last executing test programs: 2.593485513s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x400454ca, 0x0) 2.562576798s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x0) rt_sigreturn() ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x0, 0x0) 2.48459977s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0xfffffdb6) r1 = gettid() openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x8) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1001010, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x1910000, &(0x7f0000001800)=ANY=[@ANYRES8, @ANYBLOB="1be7dfe0515b20bf89660eade9f29b83d18392871ecbb57dfc724debe6f373e80bd7bec1ad69fa35c0494bbdfd45b1c579e8f5a860db61cdc90821bfec570cc8d9150381f2ff920a932c83db0544acd68b343a3fbb95d7705325ef0675c423f64f0e6de158fa602386eb4d342b5396fc7f893346ac0321b2c66770471cf512f4fec43631c0ddeab3be3fc90f11c6b3c632f7e0152db658110d44c1622e9ade156b47b7e617bb7d4a713f99a5", @ANYRESDEC, @ANYBLOB="4c38687512ed301aaeb3ba42f0f98a41568643db1c314663668400"/40, @ANYRESHEX], 0x0, 0x0, 0xfffffffffffffffe) rt_sigreturn() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x13) close(r5) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) inotify_init1(0x0) 2.365293288s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 2.124573615s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$unix(0x1, 0x0, 0x0) lstat(0x0, 0x0) setuid(0x0) getresgid(0x0, &(0x7f0000000540), 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0) setresuid(0x0, 0x0, 0x0) getgid() lstat(0x0, 0x0) setuid(0x0) r1 = geteuid() r2 = getegid() chown(&(0x7f0000000000)='./file0\x00', r1, r2) 2.115009866s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f0000000840)=""/160, 0xa0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000100)="0e", 0xffffff1c, 0x0, 0x0, 0x0) 2.055142476s ago: executing program 3: r0 = memfd_create(&(0x7f0000000080)='\xc0\x87:*v\xea>\xeb\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d. \x1cR.\xe1\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x80\x00\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9\x01\x00\x00\x00\x00\x00\x00\x00\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86B\xcb\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000440), 0x8) 2.046587427s ago: executing program 3: poll(0x0, 0x0, 0x64) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, r5+60000000}}, 0x0) syz_open_procfs$userns(0x0, 0x0) close(r2) 1.882245112s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xab, 0x0}, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r4 = dup2(r1, r1) ioctl$KDGKBENT(r4, 0x5451, 0x0) 1.770811719s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000740)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x44a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x40, 0x0, 0xda00, 0xea8, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0xb}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r6}, 0x10) unlink(&(0x7f0000000040)='./cgroup\x00') setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340), 0x20, 0x0) mkdir(0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004043552205000000000001090224000200000000090400000103000000092100000001220500090581030000000000"], 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r2, &(0x7f0000000200)={0x20, 0x0, r8, {0x0, 0x4}}, 0x20) syz_usb_control_io$hid(r7, 0x0, 0x0) 1.082750094s ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigreturn() r1 = dup2(r0, r0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x5450, 0x0) 1.065184267s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/156, 0x9c) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000031c0), 0x8, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x5452, 0x0) 1.003258067s ago: executing program 0: close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 