f0000000480), {0xe}, &(0x7f00000004c0)=""/100, 0x64, &(0x7f0000000540), &(0x7f0000000580)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x0, 0x9, 0x9, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mount$fuse(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)="f697", 0x2}], 0x2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040cb0668290000000000010902240001000000010904000802030000000921ffffff002218000905810310003704045ea3902a7c3e4311ed0d024bd3cb1135e2a5cd0205680e9e2e94ca44ea9f53fe026b0b27571744e6bb3f1b88ca9b35c292"], 0x0) 2.347335623s ago: executing program 5 (id=720): syz_mount_image$fuse(&(0x7f0000001840), &(0x7f0000001880)='.\x00', 0x84406d, &(0x7f00000018c0)=ANY=[], 0x0, 0x0, 0x0) 2.314123714s ago: executing program 5 (id=722): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x3e, 0x2c, 0x1, 0x0, 0x7, 0x4, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYRES64, @ANYRES8=r1, @ANYRES8=r3, @ANYRESOCT, @ANYRES16], 0x40) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000380)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r10, &(0x7f00000003c0)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5833, 0x2, 0x6, 0xbd}}], 0x1, &(0x7f00000006c0)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x826, 0x0, 0x0}}, 0x0) 2.284020825s ago: executing program 8 (id=724): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r1 = socket(0x10, 0x803, 0x0) accept$unix(r1, &(0x7f0000000180), 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x0, 0x40) mkdirat(r2, &(0x7f0000000300)='./dev\x00', 0x1f7) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000000000000"], 0x108}}], 0x2, 0xc040) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000002c0)={0x2, 'team_slave_0\x00', {0x7}, 0xb}) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd0b, &(0x7f0000000740)="0400000000000000000000009001000038010000010000000000000000300000000000000000000000000000000000006d") 2.204652687s ago: executing program 5 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x2b, 0x4, @thr={&(0x7f00000002c0)="330425b4f4f51c9fece7c724ada01ed032a25729fef9cb558f13eabd5a471e2653b44ac72c8addcb8bef01c0d2ce65cc3e119caaf80b348ee8afd048fdb8e8d78ce6fd29b6206af4925de2baa21b92386e1f3b3187c540427ba789903d9d1b2e60d3d057b4e13feb9d0fcbd6a09e1feb49917479a39b18d14580cbcdd8c2e98eefd67671cbce5e0c6292eabad8aea24fb42db294b6f9891e096d682898f9e5d6672e678f4fa11eaf66e5ae751fc4d09bd23c7417f10c8988d6a8", &(0x7f0000000380)="5723a09ad1be9790f754c2395df397f14c7eab2ff26dc2"}}, &(0x7f0000000400)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000280)=0x800001) (async) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="03446b9a89a367f499fcad5a7bf7edaccba16bf7f3f2e4ba489da582f30d315b6416b55819d359c227ac08e43498735a7848c2cb8c4c7c61a18d9a4a06498e392176f811945c819de7463b2f6f790d26cd1affc06c2bf1fa20b7c7e1cdb04d636c811e783e168d081d717ea0bc13019dbca8738d8ea43be3530d1ce0e2abfc12de4bfbe9f71466e8159c702e478ab181b3b2ec008009e28f6ba2d80d9bd495319c6766456a9a8aeec22275d3a914228733a007072e0837aac9db4323dd58600c5497b6f62718b4c5bc07ba764972cf1f8aa79fa0c3adf7f5", 0xd8}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000b40)=@vmx={0x103, 0x300, 0x2080, {0x10000, 0x0, {}, 0x0, 0x20000009a9}, {"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", "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"}}) 2.048968151s ago: executing program 5 (id=726): setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) setgroups(0xffffffffffffffde, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2.048698391s ago: executing program 5 (id=727): pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000040)={0x67446698, 0x1, 0x3, 0xc9, 0x4, "0721b2bd488ef1671fd067f15cf58b5e976d3d6bdc22a4371fa3a2826a19b44e7ab7b5e3bacb03784c62600d1b5d13d57d07cefc9faba0f8db8b8ad60364d213ada34d59d1d7445e8cbc670977835fd50e45e3d20ded93537aeb0986335854c6622e866b76e46a71ac8252bcfae9ac923539a42e795c90056bf682424311d0a4ed9aac5283fd02ff7a845ee0015d68b0594c4c02f65a22abe8f7d50b56327b9eb23ef904a486180df6507193b53354ab25e4ab48ac2b8d8a7709c2846b0ecee41e8646c6c8bdf44cb9e4802a360cd364ea7cbabd617340f1aa0833ab"}, 0xec) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f0000000300)="fe", 0xfdef) read$watch_queue(r0, &(0x7f0000000340)=""/221, 0xdd) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 2.000134212s ago: executing program 8 (id=728): mkdirat(0xffffffffffffff9c, 0x0, 0xe) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000540)='./bus\x00') statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/231) 1.961772343s ago: executing program 8 (id=729): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x18, 0x200400d1}, 0x8860) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000003d40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, 0x0, 0x8000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$eJzslb+r01AUx7/3Ji9pfW5uLg4+8DmYJqm/lgfPxclB8Edxs9i0VFMrbQZbEPEvcHdzcPFfEKGu/hFSBVEQXdT5SnJvkptqSltbing+0JNv7j09OfeccAKCIP5bPrz/ORU/Dj5VABzFHmy1/tnIfbjm/67y7dGbK5cbT80Xb+2pUy1Gs5d+vglgcslApO6FEELf31PX6+CZvgGO00o3wOAofRscN5UOwHBL6bua7u8oEQbOnX7YanfDwI2NFxs/NvXZ/L4+YWhp+TFtfzga32uGYTDYmLBKKjf5kuVXAQ60/PR+OZDZulr9PHB4StfBcE3pi7DhOE5eEu38x808vjH3/BaWP+SuvvIx6U660p5xNrBkHXfm+MS1Xa0xAPtz719t9m1YRVgorOBlvmXIrbSjW0917QJm8aR/EVDYBtaf4QV7DUPk9aHsX5bqY3lfdO7vzu/y4WLvz6KVz+aneM5wSptPcpQ8Sz4Wtaj3oDYcjc90e81O0Anu+379vHvWdc/5tWQQSVsyA+P41WQ+HZGhY6plvhaz8LAZRQNP2uzelzY/QP4fnsw/jv2TSL4cDMeuzsb9DiB9KFM/nlxjtW+UJk8QBLFFToBlg9NMhfqaqA1LCOH/NvQIgiAIgiAIgiAIgvhn+BUAAP//aA9ZjQ==") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x8000000, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000a80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x25, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x2}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x1e, 0x80000, 0x6c87) 1.860772355s ago: executing program 5 (id=730): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="dc8daf8d", 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() r2 = accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000680)={r3, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000740)={r4, 0x1, r1, 0x80003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x208008, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='dev/ttyUSB0\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f00000001c0)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000780)={r4, 0x5, 0x4000003}) sched_setscheduler(0x0, 0x2, 0x0) 282.657193ms ago: executing program 7 (id=731): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000002c0)='./file0\x00', 0x400, &(0x7f0000000280)={[{@user_xattr}, {@resuid}]}, 0x1, 0x105a1, &(0x7f00000105c0)="$eJzs3E9rI2UYAPA3bfev61rEg6DggAqtmND0z6K37tpFXLZLUffgSdMkDdlNMqVJ29iT4MWDX2DBT+LdDyN6EkQWhErmfSvbRcG1NXHb3w8mz8ybd5553jKXZ5ImAOfWbPbrL6VwPVwJIUyHEK6FUOyX0lZYjeHVEMIbIYSpJ7ZSGv9z4GII4WoI4fooecxZSm+9s3bxzp1Ht3775tHd738avv7W5FYNTNrbIYTudtzf78aYt2J8kMZre+0idpf3UoxvdB+m4zzG/eZmkWG/djSvVsSlVpyfb+/2R3GrU6uPYqu9VYxv9+IF+3utozzFCQ9qO8Vxo7lZxHY/L2LrINY1TPGgP4h5GinfQZE+DAZHMY43h824nu2HRaz3Bmk85s0bzeEo7qWYLleUULxs/ru/8fPgbru3O8z2mjv9dt7LVirV9yrVG+XqTt5oDprL5Vq3cWM5m2t1RtPKg2atu9rK81anWann3flsrlWvl6vVbG6tudmu9bJqtbJUWSivzKe9d7MP793POo1sbhRvtXu7g3ann23lO1k8Yz5brCy9P5+9Wc0+Wd/INj6+fXt949PP1z67d3P9ow/SpGxlOhwrK5tbXFhcLFcXyovV+fOw/qfKOsX1Py6d7HzOOfcPwDPT/wOTMMb+f2Zs/f+Xp9v/1/OO/v+M97//+/U/Pjw8/A/Xr33jRNxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1v0fb75W7MzG4xfS+Itp6OV0XAohTIUQDv/CdLh4LOd0ynPhb+ZfeKqGH0qhyDC6xqW0XQ0hrKbt95fiewAAAMCzm/nu669itx5fZiddEOMUH9pMXfvilPKVQggXZn8+hSwhPWwKr5y8qmh0f8+E4QmzHNVWPMC6fPKqouKR28xpZftHpo+Fy0+EUgxTYy0HAAAYi+OdwHi7EAAAAMbp20kXwGQUn2am7+KnL/BfiiF9IHjl2BEAAADwHPIv9QAAAHD2Ff2/3/8DAACAsy3+/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3EFO6lAUBuADhQfvPYnEOGMxyJA5zg0rcOhME7dh2I2LIXEJBgy91wgGE5KWYsj3JfX21ubnNGFybksBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKbb5WTUeXl+qpqzWldTz9UAAAAA+8yWk1G5M0zz//n4IB+6yvNWRLQjYl/vXsSfncwi53R/OL/7rYbXiDJh8xm9vP2LiJu8vV+m/wEAAADbHg86a74YT1O3nv4Mj1wVv0patGlf3NWU14qI7vCthpTIi01xXb2qZPP97sRDxZTP2soFrH71qpJyya1TV9pBip2hvzW00tButBwAAKARu51As10IAAAATbr/2i1OWQcNK+9m5mfx8wP8vTTkG4J/82xwguIAAACAWvhJPQAAAJy/sv/3/j8AAAA4b+n9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTbDkZzRfjadWc1bqaeq4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhgf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUfBEAiCMNj/U82Wvf9hpUFTQ0GoAuFjhkEWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnuh1fHmf8WmMJN9OG7+OZ5J/V42lq8bag8bWg3nxo3HXiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBn545946bCAIA/23dXCkKYIGUgC4gBBmga0uEYTyoLW/gPovRaIq4cSiLURmXI2IEFxkqojKz0L+Af6Abc0LVDhhuKYA56PjvnllAoUu1r8vtJz98X62R/z5GifH4vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaDqY51k85LM8Lc/99ujWVoyTJ2I0fjjJ44h50mTRL6Bkue0KAAAAOAuyqr8PIWwcDlZiTPOi/+9Wn4k9/91XZ3nVzz/Z91fx8oM7eTXGSzd+Pb5RPrtPvOjV7dHwYmMzXHyv/esnOsWTL969ZMU3JP3k4I1pt3ieyTf373/cK9JzTVQLAPwfF6pYJtXvQzGutVkYAGdGpxyh1v9nebs1AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADRhehBeqfIkhPBmZ55Hk0e3tk6Klx/cyavxy89v365fM16iG0K4uj0aXmxwLotu9+b+55uj0XBHIpFIjpO2fzIBAHDadMsR+/qNw8FKPJcshXD0w+P9/7u1PNT6/f3eP/f/X98d/FS/V73/X2tshotvde/6l6u7N/c/2L6+eW14bfjFWv9S/9J6/6P1/mrxrmT1md+YpM+vWgAAAF5EvXLU+/906e/r/y/X8vAf1/87t49+nN/pfMj0/yc4KuNouLPbcikAAABn3Otv/fl7csL5pNcLNzb39nbW4jGbf/3h7NhCqc/sXDnq/X+21HZVAAAAQBOmB8lj6/9Xanl4yvr/+OEkr8a9z9a79WtmxS6A2fr/ha3x6Epz01loTfw5cdtzBAAAoF3ny1Ff/+8W+//T4y0PaQjhvXdmeflvAJ+6/z/2/jH+sfHtV/V71ff/rzc3xYWULs+eRxGXQ+gst10RAAAAp9lL5YjN/qeHg5V737//Xc/+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv9ife9uEgTCOw68viRK3yQjprQRmoKFCMAIfEpIlz8AALERDRWuxCKwAEpxrOkPxPM3/V1xxLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDLuzx88RYRRaQuU6Tx5uf0HhEfkbZtO/q8ZbE7H5uve872h0nO75j+lhFRRtHHOQAAvau6zbFa18u/vP95B3mHeat5Uy+e+WkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGMFAAD///7FUPU=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000017c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000001880)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e0100000824030100021007082402"], 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@discard}]}, 0xff, 0x47e, &(0x7f0000000380)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x8000, &(0x7f00000008c0)={0x4, 0x70, 0x1a0000, {r1}}, 0x20) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x9, 0x0, 0xf, "", [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "dfda4cec11"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfffd, 0x2, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x8, 0xfb, 0x2, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x8, 0x13}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xff, 0x2}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x5b, 0xa, 0x1, 0xff, 0x4}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}}) mount$bind(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x800025, 0x0) 280.118233ms ago: executing program 2 (id=732): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000dc0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="c60d9e996ac7c22c5bf3c3c0a28715d03ac677fc049017295895dc40de2bdee658a7067285418c5b522d2b7a41cc19bb43250d19a021ce1f0f9cc6ea3c4c8d6bb7620d8b08e7cb9feee252dc1a9c849ccd19cc1b97ea7df0a3ef16736f5d76798f3f1b8924", 0x65}, {&(0x7f0000000180)="1471faa1a7b3cd3a0df32db504be0c58be3e0261e270cf6552254976ce406feaea6d3ac280c99d4b0fbf077322a1c14015d57e9561700ccbd11d4846d25e1a8d4784b17c71cd3f596ca13b6b370a6952a7f211770084cc7cac9d8fcbe3f27c2721583119a1aa70391d9375d507ee849fc9fdf4422389ea30f4b06cfa2a0eaa20bd303804737fb1e1bf4a61c1e2fc048454e59fc459b1b58ad13a2254017ca42ac00342560e0ff022d0d9b2330f9baa215c1e57936ae5c4112266ff1c9c31085ba98d97005f721e10b46726b466c45b0ffd965c4e27961193206371d38327cb181413b643", 0xe4}, {&(0x7f0000000400)="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", 0xff}], 0x4, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_retopts={{0x118, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xda, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0x5, [{@local, 0xe}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x918833d}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x5c, 0x3, 0xc, [{@local, 0xfffffff0}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1}, {@multicast1, 0xfffffff8}, {@remote, 0xa}, {@local, 0x4}, {@multicast2, 0x400}]}, @rr={0x7, 0x1b, 0x82, [@loopback, @multicast1, @rand_addr=0x64010102, @empty, @rand_addr=0x64010101, @empty]}, @ssrr={0x89, 0x17, 0x2e, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xd2, [@empty]}, @cipso={0x86, 0x3b, 0x3, [{0x5, 0x12, "b7e25266adcf8b13bc9071568894b518"}, {0x6, 0x10, "f457e600b69f001fd2e69db454d0"}, {0x5, 0x3, "11"}, {0x5, 0x10, "d1efb6b515ac0724f7c5f02d7ba3"}]}, @lsrr={0x83, 0x1f, 0x22, [@multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1200000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x198}}, {{&(0x7f0000000700)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000740)="057d639e10222b4cb60a72861c72c415a8b66f8ba6106f187188a878a0daace3f47e98e0cf5e267ce90163de24d18ef6e2784b7106d894f3591b0840e52676c3ca5ebf4bf6adb48f1f62b8d0806deab9c649f84b923c96b392313d2d88711f4449c6dc5065779ceef490c25d5c7e184de218c909214f050a6126488e4070384881d16eeb179ab899bfe90ded9fac12a888c0a973e8e8d204d202d5130ed49ba55b8b1c43c29e428afe47f134b8348f68d6e13a9103ca487fcefa8d6bd9f810119fb2dff5c8d64c1b0ebec0c69c7d46b4cc1e0c52d369d41503fd4837cf2db80f7efb", 0xe2}, {&(0x7f0000000840)="6bb2a928198b9ec96fbe846efe4aceb35adb7695b631a269fc5f70bb82e2f3255d7dceb874cfea60c4072b6e4aac4988f6bdb07b732939705017ea03e0c2799f2b3aba871f67", 0x46}, {&(0x7f00000008c0)="c8feeb1068596d156d4bef2c3ff30781e88289c7661b10f82a5555ea81185d87", 0x20}, {&(0x7f0000000900)="e296d3f8fc713f299f9c6488436230ed5736fa06277d30abde689df8c1c02daadd69b6769aee44d51b521f9f7248ddd5a95906e2712512c2c36c822d40f3c545440ccce24ea9cb9145e04912ef7fbaaed9c6189244f00df70ad18e875c988979a405640a28849f389f3f23f94a8fc060a8ee20c061337b37b04cf318a88423ce2f23367e5c8c650f2f40b2d2ea263a0bb31fc2f2d389a7fca1b29c082929fcd8abc3281930722227c9786870b825749a1a056ec5784a08f2385f63f970c02aca62d95828caefe45d7706fa4acc9a4851fbcf2a5a52072701013fee199b665cd0623c4259fcba5011e29020647501cfd92a24876f2c6389", 0xf7}, {&(0x7f0000000a00)="c6aeb2a7a80faaba05b576bd260df495b42fe3697aaf5a80a6f62349284a9c26b8d64c580be65de2dc0b7540eeb853560977a5a5b4ab43bd39159c16d74538fa76f12d682a55211b5fdf76647e2dcb0351a8a403be24048f027997dec82e4a1560b7fca84603a725585429f7823e34375affa7a0e15056f56adba717782ffbfd9ca1119871d92ab10f6fc66b94a27f3f8d6451f006f43c1b3bd036f64b4e1d1cdf5ee493aefbb42607abc5d85ba9d2b4c071a4ce8588f4ef85c65cba716919fe309c0021fc55d5ac09390df818037fa3385b0a815fdcaa57a12e75e5fda31e3da378918067665d4ea2942e68", 0xec}, {&(0x7f0000000e40)="390e1bd2aae457466a83ad0ba6e26a9c80598f23fa70cd23f8d7e24aa3f83f7b7456c30d22622bf29ee0633344769bdcdef579360ed8c45ca3099cb3d4c49b74d59709ee375ceca8d682", 0x4a}, {&(0x7f0000000ec0)="c80e204fea2a3fa390c4149c2b4e82e80604852c01f7d9aff1f1bc3c2b5809ccba69aee460d81dd5faa0bad888feebd6", 0x30}, {&(0x7f0000000f00)="ae9ea41a2c969e39a12c80d259a361a6d2301bbfd54bbfba0d6b04caebed94811a9c0eeaee6d1a3230938094d82e570e026ccd5717364b0008fd89790287902f662fcede9e4188c1ccb84c9bd2cf657a603c1c092e482a8d59f9ae4bfcf211a93cf77b2cc082a443f56d6a6c892fc95073bce1df2d4f8f00e1d5febbdbf42de3d1108d9ecb8c1a862040751dd665acd7e7413745cf83901b6e84b3202ecdace205f111b597948bd392be502d5395319fde6dc68438edc5054ac7aa5318a2eda1d729c2147e60d39386fe5b", 0xcb}, {&(0x7f0000001000)="c6db62ef326f4a08be29eb2f7fc39642aa9e41b4602c0f7dbae99b0b58b20c31d8f14bdbb49f82bf9cacc1f2a1162fd9aeff621343419785542160ceab471321a38f8485ebfd2512f38116ada1c1c112f6b8b049d5c074818e7cf322071ba131268ff80bca7714438e3592100ae51305f95b60ab11d0153b3bdb038295674230d1a6901d2b7725a2e8ae1a21e2441e10049dd45fe4bdeb7e9f1ff734a0c6c42ced0e45de08139d9aac55526533d6002caf09ddd70ed1e5228caa3bb20cf406291149c330f5204dc740408ecb064d788037619858e6", 0xd5}], 0x9, &(0x7f00000011c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@cipso={0x86, 0x4a, 0x3, [{0x7, 0x12, "465615d5d83a7748e315981da7793c8f"}, {0x710721bb42b4bf4f, 0x12, "ba427be5be21361a2cc4af0020ffea7d"}, {0x0, 0x7, "993b25a501"}, {0x0, 0x9, "dca0b2c07e56fc"}, {0x6, 0x3, "d7"}, {0x7, 0xd, "e68ccab68df5db4a521a5c"}]}, @timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x57}]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x2}, {@remote, 0x4}]}, @ssrr={0x89, 0xb, 0xcb, [@multicast1, @empty]}, @rr={0x7, 0x1b, 0x61, [@local, @multicast2, @multicast2, @loopback, @rand_addr=0x64010101, @multicast1]}, @rr={0x7, 0x27, 0x56, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x110}}, {{&(0x7f0000001300)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001340)="e5d1784f80dd60a34222a28eceb2b6552f5fa4473755790fa78991b91aa598731579f2a53417847d9e923bd2ef86ce956bdf62ac37032a5cd7074122c29161e4bdbdae5fb969f351e3e41d09866eef27b0327110aba992dbeb8bb90e9321c4c8b3fc0236783d89796c8eb6b7efc8b3eeef68f686a15d56d28af86959fcbd2a183ba7f883e18a14356e74fa030698f60b22313701f4b221f997022e458f673906b2c1bd020249b04d7d16f1ff7a606c1fd755e20f4a818c123b7f052f315e6a0045f2387c5db64ede37671fa3b1943a97272bcf9218a0bedae8a61376cbdc3a10ec5fedf4b90d10feb39a5d867b4560430c26173d", 0xf4}], 0x1}}], 0x4, 0xf00) 279.431513ms ago: executing program 8 (id=733): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fedbf725030000005800018044000400200001000a004e23000000000000000000004008002000000000000100000000200002000a0000000000000000000000000000000000ffffe0000001000000000d000100"], 0x6c}}, 0x0) 223.191154ms ago: executing program 2 (id=734): syz_mount_image$fuse(&(0x7f0000001840), &(0x7f0000001880)='.\x00', 0x84406d, &(0x7f00000018c0)=ANY=[], 0x0, 0x0, 0x0) 222.607594ms ago: executing program 8 (id=735): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x3e, 0x2c, 0x1, 0x0, 0x7, 0x4, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYRES64, @ANYRES8=r1, @ANYRES8=r3, @ANYRESOCT, @ANYRES16], 0x40) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000380)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r10, &(0x7f00000003c0)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5833, 0x2, 0x6, 0xbd}}], 0x1, &(0x7f00000006c0)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x826, 0x0, 0x0}}, 0x0) 222.135154ms ago: executing program 2 (id=736): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001a00)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x100, 0x2, 0x1ff, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 167.793136ms ago: executing program 9 (id=737): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x800) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e6040500000101020301090220000101008032090400000208065000070581020002"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x0, 0x1, 0xc8, {0xc8, 0x31, "dd8d3a717e28b0f09d6ddf47ee27615e86c5107c6498ea783f6aec3cf52424a83245cc5b31641d2aa5034039a9908c77970973800c2d9b92bf18fcf2ea81194f2010be507fcd2e91692032e0000af71ae49e4187e63c2a47f7dbfab8390819ad1eb659404f6fe1671ace819458459c3935547bec1745c1c69e76fcc074ec2521e88b3052d7cd1b33910e35a48c6adb9cc79bfe96c06fde3203c2c5f4eb72ffaddd1400ffae0309f780f2797a9dd18a8a00d626645be86d5bd16bd4733ca715c6e13e1467fba5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "c391b529321c3e4bc2ffd8469c504afca7729cddd4bb26bc963c275a149db31aa522a6f434b9cd79bf87c2580a4f28c330c717707877a6b808c0c0bccf60f254b7e60004097ccd636645c812f131fb4dbd39615bb7ae84de5144a857"}}, &(0x7f0000000240)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0x8, "598618bb"}, @main=@item_012={0x2, 0x0, 0xb, "baaf"}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xfe, 0x1, {0x22, 0x6e5}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x31, 0x5, "da432b52ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x1, 0x71, "ae9e05bd64a860e55b38f9de2ff0a9cfb0213ec67161eb01b04c95bac6188cf805ce9a1b7bafc402e19c63e0ef2cde7348d644b4d8cd9042ec38726f4250d92f61af48e86d1e0254883d926792cdaf5f53ca89caafe5e32d5d746292fb776a0530a089b9ea15b29426096ce6353cacb3b7"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x9}}) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 166.624156ms ago: executing program 2 (id=738): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x81, &(0x7f0000000840)) r1 = socket(0x23, 0x80000, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delchain={0x2c, 0x65, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xffff}, {0xb, 0x9}, {0xe, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x60}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = memfd_create(&(0x7f0000007b80)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) pwrite64(r3, &(0x7f0000007e80)='\n\x00\x00', 0x3, 0x2) execveat(r3, &(0x7f0000007ec0)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0xf9, 0x6a2a, 0x8, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x5}}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup(r5) connect$bt_rfcomm(r6, &(0x7f00000003c0)={0x1f, @none, 0x8}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000021050001000100000004000200050001"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f00000079c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}}}, 0x108) syz_emit_ethernet(0x42, &(0x7f0000007b00)=ANY=[@ANYBLOB="0180c2001100fc000000000000000000000000000001ff02000000000000000000000000000100000e22000c90780100"/66], 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x166}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mknod(&(0x7f0000000380)='./file0\x00', 0xc000, 0xfff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x80, 0x2, 0x16, @private2, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7800, 0x7800, 0xd83, 0x1}}) 60.846768ms ago: executing program 2 (id=739): mkdirat(0xffffffffffffff9c, 0x0, 0xe) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000540)='./bus\x00') statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/231) 33.854599ms ago: executing program 8 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240)={'team_slave_1', 0x32, 0x37}, 0xf) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r7, 0x0) 0s ago: executing program 2 (id=741): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{}, &(0x7f0000001880), &(0x7f00000018c0)='%pB \x00', 0x1000000}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 20.501411][ T28] audit: type=1400 audit(1792225052.151:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.503063][ T279] cgroup: Unknown subsys name 'net' [ 20.524384][ T28] audit: type=1400 audit(1792225052.151:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.551776][ T28] audit: type=1400 audit(1792225052.171:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.551987][ T279] cgroup: Unknown subsys name 'devices' [ 20.703309][ T279] cgroup: Unknown subsys name 'hugetlb' [ 20.708962][ T279] cgroup: Unknown subsys name 'rlimit' [ 20.810967][ T28] audit: type=1400 audit(1792225052.451:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.834502][ T28] audit: type=1400 audit(1792225052.451:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.843008][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.859491][ T28] audit: type=1400 audit(1792225052.451:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.890968][ T28] audit: type=1400 audit(1792225052.521:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.916408][ T28] audit: type=1400 audit(1792225052.521:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.952370][ T28] audit: type=1400 audit(1792225052.601:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.952513][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.978209][ T28] audit: type=1400 audit(1792225052.601:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.743821][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.750903][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.758496][ T288] device bridge_slave_0 entered promiscuous mode [ 21.775553][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.783004][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.790441][ T287] device bridge_slave_0 entered promiscuous mode [ 21.798636][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.805764][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.813287][ T287] device bridge_slave_1 entered promiscuous mode [ 21.823026][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.830068][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.837674][ T288] device bridge_slave_1 entered promiscuous mode [ 21.966893][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.974184][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.981882][ T295] device bridge_slave_0 entered promiscuous mode [ 22.004907][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.012023][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.019334][ T295] device bridge_slave_1 entered promiscuous mode [ 22.054706][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.061805][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.069228][ T289] device bridge_slave_0 entered promiscuous mode [ 22.076239][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.083332][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.090672][ T289] device bridge_slave_1 entered promiscuous mode [ 22.115194][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.122267][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.129537][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.136580][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.169612][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.176749][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.184131][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.191259][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.212182][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.219235][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.226651][ T293] device bridge_slave_0 entered promiscuous mode [ 22.237327][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.244625][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.252282][ T293] device bridge_slave_1 entered promiscuous mode [ 22.322999][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.330366][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.338006][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.345502][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.353559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.360963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.387389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.394880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.402424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.410554][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.417591][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.427849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.436563][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.443622][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.462069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.470390][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.477445][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.496890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.505153][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.512204][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.540457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.548509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.556747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.576364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.584093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.592537][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.599575][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.607185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.615472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.634144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.642453][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.649620][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.676697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.685860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.695047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.709076][ T288] device veth0_vlan entered promiscuous mode [ 22.716760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.724865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.732431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.745306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.753117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.773863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.782326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.790757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.799821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.810125][ T287] device veth0_vlan entered promiscuous mode [ 22.817619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.825604][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.834008][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.842524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.850678][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.857793][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.867373][ T288] device veth1_macvtap entered promiscuous mode [ 22.875889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.883741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.891319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.898811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.906800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.915610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.924116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.932723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.940929][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.947979][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.959440][ T295] device veth0_vlan entered promiscuous mode [ 22.979799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.987351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.995272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.003544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.011803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.020119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.028433][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.035478][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.042970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.051634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.059858][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.066905][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.074353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.082821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.091386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.099612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.109921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.117689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.125198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.141706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.149940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.158111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.166380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.174457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.183044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.191566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.199700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.208564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.216760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.227011][ T287] device veth1_macvtap entered promiscuous mode [ 23.234860][ T295] device veth1_macvtap entered promiscuous mode [ 23.246734][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.261641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.269732][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.278870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.287330][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.295984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.304314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.312339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.320792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.329190][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.337583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.375299][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.385434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.385657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.385883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.386106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.386342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.386707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.386921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.388660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.388912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.389106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.389357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.392791][ T289] device veth0_vlan entered promiscuous mode [ 23.398707][ T289] device veth1_macvtap entered promiscuous mode [ 23.408809][ T293] device veth0_vlan entered promiscuous mode [ 23.508206][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.515776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.523464][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.532136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.540333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.570825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.580646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.591838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.600278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.602819][ T320] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 23.610861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.632252][ T293] device veth1_macvtap entered promiscuous mode [ 23.681591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.689830][ T311] syz.1.2 (311) used greatest stack depth: 21096 bytes left [ 23.690002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.714043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.722591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.739908][ T331] overlayfs: missing 'lowerdir' [ 24.191120][ T334] input: syz0 as /devices/virtual/input/input4 [ 24.191193][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.392375][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.404836][ T343] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 24.411398][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.438436][ T60] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 24.454614][ T60] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.482161][ T60] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 24.499844][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.508140][ T60] usb 3-1: Product: syz [ 24.512714][ T60] usb 3-1: Manufacturer: syz [ 24.517375][ T60] usb 3-1: SerialNumber: syz [ 24.530691][ T60] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 24.542605][ T322] loop3: detected capacity change from 0 to 131072 [ 24.553327][ T60] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 24.564946][ T60] usbserial_generic 3-1:1.0: generic converter detected [ 24.572429][ T322] F2FS-fs (loop3): invalid crc value [ 24.607825][ T60] usb 3-1: generic converter now attached to ttyUSB0 [ 24.640361][ T322] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.661864][ T331] loop0: detected capacity change from 0 to 131072 [ 24.678174][ T331] F2FS-fs (loop0): invalid crc value [ 24.686141][ T322] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 24.693797][ T331] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.698199][ T322] F2FS-fs (loop3): Failed to read root inode [ 24.804509][ T60] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 24.814652][ T358] SELinux: failed to load policy [ 24.876785][ T331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 25.007796][ T331] xt_l2tp: invalid flags combination: 8 [ 25.166236][ T360] loop1: detected capacity change from 0 to 512 [ 25.173264][ T360] ======================================================= [ 25.173264][ T360] WARNING: The mand mount option has been deprecated and [ 25.173264][ T360] and is ignored by this kernel. Remove the mand [ 25.173264][ T360] option from the mount to silence this warning. [ 25.173264][ T360] ======================================================= [ 25.295020][ T360] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 25.304887][ T360] EXT4-fs (loop1): group descriptors corrupted! [ 25.942463][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 25.955345][ T60] usb 5-1: not running at top speed; connect to a high speed hub [ 25.963925][ T60] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 25.976037][ T60] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4 [ 25.989463][ T60] usb 5-1: string descriptor 0 read error: -22 [ 26.002935][ T60] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 26.017218][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.058091][ T60] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.258083][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 26.258097][ T28] audit: type=1400 audit(1792225057.901:136): avc: denied { read write } for pid=344 comm="syz.4.13" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.287253][ T28] audit: type=1400 audit(1792225057.901:137): avc: denied { open } for pid=344 comm="syz.4.13" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.351060][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.531152][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 26.537413][ T19] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 26.550228][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.560270][ T365] netlink: 136 bytes leftover after parsing attributes in process `syz.0.16'. [ 26.571837][ T28] audit: type=1400 audit(1792225058.201:138): avc: denied { write } for pid=364 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.590820][ T358] syz.1.14 (358) used greatest stack depth: 19592 bytes left [ 26.600775][ T19] usb 4-1: config 0 descriptor?? [ 26.650546][ T369] SELinux: Context is not valid (left unmapped). [ 26.657851][ T28] audit: type=1400 audit(1792225058.301:139): avc: denied { relabelto } for pid=368 comm="syz.1.18" name="blkio.bfq.io_serviced" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 26.699262][ T28] audit: type=1400 audit(1792225058.301:140): avc: denied { associate } for pid=368 comm="syz.1.18" name="blkio.bfq.io_serviced" dev="tmpfs" ino=40 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 26.709644][ T6] usb 3-1: USB disconnect, device number 2 [ 26.733659][ T28] audit: type=1326 audit(1792225058.301:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=325 comm="syz.2.8" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1859e559 code=0x7fc00000 [ 26.762239][ T6] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 26.776273][ T28] audit: type=1400 audit(1792225058.341:142): avc: denied { read } for pid=370 comm="syz.0.19" dev="nsfs" ino=4026532500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.839215][ T322] loop3: detected capacity change from 0 to 512 [ 26.847215][ T6] usbserial_generic 3-1:1.0: device disconnected [ 26.865897][ T28] audit: type=1400 audit(1792225058.341:143): avc: denied { open } for pid=370 comm="syz.0.19" path="net:[4026532500]" dev="nsfs" ino=4026532500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.951656][ T383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 27.144420][ T384] binder: 372:384 ioctl c0306201 0 returned -14 [ 27.236796][ T369] loop1: detected capacity change from 0 to 40427 [ 27.413388][ T369] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 27.480470][ T28] audit: type=1400 audit(1792225058.341:144): avc: denied { create } for pid=370 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 27.504692][ T322] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 27.505175][ T60] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 27.517013][ T369] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.525383][ T28] audit: type=1400 audit(1792225058.341:145): avc: denied { write } for pid=370 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 27.536343][ T390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=390 comm=syz.0.22 [ 27.550852][ T60] usb 5-1: USB disconnect, device number 2 [ 27.570430][ T369] F2FS-fs (loop1): invalid crc value [ 27.635846][ T369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.643902][ T322] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 27.643924][ T322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.651848][ T322] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 27.657565][ T395] process 'syz.4.23' launched './file1' with NULL argv: empty string added [ 27.682483][ T398] loop2: detected capacity change from 0 to 512 [ 27.690393][ T322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.713565][ T400] loop0: detected capacity change from 0 to 512 [ 27.748505][ T400] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 27.757331][ T400] EXT4-fs (loop0): orphan cleanup on readonly fs [ 27.761588][ T322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.775344][ T400] EXT4-fs error (device loop0): ext4_quota_enable:7032: comm syz.0.25: Bad quota inum: 33554432, type: 0 [ 27.790689][ T322] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 27.799327][ T400] EXT4-fs (loop0): Remounting filesystem read-only [ 27.806439][ T400] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=33554432). Please run e2fsck to fix. [ 27.806891][ T369] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.821818][ T400] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 27.821843][ T400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.834369][ T19] usb 4-1: string descriptor 0 read error: -71 [ 27.838178][ T369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 27.845154][ T19] usb 4-1: Found UVC 0.00 device (2833:0201) [ 27.853503][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.859010][ T19] usb 4-1: No valid video chain found. [ 28.830233][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.853491][ T19] usb 4-1: USB disconnect, device number 2 [ 28.902466][ T289] EXT4-fs (loop0): unmounting filesystem. [ 28.936281][ T419] loop1: detected capacity change from 0 to 256 [ 29.095774][ T425] loop3: detected capacity change from 0 to 16 [ 29.122053][ T425] erofs: (device loop3): mounted with root inode @ nid 36. [ 29.481205][ T429] loop4: detected capacity change from 0 to 512 [ 29.635905][ T429] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.966188][ T429] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 30.001658][ T429] block device autoloading is deprecated and will be removed. [ 30.026151][ T433] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 30.045445][ T429] EXT4-fs (loop4): external journal has bad superblock [ 30.055282][ T435] loop1: detected capacity change from 0 to 512 [ 30.093884][ T435] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 30.094936][ T435] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.33: corrupted in-inode xattr [ 30.095259][ T435] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.33: couldn't read orphan inode 15 (err -117) [ 30.095740][ T435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.130755][ T443] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.165325][ T435] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 30.187617][ T439] Zero length message leads to an empty skb [ 30.268867][ T287] EXT4-fs (loop1): unmounting filesystem. [ 30.314710][ T454] 9pnet_fd: Insufficient options for proto=fd [ 30.349919][ T457] input: syz0 as /devices/virtual/input/input5 [ 30.371159][ T461] FAULT_INJECTION: forcing a failure. [ 30.371159][ T461] name fail_futex, interval 1, probability 0, space 0, times 1 [ 30.384834][ T461] CPU: 1 PID: 461 Comm: syz.1.42 Not tainted syzkaller #0 [ 30.391987][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.402417][ T461] Call Trace: [ 30.405708][ T461] [ 30.408630][ T461] __dump_stack+0x21/0x24 [ 30.412980][ T461] dump_stack_lvl+0x110/0x170 [ 30.417654][ T461] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.422698][ T461] ? kvfree+0x35/0x40 [ 30.426678][ T461] ? do_syscall_64+0x4c/0xa0 [ 30.431287][ T461] dump_stack+0x15/0x24 [ 30.435480][ T461] should_fail_ex+0x3bf/0x510 [ 30.440160][ T461] should_fail+0xb/0x10 [ 30.444314][ T461] get_futex_key+0x143/0xb10 [ 30.448896][ T461] ? __cfi_get_futex_key+0x10/0x10 [ 30.454001][ T461] futex_wake+0x150/0x8e0 [ 30.458323][ T461] ? mntput_no_expire+0x100/0x6b0 [ 30.463359][ T461] ? __cfi_lockref_put_or_lock+0x10/0x10 [ 30.468981][ T461] ? mntput+0xc0/0xc0 [ 30.472969][ T461] ? __cfi_futex_wake+0x10/0x10 [ 30.477812][ T461] ? path_put+0x57/0x60 [ 30.481958][ T461] ? path_getxattr+0x358/0x4d0 [ 30.486707][ T461] do_futex+0x2bf/0x430 [ 30.490851][ T461] ? __cfi_do_futex+0x10/0x10 [ 30.495517][ T461] __se_sys_futex+0x136/0x310 [ 30.500192][ T461] ? __x64_sys_futex+0x100/0x100 [ 30.505125][ T461] __x64_sys_futex+0xe5/0x100 [ 30.509789][ T461] x64_sys_call+0x7ec/0x9a0 [ 30.514280][ T461] do_syscall_64+0x4c/0xa0 [ 30.518680][ T461] ? clear_bhb_loop+0x30/0x80 [ 30.523344][ T461] ? clear_bhb_loop+0x30/0x80 [ 30.528013][ T461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.533896][ T461] RIP: 0033:0x7f5cded9e559 [ 30.538316][ T461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.558144][ T461] RSP: 002b:00007f5cdfd040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.566554][ T461] RAX: ffffffffffffffda RBX: 00007f5cdf025fa8 RCX: 00007f5cded9e559 [ 30.574686][ T461] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5cdf025fac [ 30.582839][ T461] RBP: 00007f5cdf025fa0 R08: 0014033163b148d8 R09: 0000000000000000 [ 30.592295][ T461] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 30.600281][ T461] R13: 00007f5cdf026038 R14: 00007ffdfa6cdfe0 R15: 00007ffdfa6ce0c8 [ 30.608538][ T461] [ 31.031109][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.165839][ T480] loop2: detected capacity change from 0 to 16 [ 31.172710][ T480] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.181579][ T480] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 31.190748][ T480] syz.2.50: attempt to access beyond end of device [ 31.190748][ T480] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 31.206799][ T480] syz.2.50: attempt to access beyond end of device [ 31.206799][ T480] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 31.212570][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.220846][ T480] syz.2.50: attempt to access beyond end of device [ 31.220846][ T480] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 31.230412][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.244402][ T480] syz.2.50: attempt to access beyond end of device [ 31.244402][ T480] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 31.253536][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.268724][ T480] syz.2.50: attempt to access beyond end of device [ 31.268724][ T480] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 31.294829][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 31.295058][ T481] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.304024][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 31.313773][ T481] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.321700][ T24] usb 2-1: Product: syz [ 31.330320][ T481] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.334264][ T24] usb 2-1: Manufacturer: syz [ 31.343929][ T481] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.348373][ T24] usb 2-1: SerialNumber: syz [ 31.356909][ T481] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.370943][ T481] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.371071][ T290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.391906][ T480] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.401588][ T480] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.409954][ T480] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.419634][ T480] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.428102][ T480] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.437723][ T480] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.446130][ T480] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 31.455804][ T480] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 31.514452][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 31.514465][ T28] audit: type=1400 audit(1792225063.161:210): avc: denied { wake_alarm } for pid=483 comm="syz.2.52" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.525705][ T486] loop0: detected capacity change from 0 to 512 [ 31.555356][ T28] audit: type=1400 audit(1792225063.201:211): avc: denied { name_bind } for pid=483 comm="syz.2.52" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 31.578859][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 31.592234][ T290] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 31.592247][ T486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 31.600246][ T290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.600268][ T290] usb 5-1: config 0 has no interface number 0 [ 31.600292][ T290] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 31.600319][ T290] usb 5-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 31.600338][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.617079][ T486] System zones: [ 31.634803][ T290] usb 5-1: config 0 descriptor?? [ 31.643450][ T486] 0-2, 18-18, 34-35 [ 31.665433][ T486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.674408][ T486] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.685310][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.759158][ T28] audit: type=1400 audit(1792225063.401:212): avc: denied { read write } for pid=493 comm="syz.2.53" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.760908][ T494] ip_tables: iptables: counters copy to user failed while replacing table [ 31.783230][ T28] audit: type=1400 audit(1792225063.401:213): avc: denied { open } for pid=493 comm="syz.2.53" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.815557][ T28] audit: type=1400 audit(1792225063.441:214): avc: denied { watch } for pid=482 comm="syz.0.51" path="/15" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.842481][ T24] usb 2-1: USB disconnect, device number 2 [ 31.849127][ T28] audit: type=1400 audit(1792225063.491:215): avc: denied { read write } for pid=464 comm="syz.1.44" name="lp0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 31.851552][ T494] device syz_tun entered promiscuous mode [ 31.880439][ T24] usblp0: removed [ 31.888908][ T494] device macsec1 entered promiscuous mode [ 31.895574][ T494] device syz_tun left promiscuous mode [ 31.903240][ T28] audit: type=1400 audit(1792225063.491:216): avc: denied { open } for pid=464 comm="syz.1.44" path="/dev/usb/lp0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 31.904708][ T471] loop4: detected capacity change from 0 to 4096 [ 31.927319][ T28] audit: type=1400 audit(1792225063.491:217): avc: denied { ioctl } for pid=464 comm="syz.1.44" path="/dev/usb/lp0" dev="devtmpfs" ino=649 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 31.933603][ T471] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.962975][ T28] audit: type=1400 audit(1792225063.491:218): avc: denied { write } for pid=493 comm="syz.2.53" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.986268][ T471] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.994399][ T471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.009305][ T28] audit: type=1400 audit(1792225063.651:219): avc: denied { write } for pid=470 comm="syz.4.46" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.031888][ T471] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.059990][ T19] usb 5-1: USB disconnect, device number 3 [ 32.073745][ T503] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 32.153690][ T509] 9pnet_fd: Insufficient options for proto=fd [ 32.176146][ T515] FAULT_INJECTION: forcing a failure. [ 32.176146][ T515] name failslab, interval 1, probability 0, space 0, times 0 [ 32.189211][ T515] CPU: 1 PID: 515 Comm: syz.3.60 Not tainted syzkaller #0 [ 32.196340][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.206387][ T515] Call Trace: [ 32.209665][ T515] [ 32.212595][ T515] __dump_stack+0x21/0x24 [ 32.216921][ T515] dump_stack_lvl+0x110/0x170 [ 32.221600][ T515] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.226604][ T515] dump_stack+0x15/0x24 [ 32.230741][ T515] should_fail_ex+0x3bf/0x510 [ 32.235397][ T515] ? getname_flags+0xba/0x510 [ 32.240053][ T515] __should_failslab+0xac/0xf0 [ 32.244809][ T515] should_failslab+0x9/0x20 [ 32.249309][ T515] kmem_cache_alloc+0x3b/0x320 [ 32.254074][ T515] getname_flags+0xba/0x510 [ 32.258635][ T515] getname+0x19/0x20 [ 32.262540][ T515] do_sys_openat2+0xeb/0x820 [ 32.267136][ T515] ? __kasan_check_write+0x14/0x20 [ 32.272247][ T515] ? do_sys_open+0xe0/0xe0 [ 32.276662][ T515] ? ksys_write+0x1fa/0x260 [ 32.281152][ T515] ? __cfi_ksys_write+0x10/0x10 [ 32.286003][ T515] __x64_sys_openat+0x136/0x160 [ 32.290836][ T515] x64_sys_call+0x783/0x9a0 [ 32.295320][ T515] do_syscall_64+0x4c/0xa0 [ 32.299718][ T515] ? clear_bhb_loop+0x30/0x80 [ 32.304401][ T515] ? clear_bhb_loop+0x30/0x80 [ 32.309079][ T515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.314958][ T515] RIP: 0033:0x7fdb4839e559 [ 32.319381][ T515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.338980][ T515] RSP: 002b:00007fdb491a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 32.347503][ T515] RAX: ffffffffffffffda RBX: 00007fdb48625fa0 RCX: 00007fdb4839e559 [ 32.355609][ T515] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 32.363577][ T515] RBP: 00007fdb491a6090 R08: 0000000000000000 R09: 0000000000000000 [ 32.371574][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.379629][ T515] R13: 00007fdb48626038 R14: 00007fdb48625fa0 R15: 00007ffeca90d918 [ 32.387767][ T515] [ 32.414787][ T289] EXT4-fs (loop0): unmounting filesystem. [ 32.446418][ T523] loop0: detected capacity change from 0 to 512 [ 32.539878][ T535] loop1: detected capacity change from 0 to 256 [ 32.572736][ T293] EXT4-fs (loop4): unmounting filesystem. [ 32.591528][ T388] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.606447][ T535] loop1: detected capacity change from 0 to 128 [ 32.655118][ T388] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.666671][ T535] loop1: detected capacity change from 0 to 256 [ 32.673149][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.680927][ T388] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.718930][ T541] loop4: detected capacity change from 0 to 40427 [ 32.733326][ T541] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 32.749627][ T541] F2FS-fs (loop4): invalid crc value [ 32.757122][ T541] F2FS-fs (loop4): invalid crc value [ 32.762567][ T541] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 32.861719][ T535] loop1: detected capacity change from 0 to 40427 [ 32.881073][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 32.887443][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.927993][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.957497][ T541] EXT4-fs: Ignoring removed nobh option [ 32.958782][ T19] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 32.977055][ T541] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 32.989521][ T541] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.70: attempt to clear invalid blocks 1 len 1 [ 32.992175][ T551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 33.003574][ T541] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 33.015524][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.025637][ T541] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.70: invalid indirect mapped block 1819239214 (level 0) [ 33.047581][ T541] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.70: invalid indirect mapped block 1819239214 (level 1) [ 33.053264][ T551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 33.062045][ T541] EXT4-fs (loop4): 1 truncate cleaned up [ 33.073539][ T19] usb 4-1: config 0 descriptor?? [ 33.075887][ T541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.104582][ T552] random: crng reseeded on system resumption [ 33.116483][ T293] EXT4-fs (loop4): unmounting filesystem. [ 33.169504][ T560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.78'. [ 33.371094][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.555807][ T517] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 33.562916][ T517] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 33.571784][ T517] F2FS-fs (loop3): fault_injection options not supported [ 33.578971][ T517] F2FS-fs (loop3): fault_type options not supported [ 33.586220][ T517] F2FS-fs (loop3): invalid crc value [ 33.591884][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 33.594547][ T517] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.598132][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.614414][ T6] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 33.625229][ T6] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 33.631829][ T517] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 33.634655][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.641427][ T517] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.649693][ T6] usb 3-1: Product: syz [ 33.661600][ T6] usb 3-1: Manufacturer: syz [ 33.666662][ T6] usb 3-1: SerialNumber: syz [ 33.683475][ T517] syz.3.61: attempt to access beyond end of device [ 33.683475][ T517] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 33.879412][ T554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.893309][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 33.904381][ T19] uclogic 0003:5543:0005.0001: unknown main item tag 0x3 [ 33.911949][ T19] uclogic 0003:5543:0005.0001: No inputs registered, leaving [ 33.919747][ T19] uclogic 0003:5543:0005.0001: hidraw0: USB HID v0.02 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 33.945490][ T591] netlink: 104 bytes leftover after parsing attributes in process `syz.2.75'. [ 33.954462][ T591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'. [ 33.963489][ T591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'. [ 34.101301][ T593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.85'. [ 34.129871][ T315] usb 4-1: USB disconnect, device number 3 [ 34.185036][ T597] device hsr0 entered promiscuous mode [ 34.421066][ T290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.595249][ T637] EXT4-fs: Ignoring removed orlov option [ 34.607018][ T637] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.623353][ T637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.634037][ T290] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.645616][ T290] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.655757][ T288] syz-executor: attempt to access beyond end of device [ 34.655757][ T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.671090][ T290] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.685505][ T637] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.105: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 34.721041][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.727789][ T290] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 34.754898][ T637] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.105: couldn't read orphan inode 16 (err -117) [ 34.783357][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.787736][ T637] EXT4-fs (loop4): 1 orphan inode deleted [ 34.814220][ T290] usb 2-1: config 0 descriptor?? [ 34.821467][ T637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.873542][ T293] EXT4-fs (loop4): unmounting filesystem. [ 34.933310][ T647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.955490][ T647] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.966744][ T649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.976016][ T649] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.983758][ T647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.021104][ T649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=649 comm=syz.4.108 [ 35.040458][ T293] EXT4-fs (loop4): unmounting filesystem. [ 35.119873][ T655] set_capacity_and_notify: 7 callbacks suppressed [ 35.119893][ T655] loop4: detected capacity change from 0 to 512 [ 35.148788][ T655] EXT4-fs (loop4): Invalid log block size: 32 [ 35.223260][ T290] input: HID 1b96:0009 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0009.0002/input/input6 [ 35.307454][ T290] ntrig 0003:1B96:0009.0002: input,hidraw0: USB HID v0.14 Joystick [HID 1b96:0009] on usb-dummy_hcd.1-1/input0 [ 35.319378][ T19] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 35.512119][ T19] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 35.526920][ T19] usb 4-1: config 0 has no interface number 0 [ 35.546126][ T19] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 35.580269][ T19] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 35.598126][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.616003][ T19] usb 4-1: Product: syz [ 35.623209][ T19] usb 4-1: Manufacturer: syz [ 35.631311][ T19] usb 4-1: SerialNumber: syz [ 35.639353][ T19] usb 4-1: config 0 descriptor?? [ 35.647467][ T647] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 35.674065][ T19] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f2:f4:fe:79:07:89 [ 35.875252][ T405] usb 4-1: USB disconnect, device number 4 [ 35.882667][ T405] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 35.995435][ T689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60730 sclass=netlink_route_socket pid=689 comm=syz.4.115 [ 36.063980][ T689] 9pnet: Could not find request transport: &d=0x0000000000000003 [ 36.100362][ T698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.116'. [ 36.121812][ T6] usb 3-1: USB disconnect, device number 3 [ 36.252591][ T698] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ0xffffffffffffffff00000000000000000000006 [ 36.278151][ T595] loop1: detected capacity change from 0 to 131072 [ 36.288793][ T595] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9) [ 36.298349][ T595] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 36.307251][ T595] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 36.322310][ T290] usb 2-1: USB disconnect, device number 3 [ 36.364317][ T714] fido_id[714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 36.423826][ T288] EXT4-fs (loop3): unmounting filesystem. [ 36.535785][ T730] loop3: detected capacity change from 0 to 512 [ 36.544986][ T730] EXT4-fs (loop3): Test dummy encryption mode enabled [ 36.551955][ T730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.563094][ T730] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.123: bad orphan inode 131083 [ 36.574251][ T730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.575774][ T28] kauditd_printk_skb: 195 callbacks suppressed [ 36.575787][ T28] audit: type=1400 audit(1792225068.221:415): avc: denied { ioctl } for pid=728 comm="syz.0.124" path="socket:[17377]" dev="sockfs" ino=17377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.582748][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.638323][ T735] loop0: detected capacity change from 0 to 256 [ 36.657224][ T735] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 36.674199][ T28] audit: type=1400 audit(1792225068.321:416): avc: denied { write } for pid=734 comm="syz.0.125" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.695797][ T28] audit: type=1400 audit(1792225068.321:417): avc: denied { add_name } for pid=734 comm="syz.0.125" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.717799][ T28] audit: type=1400 audit(1792225068.321:418): avc: denied { associate } for pid=734 comm="syz.0.125" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.741057][ T28] audit: type=1400 audit(1792225068.321:419): avc: denied { append } for pid=734 comm="syz.0.125" path="/33/file1/cpuacct.usage_percpu" dev="loop0" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.786083][ T28] audit: type=1400 audit(1792225068.321:420): avc: denied { lock } for pid=734 comm="syz.0.125" path="/33/file1/cpuacct.usage_percpu" dev="loop0" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.811120][ T28] audit: type=1400 audit(1792225068.321:421): avc: denied { write } for pid=734 comm="syz.0.125" name="cpuacct.usage_percpu" dev="loop0" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.842590][ T28] audit: type=1400 audit(1792225068.411:422): avc: denied { create } for pid=726 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 36.855831][ T739] loop1: detected capacity change from 0 to 512 [ 36.862660][ T28] audit: type=1400 audit(1792225068.411:423): avc: denied { sys_admin } for pid=726 comm="syz.3.123" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 36.889944][ T739] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.897008][ T739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.910367][ T739] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.126: bad orphan inode 131083 [ 36.921161][ T739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.921867][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.940547][ T24] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.953429][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 36.960042][ T24] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 36.990201][ T737] EXT4-fs (loop3): unmounting filesystem. [ 36.997973][ T28] audit: type=1400 audit(1792225068.641:424): avc: denied { append } for pid=741 comm="syz.2.128" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.006471][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.030867][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.031495][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.063123][ T24] usb 5-1: config 0 descriptor?? [ 37.236914][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.244307][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.252993][ T748] device bridge_slave_0 entered promiscuous mode [ 37.260289][ T748] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.267476][ T290] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.267576][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.282414][ T748] device bridge_slave_1 entered promiscuous mode [ 37.330538][ T748] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.337600][ T748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.344895][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.351943][ T748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.372470][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.380174][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.387917][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.397925][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.406294][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.413366][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.422437][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.430765][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.437824][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.441065][ T290] usb 3-1: device descriptor read/64, error -71 [ 37.457484][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.466947][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.480213][ T405] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.489666][ T24] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x2 [ 37.491911][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.498149][ T753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.516705][ T24] hid-multitouch 0003:0EEF:72C4.0003: No inputs registered, leaving [ 37.526487][ T24] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 37.528122][ T753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.547482][ T753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.556651][ T753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.559975][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.581774][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.589776][ T755] loop0: detected capacity change from 0 to 2048 [ 37.589813][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.614969][ T748] device veth0_vlan entered promiscuous mode [ 37.621684][ T755] Alternate GPT is invalid, using primary GPT. [ 37.627985][ T755] loop0: p1 p2 p3 [ 37.628905][ T760] netlink: 'syz.0.131': attribute type 13 has an invalid length. [ 37.632029][ T755] loop0: partition table partially beyond EOD, truncated [ 37.650802][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 37.684988][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.694595][ T656] usb 5-1: USB disconnect, device number 4 [ 37.697174][ T405] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=fb.a5 [ 37.701856][ T748] device veth1_macvtap entered promiscuous mode [ 37.716771][ T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.725810][ T405] usb 2-1: Product: syz [ 37.730362][ T405] usb 2-1: Manufacturer: syz [ 37.731063][ T290] usb 3-1: device descriptor read/64, error -71 [ 37.735064][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.749353][ T405] usb 2-1: SerialNumber: syz [ 37.756585][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.043670][ T405] usb 2-1: USB disconnect, device number 4 [ 38.296906][ T768] loop4: detected capacity change from 0 to 512 [ 38.360465][ T768] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.132: iget: bad i_size value: 38620345925642 [ 38.374650][ T768] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.132: couldn't read orphan inode 15 (err -117) [ 38.395848][ T768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.416941][ T768] fscrypt (loop4, inode 18): Unsupported encryption flags (0xff) [ 38.434159][ T43] device bridge_slave_1 left promiscuous mode [ 38.445168][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.476975][ T293] EXT4-fs (loop4): unmounting filesystem. [ 38.484573][ T43] device bridge_slave_0 left promiscuous mode [ 38.494023][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.506665][ T43] device veth1_macvtap left promiscuous mode [ 38.513216][ T43] device veth0_vlan left promiscuous mode [ 38.726972][ T287] EXT4-fs (loop1): unmounting filesystem. [ 38.737939][ T771] loop5: detected capacity change from 0 to 4096 [ 38.746099][ T771] EXT4-fs: Ignoring removed nobh option [ 38.761080][ T771] EXT4-fs: Ignoring removed bh option [ 38.778453][ T771] EXT4-fs (loop5): Test dummy encryption mode enabled [ 38.787727][ T771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 38.799357][ T771] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 38.800372][ T777] input: syz0 as /devices/virtual/input/input8 [ 38.852042][ T290] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.863153][ T784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=784 comm=syz.4.138 [ 38.865114][ T783] loop0: detected capacity change from 0 to 1024 [ 38.910787][ T783] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.929770][ T783] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.944202][ T783] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.957843][ T783] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 38.970735][ T783] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.970735][ T783] [ 38.993681][ T783] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.011517][ T748] EXT4-fs (loop5): unmounting filesystem. [ 39.018333][ T783] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.031965][ T290] usb 3-1: device descriptor read/64, error -71 [ 39.038643][ T783] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.056907][ T783] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.090591][ T782] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.106587][ T782] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.120384][ T783] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.133893][ T782] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.148130][ T782] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.137: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.571437][ T290] usb 3-1: device descriptor read/64, error -71 [ 39.581062][ T405] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.589350][ T289] EXT4-fs (loop0): unmounting filesystem. [ 39.691112][ T290] usb usb3-port1: attempt power cycle [ 39.761084][ T405] usb 6-1: Using ep0 maxpacket: 16 [ 39.767517][ T405] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 39.778615][ T405] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 39.791274][ T405] usb 6-1: New USB device found, idVendor=0499, idProduct=1021, bcdDevice= 0.40 [ 39.800446][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.808843][ T405] usb 6-1: Product: syz [ 39.813251][ T405] usb 6-1: Manufacturer: syz [ 39.817914][ T405] usb 6-1: SerialNumber: syz [ 39.904592][ T812] futex_wake_op: syz.1.146 tries to shift op by -1; fix this program [ 39.912934][ T813] futex_wake_op: syz.1.146 tries to shift op by -1; fix this program [ 39.942987][ T815] FAULT_INJECTION: forcing a failure. [ 39.942987][ T815] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.956552][ T815] CPU: 0 PID: 815 Comm: syz.1.147 Not tainted syzkaller #0 [ 39.963773][ T815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.973864][ T815] Call Trace: [ 39.977160][ T815] [ 39.980095][ T815] __dump_stack+0x21/0x24 [ 39.984459][ T815] dump_stack_lvl+0x110/0x170 [ 39.989160][ T815] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.994380][ T815] ? _parse_integer+0x2a/0x40 [ 39.999065][ T815] dump_stack+0x15/0x24 [ 40.003229][ T815] should_fail_ex+0x3bf/0x510 [ 40.007918][ T815] should_fail+0xb/0x10 [ 40.012097][ T815] should_fail_usercopy+0x1a/0x20 [ 40.017320][ T815] _copy_from_user+0x1e/0xc0 [ 40.021926][ T815] ___sys_sendmsg+0x1c3/0x360 [ 40.026617][ T815] ? __sys_sendmsg+0x290/0x290 [ 40.030162][ T405] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 40.031388][ T815] ? __kasan_check_write+0x14/0x20 [ 40.031411][ T815] ? proc_fail_nth_write+0x180/0x200 [ 40.031430][ T815] ? vfs_write+0xa51/0xd00 [ 40.031446][ T815] ? __kasan_check_read+0x11/0x20 [ 40.058122][ T815] ? __fdget+0x15b/0x220 [ 40.062362][ T815] __x64_sys_sendmsg+0x20d/0x2e0 [ 40.067300][ T815] ? __kasan_check_read+0x11/0x20 [ 40.072310][ T815] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 40.077768][ T815] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 40.083828][ T815] x64_sys_call+0x171/0x9a0 [ 40.088320][ T815] do_syscall_64+0x4c/0xa0 [ 40.092721][ T815] ? clear_bhb_loop+0x30/0x80 [ 40.097386][ T815] ? clear_bhb_loop+0x30/0x80 [ 40.102049][ T815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.107928][ T815] RIP: 0033:0x7f5cded9e559 [ 40.112344][ T815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.132040][ T815] RSP: 002b:00007f5cdfd04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.140442][ T815] RAX: ffffffffffffffda RBX: 00007f5cdf025fa0 RCX: 00007f5cded9e559 [ 40.148407][ T815] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 40.156385][ T815] RBP: 00007f5cdfd04090 R08: 0000000000000000 R09: 0000000000000000 [ 40.164536][ T815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.172499][ T815] R13: 00007f5cdf026038 R14: 00007f5cdf025fa0 R15: 00007ffdfa6ce0c8 [ 40.180465][ T815] [ 40.184291][ T656] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.189267][ T405] snd-usb-audio: probe of 6-1:1.1 failed with error -2 [ 40.220473][ T820] netlink: 44 bytes leftover after parsing attributes in process `syz.4.150'. [ 40.229507][ T405] snd-usb-audio: probe of 6-1:1.2 failed with error -2 [ 40.230605][ T820] netlink: 43 bytes leftover after parsing attributes in process `syz.4.150'. [ 40.242514][ T405] usb 6-1: USB disconnect, device number 2 [ 40.247497][ T820] netlink: 'syz.4.150': attribute type 6 has an invalid length. [ 40.258863][ T820] netlink: 'syz.4.150': attribute type 5 has an invalid length. [ 40.266548][ T820] netlink: 43 bytes leftover after parsing attributes in process `syz.4.150'. [ 40.280236][ T820] loop4: detected capacity change from 0 to 256 [ 40.346701][ T825] FAULT_INJECTION: forcing a failure. [ 40.346701][ T825] name failslab, interval 1, probability 0, space 0, times 0 [ 40.359494][ T825] CPU: 1 PID: 825 Comm: syz.2.151 Not tainted syzkaller #0 [ 40.366716][ T825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 40.376780][ T825] Call Trace: [ 40.380068][ T825] [ 40.382987][ T825] __dump_stack+0x21/0x24 [ 40.387319][ T825] dump_stack_lvl+0x110/0x170 [ 40.391993][ T825] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.397141][ T825] dump_stack+0x15/0x24 [ 40.401174][ T656] usb 1-1: Using ep0 maxpacket: 16 [ 40.401377][ T825] should_fail_ex+0x3bf/0x510 [ 40.407928][ T656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.411140][ T825] __should_failslab+0xac/0xf0 [ 40.411170][ T825] should_failslab+0x9/0x20 [ 40.411187][ T825] __kmem_cache_alloc_node+0x3d/0x2d0 [ 40.420423][ T656] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.424372][ T825] ? asymmetric_key_generate_id+0x59/0xf0 [ 40.424405][ T825] ? asymmetric_key_generate_id+0x59/0xf0 [ 40.424422][ T825] __kmalloc+0xa4/0x1e0 [ 40.429312][ T656] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.434308][ T825] ? kasan_save_alloc_info+0x1f/0x30 [ 40.434336][ T825] asymmetric_key_generate_id+0x59/0xf0 [ 40.434355][ T825] x509_key_preparse+0x412/0x6d0 [ 40.446424][ T656] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 40.450488][ T825] asymmetric_key_preparse+0xaf/0x100 [ 40.456682][ T656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.460430][ T825] key_create_or_update+0x43e/0x9f0 [ 40.469654][ T656] usb 1-1: Product: syz [ 40.474684][ T825] ? __cfi_key_create_or_update+0x10/0x10 [ 40.474710][ T825] ? __cfi_lookup_user_key+0x10/0x10 [ 40.474734][ T825] ? __kasan_check_write+0x14/0x20 [ 40.480601][ T656] usb 1-1: Manufacturer: syz [ 40.485206][ T825] __se_sys_add_key+0x34b/0x410 [ 40.485233][ T825] ? __x64_sys_add_key+0xd0/0xd0 [ 40.494541][ T656] usb 1-1: SerialNumber: syz [ 40.499598][ T825] ? __kasan_check_write+0x14/0x20 [ 40.499621][ T825] ? fpregs_restore_userregs+0x128/0x260 [ 40.562837][ T825] __x64_sys_add_key+0xbf/0xd0 [ 40.567610][ T825] x64_sys_call+0x6aa/0x9a0 [ 40.572108][ T825] do_syscall_64+0x4c/0xa0 [ 40.576514][ T825] ? clear_bhb_loop+0x30/0x80 [ 40.581185][ T825] ? clear_bhb_loop+0x30/0x80 [ 40.585856][ T825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.591856][ T825] RIP: 0033:0x7f0d1859e559 [ 40.596260][ T825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.615873][ T825] RSP: 002b:00007f0d194c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 40.624194][ T827] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 40.624298][ T825] RAX: ffffffffffffffda RBX: 00007f0d18825fa0 RCX: 00007f0d1859e559 [ 40.624315][ T825] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 40.633539][ T827] mmap: syz.5.152 (827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.639891][ T825] RBP: 00007f0d18635ab8 R08: 000000001dc5ad7a R09: 0000000000000000 [ 40.639909][ T825] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 40.639920][ T825] R13: 00007f0d18826038 R14: 00007f0d18825fa0 R15: 00007ffdd387f8b8 [ 40.683585][ T825] [ 40.711362][ T809] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 40.722471][ T656] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 40.730450][ T656] usb 1-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 40.731744][ T719] udevd[719]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.738161][ T656] usb 1-1: 1:1 : unsupported format bits 0x1fe [ 40.760920][ T656] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 40.770502][ T656] usb 1-1: 1:1 : invalid channels 0 [ 40.793647][ T656] usb 1-1: USB disconnect, device number 2 [ 40.804397][ T836] netlink: 180 bytes leftover after parsing attributes in process `syz.5.156'. [ 40.841715][ T315] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.866630][ T838] syz.2.153 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.982745][ T838] netlink: 7 bytes leftover after parsing attributes in process `syz.2.153'. [ 41.191116][ T315] usb 5-1: Using ep0 maxpacket: 16 [ 41.197513][ T315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.207739][ T315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.218111][ T315] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.227236][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.235332][ T315] usb 5-1: Product: syz [ 41.239649][ T315] usb 5-1: Manufacturer: syz [ 41.244312][ T315] usb 5-1: SerialNumber: syz [ 41.317376][ T842] netlink: 104 bytes leftover after parsing attributes in process `syz.1.158'. [ 41.345244][ T846] loop1: detected capacity change from 0 to 512 [ 41.352518][ T846] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 41.361806][ T846] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.371238][ T846] EXT4-fs (loop1): couldn't read superblock of external journal [ 41.401063][ T405] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 41.432488][ T846] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 41.440339][ T846] netlink: 17 bytes leftover after parsing attributes in process `syz.1.160'. [ 41.462045][ T315] usb 5-1: 0:2 : does not exist [ 41.469265][ T315] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 41.481779][ T315] usb 5-1: USB disconnect, device number 5 [ 41.612054][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 41.612068][ T28] audit: type=1400 audit(1792225073.261:537): avc: denied { set_context_mgr } for pid=847 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 