935.604017ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$TUNSETDEBUG(r0, 0x5450, 0x0) 920.850359ms ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) syz_fuse_handle_req(r1, &(0x7f00000007c0)="ccd3e8e0b6b96943623dbdcfb7d3691960e79653256ff9b6db0644abaed0732bf272349a8f263b9b1b05a3c730a62605eb61b2e647df19558c1f4be58ebdeb65d93a8b93e4ba4bc91e7967beb461c2f18569753fe040aecdd9771bd77596d06d054510bc58b6305c2a3dd3ff61bf1aa4c48632ab45218d71c6989b69d61b89034f09c38069f6e269ffbb6590a264dabb94f3b7d951a50c37aefc423cf2920ee5d73986bfc8844e7f2ef55d93c5abae0d394951235bc8dd44d14b3c93806f9cf62c202df4953b6b55a195295913e737861d25a7ffbeff56d37f5960f72d4a0aa0d75fdc50535f21a749e8e86da4b006446b8ca3fb0f17ba2e900a598eeb6602879a6b41824dc145064eb8b33bdd6e702e58036f60329f1901ffc0b021e96f4434c4eae508a791391b26d0c8a5c0ea4c92b8f992fc24d7667963daf8ea5df6b9bbe80476487392502db81ce1b97170d368f5e2ee85285450171868e4d944ffbb75d2ce5e038311f240fcc348d23e470f1020da258def10ae4bec78a61d0e7e9fafbdfed88a6cde0ff47455e329652429ddf04273575dabae10febc5b5281996559b5201cac40c40f7ad92e461819265cce7fb94b5569111fe26f1b1020c33174e5864abd0f8d3b88c0acbb95a5fd952400d87537f6b9689ed52d486735c53004ce0e3646902de3a877074e14d74f56e38590da678c7566d0719b931a62019dbb574280c9b211b50299bc902cb7899ef0bcef2d0bb48399fd2259afefed38becc1afcb4887db6d3d34efd6e9c18d8360a1a203b952cfc2727800e29ca1f542fe0516be31c15252adbcd2136d82485be981b77ab5d06d396f33a48b5a00e3e6a729f3bdec2a53f9197b255d5379bacad191c5c692284727dc7ce47406ef7a2b17201835475b5b42aabca518f3fd7c434848a106fe5206986349b13bf3a71e7508902177cd55711a874cd8a657a10b4438beac22a60fdecef91e8f2f405bcaeea9461149075a30c9a6e4a1f431b71dfddd5386bb9f602311aad4e5847256cc08798740a9cf6a1ec9cd19d9192d90a9aa0ec99c1c5109835391b5673498b066a5d3cbabf179a3010c4e6fe66f826df0eafaaf5a094a4257beff9d3e4f923ad2626951cdd1d21a0f0efee9fb7820802d47044e940a4b4467c0da752a75e65c963e2d7e17afc8be98b1ecf7169f7976ed05a744bdd0edf2c2ddf596cd87ac5c48a88463286b82eabc8199d41f3fcf17d7daf98caa3ab3ff5445893977305f6210bf1e2dd064271ca15ac98ee9f0fe62fe1ef442bfb1650998d1ba40fa4497a9dcd7ef06d8f87b858b2bab3ecb8f579abe2bab97ee40601fdab61c08d356f3fbf0f6fb85eb9212ee30edf2f8dac3ac64303befbb43b391d64b3bae55ac2c6612af07e8c9237444463e1400f21a43b718a90ea6489b67df3534d9badcf59ece45aa3fffaa1badd71505c45b4f485ba62a42dc62cbb730a6c044230a7561a7618e910839531405da3316103afa58f7a9e21424b276e921514db098ec51be81eb8ce33d93e52208634e12a2584afa1bc35b420476867bce18801505b8f6a04835a990b8cb1b6cca7c1f1e12f7916fc05314f627b45365f916db144c63bf6f0e2e92a3c49c9957e2c28f5c917a790050f1ecf57150b02199c6e6ef23c2da718692f3b5ec141af0f182c76c469e9c5457c6eff5c65996719ec8e8cefa5f5fca25904b815545af55ca7ab408f431415626c0aeb6d288b15c7dca5a061d6ad76ce1b3169f576c07f08b1efd28f5f8436ea029d255f74099d021d64aee916dc22e1dead58db19ec7c058cd505fcc1683835d4fd999d2feabdcc1adb5e3fee2ea6e88a76118fc128404ce9ae799eb17ac69935e8f8c6e5bb01eb3660d44c0e5207edb4e65fa9dbc0310a88b70177da2b56aec129526e1f72ff18301f6a1b467bf8f82cc3a0125c01277e571299c6365af5622a636848b681524a70cd3de0db025e0f20b25876f898225481325da13266f378f9e5be9a813309393272a402706a4fef6ad882b22ef785fea586fa8cc1ae969eafd70095d30d1ebeef4459561ed5c13f0b40f987a298201f479857a58ce7e8f893d78167ae1efda09b9df09922db881b598d15dd4f06925739a7bb4cf9c54c86b54a135939a1bb95594a7ded336e2880649f6aa34fe29824ba7617689d0295185a8a8f139498d18206898067bc4e9da774930c08568da4dffafee93e6f7bdae1afce7ad08a75647a6a4d6233840b3c8dfa5fd8775278f3452f9a42155b2ff6435f3f76490e6577affedc049c25aa8543931bcc5169c12ddc8a817bafcf3a00b35bd1f0673e187532eb5c54c96e8d746c7b1473ecdee8c1afeea12e40908092d8ad42f4a49d672a38695d3beb664e4e1230c71897d8d453906e149dc9871f0b0b251ff8c91a96b36787a7d6561c2bb21af848e38c478ad9c680e02688d034d2c6705aa374cdd9f8b28df9dc1ee182d8cbe2bd13ca31439d2ac991660840b3e1973928e52be8511f2fc6a799f87aa0ddb6b5f0a9d59ae9b0d3c1d00ee7d6f8b4a5ee64fbd03db6fb85b34666bd5d99a4ee1c12a0e46d8af4792e4718c47bd2b10ab2600035946b5580859a5fc0ebe64af51318c3f090097e15693cddc2b8baf63f2a20be4d81ef7b11aade8458f27e10d5f1b81a90358a6a038403d8c6045ddf59402cb9fc3c268d47b8e8c169de76238b2a6d61b18f7e645ee164fa06443526aa5474da59a7dfd4f810c3ed3c93976e47be0cebd064cf71b3ef6ad51617bdfd0f3b8336380ad7ec84afd82fe345801838cec53155cb42140b79206e0db0128edd7d61919a0d9ad44a93bdc1018b2e44f279c9d19c0cef2d7ae5ea9a0f84d4fbd1b0a05894fe3b7dd09c6e93d6728fa24c70bcdb13226e50c5b5c1345ba6103e8c8db5867de2b8a8a0181a262cbd9837c0e6e7ec9e695dd6421d0aecf2a5469238c59d7a4e026b2a90161ee03ba003ed0a98c83d4f3b26c38f2740e75985386c00402671fd924c9ed860e72a1030e13b5bde95c40d2f1a143587c146225a87966b5f80cbaf28060d718d056a9515a20454ed4d350f8ae0068746a22630e5b858d259a43deb26f4f8ceac44987e1181c221092dec2dd29b25039352d9496c89dbce863555f935dc7e708ff407fac09c00902b08d49ffa37b477052b88ff1e4633730abf2c6f6d40750067ceeadc9a257f0af1f14d7082cf4ac3ecc1fe51821d07f1346d6d6f03362896d821d6015ed3e62c99c937306952ccece53a381bf67e9bc76b6885f6a9d6d5d76c8b175187582b37d57141ce07bc7e29803ea2f6618f5fa81b8a5cb9776210633bfa28cd757d1174f6d868ac92a095f3217c2621ee819b27337df325a15b558a37c13861fa63ee21f0eafc0ce7432060a86fcf0108e58729c0da6501c32ba0c77cee7fa4bbff76b37e006439391c803bb8a6cae667c6acb6b4ed82c97be0608b22a662121630ae6beb1d94cdf5a50a620a8906513908c0ec42c87b6d1d4daccfe117abcbc87d5ecc86a1c58b83a0df027368ba0c57a0f641bde40410c6877f6c5fc695667642d25de16b70bceed19f566562d42e11c1cfd37fcc4bf54f57c75a86dafd91e9f065c6fe1f3ed23e75ea1701ad37eebe5be221afcf02410755d67cc5141e7d9b0eb76a8c9dbe5138bee14ff8db99c8641636a898670b4f68db0612e7423f2e25a581d872ec2668a9a5dcf54dd509ada1714fc1144e6d66e710713262b55399b190cd0be30e911593f1200b4b6c1cdf7239f07cd77767dfc48fe3387ace9c8c9940a56d11ac79cf5f9a6dbdd269e124ea4e383b51f94f67a464ad965a99e16aea54d1447ef13dbdef3f6f88cb0900e84b8230ef925d1a261a947d6a4a359a373274639f8106d6ab8831833491283906535ee8be4d5250ed9290116d08defdd0ae5cf4e38ef2f38ef1cc0fc50e86f77b1fce142b011e5797b0e7a04b9afee1e6b0d3e3d9016bf91d90745a5aad5f236a1bc5beecfc541873aebde5790c08a8f88abfec0e29846ffc78bcccdba74d143cc4ce82c129b90d2b91adbf491ee2b833ede320279ae5d78e1eb29ef3d3e593c14c2c97b546df5b2a9fd13bb51624d66880889de98b4c7fd6b8b4fc566c9ad049184d58397469043beb69c98d9663bda3389d70c5ed19466e9b43b963771dc5fd1bf9e9c0f86d66f13170fda8b8fb3656a1fcc22e14b9a5e1083a58cf1281bacfeb857b04c17217de1845c9a649046bfa4b3aa421da8e69016a3af425da1936a31cb99e2379e7089ad628f9002210cdf506c91267bfb28b890a12ccca13d2c464975a13a8d010bb6f6f5157316c71980eabce39004996ec4c3cba49abd5a04f1bef70c025a17dd9176b3d443c72582bebe77a91458dc1df9c148ec058e2c71400988101a9f22d953684f8292ca23db48b7e962c632c9975fbfd300325abf311c9f5bdb6a0f4e5da27e5e60d25cdd1777db2b1f395d585b2999f89e93d624e1295c363a94db98d8d862c8f30c16a8b186b58cfb7e5d632ba3dfaccb8c1682f2c21b96e45082df868ae4aa256a0a6b74ceaa39dd25cad1ed60f960e654b7ec2a8d8c8f1bed77d82208df1796dba84661b6c60b9905f135387abd03850151365e3dd333bb67b98416d2e914d736ff476a5d0e4c227b0d0f2b7683444e6cc690334b7443e0563600e1a30edb7a82763f43caeb9689f929a0eceabaeded9233b6c5ae491dbbdcb5d63bd06e1b92594e06fd78290520f422c77296249ee72d565ac5f7e4acf38df97deaf722d25fbc836df97c35c8c648f9be6bc860394bd37b29ab8d35993c22e81833126e29d7c9e238dd9c19dd896b80ced026b9c4040ba84f13b9242719defeaedf960578403f6450b469d54b071d3d1288a0643f96bd70f7fc7dc3ada91e09ee45d4ceab916d7a421631904da96dfee05878761e9952985397998163a52193c084975e1d2c37c6f542a286065da4923fc59d841eecfda5454b033b9b9f204c8178e721599c6e779d0091c7aa401a494deb008724ab1ea8cb973c1c9ce821f1e36e3e9d831ec9ec79f5ad6b4076c191c05ef226a4686bba81ec42833356c6104b2ede6f078852327a667a51e35fc975ac6652740d5dfffad1612f43c2e76892a3511ff8a42ee94e532a165485d36f7922268ba84f9ef0e9afb442e1e703535a057552bd85ac52aa94ba863a193940bc46dd06de12c48513