41.614218][ T856] binder: 847:856 ioctl c0306201 2000000000c0 returned -22 [ 41.645452][ T405] usb 6-1: Using ep0 maxpacket: 16 [ 41.652958][ T405] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 41.661522][ T405] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 41.671923][ T405] usb 6-1: config 0 has no interface number 0 [ 41.681397][ T405] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 41.690510][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.698935][ T405] usb 6-1: Product: syz [ 41.703230][ T405] usb 6-1: Manufacturer: syz [ 41.707879][ T405] usb 6-1: SerialNumber: syz [ 41.736516][ T859] loop0: detected capacity change from 0 to 512 [ 41.801458][ T859] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.891571][ T405] usb 6-1: config 0 descriptor?? [ 41.964007][ T859] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #11: block 4559633: comm syz.0.163: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 41.980420][ T859] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.993796][ T859] ------------[ cut here ]------------ [ 41.999271][ T859] EA inode 11 i_nlink=2 [ 41.999430][ T859] WARNING: CPU: 1 PID: 859 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 42.013734][ T859] Modules linked in: [ 42.017628][ T859] CPU: 1 PID: 859 Comm: syz.0.163 Not tainted syzkaller #0 [ 42.024846][ T859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.034914][ T859] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 42.041535][ T859] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 ea 21 ba ff 49 8b 34 24 48 c7 c7 40 52 b5 85 44 89 fa e8 47 0b 45 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 42.061205][ T859] RSP: 0018:ffffc90010d071e0 EFLAGS: 00010246 [ 42.067276][ T859] RAX: be9413c88667e700 RBX: ffff88813719b088 RCX: 0000000000080000 [ 42.075267][ T859] RDX: ffffc9000229d000 RSI: 000000000001dc8a RDI: 000000000001dc8b [ 42.083277][ T859] RBP: ffffc90010d072d0 R08: ffffc90010d06dc7 R09: 1ffff920021a0db8 [ 42.091379][ T859] R10: dffffc0000000000 R11: fffff520021a0db9 R12: ffff88813719af68 [ 42.099357][ T859] R13: dffffc0000000000 R14: ffff88813719af28 R15: 0000000000000002 [ 42.107476][ T859] FS: 00007f5bbce806c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.116639][ T859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.121278][ T28] audit: type=1400 audit(1792225073.771:538): avc: denied { bind } for pid=857 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.123296][ T859] CR2: 00002000001b1030 CR3: 00000001331b6000 CR4: 00000000003506a0 [ 42.151371][ T859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.159378][ T859] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.167406][ T859] Call Trace: [ 42.170686][ T859] [ 42.173691][ T859] ? ext4_xattr_block_csum+0x560/0x560 [ 42.179157][ T859] ? kasan_save_alloc_info+0x1f/0x30 [ 42.184479][ T859] ? __kasan_kmalloc+0x95/0xb0 [ 42.189343][ T859] ? __ext4_journal_ensure_credits+0x30/0x470 [ 42.195449][ T859] ? ext4_xattr_inode_dec_ref_all+0x496/0x1050 [ 42.201626][ T859] ? kmalloc_trace+0x40/0xb0 [ 42.206252][ T859] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 42.212279][ T859] ? errseq_check+0x41/0x80 [ 42.216806][ T859] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 42.222454][ T859] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 42.229130][ T859] ? __cfi___sanitizer_cov_trace_pc+0x10/0x10 [ 42.235219][ T859] ext4_xattr_delete_inode+0xada/0xca0 [ 42.240679][ T859] ? ext4_truncate+0xc1b/0x1000 [ 42.245546][ T859] ? __cfi_ext4_xattr_delete_inode+0x10/0x10 [ 42.251550][ T859] ext4_evict_inode+0xe48/0x1450 [ 42.256492][ T859] ? __cfi_ext4_evict_inode+0x10/0x10 [ 42.261902][ T859] ? __cfi_ext4_evict_inode+0x10/0x10 [ 42.267401][ T859] evict+0x4c4/0x8c0 [ 42.271331][ T859] ? __cfi___sanitizer_cov_trace_pc+0x10/0x10 [ 42.277426][ T859] ? proc_nr_inodes+0x2f0/0x2f0 [ 42.282487][ T859] ? _raw_spin_lock+0x94/0xf0 [ 42.287277][ T859] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.292515][ T859] ? __kasan_check_write+0x14/0x20 [ 42.297656][ T859] iput+0x633/0x690 [ 42.301500][ T859] ext4_process_orphan+0x298/0x300 [ 42.306660][ T859] ext4_orphan_cleanup+0xb5d/0x1270 [ 42.311909][ T859] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 42.317576][ T859] ? errseq_check_and_advance+0x66/0x130 [ 42.323244][ T859] ext4_fill_super+0x6a53/0x73e0 [ 42.328464][ T859] ? __cfi_ext4_fill_super+0x10/0x10 [ 42.333882][ T859] ? set_blocksize+0x1cc/0x470 [ 42.339449][ T859] ? sb_set_blocksize+0xaa/0xf0 [ 42.344376][ T859] get_tree_bdev+0x450/0x6a0 [ 42.348980][ T859] ? __cfi_ext4_fill_super+0x10/0x10 [ 42.354314][ T859] ext4_get_tree+0x1c/0x20 [ 42.358749][ T859] vfs_get_tree+0x9a/0x270 [ 42.363219][ T859] do_new_mount+0x251/0xb40 [ 42.367804][ T859] path_mount+0x640/0xfd0 [ 42.372251][ T859] __se_sys_mount+0x320/0x390 [ 42.376941][ T859] ? __x64_sys_mount+0xd0/0xd0 [ 42.381737][ T859] __x64_sys_mount+0xbf/0xd0 [ 42.386336][ T859] x64_sys_call+0x65d/0x9a0 [ 42.390843][ T859] do_syscall_64+0x4c/0xa0 [ 42.395286][ T859] ? clear_bhb_loop+0x30/0x80 [ 42.399975][ T859] ? clear_bhb_loop+0x30/0x80 [ 42.404686][ T859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.410699][ T859] RIP: 0033:0x7f5bbbf9f7ca [ 42.415148][ T859] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.435048][ T859] RSP: 002b:00007f5bbce7fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.443492][ T859] RAX: ffffffffffffffda RBX: 00007f5bbce7fee0 RCX: 00007f5bbbf9f7ca [ 42.451496][ T859] RDX: 00002000000009c0 RSI: 0000200000000040 RDI: 00007f5bbce7fea0 [ 42.459467][ T859] RBP: 00002000000009c0 R08: 00007f5bbce7fee0 R09: 0000000000800718 [ 42.467461][ T859] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000040 [ 42.475470][ T859] R13: 00007f5bbce7fea0 R14: 00000000000004a4 R15: 000000000000002c [ 42.483495][ T859] [ 42.486624][ T859] ---[ end trace 0000000000000000 ]--- [ 42.492623][ T859] EXT4-fs (loop0): 1 orphan inode deleted [ 42.498418][ T859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.501940][ T405] uvcvideo 6-1:0.105: Found Unit with invalid ID 0 [ 42.526701][ T405] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 42.527312][ T867] loop4: detected capacity change from 0 to 128 [ 42.533267][ T405] usb 6-1: No valid video chain found. [ 42.542026][ T858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 42.557527][ T867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.573808][ T867] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.584494][ T870] loop1: detected capacity change from 0 to 2048 [ 42.591411][ T870] ext4: Unknown parameter 'appraise' [ 42.657780][ T289] EXT4-fs (loop0): unmounting filesystem. [ 42.689006][ T293] EXT4-fs (loop4): unmounting filesystem. [ 42.698002][ T877] loop2: detected capacity change from 0 to 2048 [ 42.704958][ T877] ext4: Unknown parameter 'appraise' [ 42.734265][ T881] overlayfs: unrecognized mount option "smackfshat=*" or missing value [ 42.816405][ T28] audit: type=1400 audit(1792225074.401:539): avc: denied { ioctl } for pid=869 comm="syz.1.166" path="socket:[18954]" dev="sockfs" ino=18954 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.846729][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 42.879599][ T884] loop1: detected capacity change from 0 to 40427 [ 42.891306][ T884] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 42.899159][ T884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.908703][ T884] F2FS-fs (loop1): invalid crc value [ 42.910577][ T28] audit: type=1400 audit(1792225074.401:540): avc: denied { nlmsg_tty_audit } for pid=869 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 42.943031][ T884] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.971591][ T884] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.978752][ T884] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.203944][ T894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.231174][ T894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.239992][ T897] FAULT_INJECTION: forcing a failure. [ 43.239992][ T897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.253232][ T897] CPU: 0 PID: 897 Comm: syz.0.171 Tainted: G W syzkaller #0 [ 43.261930][ T897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.272078][ T897] Call Trace: [ 43.275469][ T897] [ 43.278419][ T897] __dump_stack+0x21/0x24 [ 43.282751][ T897] dump_stack_lvl+0x110/0x170 [ 43.287438][ T897] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.292487][ T897] dump_stack+0x15/0x24 [ 43.296639][ T897] should_fail_ex+0x3bf/0x510 [ 43.301310][ T897] should_fail+0xb/0x10 [ 43.305469][ T897] should_fail_usercopy+0x1a/0x20 [ 43.310507][ T897] _copy_to_user+0x1e/0x90 [ 43.314929][ T897] evdev_handle_get_val+0x3f5/0x840 [ 43.320121][ T897] ? __kasan_check_write+0x14/0x20 [ 43.325238][ T897] evdev_ioctl_handler+0x11df/0x1d80 [ 43.330523][ T897] ? evdev_fasync+0x60/0x60 [ 43.335105][ T897] ? has_cap_mac_admin+0x370/0x370 [ 43.340235][ T897] ? vfs_write+0xa51/0xd00 [ 43.344641][ T897] ? selinux_file_ioctl+0x3ad/0x4c0 [ 43.349831][ T897] ? mutex_unlock+0x8f/0x230 [ 43.354405][ T897] ? __cfi_mutex_unlock+0x10/0x10 [ 43.359420][ T897] ? __fget_files+0x2d1/0x330 [ 43.364088][ T897] evdev_ioctl+0x27/0x30 [ 43.368324][ T897] ? __cfi_evdev_ioctl+0x10/0x10 [ 43.373334][ T897] __se_sys_ioctl+0x12f/0x1b0 [ 43.377996][ T897] __x64_sys_ioctl+0x7b/0x90 [ 43.382571][ T897] x64_sys_call+0x58b/0x9a0 [ 43.387061][ T897] do_syscall_64+0x4c/0xa0 [ 43.391462][ T897] ? clear_bhb_loop+0x30/0x80 [ 43.396126][ T897] ? clear_bhb_loop+0x30/0x80 [ 43.400790][ T897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.406669][ T897] RIP: 0033:0x7f5bbbf9e559 [ 43.411086][ T897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.430681][ T897] RSP: 002b:00007f5bbcec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.439086][ T897] RAX: ffffffffffffffda RBX: 00007f5bbc225fa0 RCX: 00007f5bbbf9e559 [ 43.447046][ T897] RDX: 0000000000000000 RSI: 0000000080404518 RDI: 0000000000000003 [ 43.455091][ T897] RBP: 00007f5bbcec2090 R08: 0000000000000000 R09: 0000000000000000 [ 43.463054][ T897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.471200][ T897] R13: 00007f5bbc226038 R14: 00007f5bbc225fa0 R15: 00007ffc332b4f38 [ 43.479174][ T897] [ 43.509324][ T28] audit: type=1400 audit(1792225075.151:541): avc: denied { append } for pid=900 comm="syz.0.173" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.613581][ T906] loop1: detected capacity change from 0 to 512 [ 43.633671][ T28] audit: type=1400 audit(1792225075.281:542): avc: denied { create } for pid=907 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.653892][ T906] EXT4-fs (loop1): Test dummy encryption mode enabled [ 43.663557][ T906] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.174: inode has both inline data and extents flags [ 43.669993][ T28] audit: type=1400 audit(1792225075.311:543): avc: denied { read append } for pid=909 comm="syz.0.177" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.677668][ T906] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.174: couldn't read orphan inode 15 (err -117) [ 43.707400][ T28] audit: type=1400 audit(1792225075.351:544): avc: denied { open } for pid=909 comm="syz.0.177" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.712537][ T906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.772942][ T913] FAULT_INJECTION: forcing a failure. [ 43.772942][ T913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.786190][ T913] CPU: 0 PID: 913 Comm: syz.2.178 Tainted: G W syzkaller #0 [ 43.794895][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.804952][ T913] Call Trace: [ 43.808218][ T913] [ 43.811137][ T913] __dump_stack+0x21/0x24 [ 43.815458][ T913] dump_stack_lvl+0x110/0x170 [ 43.820122][ T913] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.825143][ T913] ? seq_printf+0x1df/0x280 [ 43.829664][ T913] dump_stack+0x15/0x24 [ 43.833822][ T913] should_fail_ex+0x3bf/0x510 [ 43.838498][ T913] should_fail+0xb/0x10 [ 43.842655][ T913] should_fail_usercopy+0x1a/0x20 [ 43.847695][ T913] copyout+0x20/0xa0 [ 43.851602][ T913] _copy_to_iter+0x3ce/0xe60 [ 43.856219][ T913] ? __cfi__copy_to_iter+0x10/0x10 [ 43.861323][ T913] ? single_stop+0x9/0x10 [ 43.865674][ T913] ? traverse+0x5bd/0x5e0 [ 43.869993][ T913] ? __check_object_size+0x45a/0x600 [ 43.875266][ T913] seq_read_iter+0x2cd/0xd80 [ 43.879842][ T913] ? iov_iter_init+0x53/0x1f0 [ 43.884571][ T913] seq_read+0x171/0x210 [ 43.888730][ T913] ? __cfi_seq_read+0x10/0x10 [ 43.893405][ T913] ? debugfs_file_get+0x362/0x450 [ 43.898429][ T913] ? __cfi_debugfs_file_get+0x10/0x10 [ 43.903795][ T913] ? avc_policy_seqno+0x1b/0x70 [ 43.908639][ T913] ? __kasan_check_read+0x11/0x20 [ 43.913654][ T913] full_proxy_read+0x121/0x1d0 [ 43.918598][ T913] do_iter_read+0x493/0xb30 [ 43.923108][ T913] ? vfs_iter_read+0xa0/0xa0 [ 43.927761][ T913] ? import_iovec+0x7c/0xb0 [ 43.932270][ T913] do_preadv+0x233/0x390 [ 43.936509][ T913] ? vfs_writev+0x5f0/0x5f0 [ 43.940998][ T913] ? __kasan_check_write+0x14/0x20 [ 43.946099][ T913] ? fput+0x154/0x1a0 [ 43.950067][ T913] __x64_sys_preadv+0x9e/0xb0 [ 43.954722][ T913] x64_sys_call+0x370/0x9a0 [ 43.959203][ T913] do_syscall_64+0x4c/0xa0 [ 43.963715][ T913] ? clear_bhb_loop+0x30/0x80 [ 43.968391][ T913] ? clear_bhb_loop+0x30/0x80 [ 43.973153][ T913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.979046][ T913] RIP: 0033:0x7f0d1859e559 [ 43.983542][ T913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.003234][ T913] RSP: 002b:00007f0d194c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 44.011649][ T913] RAX: ffffffffffffffda RBX: 00007f0d18825fa0 RCX: 00007f0d1859e559 [ 44.019627][ T913] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 44.027605][ T913] RBP: 00007f0d194c5090 R08: 0000000000000004 R09: 0000000000000000 [ 44.035652][ T913] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 44.043727][ T913] R13: 00007f0d18826038 R14: 00007f0d18825fa0 R15: 00007ffdd387f8b8 [ 44.051694][ T913] [ 44.071304][ T917] loop0: detected capacity change from 0 to 512 [ 44.083070][ T919] ip_tables: iptables: counters copy to user failed while replacing table [ 44.093607][ T919] loop2: detected capacity change from 0 to 256 [ 44.093738][ T917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.109556][ T917] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.271264][ T28] audit: type=1400 audit(1792225075.821:545): avc: denied { getopt } for pid=905 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.367421][ T917] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 44.531478][ T28] audit: type=1400 audit(1792225075.831:546): avc: denied { sqpoll } for pid=905 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.561296][ T917] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 44.580441][ T927] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.182: iget: checksum invalid [ 44.599530][ T927] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.182: Bad quota inode: 4, type: 1 [ 44.617773][ T405] usb 6-1: USB disconnect, device number 3 [ 44.681199][ T927] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 44.698697][ T917] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.698697][ T917] [ 44.710663][ T927] EXT4-fs (loop4): mount failed [ 44.718641][ T931] xt_hashlimit: size too large, truncated to 1048576 [ 44.752382][ T917] EXT4-fs (loop0): Total free blocks count 0 [ 44.758410][ T917] EXT4-fs (loop0): Free/Dirty block details [ 44.814762][ T287] EXT4-fs (loop1): unmounting filesystem. [ 44.814933][ T917] EXT4-fs (loop0): free_blocks=65280 [ 44.826510][ T917] EXT4-fs (loop0): dirty_blocks=33 [ 44.831902][ T917] EXT4-fs (loop0): Block reservation details [ 44.837921][ T917] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 45.002998][ T949] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.016510][ T949] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.187: inode has both inline data and extents flags [ 45.030936][ T949] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.187: couldn't read orphan inode 15 (err -117) [ 45.043005][ T949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.055156][ T949] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 45.072443][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 45.181577][ T405] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 45.402716][ T405] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 72, changing to 4 [ 45.455925][ T405] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1048, setting to 1023 [ 45.566005][ T405] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 45.650524][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.725849][ T405] usb 6-1: Product: syz [ 45.763924][ T405] usb 6-1: Manufacturer: syz [ 45.802364][ T405] usb 6-1: SerialNumber: syz [ 45.976415][ T952] set_capacity_and_notify: 2 callbacks suppressed [ 45.976435][ T952] loop0: detected capacity change from 0 to 40427 [ 45.995708][ T287] EXT4-fs (loop1): unmounting filesystem. [ 46.009166][ T957] loop2: detected capacity change from 0 to 40427 [ 46.017727][ T952] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 46.025779][ T957] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 46.033692][ T952] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.042111][ T957] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 46.054060][ T952] F2FS-fs (loop0): invalid crc value [ 46.059659][ T957] F2FS-fs (loop2): invalid crc value [ 46.093828][ T952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.103763][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 46.107188][ T405] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 46.123051][ T405] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 46.123320][ T971] device lo entered promiscuous mode [ 46.130053][ T957] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.160257][ T405] usb 6-1: USB disconnect, device number 4 [ 46.203103][ T972] FAULT_INJECTION: forcing a failure. [ 46.203103][ T972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.216247][ T972] CPU: 1 PID: 972 Comm: syz.1.191 Tainted: G W syzkaller #0 [ 46.225019][ T972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.235076][ T972] Call Trace: [ 46.238351][ T972] [ 46.241278][ T972] __dump_stack+0x21/0x24 [ 46.245616][ T972] dump_stack_lvl+0x110/0x170 [ 46.250383][ T972] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.255416][ T972] dump_stack+0x15/0x24 [ 46.259577][ T972] should_fail_ex+0x3bf/0x510 [ 46.264253][ T972] should_fail+0xb/0x10 [ 46.268408][ T972] should_fail_usercopy+0x1a/0x20 [ 46.273428][ T972] _copy_from_user+0x1e/0xc0 [ 46.278015][ T972] __sys_bpf+0x2a0/0x850 [ 46.282253][ T972] ? bpf_link_show_fdinfo+0x330/0x330 [ 46.287634][ T972] ? fpregs_restore_userregs+0x128/0x260 [ 46.293270][ T972] __x64_sys_bpf+0x7c/0x90 [ 46.297683][ T972] x64_sys_call+0x488/0x9a0 [ 46.302194][ T972] do_syscall_64+0x4c/0xa0 [ 46.306621][ T972] ? clear_bhb_loop+0x30/0x80 [ 46.311306][ T972] ? clear_bhb_loop+0x30/0x80 [ 46.315986][ T972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.321878][ T972] RIP: 0033:0x7f5cded9e559 [ 46.326290][ T972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.345986][ T972] RSP: 002b:00007f5cdfcc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.354418][ T972] RAX: ffffffffffffffda RBX: 00007f5cdf026180 RCX: 00007f5cded9e559 [ 46.362488][ T972] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 46.370467][ T972] RBP: 00007f5cdfcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 46.378441][ T972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.386420][ T972] R13: 00007f5cdf026218 R14: 00007f5cdf026180 R15: 00007ffdfa6ce0c8 [ 46.394476][ T972] [ 46.411425][ T971] device tunl0 entered promiscuous mode [ 46.511641][ T971] device gre0 entered promiscuous mode [ 46.530962][ T971] device gretap0 entered promiscuous mode [ 46.540920][ T971] device erspan0 entered promiscuous mode [ 46.552831][ T719] udevd[719]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.569923][ T971] device ip_vti0 entered promiscuous mode [ 46.576507][ T957] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 46.584119][ T957] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.595418][ T971] device ip6_vti0 entered promiscuous mode [ 46.622846][ T971] device sit0 entered promiscuous mode [ 46.629438][ T952] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.648449][ T952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.687505][ T971] device ip6tnl0 entered promiscuous mode [ 46.699156][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 46.699170][ T28] audit: type=1400 audit(1792225078.341:556): avc: denied { remove_name } for pid=953 comm="syz.2.190" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.749275][ T28] audit: type=1400 audit(1792225078.341:557): avc: denied { rename } for pid=953 comm="syz.2.190" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.749417][ T971] device ip6gre0 entered promiscuous mode [ 46.793296][ T28] audit: type=1400 audit(1792225078.341:558): avc: denied { rmdir } for pid=953 comm="syz.2.190" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.840467][ T28] audit: type=1400 audit(1792225078.351:559): avc: denied { remove_name } for pid=953 comm="syz.2.190" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.862579][ T971] device syz_tun entered promiscuous mode [ 46.865620][ T28] audit: type=1400 audit(1792225078.351:560): avc: denied { reparent } for pid=953 comm="syz.2.190" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.923470][ T971] device ip6gretap0 entered promiscuous mode [ 46.932594][ T28] audit: type=1400 audit(1792225078.581:561): avc: denied { bind } for pid=977 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.022161][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.029400][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.048157][ T971] device bridge0 entered promiscuous mode [ 47.055266][ T971] device vcan0 entered promiscuous mode [ 47.061538][ T971] device dummy0 entered promiscuous mode [ 47.068253][ T971] device veth0 entered promiscuous mode [ 47.075264][ T971] device veth1 entered promiscuous mode [ 47.082589][ T971] device wg0 entered promiscuous mode [ 47.088963][ T971] device wg1 entered promiscuous mode [ 47.108860][ T971] device wg2 entered promiscuous mode [ 47.115570][ T971] device veth0_to_bridge entered promiscuous mode [ 47.124137][ T971] device veth1_to_bridge entered promiscuous mode [ 47.140945][ T971] device veth0_to_bond entered promiscuous mode [ 47.148209][ T971] device bond_slave_0 entered promiscuous mode [ 47.154967][ T971] device veth1_to_bond entered promiscuous mode [ 48.312549][ T987] sched: RT throttling activated [ 48.320215][ T971] device bond_slave_1 entered promiscuous mode [ 50.318114][ T971] device veth0_to_team entered promiscuous mode [ 50.325512][ T971] device team_slave_0 entered promiscuous mode [ 50.331960][ T971] device veth1_to_team entered promiscuous mode [ 50.352492][ T971] device team_slave_1 entered promiscuous mode [ 50.359477][ T971] device veth0_to_batadv entered promiscuous mode [ 50.367306][ T971] device batadv_slave_0 entered promiscuous mode [ 50.374974][ T971] device veth1_to_batadv entered promiscuous mode [ 50.383437][ T971] device batadv_slave_1 entered promiscuous mode [ 50.391061][ T971] device xfrm0 entered promiscuous mode [ 50.397696][ T971] device veth0_to_hsr entered promiscuous mode [ 50.413292][ T971] device hsr_slave_0 entered promiscuous mode [ 50.420260][ T971] device veth1_to_hsr entered promiscuous mode [ 50.428099][ T971] device hsr_slave_1 entered promiscuous mode [ 50.435190][ T971] device veth1_virt_wifi entered promiscuous mode [ 50.443444][ T971] device veth0_virt_wifi entered promiscuous mode [ 50.451642][ T971] device veth1_vlan entered promiscuous mode [ 50.465024][ T971] device vlan0 entered promiscuous mode [ 50.470961][ T971] device vlan1 entered promiscuous mode [ 50.478051][ T971] device veth0_macvtap entered promiscuous mode [ 50.485998][ T971] device macsec0 entered promiscuous mode [ 50.492853][ T971] device syztnl1 entered promiscuous mode [ 50.678719][ T999] device syzkaller0 entered promiscuous mode [ 50.859245][ T1001] loop1: detected capacity change from 0 to 40427 [ 50.881063][ T1001] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 50.888864][ T1001] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 50.899911][ T1001] F2FS-fs (loop1): invalid crc value [ 50.919917][ T1001] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.951124][ T374] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.952009][ T1001] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 50.965817][ T1001] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.058197][ T28] audit: type=1400 audit(1792225082.701:562): avc: denied { mounton } for pid=1024 comm="syz.1.207" path="/40/file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.141118][ T374] usb 5-1: Using ep0 maxpacket: 8 [ 51.148149][ T374] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 51.158450][ T374] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 51.168545][ T374] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.181476][ T19] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 51.190386][ T374] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.199522][ T374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.207626][ T374] usb 5-1: Product: ࡃ [ 51.211072][ T315] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.211875][ T374] usb 5-1: Manufacturer: ี伨ť䂋긴ꪣ玔愀ôŽ´”쯳졠幌까ê§éš£ç…郟ꢇ⻘쀟Ԡ譌꧕䨷ïªá¹…᳊춱켫⯊瘵㮂꽲薨ҕ꺙첚ﳱëšã‰¸ä¯¹ï¯Šé³¾î‚²ï¢è„œá…§á“ãŒâœ„鱢ë©ê±•ìº¸à¡¢ìŠ¿é¯å·â¼Ÿç™²âŒ­é¿˜í€™è…¯æ†•ê•³å–±â‘’á¶äµ´ïž“骿ǃ㮹海é›Q鶒醉쑺⠳îƒê¿€ã™à­ï¿°é‘‰ê€à¯ºê¶ë°±ä“µïˆ™ã¾³ç¯„徭î•Ø±é¶¬ [ 51.250422][ T374] usb 5-1: SerialNumber: syz [ 51.259819][ T1006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 51.262382][ T1031] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 51.268585][ T1006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 51.314177][ T1033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=1033 comm=syz.1.209 [ 51.363725][ T19] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 51.377569][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.377587][ T1033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1033 comm=syz.1.209 [ 51.385931][ T19] usb 1-1: Product: syz [ 51.402171][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.402434][ T19] usb 1-1: Manufacturer: syz [ 51.416765][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.418148][ T19] usb 1-1: SerialNumber: syz [ 51.427740][ T315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.445318][ T315] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.454584][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.463640][ T315] usb 3-1: config 0 descriptor?? [ 51.589675][ T28] audit: type=1400 audit(1792225083.231:563): avc: denied { compute_member } for pid=1005 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.659859][ T374] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 51.675812][ T374] usb 5-1: USB disconnect, device number 6 [ 51.689280][ T19] usb 1-1: USB disconnect, device number 3 [ 51.703596][ T1009] udevd[1009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.873185][ T315] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 51.883331][ T315] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.945339][ T28] audit: type=1326 audit(1792225083.591:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 51.970031][ T28] audit: type=1326 audit(1792225083.591:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf3b19d3c7 code=0x7ffc0000 [ 51.995002][ T28] audit: type=1326 audit(1792225083.591:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.019753][ T28] audit: type=1326 audit(1792225083.591:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.044544][ T28] audit: type=1326 audit(1792225083.591:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.070066][ T28] audit: type=1326 audit(1792225083.591:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.094731][ T28] audit: type=1326 audit(1792225083.591:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.119421][ T28] audit: type=1326 audit(1792225083.591:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.144173][ T28] audit: type=1326 audit(1792225083.591:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.169640][ T28] audit: type=1326 audit(1792225083.591:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.5.215" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf3b19e559 code=0x7ffc0000 [ 52.198578][ T1058] loop0: detected capacity change from 0 to 1024 [ 52.252237][ T1058] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.216: bad orphan inode 3 [ 52.262653][ T1058] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.276618][ T1065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.285956][ T1065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.297599][ T1065] overlayfs: unrecognized mount option "/" or missing value [ 52.501186][ T315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.512300][ T289] EXT4-fs (loop0): unmounting filesystem. [ 52.527173][ T1072] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 52.552504][ T1074] Illegal XDP return value 4294967274 on prog (id 32) dev N/A, expect packet loss! [ 52.673631][ T1074] loop5: detected capacity change from 0 to 40427 [ 52.680964][ T1074] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 52.683745][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.689052][ T1074] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 52.700636][ T315] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 52.707969][ T1074] F2FS-fs (loop5): invalid crc value [ 52.724897][ T315] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 52.725579][ T1074] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.734859][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.764703][ T315] usb 2-1: Product: syz [ 52.770093][ T315] usb 2-1: Manufacturer: syz [ 52.770384][ T1074] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 52.775676][ T315] usb 2-1: SerialNumber: syz [ 52.782003][ T1074] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 52.871092][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.051233][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 53.055856][ T1063] loop1: detected capacity change from 0 to 8192 [ 53.072686][ T19] usb 1-1: config 7 has an invalid interface number: 159 but max is 0 [ 53.081895][ T19] usb 1-1: config 7 has an invalid interface number: 30 but max is 0 [ 53.090057][ T19] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 53.091475][ T1063] syz.1.218: attempt to access beyond end of device [ 53.091475][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.099442][ T19] usb 1-1: config 7 has no interface number 0 [ 53.112403][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.119651][ T19] usb 1-1: config 7 has no interface number 1 [ 53.140313][ T1063] syz.1.218: attempt to access beyond end of device [ 53.140313][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.144059][ T19] usb 1-1: config 7 interface 159 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 53.164787][ T19] usb 1-1: config 7 interface 159 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 53.175553][ T19] usb 1-1: config 7 interface 159 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 53.186769][ T19] usb 1-1: config 7 interface 159 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 53.203727][ T19] usb 1-1: config 7 interface 159 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 53.211867][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.218842][ T19] usb 1-1: too many endpoints for config 7 interface 30 altsetting 241: 128, using maximum allowed: 30 [ 53.236697][ T19] usb 1-1: config 7 interface 30 altsetting 241 has an invalid endpoint with address 0x0, skipping [ 53.247707][ T19] usb 1-1: config 7 interface 30 altsetting 241 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 53.259043][ T19] usb 1-1: config 7 interface 30 altsetting 241 has 3 endpoint descriptors, different from the interface descriptor's value: 128 [ 53.273310][ T1063] syz.1.218: attempt to access beyond end of device [ 53.273310][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.287301][ T19] usb 1-1: config 7 interface 30 has no altsetting 0 [ 53.296705][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.305372][ T1063] syz.1.218: attempt to access beyond end of device [ 53.305372][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.319685][ T19] usb 1-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice=45.25 [ 53.329525][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.340068][ T19] usb 1-1: Product: ♱횸军á’讹홧䅪穯㣛࿢ឞã¥å¬“áᎃ竤퀽현暯㴇ã➎쩧ë›éŒ¬é•‡ìƒìª£ê§¬î–›ãµ¥ã§–痽눨㊘ृ䩉扂椵₧檇㬰䴗䧩 [ 53.362325][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.371376][ T1063] syz.1.218: attempt to access beyond end of device [ 53.371376][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.385231][ T19] usb 1-1: Manufacturer: 롩葂㥅롡豂⒘Ꮋࠅ⾼ãµâ“»ï¡¡ê»ªæ™«ì–…å“䉗æ¾ç’žêˆ†è•ç„¶ï–³íƒšì‡•ë¦¡â¹—ê‘┣㟱⋛ä¥ê¼“ã€ç¾å²ïµ…ꃶéªæ£ªî‚§âŠ¶æ¯œä’饘乹怅 [ 53.402729][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.411644][ T1063] syz.1.218: attempt to access beyond end of device [ 53.411644][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.418260][ T19] usb 1-1: SerialNumber: 疰©拱烺⽘漣㧅ｃ炣âªÆˆæ—¢é¼€ì€£è©‘瑊죿횀﫶Ⴋ滾㘤縰敺⦎⌓檫ㅭ憋꼀誴ಪ韥鮚㸵䷬⊬ᖭ풂逆î«ê¹’æ§ï–¬î¡™ä¹²á’¨êš‡ìŸ½î¯­çª™æƒè¾½â†‹î´¢î‘¸ã£¾Ý™ã¬¿î¤æ³†à¼„䃵葄나闤아ê“ﻜ줩拘å‡å¤‘暲ﳟ埪ﵼ䭿䜣迓é¶ê¦šëšç˜¤æ © [ 53.452251][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.452340][ T1063] syz.1.218: attempt to access beyond end of device [ 53.452340][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.481417][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.489905][ T1063] syz.1.218: attempt to access beyond end of device [ 53.489905][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.503889][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.504374][ T1078] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 53.512737][ T1063] syz.1.218: attempt to access beyond end of device [ 53.512737][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.534424][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.542814][ T1063] syz.1.218: attempt to access beyond end of device [ 53.542814][ T1063] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.557475][ T1063] Buffer I/O error on dev loop1, logical block 57847, async page read [ 53.741072][ T37] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 53.921074][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 53.927740][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 53.945075][ T37] usb 6-1: config 3 interface 1 has no altsetting 0 [ 53.977245][ T37] usb 6-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 54.010427][ T1111] loop2: detected capacity change from 0 to 512 [ 54.020396][ T1111] EXT4-fs (loop2): Test dummy encryption mode enabled [ 54.044628][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.070490][ T37] usb 6-1: SerialNumber: syz [ 54.144961][ T1078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.200435][ T1111] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #11: block 4559633: comm syz.2.227: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 54.217592][ T1111] EXT4-fs (loop2): 1 orphan inode deleted [ 54.224059][ T1111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.324604][ T1078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.543745][ T374] usb 3-1: USB disconnect, device number 7 [ 54.551072][ T19] usb 1-1: USB disconnect, device number 4 [ 54.555696][ T37] usb 6-1: selecting invalid altsetting 0 [ 54.580896][ T37] rndis_host: probe of 6-1:3.0 failed with error -22 [ 54.600586][ T37] usb 6-1: USB disconnect, device number 5 [ 54.638008][ T1123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.232'. [ 54.697201][ T295] EXT4-fs (loop2): unmounting filesystem. [ 54.806888][ T1134] loop2: detected capacity change from 0 to 4096 [ 54.824159][ T1134] ext4: Unknown parameter 'noacl' [ 55.290895][ T315] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.298750][ T1145] loop5: detected capacity change from 0 to 256 [ 55.306358][ T315] usb 2-1: unit 6 not found! [ 55.325333][ T315] usb 2-1: USB disconnect, device number 5 [ 55.990894][ T1159] loop5: detected capacity change from 0 to 128 [ 56.126596][ T315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.152892][ T1159] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.184102][ T1162] input: syz0 as /devices/virtual/input/input11 [ 56.217250][ T1163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.226820][ T1159] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.298911][ T1168] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 56.308977][ T1150] loop1: detected capacity change from 0 to 1024 [ 56.325742][ T1150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.373079][ T315] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 57413, setting to 1024 [ 56.388652][ T1175] tipc: Started in network mode [ 56.394721][ T1175] tipc: Node identity 4, cluster identity 4711 [ 56.398512][ T315] usb 2-1: config 1 interface 0 has no altsetting 0 [ 56.405387][ T1175] tipc: Node number set to 4 [ 56.430695][ T315] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 56.445955][ T1182] netlink: 68 bytes leftover after parsing attributes in process `syz.5.252'. [ 56.454963][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.471073][ T315] usb 2-1: Product: ⤠[ 56.478612][ T315] usb 2-1: Manufacturer: à°Š [ 56.481354][ T1182] loop5: detected capacity change from 0 to 512 [ 56.492751][ T315] usb 2-1: SerialNumber: á ‰ [ 56.515552][ T1182] EXT4-fs (loop5): filesystem is read-only [ 56.539857][ T1189] loop2: detected capacity change from 0 to 512 [ 56.550363][ T1182] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 56.588949][ T1182] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 56.598063][ T1189] ext4: Unknown parameter 'smackfshat' [ 56.644011][ T1009] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.705934][ T1205] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.781625][ T1209] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 56.931077][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 56.943058][ T315] usb 2-1: USB disconnect, device number 6 [ 57.122227][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 57.133138][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.144063][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.153810][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 57.167677][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 57.176779][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 57.184894][ T24] usb 3-1: Manufacturer: syz [ 57.190225][ T24] usb 3-1: config 0 descriptor?? [ 57.449214][ T28] kauditd_printk_skb: 317 callbacks suppressed [ 57.449229][ T28] audit: type=1400 audit(1792225089.091:891): avc: denied { setopt } for pid=1222 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.450269][ T1223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.267'. [ 57.455932][ T28] audit: type=1400 audit(1792225089.091:892): avc: denied { bind } for pid=1222 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.504029][ T28] audit: type=1400 audit(1792225089.091:893): avc: denied { getopt } for pid=1222 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.525345][ T28] audit: type=1400 audit(1792225089.121:894): avc: denied { ioctl } for pid=1222 comm="syz.4.267" path="socket:[20796]" dev="sockfs" ino=20796 ioctlcmd=0x54db scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.553835][ T1229] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 57.563764][ T1231] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 57.585292][ T287] EXT4-fs (loop1): unmounting filesystem. [ 57.622693][ T1238] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 57.623331][ T1233] kvm: pic: non byte write [ 57.644321][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 57.650315][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 57.662193][ T24] usb 3-1: USB disconnect, device number 8 [ 57.754233][ T1248] set_capacity_and_notify: 1 callbacks suppressed [ 57.754250][ T1248] loop1: detected capacity change from 0 to 4096 [ 57.766219][ T1254] loop5: detected capacity change from 0 to 256 [ 57.773818][ T1248] EXT4-fs: Ignoring removed nobh option [ 57.802753][ T1257] netlink: 'syz.5.282': attribute type 5 has an invalid length. [ 57.810723][ T1248] EXT4-fs: Ignoring removed bh option [ 57.818349][ T1248] EXT4-fs (loop1): Test dummy encryption mode enabled [ 57.827131][ T1248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.895100][ T28] audit: type=1400 audit(1792225089.541:895): avc: denied { read } for pid=1251 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 59.449136][ T28] audit: type=1400 audit(1792225090.851:896): avc: denied { unmount } for pid=1251 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.525333][ T1269] loop5: detected capacity change from 0 to 256 [ 59.532702][ T28] audit: type=1400 audit(1792225091.181:897): avc: denied { mounton } for pid=1277 comm="syz.0.287" path="/file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.641421][ T28] audit: type=1400 audit(1792225091.281:898): avc: denied { getopt } for pid=1283 comm="syz.5.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.686053][ T28] audit: type=1400 audit(1792225091.331:899): avc: denied { load_policy } for pid=1284 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.686321][ T1285] SELinux: policydb magic number 0x6f72702f does not match expected magic number 0xf97cff8c [ 59.716454][ T1285] SELinux: failed to load policy [ 59.728497][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 59.747846][ T1295] cgroup: noprefix used incorrectly [ 59.749387][ T28] audit: type=1400 audit(1792225091.391:900): avc: denied { remount } for pid=1294 comm="syz.5.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.791444][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.823299][ T1300] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 59.840650][ T1300] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 59.867919][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.883574][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.897692][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.913896][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.920994][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.938712][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.958900][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.977294][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.984578][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.008435][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.016967][ T1309] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 60.027629][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.046447][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.061353][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 60.079600][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.092560][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.109352][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.125703][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.162684][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.177505][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.192821][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.208839][ T1312] FAULT_INJECTION: forcing a failure. [ 60.208839][ T1312] name failslab, interval 1, probability 0, space 0, times 0 [ 60.223197][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.239134][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.256901][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.269495][ T1312] CPU: 1 PID: 1312 Comm: syz.2.299 Tainted: G W syzkaller #0 [ 60.278395][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.288574][ T1312] Call Trace: [ 60.291869][ T1312] [ 60.294810][ T1312] __dump_stack+0x21/0x24 [ 60.299254][ T1312] dump_stack_lvl+0x110/0x170 [ 60.303942][ T1312] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.304030][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.308984][ T1312] dump_stack+0x15/0x24 [ 60.309010][ T1312] should_fail_ex+0x3bf/0x510 [ 60.325713][ T1312] __should_failslab+0xac/0xf0 [ 60.330594][ T1312] should_failslab+0x9/0x20 [ 60.331288][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.335187][ T1312] __kmem_cache_alloc_node+0x3d/0x2d0 [ 60.335221][ T1312] ? kvmalloc_node+0x28a/0x460 [ 60.353030][ T1312] ? kvmalloc_node+0x28a/0x460 [ 60.356075][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.357803][ T1312] __kmalloc_node+0xa2/0x1e0 [ 60.357828][ T1312] kvmalloc_node+0x28a/0x460 [ 60.374976][ T1312] ? __cfi_kvmalloc_node+0x10/0x10 [ 60.376359][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.380454][ T1312] simple_xattr_alloc+0x43/0xa0 [ 60.380490][ T1312] shmem_initxattrs+0x8d/0x1e0 [ 60.380514][ T1312] security_inode_init_security+0x295/0x3c0 [ 60.403275][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.404364][ T1312] ? __cfi_shmem_initxattrs+0x10/0x10 [ 60.417795][ T1312] ? __cfi_security_inode_init_security+0x10/0x10 [ 60.422533][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.424231][ T1312] ? __kasan_check_write+0x14/0x20 [ 60.424256][ T1312] ? set_cached_acl+0xdd/0x180 [ 60.441887][ T1312] ? simple_acl_create+0x191/0x1c0 [ 60.442205][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.447009][ T1312] shmem_mknod+0xb8/0x1d0 [ 60.447037][ T1312] ? shmem_mkdir+0x17/0x60 [ 60.463526][ T1312] shmem_mkdir+0x2f/0x60 [ 60.467780][ T1312] vfs_mkdir+0x39c/0x580 [ 60.468905][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.472037][ T1312] do_mkdirat+0x174/0x4d0 [ 60.472062][ T1312] __x64_sys_mkdirat+0x89/0xa0 [ 60.488300][ T1312] x64_sys_call+0x73d/0x9a0 [ 60.490243][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.492807][ T1312] do_syscall_64+0x4c/0xa0 [ 60.492833][ T1312] ? clear_bhb_loop+0x30/0x80 [ 60.492854][ T1312] ? clear_bhb_loop+0x30/0x80 [ 60.511130][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.514027][ T1312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.527838][ T1312] RIP: 0033:0x7f0d1859e559 [ 60.532263][ T1312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.534504][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.551887][ T1312] RSP: 002b:00007f0d194c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 60.551912][ T1312] RAX: ffffffffffffffda RBX: 00007f0d18825fa0 RCX: 00007f0d1859e559 [ 60.551923][ T1312] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 60.551933][ T1312] RBP: 00007f0d18635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 60.551944][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.551955][ T1312] R13: 00007f0d18826038 R14: 00007f0d18825fa0 R15: 00007ffdd387f8b8 [ 60.551971][ T1312] [ 60.578546][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.663389][ T1316] loop2: detected capacity change from 0 to 512 [ 60.670388][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.701675][ T1316] ext4: Unknown parameter 'smackfshat' [ 60.818296][ T287] EXT4-fs (loop1): unmounting filesystem. [ 60.996414][ T1332] capability: warning: `syz.1.305' uses deprecated v2 capabilities in a way that may be insecure [ 61.590208][ T19] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 61.621104][ T315] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.768464][ T1339] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 61.782226][ T19] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.806279][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.819719][ T1341] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 61.827844][ T1341] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.310'. [ 61.838050][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.838630][ T315] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.859690][ T1341] overlayfs: missing 'lowerdir' [ 61.864723][ T315] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.864742][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 61.892711][ T19] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 61.898353][ T315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 61.911170][ T19] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 61.927101][ T19] usb 3-1: Manufacturer: syz [ 61.931209][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.946582][ T19] usb 3-1: config 0 descriptor?? [ 61.953851][ T315] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 61.962722][ T1345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 62.008875][ T1349] loop1: detected capacity change from 0 to 4096 [ 62.034231][ T1349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.051164][ T1349] EXT4-fs (loop1): Test dummy encryption mode enabled [ 62.060324][ T1349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.078772][ T287] EXT4-fs (loop1): unmounting filesystem. [ 62.114408][ T1360] loop1: detected capacity change from 0 to 256 [ 62.128774][ T1360] exfat: Deprecated parameter 'namecase' [ 62.136965][ T1360] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 62.151490][ T1360] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 62.197602][ T1320] loop5: detected capacity change from 0 to 128 [ 62.211317][ T1320] FAT-fs (loop5): Unrecognized mount option "time_offset0xfffffffffffffe8a" or missing value [ 62.246663][ T1364] loop1: detected capacity change from 0 to 512 [ 62.257765][ T1364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.317: missing EA_INODE flag [ 62.277858][ T1364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.317: error while reading EA inode 2 err=-117 [ 62.302774][ T315] usb 6-1: USB disconnect, device number 6 [ 62.317039][ T1364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.317: inode #3584: comm syz.1.317: iget: illegal inode # [ 62.330491][ T1364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.317: error while reading EA inode 3584 err=-117 [ 62.344561][ T1364] EXT4-fs (loop1): 1 orphan inode deleted [ 62.350544][ T1364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.362262][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 62.372842][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 62.374666][ T1364] IPv6: sit1: Disabled Multicast RS [ 62.379136][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 62.392019][ T19] usb 3-1: USB disconnect, device number 9 [ 62.463055][ T287] EXT4-fs (loop1): unmounting filesystem. [ 62.504727][ T1372] loop1: detected capacity change from 0 to 16 [ 62.514214][ T1372] erofs: (device loop1): mounted with root inode @ nid 36. [ 62.561194][ T1372] netlink: 340 bytes leftover after parsing attributes in process `syz.1.320'. [ 62.768535][ T1375] tipc: Failed to remove unknown binding: 66,1,1/0:3066495619/3066495621 [ 62.785268][ T1377] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 62.894948][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 62.894967][ T28] audit: type=1400 audit(1792225094.491:920): avc: denied { bind } for pid=1383 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.946742][ T1391] capability: warning: `syz.4.328' uses 32-bit capabilities (legacy support in use) [ 62.974714][ T1382] loop5: detected capacity change from 0 to 512 [ 63.191085][ T19] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.328923][ T1400] loop5: detected capacity change from 0 to 1024 [ 63.335684][ T1400] EXT4-fs: Ignoring removed oldalloc option [ 63.347022][ T1400] EXT4-fs: Ignoring removed orlov option [ 63.370858][ T1404] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 63.381224][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 63.392809][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.406384][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.420366][ T1409] FAULT_INJECTION: forcing a failure. [ 63.420366][ T1409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.420649][ T1400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 63.442238][ T19] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 63.451985][ T1400] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.452672][ T1409] CPU: 1 PID: 1409 Comm: syz.1.334 Tainted: G W syzkaller #0 [ 63.462408][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.471072][ T1409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.471086][ T1409] Call Trace: [ 63.471091][ T1409] [ 63.471098][ T1409] __dump_stack+0x21/0x24 [ 63.471127][ T1409] dump_stack_lvl+0x110/0x170 [ 63.480230][ T19] usb 3-1: config 0 descriptor?? [ 63.489140][ T1409] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.489171][ T1409] ? kvmalloc_node+0x28a/0x460 [ 63.489187][ T1409] ? __kmalloc_node+0xb2/0x1e0 [ 63.523887][ T1409] dump_stack+0x15/0x24 [ 63.528066][ T1409] should_fail_ex+0x3bf/0x510 [ 63.532763][ T1409] should_fail+0xb/0x10 [ 63.536936][ T1409] should_fail_usercopy+0x1a/0x20 [ 63.542143][ T1409] _copy_from_user+0x1e/0xc0 [ 63.546747][ T1409] ___bpf_copy_key+0xb6/0x110 [ 63.551530][ T1409] map_update_elem+0x2b6/0x6a0 [ 63.556385][ T1409] ? selinux_bpf+0xce/0xf0 [ 63.560988][ T1409] __sys_bpf+0x4af/0x850 [ 63.565277][ T1409] ? bpf_link_show_fdinfo+0x330/0x330 [ 63.570662][ T1409] ? __cfi_ksys_write+0x10/0x10 [ 63.575525][ T1409] ? debug_smp_processor_id+0x17/0x20 [ 63.580913][ T1409] __x64_sys_bpf+0x7c/0x90 [ 63.585340][ T1409] x64_sys_call+0x488/0x9a0 [ 63.589848][ T1409] do_syscall_64+0x4c/0xa0 [ 63.594611][ T1409] ? clear_bhb_loop+0x30/0x80 [ 63.599393][ T1409] ? clear_bhb_loop+0x30/0x80 [ 63.604177][ T1409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.610082][ T1409] RIP: 0033:0x7f5cded9e559 [ 63.614511][ T1409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.634121][ T1409] RSP: 002b:00007f5cdfd04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.642708][ T1409] RAX: ffffffffffffffda RBX: 00007f5cdf025fa0 RCX: 00007f5cded9e559 [ 63.650668][ T1409] RDX: 0000000000000020 RSI: 0000200000001840 RDI: 0000000000000002 [ 63.658623][ T1409] RBP: 00007f5cdfd04090 R08: 0000000000000000 R09: 0000000000000000 [ 63.666653][ T1409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.674632][ T1409] R13: 00007f5cdf026038 R14: 00007f5cdf025fa0 R15: 00007ffdfa6ce0c8 [ 63.682603][ T1409] [ 63.686285][ T748] EXT4-fs (loop5): unmounting filesystem. [ 63.856565][ T1413] overlayfs: failed to clone upperpath [ 63.880560][ T1420] loop1: detected capacity change from 0 to 40427 [ 63.896251][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.915093][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.927876][ T1420] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 63.934730][ T1420] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 63.945659][ T1420] F2FS-fs (loop1): invalid crc value [ 63.954507][ T1420] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.990237][ T1420] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 63.997531][ T1420] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.072383][ T28] audit: type=1400 audit(1792225095.721:921): avc: denied { ioctl } for pid=1419 comm="syz.1.339" path="/65/bus/bus" dev="loop1" ino=10 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.135669][ T28] audit: type=1400 audit(1792225095.781:922): avc: denied { map } for pid=1385 comm="syz.2.326" path="socket:[21427]" dev="sockfs" ino=21427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 64.162039][ T19] hid (null): report_id 50351 is invalid [ 64.175939][ T19] uclogic 0003:5543:0005.0005: report_id 50351 is invalid [ 64.183513][ T1431] bio_check_eod: 43118 callbacks suppressed [ 64.183530][ T1431] syz.1.339: attempt to access beyond end of device [ 64.183530][ T1431] loop1: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 64.203293][ T19] uclogic 0003:5543:0005.0005: item 0 2 1 8 parsing failed [ 64.210755][ T19] uclogic 0003:5543:0005.0005: parse failed [ 64.224987][ T19] uclogic: probe of 0003:5543:0005.0005 failed with error -22 [ 64.350084][ T1433] fuse: Bad value for 'fd' [ 64.374887][ T315] usb 3-1: USB disconnect, device number 10 [ 64.598254][ T1438] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 64.608936][ T1438] FAULT_INJECTION: forcing a failure. [ 64.608936][ T1438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.622264][ T1438] CPU: 1 PID: 1438 Comm: syz.1.342 Tainted: G W syzkaller #0 [ 64.631041][ T1438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.641272][ T1438] Call Trace: [ 64.644569][ T1438] [ 64.647500][ T1438] __dump_stack+0x21/0x24 [ 64.651845][ T1438] dump_stack_lvl+0x110/0x170 [ 64.656552][ T1438] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.661595][ T1438] dump_stack+0x15/0x24 [ 64.665761][ T1438] should_fail_ex+0x3bf/0x510 [ 64.670437][ T1438] should_fail+0xb/0x10 [ 64.674597][ T1438] should_fail_usercopy+0x1a/0x20 [ 64.679628][ T1438] _copy_from_user+0x1e/0xc0 [ 64.684218][ T1438] iovec_from_user+0x1aa/0x2e0 [ 64.688991][ T1438] __import_iovec+0x6d/0x460 [ 64.693580][ T1438] ? __cfi_push_rt_tasks+0x10/0x10 [ 64.698693][ T1438] ? switch_mm_irqs_off+0x2fb/0x960 [ 64.703895][ T1438] import_iovec+0x7c/0xb0 [ 64.708314][ T1438] ___sys_sendmsg+0x252/0x360 [ 64.712990][ T1438] ? release_firmware_map_entry+0x190/0x190 [ 64.718894][ T1438] ? __sys_sendmsg+0x290/0x290 [ 64.723690][ T1438] ? __kasan_check_read+0x11/0x20 [ 64.728706][ T1438] ? preempt_schedule_irq+0xca/0x120 [ 64.733980][ T1438] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 64.740036][ T1438] ? __fdget+0x19c/0x220 [ 64.744265][ T1438] __x64_sys_sendmsg+0x20d/0x2e0 [ 64.749287][ T1438] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 64.754830][ T1438] ? __kasan_check_write+0x14/0x20 [ 64.759926][ T1438] ? fpregs_restore_userregs+0x128/0x260 [ 64.765543][ T1438] ? switch_fpu_return+0xe/0x10 [ 64.770383][ T1438] x64_sys_call+0x171/0x9a0 [ 64.774878][ T1438] do_syscall_64+0x4c/0xa0 [ 64.779278][ T1438] ? clear_bhb_loop+0x30/0x80 [ 64.783936][ T1438] ? clear_bhb_loop+0x30/0x80 [ 64.788598][ T1438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.794563][ T1438] RIP: 0033:0x7f5cded9e559 [ 64.799047][ T1438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.818724][ T1438] RSP: 002b:00007f5cdfcc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.827303][ T1438] RAX: ffffffffffffffda RBX: 00007f5cdf026180 RCX: 00007f5cded9e559 [ 64.835274][ T1438] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 64.843252][ T1438] RBP: 00007f5cdfcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 64.851214][ T1438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.859183][ T1438] R13: 00007f5cdf026218 R14: 00007f5cdf026180 R15: 00007ffdfa6ce0c8 [ 64.867152][ T1438] [ 64.964190][ T28] audit: type=1400 audit(1792225096.611:923): avc: denied { getopt } for pid=1442 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.061528][ T1445] netlink: 'syz.5.343': attribute type 1 has an invalid length. [ 65.308516][ T1454] device syzkaller0 entered promiscuous mode [ 65.328318][ T1455] loop2: detected capacity change from 0 to 512 [ 65.335301][ T28] audit: type=1400 audit(1792225096.981:924): avc: denied { mounton } for pid=1450 comm="syz.2.346" path="/49/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 65.369318][ T1455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 65.377644][ T1455] System zones: 1-12 [ 65.383503][ T1455] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.346: Directory hole found for htree index block 0 [ 65.396247][ T1455] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 65.404709][ T1455] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.346: Directory hole found for htree index block 0 [ 65.417163][ T28] audit: type=1400 audit(1792225097.051:925): avc: denied { mount } for pid=1464 comm="syz.1.349" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 65.431621][ T1469] loop1: detected capacity change from 0 to 512 [ 65.440270][ T1455] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 65.454909][ T1455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.464802][ T1455] EXT4-fs (loop2): unmounting filesystem. [ 65.629056][ T1471] overlayfs: unrecognized mount option "fowner<00000000004294967295" or missing value [ 65.660421][ T28] audit: type=1400 audit(1792225097.271:926): avc: denied { mounton } for pid=1468 comm="syz.1.351" path="/72/file0/file2" dev="loop1" ino=1048678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 66.124742][ T28] audit: type=1400 audit(1792225097.291:927): avc: denied { ioctl } for pid=1468 comm="syz.1.351" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.434288][ T1517] loop1: detected capacity change from 0 to 512 [ 66.444110][ T1517] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.354: inode has both inline data and extents flags [ 66.457654][ T1517] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.354: couldn't read orphan inode 15 (err -117) [ 66.470065][ T1517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.505253][ T28] audit: type=1400 audit(1792225098.141:928): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.532947][ T1520] EXT4-fs (loop1): unmounting filesystem. [ 66.691930][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.699009][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.707210][ T1522] device bridge_slave_0 entered promiscuous mode [ 66.716414][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.723525][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.730954][ T1522] device bridge_slave_1 entered promiscuous mode [ 66.770162][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.777244][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.784539][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.791634][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.810098][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.817929][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.825937][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.836313][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.844705][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.851771][ T880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.860454][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.868963][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.876041][ T880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.887741][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.899476][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.914873][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.927704][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.936127][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.943774][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.952106][ T1522] device veth0_vlan entered promiscuous mode [ 66.962582][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.978506][ T1522] device veth1_macvtap entered promiscuous mode [ 66.984904][ T28] audit: type=1400 audit(1792225098.631:929): avc: denied { getopt } for pid=1526 comm="syz.5.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.005923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.014761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.112022][ T449] device bridge_slave_1 left promiscuous mode [ 67.118195][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.125790][ T449] device bridge_slave_0 left promiscuous mode [ 67.132086][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.139981][ T449] device veth0_vlan left promiscuous mode [ 67.340904][ T1535] loop5: detected capacity change from 0 to 1024 [ 67.351411][ T374] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.360442][ T1535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.369108][ T1535] ext4 filesystem being mounted at /55/ËþÿÿM supports timestamps until 2038-01-19 (0x7fffffff) [ 67.385070][ T748] EXT4-fs (loop5): unmounting filesystem. [ 67.542350][ T374] usb 7-1: config 0 has an invalid interface number: 127 but max is 1 [ 67.550785][ T374] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 137 [ 67.563369][ T374] usb 7-1: config 0 has no interface number 1 [ 67.569472][ T374] usb 7-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.582553][ T374] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 67.597371][ T374] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 67.606498][ T374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.615078][ T374] usb 7-1: Product: syz [ 67.619251][ T374] usb 7-1: Manufacturer: syz [ 67.623880][ T374] usb 7-1: SerialNumber: syz [ 67.629438][ T374] usb 7-1: config 0 descriptor?? [ 67.637805][ T374] usb-storage 7-1:0.127: USB Mass Storage device detected [ 67.645926][ T374] usb-storage 7-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 67.702650][ T374] usb-storage 7-1:0.0: USB Mass Storage device detected [ 67.710498][ T374] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 67.792384][ T1571] loop5: detected capacity change from 0 to 512 [ 67.802046][ T1009] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.837513][ T1531] futex_wake_op: syz.6.359 tries to shift op by -1; fix this program [ 67.846421][ T315] usb 7-1: USB disconnect, device number 2 [ 68.356825][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 68.356840][ T28] audit: type=1400 audit(1792225100.001:968): avc: denied { search } for pid=1578 comm="syz.6.374" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 68.593135][ T1596] netlink: 'syz.6.380': attribute type 1 has an invalid length. [ 68.776755][ T1598] loop5: detected capacity change from 0 to 512 [ 68.814063][ T1600] loop5: detected capacity change from 0 to 256 [ 68.823314][ T28] audit: type=1326 audit(1792225100.471:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1599 comm="syz.5.382" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf3b19e559 code=0x0 [ 68.847533][ T374] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 69.032568][ T374] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.040717][ T374] usb 3-1: not running at top speed; connect to a high speed hub [ 69.049270][ T374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 69.061653][ T374] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 69.070774][ T374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.078818][ T374] usb 3-1: Product: syz [ 69.083038][ T374] usb 3-1: Manufacturer: syz [ 69.087650][ T374] usb 3-1: SerialNumber: syz [ 69.093033][ T1577] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.304942][ T1603] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 69.316690][ T374] usb 3-1: USB disconnect, device number 11 [ 69.886117][ T28] audit: type=1400 audit(1792225101.531:970): avc: denied { read write } for pid=1627 comm="syz.5.393" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.909921][ T28] audit: type=1400 audit(1792225101.531:971): avc: denied { open } for pid=1627 comm="syz.5.393" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.091086][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 70.185136][ T1635] loop6: detected capacity change from 0 to 2048 [ 70.202560][ T1635] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 70.213796][ T28] audit: type=1400 audit(1792225101.861:972): avc: denied { ioctl } for pid=1634 comm="syz.6.395" path="/11/file1/file1" dev="loop6" ino=15 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.239891][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 70.271098][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 70.277454][ T19] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 70.286354][ T19] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 70.296803][ T19] usb 3-1: config 32 has no interface number 0 [ 70.303362][ T19] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 70.313189][ T28] audit: type=1400 audit(1792225101.961:973): avc: denied { lock } for pid=1640 comm="syz.6.397" path="socket:[22020]" dev="sockfs" ino=22020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.337238][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.601093][ T315] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.781063][ T315] usb 7-1: Using ep0 maxpacket: 8 [ 70.787658][ T315] usb 7-1: unable to get BOS descriptor or descriptor too short [ 70.796105][ T315] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.799059][ T1643] input: syz1 as /devices/virtual/input/input12 [ 70.809301][ T315] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 70.828581][ T315] usb 7-1: string descriptor 0 read error: -22 [ 70.834950][ T315] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 70.844106][ T315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.070151][ T1641] overlayfs: bad mount option "redirect_dir=on\" [ 71.163192][ T1653] fuse: Bad value for 'user_id' [ 71.185289][ T1655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.402'. [ 71.203117][ T1653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 71.237181][ T1656] overlayfs: failed to clone lowerpath [ 71.297658][ T19] usb 3-1: string descriptor 0 read error: -71 [ 71.304540][ T19] usb 3-1: Found UVC 0.00 device (0bd3:0569) [ 71.637574][ T19] usb 3-1: No valid video chain found. [ 71.643408][ T1657] overlayfs: failed to clone lowerpath [ 71.658341][ T19] usb 3-1: USB disconnect, device number 12 [ 74.342221][ T315] usb 7-1: USB disconnect, device number 3 [ 74.348489][ T1655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.402'. [ 74.409210][ T28] audit: type=1326 audit(1792225106.051:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.445250][ T1665] xt_hashlimit: size too large, truncated to 1048576 [ 74.461373][ T28] audit: type=1326 audit(1792225106.091:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.496894][ T1669] tipc: Failed to remove unknown binding: 66,1,1/0:1133944435/1133944437 [ 74.500599][ T28] audit: type=1326 audit(1792225106.091:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.584384][ T28] audit: type=1326 audit(1792225106.091:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.653606][ T28] audit: type=1326 audit(1792225106.091:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.688925][ T28] audit: type=1326 audit(1792225106.091:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.719555][ T28] audit: type=1326 audit(1792225106.091:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.752541][ T28] audit: type=1326 audit(1792225106.091:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.796373][ T28] audit: type=1326 audit(1792225106.091:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.821205][ T315] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 74.845484][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.861043][ T1681] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.861553][ T28] audit: type=1326 audit(1792225106.091:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.4.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4ab6d9e559 code=0x7ffc0000 [ 74.871722][ T1681] device bridge_slave_0 entered promiscuous mode [ 74.928742][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.938260][ T1681] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.945819][ T1681] device bridge_slave_1 entered promiscuous mode [ 75.002938][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.010009][ T1681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.017327][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.024377][ T1681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.031797][ T315] usb 6-1: Using ep0 maxpacket: 32 [ 75.038186][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.061225][ T315] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.071786][ T1689] loop2: detected capacity change from 0 to 40427 [ 75.081185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.088536][ T315] usb 6-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 75.089202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.098373][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.107702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.123228][ T1689] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.123272][ T315] usb 6-1: config 0 descriptor?? [ 75.137307][ T1689] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.149401][ T1689] F2FS-fs (loop2): invalid crc value [ 75.156220][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.165492][ T1689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.173240][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.187258][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.203710][ T1681] device veth0_vlan entered promiscuous mode [ 75.209938][ T1689] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.210312][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.217361][ T1689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.226002][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.240184][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.267473][ T1681] device veth1_macvtap entered promiscuous mode [ 75.275509][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.297456][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.314080][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.451409][ T1712] tipc: Failed to remove unknown binding: 66,1,1/0:411635586/411635588 [ 75.473085][ T1714] binder: Bad value for 'rootcontext' [ 75.541688][ T315] hid (null): report_id 0 is invalid [ 75.558185][ T315] wacom 0003:056A:00FA.0006: report_id 0 is invalid [ 75.566748][ T315] wacom 0003:056A:00FA.0006: item 0 0 1 8 parsing failed [ 75.575548][ T315] wacom 0003:056A:00FA.0006: parse failed [ 75.581599][ T315] wacom: probe of 0003:056A:00FA.0006 failed with error -22 [ 75.792795][ T1728] loop6: detected capacity change from 0 to 512 [ 75.849484][ T1724] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 75.890011][ T1724] FAT-fs (loop6): Filesystem has been set read-only [ 75.956275][ T1674] loop5: detected capacity change from 0 to 4096 [ 75.978225][ T1738] loop6: detected capacity change from 0 to 128 [ 76.011599][ T1674] EXT4-fs: Ignoring removed nobh option [ 76.023981][ T1741] loop2: detected capacity change from 0 to 512 [ 76.045937][ T1674] EXT4-fs: Ignoring removed bh option [ 76.052913][ T1743] tipc: Failed to remove unknown binding: 66,1,1/0:2119188425/2119188427 [ 76.077017][ T1741] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.084422][ T1738] syz.6.428: attempt to access beyond end of device [ 76.084422][ T1738] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 76.108481][ T1674] EXT4-fs (loop5): Test dummy encryption mode enabled [ 76.134864][ T1674] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 76.151187][ T315] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 76.165922][ T1674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.409'. [ 76.175287][ T1674] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 76.191593][ T1674] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.198905][ T1674] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.215347][ T1761] loop6: detected capacity change from 0 to 128 [ 76.245469][ T1761] syz.6.435: attempt to access beyond end of device [ 76.245469][ T1761] loop6: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 76.262369][ T1757] syz.6.435: attempt to access beyond end of device [ 76.262369][ T1757] loop6: rw=524288, sector=145, nr_sectors = 79 limit=128 [ 76.283728][ T1761] syz.6.435: attempt to access beyond end of device [ 76.283728][ T1761] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 76.297257][ T1761] syz.6.435: attempt to access beyond end of device [ 76.297257][ T1761] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 76.310734][ T1761] syz.6.435: attempt to access beyond end of device [ 76.310734][ T1761] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 76.324110][ T1761] syz.6.435: attempt to access beyond end of device [ 76.324110][ T1761] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 76.350141][ T1771] overlayfs: failed to clone upperpath [ 76.357238][ T315] usb 8-1: not running at top speed; connect to a high speed hub [ 76.416368][ T315] usb 8-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 76.436946][ T315] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.446084][ T315] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.464078][ T315] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.473573][ T315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.483681][ T315] usb 8-1: Product: ÐŒ [ 76.487906][ T315] usb 8-1: Manufacturer: 霹梔⎗䵯Šⱽ氀Ҥ׶䈷顤륳푕䗒ባ薕絺麴ჽ낇ì¨ê³Œæ¶¿æš§é«–麧 [ 77.005198][ T315] cdc_ncm 8-1:1.0: invalid descriptor buffer length [ 77.068782][ T315] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 77.133102][ T315] cdc_ncm 8-1:1.0: bind() failure [ 77.438288][ T315] usb 8-1: USB disconnect, device number 2 [ 77.459833][ T1795] bridge0: port 3(syz_tun) entered blocking state [ 77.466713][ T1795] bridge0: port 3(syz_tun) entered disabled state [ 77.473908][ T1795] bridge0: port 3(syz_tun) entered blocking state [ 77.480370][ T1795] bridge0: port 3(syz_tun) entered listening state [ 77.484101][ T1797] loop6: detected capacity change from 0 to 256 [ 77.491030][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 77.501031][ C1] bridge0: topology change detected, propagating [ 77.555616][ T1674] EXT4-fs (loop5): unmounting filesystem. [ 77.566284][ T290] usb 6-1: USB disconnect, device number 7 [ 77.590563][ T1803] loop5: detected capacity change from 0 to 512 [ 77.613501][ T1803] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.620702][ T1803] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 77.630804][ T1803] EXT4-fs (loop5): external journal has bad superblock [ 77.857054][ T1823] loop7: detected capacity change from 0 to 16 [ 77.932026][ T1823] erofs: (device loop7): mounted with root inode @ nid 36. [ 77.945623][ T1823] ip_tables: iptables: counters copy to user failed while replacing table [ 81.301697][ T1859] loop7: detected capacity change from 0 to 128 [ 81.313062][ T1859] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 81.322336][ T28] kauditd_printk_skb: 204 callbacks suppressed [ 81.322349][ T28] audit: type=1400 audit(1792225112.971:1188): avc: denied { mounton } for pid=1840 comm="syz.7.462" path="/12/file0" dev="incremental-fs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.366883][ T28] audit: type=1400 audit(1792225112.971:1189): avc: denied { getattr } for pid=1840 comm="syz.7.462" name="/" dev="incremental-fs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.411770][ T1864] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ0xffffffffffffffff [ 81.428890][ T28] audit: type=1400 audit(1792225113.041:1190): avc: denied { mounton } for pid=1863 comm="syz.5.463" path="/81/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 81.474851][ T1881] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 81.547345][ T28] audit: type=1400 audit(1792225113.191:1191): avc: denied { append } for pid=1887 comm="syz.7.474" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.585722][ T1904] loop2: detected capacity change from 0 to 4096 [ 81.619748][ T1904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.664535][ T295] EXT4-fs (loop2): unmounting filesystem. [ 81.672918][ T28] audit: type=1400 audit(1792225113.321:1192): avc: denied { nlmsg_read } for pid=1919 comm="syz.7.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.675141][ T1920] netlink: 168 bytes leftover after parsing attributes in process `syz.7.485'. [ 81.725709][ T28] audit: type=1400 audit(1792225113.371:1193): avc: denied { bind } for pid=1918 comm="syz.6.