f72a8c9325efd3835e5056da8e07cb313afdc220cd4b62bb1ca8a0dee17dde5bd5a0bdf1e55596401675f0efe6c260d14c30a4673663dbd7a14df5b7ceedec2cab5ea58d7bb7a8ac5c92c6c6d6f0f63fbfcb72b4a0ad0289eeea2e8ffca0f26cb82e9ee8c0ab393d6b183856771af3a656cc00803709ec9378355883fce5b2f17a5f2c38ac0ad2e9cfd8dfbabc8ea57a1d8a3165e9c2a2f3ef4467af73e7c6a606f7822c772deea9c3c92e19cd7000b22c38a25e1c4947fb48b5ebd1f418d98890b849ae1d4b095d9c7f5f775b345d37553e6f6b663df477ce29d4544700e589819eae6a34dc09606ac5256712d215302d7aafd97bd02cf436e02030ab27e0196032f393e5f5ff16f8273b22706c028c016f4381c42a02aaf5e474e5c1ab6e25f732e27f245b34d09603cb732e9df14c5551d686c83e5f54abeed62a2bca4d9a8cd9764da3695bf41ab3ac2f8f88d014fa47788306d738678c734c8acae2a9454378ef99ce8f9ba16974ef96d03c1553112203e9efdde85bc60b8c67fd248bfba2c49fbe294513dad94cf3f4255a5ff507bbff69d21a09b332384efe541f270911a71ba51b1b56638886a274cbbbbecbf8a98d988a2bb02e6f515d3cf6cb15460d2f744dfd4c95d9742fd7357e52906699227fe3fe27845738ad06741269dd18de914b0c43983fd7d5fcb7677300fd5f8f3f09eed1067dd9cf5cfbd9cf8e9c971c7ffdd32031e06823055f37b90d5a6a8fda84d6e3af7b9b8d4a9b48806066e3fd30b316792cccb5fc15ed2904baf9c1401d87684293d4570711ac1b122f77a1009843bd8a1b8864d9feac5bc68e64d24503039f76e42592d12191bef414acc74f86daae62ea5a96c7d35dda929613e43315a9bce5313aa84a0a43c104be87eaf3df13e94f862dfec1b6fb733a6e05d82c473bd612051cc528def4c2e20176fb53bd396b218ab65646090f25ef4a4ed6d4846bbc421d95354da7069f25be2866fa97824e33c3692b4697b7d447fa616c120dafab47d9d00e0eccb3d41b21540ab5b55b2beec11154201857b2f2c7d3faa3100724cef68c2f1c3d9c3b4f49b6f457016b710cbfa031a2ed76c959c040b8dfcede0a2c783d292e0ee743509285eb22c988a221fcfd080adcb1e67cdda7cc126cac19446da48adfd07a2439fa348b5ffe77cc345c043f2c3c78cefd275fa51ba071bf9da71fcf450a3f4773b697d5154896f985660b1dba1c44022b06a0be3693189ed87595508b4cb91f7600bc1b172584ce081a11c0ac157d726f060aed4cda55dc27aeeac9dd97d1174d77f882a1a294df3f7df93788c4fe844bb2266142dc30404269f242c98293ca08888f824fc42e3a3bddbefeba2d4de6cb3b014988fe71722c2c1f3f36c30fa508d3e61430a1cbc8e06bb4b95b02c0d92e7b265bb6a52f2d35f874539c7f16abc219d0f591beb51230255a14a5cea267e6fe05afadd499e5acccee1f83001a7d847f164dd8540ccb56b241a159053455a5e0f92f0da2ad86c9b65435a51140d45059e6865d6d68ffa184357a878737ed352759b3ba69dd48c2a225c39c1816385d89ce7c251983a1e17e1f32d4a441e854de1117bfaa2f8a98f10188685554c47281ea9deee9a981cb953b91767875cdca7fc20c289e8dd751dc7118e258209fa1d6b70b758097dff7b003b4c879f3a7a5a25a3d95b5320bc35500ca691a83f298f87975f81d7aa33aad00ba26175d26502c6cc297f971036b668608f90dfe42a5531605189ce7c0f84a1ad0f622463a130ebc125b7c77edde0d20dd885fc5a2ea95667a18f01040b7fc4eca5c9b94f5e610e0a57a0d7b073fc55a97bbbc5dd8161f54f0473012dda915e824b73ad46277f5eb285b87ff54a536c0507e0cd95f8709fbbed468ce9c47db1a845dfcc443ac34449996648237e63da351b813c28726ec2bb0c515eaea0872d3d8a102d160089e42ae3af313a01a2ea74d31bbf7927aeab933e1484c518796090c652a4bc1921a4e0cfa8b02fdff60100b61e0acafc7fefb21faa05ac223561b9d556b172dc6f18bc2abe7302587077f58bef7c1776e3d876f862caec771ce62cad6ad2caef939a6a01900bc4328cffd8c06ef26d3371c4783e82cb7792d8d37221e76705d58a03052df6e790f6fd303f868d74983b20b915db4f05bb75bd744b9a286d411651106a946494052baaa4f085ce065ad8e75933069a837a6d4eeb414c4f99329032758edfeb8b23ef9c8451ee7b6efdd365e0a2bda1750efb059e01b533ee5f7cabd65a26403960484cc2eb6f374a8965d7d29e6484b86c25d304259106a8bb9753c9bd9856f0b87a6e68266d8cb8065ef1eec2af237be7a626bcff0427611ad837409c6d69ecf0607dbdbae2db60eac2b88a0ab6a637ab48224ea979299ddd1c721b2b58bd7e92d645929a7b56b9374a7857da0dc2f9921a3a63a53fcf0d016457f553709a5b747b87356db203b719f30e3d78599c28277d8546174047cbcf152f918601275f41955ae96198a4f0612340fabb5e3774e60bf6397cc726c8eef360c492712f6fc1f0c5c91adc426897d09de86fec6c0fc7affbb64652fba16c5d9fb383b29eaaba31d5af7bd12c34c488c292c618ad689aa7914994b313df0f2ebe270659851f52efce137786b28e1c09d21277ea284544e00d3868b42887a9ea74e22a3e3b342b687b7d80e057e3291c8da3cd309a83cb4ad8f0b3991ad2df85bca3737a2f18c53a122bc3e0d1bc5a8a77f32ee2fa53b06e1225039aae1f9aad06012371ffcab50e23586a2bb552104cdf2d277db66b1f1904821caba96dbac02fa23a8a3ffdfa3404ae37c1fe4935b010eb3468f45f74eedc18fbbf57bfd03b97ee0d2109cb071e7f86fc354a12c74e04e1b13107d38277f714bfb74a16cdd13cfd257ad139cd5783ecc46b43203ed2cbd6bcf53b1be7ddd7f27785af0d572b6a08ea00f7304254afd376b44568d4dd2117f2057e163d920448d16238320a4e8cc8c0bdff3d5e98d8d0d02127ab1a30e7d403555e40940f6319aea0f4f3a46d1a3da7db7e2d70ee84febe36bb835f9044a8e9c4c2b6a27a54bccad07a8a745c911b82b9bbbd7367cf29df2f0818a545655f6115ef3d14cbd914e1f7ce31380560d21a6e1b5a9cfd31fd953ae438857280a566a8296bf0891348ea70d370e963169cc57d6e6fe58d822aefa863afcbabaef1525e0627a320f104b25e2219216df0ad589d54e4c0f2ac96fad71f418289c5a2a5b459b4142a6d280026d2282e3a6930396eb099aac709918f157181614529170be773645307bb282b947945a395c71f465650af976e1244a57b3cc8006668e36186281faec79ac614be7f147e036fa8191965c0ab977c66e175539a564b494726f732e64955d15597f6e9159e7af4794532c520315ad97ef6f1088bc342568a2a13eb45dd6ba4cb51b9d827e0ff43c75b876e7ce77829cf8ef6043e1236ef58342f21566505b163ddf20e1746646c6cb8e634422ce2df519a9385eb3b0b18d7bc42b35f3ba93699b2bec18d23f954aae4a2dd55d46c0694284254fd8d7706e3cd5f013ab9bd7e35c30a7b4235884f226c8177cb61b64cb5e4841b7da398611e9053f00553d217af30a9f7baef888be813a57e0fc33783d753b678e3750e6791aef0dacfb3ae49263c39832c4191e864a14be46d9858b6f2e92adeaff5b381fc873bb6c59e73870e04fc3b0d03985576046b52303d2d4e96fc5ed0476383e521d921ece737a2ab3b1e2b8c206c93486ec1f831ff3ecc4196c1db3427e76a51b06f814dacfd094d5103a5fe60b62d4b418a21442d9a8d3f1b7f9622ac05011735ccd99dab0eecc1fb31c7290f8d9ffeaf16336d80ee3ed68185049e29472e386fc11727c95190fc8df18e862a585549bfb33a70234ebfa7f4cf6d41211e67a13d6ea6597fd02829d164a2ccc8591f93899c891d75a188e75e65cc2220879be7b0375cbf8c973aca2eacb3b65382046a7b8dabae8d0284d0adea15e27c2c6f2ef2913d106f98d77f6d47262762468baa2d0e1c5fbf5d35d839cfa0e94fd7f0833ac2a772888e8a5c68510c43ff1ce661d999dc1f76b74a0a81e5233ebd97c93afa2a5d1f665baa554fbdcf87ff81cdb31f9089bb96ae41343a5190acee6596aa5456345c8507f9f56d2b3a21d7bdaf899807c030e51a104df2cc406dfec61f10adc7b341f2f5345453daffaba0b074a9314f329a49438a53a27185627f5ad6e624a7481ab6d6c0936d776e1a3ca43ca87da1863758242b0ef27ffa1a4a6dafe073d39f804e8ef38bf8aea7942221612ffcc5dd2340f8faf8b7c769e1dffe4977c7b8bedf837a52ecc45173e36885f407a0976b9eec6e778b65c1329ef15f9adc27be400be936381d826baca30575811912946e93e5db9f6ba7af9c24b4d94d6e778d1056187ddc6b9c434ae21ed72712efbc3a73d43edb3f40ed6d89e7987e05f12d7b000000cff93a2bdcde2d4622b24e9fa96de39dde82a90635b2fc0de95e610f6a586f45f8677174d4bcee804efa4ca03aa2f5ddbdecdf9809ea178b3eac11d3bd85ce58a21e52ef074e71961b95151819e37f2044cb50b2aa460e23959582533b19d1eceec672cefda5cf12a245a71dd947588318565449ac9602a6f5ec17feef323561717c12977d5bd178b8f06a9517cc1adbce0e0a8fd05499233897fcd66289312db9f52a7ef0786e7efdf98dfb263fcec150d471c9ef9d2b96bd63c9b8be35f07c6b057df4485df747a95a90612e645aa9de2dedefadcdc16917bf88b9edee630e0470cf4a7c647dd36dd60b00ab85f8a1643ad068656b6ab9bfd7494c7bc60b0f0809ecf3a3c10ceb03fa929cdb17e3f7197ce4500d590a9d7414438bb01805ba1c4cc9d02d97f887b7176d7e6e29b6a41d3236115d2393df0389bdf412c3317f39253eebdb0807fdec1845edf3343c19622304762dc5e53bd116c073387f3f297693891f3aaac8dcd7b4250c0ed2c713202917027aec0b65bdf79bdc795e4e527986818f6a8454b2308df4d72fd44d45af644952057c21f08866b81dd70ac24f3021e90a3a71040ecd6ae62e70abccbc815c66afe070d2446522a0d516dc168e55be4ce0e32c41673e3b054ff017591c8b5d84780e93caa6271d2d2fe17cf34d34d7db9584cfee239d148466dc2ee65d06bb38382b5b63c74b348fcadf2f004b8e298c444ccef05ec15f6fb5eb6735839b6ecb1e929520a7c72ab8d3a8c44e1c149be790f313ce8cb687a9b21f96f4a526c4fc66f4e27146f62fa47dd487a79210ba7580f37cfbbbf1f345f868e7010cbe7a13ab75c3a18502dd45d0ce667d0b139d4fe1545a0b07