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.729291][ T1928] loop6: detected capacity change from 0 to 1024 [ 81.774018][ T1934] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 81.782568][ T1928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 81.791143][ T1928] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.805102][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 3) [ 81.820222][ T1928] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 81.832560][ T1928] EXT4-fs (loop6): This should not happen!! Data will be lost [ 81.832560][ T1928] [ 81.842493][ T1937] futex_wake_op: syz.5.487 tries to shift op by 144; fix this program [ 81.851041][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.865502][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.879804][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.894558][ T1918] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.911146][ T1918] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.925866][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.940491][ T1918] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.955323][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.970155][ T1918] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.484: lblock 3 mapped to illegal pblock 3 (length 1) [ 82.016675][ T1941] loop5: detected capacity change from 0 to 256 [ 82.078456][ T1944] netlink: 140 bytes leftover after parsing attributes in process `syz.5.487'. [ 82.131218][ T290] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.322339][ T290] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.340271][ T290] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 82.349801][ T290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.361617][ T290] net1080: probe of 8-1:1.0 failed with error -22 [ 82.516240][ T308] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 82.529375][ T308] EXT4-fs (loop6): This should not happen!! Data will be lost [ 82.529375][ T308] [ 82.541113][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 82.581264][ T290] usb 8-1: USB disconnect, device number 3 [ 82.606449][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.619030][ T1962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.635341][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.644384][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.653354][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.662318][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.671468][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.680463][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 82.704062][ T1973] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 82.711592][ T28] audit: type=1400 audit(1792225114.361:1194): avc: denied { execute } for pid=1974 comm="syz.6.501" name="file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.786042][ T1978] loop5: detected capacity change from 0 to 512 [ 82.813760][ T1978] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 82.822634][ T1978] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.502: corrupted in-inode xattr [ 82.835649][ T1978] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.502: couldn't read orphan inode 15 (err -117) [ 82.847740][ T1978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 82.872017][ T1981] loop2: detected capacity change from 0 to 512 [ 82.886114][ T1978] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 82.894757][ T1981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.910982][ T1984] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.503: bg 0: bad block bitmap checksum [ 82.928023][ T1984] syz.2.503 (1984) used greatest stack depth: 19584 bytes left [ 82.946498][ T748] EXT4-fs (loop5): unmounting filesystem. [ 82.964119][ T1981] EXT4-fs (loop2): unmounting filesystem. [ 82.984916][ T1988] loop2: detected capacity change from 0 to 256 [ 83.019993][ T1988] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 83.038413][ T28] audit: type=1400 audit(1792225114.681:1195): avc: denied { create } for pid=1987 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.100382][ T1990] loop2: detected capacity change from 0 to 8192 [ 83.173652][ T28] audit: type=1400 audit(1792225114.821:1196): avc: denied { accept } for pid=1989 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.328297][ T2010] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 83.341523][ T1995] loop5: detected capacity change from 0 to 40427 [ 83.666036][ T28] audit: type=1400 audit(1792225115.311:1197): avc: denied { execute_no_trans } for pid=1974 comm="syz.6.501" path="/34/file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.759562][ T2028] loop6: detected capacity change from 0 to 512 [ 83.795503][ T2028] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 83.849674][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 83.984344][ T2040] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 84.218801][ T2055] EXT4-fs: Ignoring removed bh option [ 84.241086][ T2055] EXT4-fs: Ignoring removed i_version option [ 84.276564][ T2055] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.529: invalid block [ 84.299030][ T2055] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.529: invalid indirect mapped block 4294967295 (level 1) [ 84.328475][ T2055] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.529: invalid indirect mapped block 4294967295 (level 1) [ 84.357850][ T2055] EXT4-fs (loop2): 2 truncates cleaned up [ 84.369843][ T2055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.428813][ T295] EXT4-fs (loop2): unmounting filesystem. [ 84.529138][ T2065] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.537444][ T2065] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.682460][ T2088] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.732756][ T2093] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 84.742597][ T2093] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.872507][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 84.886212][ T2100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=2100 comm=syz.6.545 [ 84.909069][ T2102] ext4: Unknown parameter 'smackfshat' [ 85.191083][ T405] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.207675][ T2110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 85.218105][ T2110] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.382084][ T405] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.393006][ T405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.403925][ T405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.415139][ T405] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.432902][ T405] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.442861][ T405] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.455384][ T405] usb 7-1: Manufacturer: syz [ 85.461433][ T405] usb 7-1: config 0 descriptor?? [ 85.508793][ T2129] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 85.518151][ T2129] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.731087][ T374] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 85.912208][ T374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 85.921829][ T405] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 85.923380][ T374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 85.930378][ T405] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 85.941063][ T374] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.950392][ T405] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 85.963958][ T374] usb 3-1: New USB device found, idVendor=0725, idProduct=a4a1, bcdDevice= 0.40 [ 85.982289][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.990387][ T374] usb 3-1: SerialNumber: syz [ 86.007456][ T2128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.015945][ T748] EXT4-fs (loop5): unmounting filesystem. [ 86.023641][ T2128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.103765][ T2139] EXT4-fs (loop5): Test dummy encryption mode enabled [ 86.112491][ T2139] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.558: inode has both inline data and extents flags [ 86.125897][ T2139] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.558: couldn't read orphan inode 15 (err -117) [ 86.138957][ T2139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 86.263156][ T2128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.290541][ T2128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.307862][ T1681] EXT4-fs (loop7): unmounting filesystem. [ 86.372973][ T2147] overlayfs: failed to resolve './file0': -2 [ 86.516807][ T374] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 86.527690][ T374] usb 3-1: USB disconnect, device number 13 [ 86.672430][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 86.672456][ T28] audit: type=1400 audit(1792225118.321:1202): avc: denied { connect } for pid=2101 comm="syz.6.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.698168][ T28] audit: type=1400 audit(1792225118.321:1203): avc: denied { write } for pid=2101 comm="syz.6.546" laddr=fe80::fc13:efff:fef3:96a9 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.940135][ T748] EXT4-fs (loop5): unmounting filesystem. [ 86.969064][ T28] audit: type=1400 audit(1792225118.611:1204): avc: denied { mount } for pid=2155 comm="syz.7.564" name="/" dev="configfs" ino=13413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.996627][ T28] audit: type=1400 audit(1792225118.641:1205): avc: denied { search } for pid=2155 comm="syz.7.564" name="/" dev="configfs" ino=13413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.020376][ T28] audit: type=1400 audit(1792225118.641:1206): avc: denied { write } for pid=2155 comm="syz.7.564" name="usb_gadget" dev="configfs" ino=13414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.020405][ T28] audit: type=1400 audit(1792225118.641:1207): avc: denied { add_name } for pid=2155 comm="syz.7.564" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.020424][ T28] audit: type=1400 audit(1792225118.641:1208): avc: denied { create } for pid=2155 comm="syz.7.564" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 87.020442][ T28] audit: type=1400 audit(1792225118.641:1209): avc: denied { read write } for pid=2155 comm="syz.7.564" name="idVendor" dev="configfs" ino=24438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 87.020464][ T28] audit: type=1400 audit(1792225118.641:1210): avc: denied { open } for pid=2155 comm="syz.7.564" path="/28/config/usb_gadget/g1/idVendor" dev="configfs" ino=24438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 87.020484][ T28] audit: type=1400 audit(1792225118.641:1211): avc: denied { create } for pid=2155 comm="syz.7.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 87.114408][ T2172] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 87.187991][ T2177] set_capacity_and_notify: 6 callbacks suppressed [ 87.188011][ T2177] loop5: detected capacity change from 0 to 512 [ 87.204267][ T2177] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 87.212863][ T2177] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.571: corrupted in-inode xattr [ 87.241419][ T2177] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.571: couldn't read orphan inode 15 (err -117) [ 87.254295][ T2177] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 87.290552][ T2183] loop2: detected capacity change from 0 to 16 [ 87.301173][ T2183] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.222339][ T2177] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 88.243628][ T2187] loop6: detected capacity change from 0 to 512 [ 88.408047][ T2187] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 88.417515][ T2187] EXT4-fs error (device loop6): ext4_iget_extra_inode:4765: inode #15: comm syz.6.573: corrupted in-inode xattr [ 88.450089][ T2187] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.573: couldn't read orphan inode 15 (err -117) [ 88.471166][ T2187] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 88.742997][ T748] EXT4-fs (loop5): unmounting filesystem. [ 88.763750][ T2194] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 88.792166][ T2199] __nla_validate_parse: 61 callbacks suppressed [ 88.792184][ T2199] netlink: 48 bytes leftover after parsing attributes in process `syz.5.578'. [ 88.812424][ T2204] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 88.852153][ T2208] overlayfs: failed to clone upperpath [ 89.001434][ T374] usb 7-1: USB disconnect, device number 4 [ 89.090830][ T2224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 89.503879][ T656] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.533020][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 89.679019][ T2228] loop6: detected capacity change from 0 to 512 [ 89.693724][ T2228] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 89.702328][ T2228] EXT4-fs error (device loop6): ext4_iget_extra_inode:4765: inode #15: comm syz.6.587: corrupted in-inode xattr [ 89.714389][ T2228] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.587: couldn't read orphan inode 15 (err -117) [ 89.726447][ T2228] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 89.786385][ T2236] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 89.817901][ T2243] 9pnet_fd: Insufficient options for proto=fd [ 89.823279][ T2242] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 89.891154][ T656] usb 6-1: Using ep0 maxpacket: 16 [ 89.894607][ T2255] random: crng reseeded on system resumption [ 89.909755][ T656] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 89.921646][ T656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.939654][ T656] usb 6-1: Product: syz [ 89.944887][ T656] usb 6-1: Manufacturer: syz [ 89.957175][ T656] usb 6-1: SerialNumber: syz [ 89.963518][ T656] usb 6-1: config 0 descriptor?? [ 89.969766][ T656] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 89.978120][ T656] usb 6-1: Detected FT-X [ 90.019414][ T2270] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 90.171777][ T656] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 90.178807][ T656] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 90.186471][ T656] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 90.194652][ T2279] loop7: detected capacity change from 0 to 16 [ 90.201531][ T2279] erofs: (device loop7): mounted with root inode @ nid 36. [ 90.201682][ T656] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 90.218420][ T2279] ip_tables: iptables: counters copy to user failed while replacing table [ 90.219719][ T656] usb 6-1: USB disconnect, device number 8 [ 90.235380][ T656] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 90.245024][ T656] ftdi_sio 6-1:0.0: device disconnected [ 90.513897][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 90.534993][ T2283] FAULT_INJECTION: forcing a failure. [ 90.534993][ T2283] name failslab, interval 1, probability 0, space 0, times 0 [ 90.547800][ T2283] CPU: 0 PID: 2283 Comm: syz.6.609 Tainted: G W syzkaller #0 [ 90.556575][ T2283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.566620][ T2283] Call Trace: [ 90.569886][ T2283] [ 90.572803][ T2283] __dump_stack+0x21/0x24 [ 90.577120][ T2283] dump_stack_lvl+0x110/0x170 [ 90.581784][ T2283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.586824][ T2283] dump_stack+0x15/0x24 [ 90.590993][ T2283] should_fail_ex+0x3bf/0x510 [ 90.595671][ T2283] __should_failslab+0xac/0xf0 [ 90.600429][ T2283] should_failslab+0x9/0x20 [ 90.604944][ T2283] __kmem_cache_alloc_node+0x3d/0x2d0 [ 90.610312][ T2283] ? kvm_dev_ioctl+0x9dc/0x1200 [ 90.615152][ T2283] ? kasan_save_alloc_info+0x1f/0x30 [ 90.620427][ T2283] ? kvm_dev_ioctl+0x9dc/0x1200 [ 90.625273][ T2283] kmalloc_trace+0x29/0xb0 [ 90.629713][ T2283] kvm_dev_ioctl+0x9dc/0x1200 [ 90.634382][ T2283] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 90.639511][ T2283] ? security_file_ioctl+0x95/0xc0 [ 90.644702][ T2283] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 90.649802][ T2283] __se_sys_ioctl+0x12f/0x1b0 [ 90.654468][ T2283] __x64_sys_ioctl+0x7b/0x90 [ 90.659044][ T2283] x64_sys_call+0x58b/0x9a0 [ 90.663544][ T2283] do_syscall_64+0x4c/0xa0 [ 90.668396][ T2283] ? clear_bhb_loop+0x30/0x80 [ 90.673061][ T2283] ? clear_bhb_loop+0x30/0x80 [ 90.677725][ T2283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.683864][ T2283] RIP: 0033:0x7f69ac99e559 [ 90.688266][ T2283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.707875][ T2283] RSP: 002b:00007f69ad8a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.716291][ T2283] RAX: ffffffffffffffda RBX: 00007f69acc25fa0 RCX: 00007f69ac99e559 [ 90.724258][ T2283] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 90.732221][ T2283] RBP: 00007f69aca35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 90.740193][ T2283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.748168][ T2283] R13: 00007f69acc26038 R14: 00007f69acc25fa0 R15: 00007ffd16e7cb48 [ 90.756131][ T2283] [ 90.996128][ T2315] loop5: detected capacity change from 0 to 2048 [ 91.028254][ T2315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 91.063757][ T748] EXT4-fs (loop5): unmounting filesystem. [ 91.093643][ T2325] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 91.126951][ T2316] FAULT_INJECTION: forcing a failure. [ 91.126951][ T2316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.140338][ T2316] CPU: 0 PID: 2316 Comm: syz.6.613 Tainted: G W syzkaller #0 [ 91.149130][ T2316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.159198][ T2316] Call Trace: [ 91.162493][ T2316] [ 91.165442][ T2316] __dump_stack+0x21/0x24 [ 91.169802][ T2316] dump_stack_lvl+0x110/0x170 [ 91.174508][ T2316] ? __cfi_dump_stack_lvl+0x8/0x8 [ 91.179553][ T2316] dump_stack+0x15/0x24 [ 91.183820][ T2316] should_fail_ex+0x3bf/0x510 [ 91.188517][ T2316] should_fail_alloc_page+0x61/0x90 [ 91.193820][ T2316] prepare_alloc_pages+0x131/0x570 [ 91.198948][ T2316] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 91.204158][ T2316] ? vfs_write+0xa51/0xd00 [ 91.208585][ T2316] __alloc_pages+0x15b/0x610 [ 91.213182][ T2316] ? __cfi___alloc_pages+0x10/0x10 [ 91.218298][ T2316] ? mutex_unlock+0x8f/0x230 [ 91.222896][ T2316] ? __cfi_mutex_unlock+0x10/0x10 [ 91.227934][ T2316] ? __kasan_check_write+0x14/0x20 [ 91.233053][ T2316] ? fput+0x154/0x1a0 [ 91.237038][ T2316] ? ksys_write+0x1fa/0x260 [ 91.241635][ T2316] __get_free_pages+0xe/0x30 [ 91.246238][ T2316] __se_sys_mincore+0xdb/0x5b0 [ 91.251123][ T2316] __x64_sys_mincore+0x7b/0x90 [ 91.255905][ T2316] x64_sys_call+0x32a/0x9a0 [ 91.260416][ T2316] do_syscall_64+0x4c/0xa0 [ 91.264928][ T2316] ? clear_bhb_loop+0x30/0x80 [ 91.269605][ T2316] ? clear_bhb_loop+0x30/0x80 [ 91.274283][ T2316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.280357][ T2316] RIP: 0033:0x7f69ac99e559 [ 91.284775][ T2316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.304476][ T2316] RSP: 002b:00007f69ad807028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 91.312895][ T2316] RAX: ffffffffffffffda RBX: 00007f69acc26090 RCX: 00007f69ac99e559 [ 91.320878][ T2316] RDX: 0000200000000400 RSI: 0000000000800000 RDI: 0000200000000000 [ 91.328858][ T2316] RBP: 00007f69ad807090 R08: 0000000000000000 R09: 0000000000000000 [ 91.336826][ T2316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.344802][ T2316] R13: 00007f69acc26128 R14: 00007f69acc26090 R15: 00007ffd16e7cb48 [ 91.352960][ T2316] [ 91.372025][ T2331] loop5: detected capacity change from 0 to 512 [ 91.395550][ T2331] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 91.410892][ T2331] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.618: corrupted in-inode xattr [ 91.424182][ T2331] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.618: couldn't read orphan inode 15 (err -117) [ 91.436246][ T2331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 91.449237][ T2331] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 91.474235][ T748] EXT4-fs (loop5): unmounting filesystem. [ 91.529193][ T2341] loop5: detected capacity change from 0 to 128 [ 91.563653][ T2336] loop6: detected capacity change from 0 to 512 [ 91.573047][ T2336] EXT4-fs: Ignoring removed nobh option [ 91.595676][ T2341] ip_tables: iptables: counters copy to user failed while replacing table [ 91.615951][ T2336] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 91.633295][ T2336] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.664591][ T2336] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.620: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 91.706022][ T1522] EXT4-fs (loop6): unmounting filesystem. [ 91.827552][ T2355] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 91.935983][ T2356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.626'. [ 92.561912][ T37] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.665131][ T2362] loop2: detected capacity change from 0 to 16 [ 92.675262][ T2362] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.702949][ T2362] syz.2.629: attempt to access beyond end of device [ 92.702949][ T2362] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 92.717174][ T2362] syz.2.629: attempt to access beyond end of device [ 92.717174][ T2362] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 92.731953][ T2362] syz.2.629: attempt to access beyond end of device [ 92.731953][ T2362] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 92.745776][ T2362] syz.2.629: attempt to access beyond end of device [ 92.745776][ T2362] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 92.761481][ T2362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 92.762166][ T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.780606][ T37] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.802043][ T37] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 92.811376][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.819464][ T37] usb 6-1: Product: syz [ 92.825510][ T37] usb 6-1: Manufacturer: syz [ 92.830163][ T37] usb 6-1: SerialNumber: syz [ 92.851119][ C1] bridge0: port 3(syz_tun) entered learning state [ 92.993534][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 92.993622][ T28] audit: type=1400 audit(1792225124.631:1218): avc: denied { setattr } for pid=2364 comm="syz.6.630" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.039405][ T37] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 93.102004][ T2370] loop2: detected capacity change from 0 to 512 [ 93.131673][ T37] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 93.131673][ T37] Please send a copy of this message to and [ 93.273611][ T2370] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 93.333633][ T2370] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz.2.631: corrupted in-inode xattr [ 93.388810][ T2370] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.631: couldn't read orphan inode 15 (err -117) [ 93.485203][ T2370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.618008][ T2370] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 93.619445][ T2383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 93.638982][ T2383] netlink: 'syz.4.633': attribute type 32 has an invalid length. [ 93.647571][ T295] EXT4-fs (loop2): unmounting filesystem. [ 93.655887][ T2385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.634'. [ 93.686664][ T2391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.637'. [ 93.744040][ T2391] FAULT_INJECTION: forcing a failure. [ 93.744040][ T2391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.758710][ T2391] CPU: 0 PID: 2391 Comm: syz.7.637 Tainted: G W syzkaller #0 [ 93.767619][ T2391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.777365][ T2395] loop6: detected capacity change from 0 to 2048 [ 93.777768][ T2391] Call Trace: [ 93.777775][ T2391] [ 93.790308][ T2391] __dump_stack+0x21/0x24 [ 93.794658][ T2391] dump_stack_lvl+0x110/0x170 [ 93.799338][ T2391] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.804355][ T2391] dump_stack+0x15/0x24 [ 93.808595][ T2391] should_fail_ex+0x3bf/0x510 [ 93.813261][ T2391] should_fail+0xb/0x10 [ 93.817402][ T2391] should_fail_usercopy+0x1a/0x20 [ 93.822414][ T2391] _copy_to_user+0x1e/0x90 [ 93.826813][ T2391] simple_read_from_buffer+0xe9/0x160 [ 93.832169][ T2391] proc_fail_nth_read+0x1a6/0x220 [ 93.837184][ T2391] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.842717][ T2391] ? security_file_permission+0x94/0xb0 [ 93.848278][ T2391] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.853810][ T2391] vfs_read+0x286/0x930 [ 93.857969][ T2391] ? __cfi_vfs_read+0x10/0x10 [ 93.862627][ T2391] ? __kasan_check_write+0x14/0x20 [ 93.867814][ T2391] ? mutex_lock+0x93/0x1b0 [ 93.872271][ T2391] ? __cfi_mutex_lock+0x10/0x10 [ 93.877389][ T2391] ? __fdget_pos+0x2cd/0x380 [ 93.881994][ T2391] ? ksys_read+0x70/0x260 [ 93.886315][ T2391] ksys_read+0x14a/0x260 [ 93.890548][ T2391] ? __cfi_ksys_read+0x10/0x10 [ 93.895306][ T2391] ? debug_smp_processor_id+0x17/0x20 [ 93.900668][ T2391] __x64_sys_read+0x7b/0x90 [ 93.905164][ T2391] x64_sys_call+0x2f/0x9a0 [ 93.909565][ T2391] do_syscall_64+0x4c/0xa0 [ 93.913964][ T2391] ? clear_bhb_loop+0x30/0x80 [ 93.918632][ T2391] ? clear_bhb_loop+0x30/0x80 [ 93.923318][ T2391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.929198][ T2391] RIP: 0033:0x7fbc1775ed8e [ 93.933605][ T2391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.953246][ T2391] RSP: 002b:00007fbc18702fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.961734][ T2391] RAX: ffffffffffffffda RBX: 00007fbc187036c0 RCX: 00007fbc1775ed8e [ 93.969776][ T2391] RDX: 000000000000000f RSI: 00007fbc187030a0 RDI: 0000000000000008 [ 93.977731][ T2391] RBP: 00007fbc18703090 R08: 0000000000000000 R09: 0000000000000000 [ 93.985694][ T2391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.993646][ T2391] R13: 00007fbc17a26038 R14: 00007fbc17a25fa0 R15: 00007ffcd06c6b98 [ 94.001608][ T2391] [ 94.056815][ T2397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 94.229520][ T2395] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 94.242853][ T2395] EXT4-fs (loop6): mount failed [ 94.755738][ T315] usb 6-1: USB disconnect, device number 9 [ 94.904751][ T2407] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 94.942280][ T28] audit: type=1400 audit(1792225126.591:1219): avc: denied { relabelto } for pid=2406 comm="syz.5.642" name="117" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 94.977530][ T28] audit: type=1400 audit(1792225126.611:1220): avc: denied { associate } for pid=2406 comm="syz.5.642" name="117" dev="tmpfs" ino=663 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 95.003898][ T28] audit: type=1400 audit(1792225126.621:1221): avc: denied { write } for pid=2406 comm="syz.5.642" name="117" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 95.011166][ T37] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 95.029833][ T28] audit: type=1400 audit(1792225126.621:1222): avc: denied { add_name } for pid=2406 comm="syz.5.642" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 95.060839][ T28] audit: type=1400 audit(1792225126.621:1223): avc: denied { associate } for pid=2406 comm="syz.5.642" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.083288][ T28] audit: type=1400 audit(1792225126.621:1224): avc: denied { remove_name } for pid=748 comm="syz-executor" name="cpuacct.usage_sys" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 95.094005][ T2395] loop6: detected capacity change from 0 to 512 [ 95.116415][ T28] audit: type=1400 audit(1792225126.621:1225): avc: denied { rmdir } for pid=748 comm="syz-executor" name="117" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 95.117103][ T2381] bridge0: port 3(syz_tun) entered disabled state [ 95.150785][ T2381] bridge0: port 3(syz_tun) entered disabled state [ 95.160138][ T2395] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 95.170211][ T2395] EXT4-fs (loop6): filesystem is read-only [ 95.177536][ T2395] EXT4-fs (loop6): filesystem is read-only [ 95.183811][ T2395] EXT4-fs (loop6): orphan cleanup on readonly fs [ 95.190610][ T2395] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.640: invalid indirect mapped block 4294967295 (level 0) [ 95.205877][ T2395] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.640: invalid indirect mapped block 4294967295 (level 1) [ 95.220362][ T2395] EXT4-fs (loop6): 1 orphan inode deleted [ 95.226509][ T2395] EXT4-fs (loop6): 1 truncate cleaned up [ 95.232386][ T2395] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 95.241934][ T28] audit: type=1326 audit(1792225126.891:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.6.640" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac99e559 code=0x7ffc0000 [ 95.268716][ T28] audit: type=1326 audit(1792225126.891:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.6.640" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f69ac99e559 code=0x7ffc0000 [ 95.341155][ T37] usb 8-1: Using ep0 maxpacket: 32 [ 95.352876][ T37] usb 8-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 95.364292][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.373559][ T37] usb 8-1: Product: syz [ 95.373673][ T2437] netlink: 20 bytes leftover after parsing attributes in process `syz.5.649'. [ 95.377806][ T37] usb 8-1: Manufacturer: syz [ 95.388823][ T2437] ip_tables: iptables: counters copy to user failed while replacing table [ 95.391593][ T37] usb 8-1: SerialNumber: syz [ 95.411798][ T374] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 95.420497][ T1522] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 95.447455][ T2428] EXT4-fs (loop6): unmounting filesystem. [ 95.456942][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.464232][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.471990][ T2431] device bridge_slave_0 entered promiscuous mode [ 