ed1fb66ae01c1d1eac1f99bed236b8b23b39c390657d17c07a919decbe696d5a5f0997d67f6e3b0b3f581e8a798110925e4261b25cfe2def63015351a077133d869e7ed101562b061a80d4945149959aa450bd22474298ba82f32a6455af83748a0d3f791d6e602ee5aa08f877e5d33754563af5822578cb989df501d3df0b839792b245fcfb58c15c3f66abe91ef327ba99eae7ef0e5ca052313a29b199da60c0d92fb509aef1511ffff27be17865adc28a182debdbe4a0881862147c89dcca02588be737026e2c49028b955db581e64b3f4097a082a4f916f50e78ca72b5de1d022f5003cc290ccce023dbec5e36bb933b3fc1be74f60a16ab6eb66c82afa47f947a21e8b25d9687f7ee5d3a5ff77f1c31ab6783e6d6396a76f0c756cbbe70c9a8b732b91b2234f2b1a2fb10524870e31cfeaa99b0ee75317d44fa93807ffdaba32f54e698178f136778801685b2e4534611b7514180a19aa4a00e3e19266c4fca5dccf40f56b8e49af5a5506114406c25e9b8d76bc1d9b46739737dcb9703c5492d69c9d06b282fe2effb7ef5d094e94faf8950be4a88e34549a11dee2dc191a1c75b93bccaddfdb8e11b9983de3f8260af4692203d46106be0d6a723e0a3e9c8da084444f86ffe0c9070a7463004e72f876d642a50a303249710644cd81efad0a51dc587dfabb53a2e39d42d390113adcc0f7f0318b735582570a9dcbdf71a02f12a29f4f79178e1c9004b8d2a77cf376723e536ce72316f87e17109ebae06c5e3cafd778bfcfe66dce4a9c811b59f6e268bb961ad32ef683296770c0d3a63281566919abdacef4429babd340681dbf174feba63a42b2d6349ccdb218d9f040ab1f2d36e5f2cc134627345f6cc61a6135ac24a0bd0d14a8187b40ebdbb744a03fb692713770032d3f1b3f58d5ef64526fb8a68f7bfce2982339072913257326821b1e07bc46509b7d99aebb289d2114ec30f9e2b774dd0281c36ca1df8684cc1daccb5f34e22f0186457bc7b5a35fa23bd", 0x2000, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x6c) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_GET_PDEATHSIG(0x2, 0x0) 855.126049ms ago: executing program 0: recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000640)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G4\xd7;\xedZ\x98\"\xf2\xe8\xb3\xf75\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\x99\xa8HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xad\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Pu\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x929\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8bY^\xfe\x00\x9f\xd5\xfa\x8b\r\xb8\xf4\xe6\xfd\xcbO_\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xc8\xf6\xcaAvT\x1b\xe6\xb9\xe7\xff\xc5HUlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x01\x00\x00\x00{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00RXN9L\xc0\xcc=+\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x1b\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7Rl\xfc.\x93\xe74\xab>\x9e\xd4%\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x1b\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2D\x9be&\xb5g\xc1\xf2o\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd4\x94\x00\x15\xd1@\xf2\x0f}\x94)\xc5qc\xef\x87\x89c\xa4\"\xab3\xae\xbbqc\xf4m\x9dY\xb0\x11\x1e\x87B\xea\xf2\xe3RM2\xb4\b\xe5g\x02\xd3U\xf9\xc8\xaeW\x13r<\xca\xc6\x81}~O\x90\x0f\xb5\xa7\xf5\xaea)Mi}!^a\xd4\x82\xcc\xa6\xb5\xe9\xf8\x8b\x86\xdd~\x9aE\xd7\'z\x10\x93\xd2\x9e\xb8\x05(J\x06\x04\xaa\xecH\xa87\x00\x00\x00\x00\x00\x00D\xaef,\x00\x83\xec\xd5a\v\x86\xa5\x15\x19\x8a\x10\\TI\xd9z\xcc\x96\x81T\x86\xd0\xe0\x85\x1f\xbe\x00\xa4$\xed\x18RU \xaa\r\x19\xb1\xb5\xec\x16GTW\xa2\xc0\xcf\xf7;=\\s\xe5Y\xfdJ\x01\x9e\b\xf2\fKT\\.\xdc\xd1\x17oC9\x04h\xa4\x8f\xd309\a_\x96\xaff1@MW\xd1?\a\x8bg\xb7\xfc\"\x97\xe0\x88\xb5\xfb\x9e)\x13L\\>F>T\xfb\x1e\x13\xd3\x17`\xc1l\xaa\x9d\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 849.8761ms ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) rt_sigreturn() timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getrlimit(0x6, 0x0) 783.67676ms ago: executing program 4: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', 0x0) 772.318732ms ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {r2, r3+60000000}}, 0x0) r4 = epoll_create(0x8) epoll_wait(r4, &(0x7f0000000140)=[{}], 0x1, 0xffff) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0xc000, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$9p(r5, 0x0, 0x0) rt_sigreturn() r6 = memfd_create(&(0x7f0000000200)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) fallocate(r6, 0x0, 0x0, 0x800000b) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0) 719.46025ms ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) rt_sigreturn() timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getrlimit(0x5, 0x0) 709.428391ms ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) eventfd(0x0) r2 = creat(&(0x7f0000004040)='./file0\x00', 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) fallocate(r2, 0x0, 0x0, 0x8120003) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000200)='./file0\x00', 0x0) 650.08626ms ago: executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x64) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r3 = dup(r2) write$P9_RGETATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) rt_sigreturn() r4 = memfd_create(&(0x7f0000000980)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x22) 508.123142ms ago: executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = signalfd(r0, 0x0, 0x0) write$P9_RMKNOD(r1, 0x0, 0x0) eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r4) rt_sigreturn() socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 479.042836ms ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r0, 0x0, 0x0) write$9p(r1, 0x0, 0x0) rt_sigreturn() r2 = memfd_create(&(0x7f0000000640)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G4\xd7;\xedZ\x98\"\xf2\xe8\xb3\xf75\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\x99\xa8HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xad\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Pu\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x929\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8bY^\xfe\x00\x9f\xd5\xfa\x8b\r\xb8\xf4\xe6\xfd\xcbO_\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xc8\xf6\xcaAvT\x1b\xe6\xb9\xe7\xff\xc5HUlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x01\x00\x00\x00{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00RXN9L\xc0\xcc=+\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x1b\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7Rl\xfc.\x93\xe74\xab>\x9e\xd4%\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x1b\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2D\x9be&\xb5g\xc1\xf2o\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd4\x94\x00\x15\xd1@\xf2\x0f}\x94)\xc5qc\xef\x87\x89c\xa4\"\xab3\xae\xbbqc\xf4m\x9dY\xb0\x11\x1e\x87B\xea\xf2\xe3RM2\xb4\b\xe5g\x02\xd3U\xf9\xc8\xaeW\x13r<\xca\xc6\x81}~O\x90\x0f\xb5\xa7\xf5\xaea)Mi}!^a\xd4\x82\xcc\xa6\xb5\xe9\xf8\x8b\x86\xdd~\x9aE\xd7\'z\x10\x93\xd2\x9e\xb8\x05(J\x06\x04\xaa\xecH\xa87\x00\x00\x00\x00\x00\x00D\xaef,\x00\x83\xec\xd5a\v\x86\xa5\x15\x19\x8a\x10\\TI\xd9z\xcc\x96\x81T\x86\xd0\xe0\x85\x1f\xbe\x00\xa4$\xed\x18RU \xaa\r\x19\xb1\xb5\xec\x16GTW\xa2\xc0\xcf\xf7;=\\s\xe5Y\xfdJ\x01\x9e\b\xf2\fKT\\.\xdc\xd1\x17oC9\x04h\xa4\x8f\xd309\a_\x96\xaff1@MW\xd1?\a\x8bg\xb7\xfc\"\x97\xe0\x88\xb5\xfb\x9e)\x13L\\>F>T\xfb\x1e\x13\xd3\x17`\xc1l\xaa\x9d\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x800000b) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000100), 0x4) 475.080497ms ago: executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={'veth0_macvtap\x00'}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzs0L0JAkEQBeC3h4hoYicmxorlXGImmJjYjWUYWsg1YAUiLP6iV8B9X7K7j2WGmVl32iQpi9223eeuS9Xkad0kJcmyvkuG53PmS7I6J5k+kkl/kdelpr3++Tn/kR+O9TLu7/Zt9HYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAAAE+VsPcgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHcFAAD//zEWCYI=") r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000004080)='./file0\x00', 