95.480491][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.487742][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.498786][ T2431] device bridge_slave_1 entered promiscuous mode [ 95.567464][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.574561][ T2431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.581956][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.589008][ T2431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.592452][ T374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 95.611080][ T374] usb 3-1: can't read configurations, error -61 [ 95.618943][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.626969][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.634653][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.652735][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.660989][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.668056][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.675743][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.684285][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.691333][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.712850][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.722226][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.756207][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.763621][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.771158][ T2445] device bridge_slave_0 entered promiscuous mode [ 95.778375][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.785541][ T374] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 95.785702][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.800757][ T2445] device bridge_slave_1 entered promiscuous mode [ 95.823645][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.843764][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.852224][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.859822][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.867946][ T2431] device veth0_vlan entered promiscuous mode [ 95.905331][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.916237][ T2431] device veth1_macvtap entered promiscuous mode [ 95.934647][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.946665][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.972852][ T374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 95.981155][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.989096][ T374] usb 3-1: can't read configurations, error -61 [ 95.991618][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.995833][ T374] usb usb3-port1: attempt power cycle [ 96.004553][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.016045][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.023560][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.032329][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.039392][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.053749][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.066583][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.074666][ T2450] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 96.089722][ T2465] overlayfs: filesystem on './file0' not supported as upperdir [ 96.100579][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.121813][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.130598][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.134081][ T2469] xt_hashlimit: size too large, truncated to 1048576 [ 96.139545][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.154350][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.163593][ T2445] device veth0_vlan entered promiscuous mode [ 96.181427][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.190090][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.200217][ T2445] device veth1_macvtap entered promiscuous mode [ 96.217855][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.226539][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.235501][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.257801][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.282315][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.292426][ T2472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'. [ 96.356278][ T2477] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 96.411079][ T374] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 96.423134][ T412] device bridge_slave_1 left promiscuous mode [ 96.429414][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.437287][ T412] device bridge_slave_0 left promiscuous mode [ 96.444438][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.454238][ T374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 96.460195][ T2483] netlink: 19 bytes leftover after parsing attributes in process `syz.8.660'. [ 96.462419][ T374] usb 3-1: can't read configurations, error -61 [ 96.477990][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.486442][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.495324][ T412] device veth1_macvtap left promiscuous mode [ 96.502757][ T412] device veth0_vlan left promiscuous mode [ 96.611454][ T315] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 96.682887][ T2489] loop8: detected capacity change from 0 to 256 [ 96.855349][ T315] usb 10-1: unable to get BOS descriptor or descriptor too short [ 96.878104][ T315] usb 10-1: New USB device found, idVendor=0499, idProduct=104f, bcdDevice= 0.40 [ 96.918156][ T1037] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.929464][ T315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.937916][ T2488] loop8: detected capacity change from 0 to 16 [ 96.937964][ T1037] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.945324][ T315] usb 10-1: Product: syz [ 96.956380][ T2488] erofs: (device loop8): mounted with root inode @ nid 36. [ 96.958506][ T315] usb 10-1: Manufacturer: syz [ 96.970839][ T315] usb 10-1: SerialNumber: syz [ 96.981503][ T374] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 97.011885][ T1037] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.014284][ T374] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 97.029298][ T374] usb 3-1: can't read configurations, error -61 [ 97.035851][ T374] usb usb3-port1: unable to enumerate USB device [ 97.046021][ T2490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 97.150663][ T2495] loop8: detected capacity change from 0 to 256 [ 97.174838][ T37] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 97.195372][ T37] usb 8-1: USB disconnect, device number 4 [ 97.201305][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.213658][ T1038] udevd[1038]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.214504][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.218277][ T315] usb 10-1: invalid MIDI in EP 0 [ 97.229597][ T315] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 97.304567][ T315] usb 10-1: USB disconnect, device number 2 [ 97.316211][ T1009] udevd[1009]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.319564][ T2514] loop5: detected capacity change from 0 to 256 [ 97.366329][ T2514] input: syz0 as /devices/virtual/input/input13 [ 97.426728][ T2522] 9pnet_fd: p9_fd_create_tcp (2522): problem connecting socket to 127.0.0.1 [ 97.441332][ T2525] loop5: detected capacity change from 0 to 512 [ 97.791211][ T315] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 98.023135][ T315] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.103036][ T315] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.318154][ T315] usb 9-1: config 0 interface 0 has no altsetting 0 [ 98.381536][ T315] usb 9-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 98.391543][ T2524] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.403314][ T2531] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 98.420194][ T2519] loop7: detected capacity change from 0 to 40427 [ 98.421634][ T315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.446595][ T2519] F2FS-fs (loop7): invalid crc value [ 98.469516][ T2519] F2FS-fs (loop7): Found nat_bits in checkpoint [ 98.516124][ T315] usb 9-1: config 0 descriptor?? [ 98.530296][ T2543] loop5: detected capacity change from 0 to 512 [ 98.549678][ T2519] F2FS-fs (loop7): Start checkpoint disabled! [ 98.557691][ T2543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 98.565984][ T2543] System zones: 1-12 [ 98.570486][ T2519] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 98.578368][ T2519] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 98.584459][ T2556] loop9: detected capacity change from 0 to 16 [ 98.592587][ T2543] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.673: missing EA_INODE flag [ 98.607129][ T2543] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.673: error while reading EA inode 12 err=-117 [ 98.623227][ T2543] EXT4-fs (loop5): 1 orphan inode deleted [ 98.629773][ T2543] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 98.639655][ T2556] erofs: (device loop9): mounted with root inode @ nid 36. [ 98.671811][ T2556] syz.9.677: attempt to access beyond end of device [ 98.671811][ T2556] loop9: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 98.704405][ T2556] syz.9.677: attempt to access beyond end of device [ 98.704405][ T2556] loop9: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 98.728129][ T2557] syz.9.677: attempt to access beyond end of device [ 98.728129][ T2557] loop9: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 98.747305][ T2557] syz.9.677: attempt to access beyond end of device [ 98.747305][ T2557] loop9: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 98.768742][ T2556] netlink: 12 bytes leftover after parsing attributes in process `syz.9.677'. [ 98.793640][ T43] kworker/u4:2: attempt to access beyond end of device [ 98.793640][ T43] loop7: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 98.819950][ T43] kworker/u4:2: attempt to access beyond end of device [ 98.819950][ T43] loop7: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 98.849720][ T2560] input: syz0 as /devices/virtual/input/input14 [ 98.854711][ T43] kworker/u4:2: attempt to access beyond end of device [ 98.854711][ T43] loop7: rw=1, sector=57344, nr_sectors = 8192 limit=40427 [ 98.872339][ T43] kworker/u4:2: attempt to access beyond end of device [ 98.872339][ T43] loop7: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 98.886187][ T43] kworker/u4:2: attempt to access beyond end of device [ 98.886187][ T43] loop7: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 98.893488][ T2562] loop9: detected capacity change from 0 to 512 [ 98.900411][ T43] kworker/u4:2: attempt to access beyond end of device [ 98.900411][ T43] loop7: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 98.917795][ T2562] EXT4-fs (loop9): orphan cleanup on readonly fs [ 98.927604][ T2562] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.680: iget: bad i_size value: 38620345925642 [ 98.942166][ T2562] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.680: couldn't read orphan inode 15 (err -117) [ 98.955054][ T2562] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 99.075498][ T2568] overlayfs: failed to resolve './file0': -2 [ 99.130091][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 99.130107][ T28] audit: type=1400 audit(1792225130.771:1283): avc: denied { write } for pid=2569 comm="syz.7.681" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.166829][ T315] sony 0003:054C:09CC.0008: failed to retrieve feature report 0x81 with the DualShock 4 MAC address [ 99.178522][ T315] sony 0003:054C:09CC.0008: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.8-1/input0 [ 99.189845][ T315] sony 0003:054C:09CC.0008: failed to claim input [ 99.345837][ T2579] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 99.417139][ T748] EXT4-fs (loop5): unmounting filesystem. [ 99.441969][ T2588] loop5: detected capacity change from 0 to 512 [ 99.449980][ T2588] ext4: Unknown parameter 'fsmagic' [ 99.481134][ T315] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 99.492462][ T2445] EXT4-fs (loop9): unmounting filesystem. [ 99.506312][ T2585] loop2: detected capacity change from 0 to 128 [ 99.527839][ T2585] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 99.560937][ T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 99.561102][ T28] audit: type=1400 audit(1792225131.201:1284): avc: denied { create } for pid=2584 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.589852][ T28] audit: type=1400 audit(1792225131.201:1285): avc: denied { map } for pid=2584 comm="syz.2.688" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.613341][ T28] audit: type=1400 audit(1792225131.201:1286): avc: denied { execute } for pid=2584 comm="syz.2.688" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.635444][ T2591] loop5: detected capacity change from 0 to 512 [ 99.647508][ T2591] EXT4-fs: Ignoring removed nobh option [ 99.662656][ T2591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 99.671745][ T2591] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.686092][ T2591] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.690: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 99.691170][ T315] usb 8-1: Using ep0 maxpacket: 32 [ 99.716557][ T315] usb 8-1: config 0 has no interfaces? [ 99.722177][ T315] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 99.731552][ T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.732153][ T748] EXT4-fs (loop5): unmounting filesystem. [ 99.743593][ T315] usb 8-1: config 0 descriptor?? [ 99.763066][ T295] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 99.763070][ T2601] overlayfs: failed to resolve './file0': -2 [ 99.763088][ T295] FAT-fs (loop2): Filesystem has been set read-only [ 99.791140][ T374] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 99.907084][ T2607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 99.920792][ T2607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 100.141498][ T386] usb 8-1: USB disconnect, device number 5 [ 100.188436][ T374] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.200327][ T374] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.209537][ T374] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.218585][ T374] usb 10-1: config 0 descriptor?? [ 100.231097][ T315] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 100.352794][ T37] usb 9-1: USB disconnect, device number 2 [ 100.380063][ T2614] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 100.422709][ T315] usb 6-1: unable to get BOS descriptor or descriptor too short [ 100.431964][ T315] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.442222][ T315] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.452929][ T315] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 100.454681][ T2620] netlink: 52 bytes leftover after parsing attributes in process `syz.8.700'. [ 100.462696][ T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.479176][ T315] usb 6-1: Product: syz [ 100.483445][ T315] usb 6-1: Manufacturer: syz [ 100.488113][ T315] usb 6-1: SerialNumber: syz [ 100.498342][ T315] usb 6-1: selecting invalid altsetting 1 [ 100.505244][ T315] usb 6-1: unit 6 not found! [ 100.576085][ T2623] loop8: detected capacity change from 0 to 512 [ 100.587406][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.701: iget: bad extra_isize 90 (inode size 256) [ 100.601135][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.701: error while reading EA inode 11 err=-117 [ 100.613812][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.701: iget: bad extra_isize 90 (inode size 256) [ 100.627801][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.701: error while reading EA inode 11 err=-117 [ 100.653777][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.701: iget: bad extra_isize 90 (inode size 256) [ 100.669529][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.701: error while reading EA inode 18 err=-117 [ 100.675933][ T2634] xt_hashlimit: size too large, truncated to 1048576 [ 100.682470][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.701: iget: bad extra_isize 90 (inode size 256) [ 100.710832][ T2623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.701: error while reading EA inode 18 err=-117 [ 100.731142][ T2623] EXT4-fs (loop8): 1 orphan inode deleted [ 100.736931][ T2623] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 100.836763][ T374] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 100.852823][ T374] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0009/input/input16 [ 100.944252][ T374] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 100.965052][ T2643] overlayfs: failed to resolve './file0': -2 [ 100.995373][ T2646] loop2: detected capacity change from 0 to 512 [ 101.012191][ T2646] ext4: Unknown parameter 'smackfshat' [ 101.021087][ T290] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 101.105523][ T28] audit: type=1400 audit(1792225132.751:1287): avc: denied { read } for pid=2647 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 101.203594][ T290] usb 9-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 101.220651][ T290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.229402][ T290] usb 9-1: Product: syz [ 101.234098][ T290] usb 9-1: Manufacturer: syz [ 101.238791][ T290] usb 9-1: SerialNumber: syz [ 101.242592][ T28] audit: type=1400 audit(1792225132.881:1288): avc: denied { sys_ptrace } for pid=2647 comm="poweroff" capability=19 scontext=system_u:system_r:acpid_t tcontext=system_u:system_r:acpid_t tclass=cap_userns permissive=1 [ 101.301108][ T374] usb 3-1: new high-speed USB device number 18 using dummy_hcd Stopping sshd: stopped /usr/sbi[ 101.365965][ T19] usb 10-1: USB disconnect, device number 3 n/sshd (pid 194) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK Stopping dhcpcd... [ 101.456302][ T28] audit: type=1400 audit(1792225133.101:1289): avc: denied { nlmsg_read } for pid=2622 comm="syz.8.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 stopped /sbin/dhcpcd (pid 141) [ 101.482881][ T2660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.492991][ T374] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.507364][ T2660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.515225][ T28] audit: type=1107 audit(1792225133.101:1290): pid=2622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 101.528756][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.545269][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.556150][ T28] audit: type=1107 audit(1792225133.131:1291): pid=2622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 101.569830][ T374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 Stopping network: [ 101.592298][ T290] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 101.604101][ T290] usb 9-1: USB disconnect, device number 3 [ 101.613042][ T28] audit: type=1400 audit(1792225133.191:1292): avc: denied { read write } for pid=2622 comm="syz.8.701" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.638015][ T374] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.650613][ T2668] loop7: detected capacity change from 0 to 512 [ 101.657483][ T374] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.665879][ T374] usb 3-1: Manufacturer: syz [ 101.674328][ T374] usb 3-1: config 0 descriptor?? [ 101.687670][ T2668] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 101.703055][ T315] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 101.719094][ T2668] EXT4-fs error (device loop7): ext4_iget_extra_inode:4765: inode #15: comm syz.7.705: corrupted in-inode xattr [ 101.724429][ T315] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 101.738155][ T2668] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.705: couldn't read orphan inode 15 (err -117) [ 101.764487][ T2668] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 101.784225][ T1037] udevd[1037]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.786160][ T315] usb 6-1: USB disconnect, device number 10 [ 101.809245][ T2668] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 101.845672][ T1681] EXT4-fs (loop7): unmounting filesystem. OK Stopping iptables: OK [ 101.922759][ T2685] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb Stopping system message bus: [ 102.015790][ T2694] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(3080196.0.0), cmd(11) [ 102.068468][ T2431] EXT4-fs (loop8): unmounting filesystem. [ 102.076374][ T2701] overlayfs: failed to resolve './file0': -2 [ 102.097258][ T374] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 102.109093][ T2703] xt_hashlimit: overflow, rate too high: 0 [ 102.110952][ T374] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 102.138387][ T2703] ext4: Unknown parameter 'pcr' [ 102.162371][ T374] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 done killall: can't kill pid 1007: No such process killall: can't kill pid 1009: No such process killall: can't kill pid 1036: No such process killall: can't kill pid 1037: No su[ 103.321069][ T2714] usb 10-1: new high-speed USB device number 4 using dummy_hcd ch process killall: can't kill pid 1038: No such process killall: can't kill pid 1039: No such process killall: can't kill pid 1040: No such process Stopping klogd: OK Stopping acpid: [ 103.522646][ T2714] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 103.533917][ T2714] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.547013][ T2714] usb 10-1: config 0 interface 0 has no altsetting 0 [ 103.553829][ T2714] usb 10-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 103.555109][ T2749] overlayfs: failed to resolve './file0': -2 [ 103.563294][ T2714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.578221][ T2714] usb 10-1: config 0 descriptor?? [ 103.584948][ T2714] usbhid 10-1:0.0: fixing wrong optional hid class descriptors count [ 103.786647][ T2758] set_capacity_and_notify: 2 callbacks suppressed [ 103.786681][ T2758] loop8: detected capacity change from 0 to 16 [ 103.805314][ T2758] erofs: (device loop8): mounted with root inode @ nid 36. [ 104.688455][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 104.688471][ T28] audit: type=1326 audit(1792225136.331:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.5.730" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3b19e559 code=0x7fc00000 OK Stopping syslogd: stopped /sbin/syslogd (pid 85) OK [ 105.011224][ T290] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 105.188091][ T2714] usbhid 10-1:0.0: can't add hid device: -71 [ 105.195671][ T2714] usbhid: probe of 10-1:0.0 failed with error -71 [ 105.203446][ T2714] usb 10-1: USB disconnect, device number 4 umount: can't remount debugfs read-only [ 105.334687][ T2775] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0xfb [ 105.354998][ T28] audit: type=1400 audit(1792225137.001:1328): avc: denied { map } for pid=2773 comm="syz.8.735" path="socket:[28030]" dev="sockfs" ino=28030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 105.384559][ T290] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.405142][ T290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.425920][ T290] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 105.457276][ T2783] overlayfs: failed to resolve './file0': -2 [ 105.466294][ T290] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.481052][ T28] audit: type=1400 audit(1792225137.041:1329): avc: denied { read } for pid=2778 comm="syz.9.737" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.501251][ T290] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 105.515721][ T28] audit: type=1400 audit(1792225137.041:1330): avc: denied { open } for pid=2778 comm="syz.9.737" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.526946][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.562536][ T2788] tipc: Failed to remove unknown binding: 66,1,1/4:870959464/870959466 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only Connection to 10.128.1.145 closed by remote host. The system is[ 105.610699][ T290] usb 6-1: Product: syz Sent SIGTERM to[ 105.621258][ T290] usb 6-1: Manufacturer: syz all processes [ 105.627648][ T290] usb 6-1: SerialNumber: syz [ 105.633267][ T28] audit: type=1400 audit(1792225137.051:1331): avc: denied { create } for pid=2780 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.741067][ T28] audit: type=1400 audit(1792225137.061:1332): avc: denied { create } for pid=2780 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.794196][ T290] usb 6-1: can't set config #1, error -71 [ 105.808184][ T290] usb 6-1: USB disconnect, device number 11 [ 105.817023][ T28] audit: type=1400 audit(1792225137.061:1333): avc: denied { connect } for pid=2780 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.837435][ T28] audit: type=1400 audit(1792225137.241:1334): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[13687]" dev="pipefs" ino=13687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 105.861260][ T28] audit: type=1326 audit(1792225137.241:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.5.730" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf3b19e559 code=0x7fc00000 [ 106.001351][ T315] usb 3-1: USB disconnect, device number 18 [ 106.411654][ T412] device bridge_slave_1 left promiscuous mode [ 106.417813][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.425321][ T412] device bridge_slave_0 left promiscuous mode [ 106.431452][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.439264][ T412] device veth1_macvtap left promiscuous mode [ 106.445372][ T412] device veth0_vlan left promiscuous mode [ 106.723973][ T412] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 107.202121][ T412] device bridge_slave_1 left promiscuous mode [ 107.208248][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.215607][ T412] device bridge_slave_0 left promiscuous mode [ 107.221727][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.229483][ T412] device bridge_slave_1 left promiscuous mode [ 107.235653][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.243314][ T412] device bridge_slave_0 left promiscuous mode [ 107.249407][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.257578][ T412] device bridge_slave_1 left promiscuous mode [ 107.263711][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.271242][ T412] device bridge_slave_0 left promiscuous mode [ 107.277343][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.285057][ T412] device bridge_slave_1 left promiscuous mode [ 107.291237][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.298557][ T412] device bridge_slave_0 left promiscuous mode [ 107.304727][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.313205][ T412] device veth1_macvtap left promiscuous mode [ 107.319213][ T412] device veth0_vlan left promiscuous mode [ 107.325219][ T412] device veth1_macvtap left promiscuous mode [ 107.331290][ T412] device veth0_vlan left promiscuous mode [ 107.337194][ T412] device veth1_macvtap left promiscuous mode [ 107.343482][ T412] device veth0_vlan left promiscuous mode [ 107.349476][ T412] device veth1_macvtap left promiscuous mode [ 107.355715][ T412] device veth0_vlan left promiscuous mode [ 107.737405][ T2789] kvm: exiting hardware virtualization [ 107.743575][ T2789] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 107.750251][ T2789] ACPI: PM: Preparing to enter system sleep state S5 [ 107.757164][ T2789] reboot: Power down serialport: VM disconnected.