0x1910000, &(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653d1b9685d70e0981928366c599ebbd6925dfc9f2ba3c360a81303c893a692b315416b0766bf289db50798b51088378f640e6b72fb69fd7e156f362af9e8411301e2c736d61636b66736465663d434f4e4e5345434d41524b002c736d61636b66737472616e736d7574653d65720e58bb51a9cb24423de26f6673002c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61707072616973652c6f626a5f726f6c653d65726f6673986abe23531f57abab29050000007a0544d9eb44f02514a6048159ec4e8c6f924d0e9ce1da411ee99c4a8c84e75b5bea594e3753d2193718cda9d21cb0abb2f6a77b5d6cc7af0300a600000000008b180121ca196da452cc372c61707072616973655f747970653d696d617369672c646f6e745f6d6561737572652c646566636f6e746578743d726f6f742c686173682c00"], 0x0, 0x0, 0xfffffffffffffffe) write$P9_RSTATFS(r3, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x3ff}}, 0x43) write$FUSE_CREATE_OPEN(r3, &(0x7f00000001c0)={0xa0, 0xfffffffffffffff5}, 0xa0) 408.093477ms ago: executing program 2: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0xb82e336200000000) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") syz_open_procfs(0x0, 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RATTACH(r1, &(0x7f0000004040)={0x14, 0x69, 0x0, {0x40}}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) write$P9_RSTATFS(r1, &(0x7f0000000200)={0x43, 0x9, 0x0, {0x1ff}}, 0x43) 402.366649ms ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000440)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x11, 0x80802, 0x0) splice(r6, 0x0, r5, 0x0, 0x101ff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x4, 0x3, 0x3}, 0x48) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x1000003, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 0s ago: executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) kernel console output (not intermixed with test programs): : Manufacturer: syz [ 256.252404][ T2117] usb 2-1: SerialNumber: syz [ 256.302397][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.309379][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.316527][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.323367][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.359979][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.368104][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.379830][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.405982][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.414492][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.421336][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.429310][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.437596][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.444462][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.898599][ T5145] input: syz1 as /devices/virtual/input/input108 [ 256.993487][ T2117] usb 2-1: USB disconnect, device number 11 [ 257.095608][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.104513][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.112443][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.126536][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.134492][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.152193][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.160984][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.169597][ T4017] device bridge_slave_1 left promiscuous mode [ 257.175865][ T4017] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.183980][ T4017] device bridge_slave_0 left promiscuous mode [ 257.189923][ T4017] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.283508][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 257.330024][ T5154] device team_slave_0 entered promiscuous mode [ 257.337402][ T5154] device batadv_slave_1 entered promiscuous mode [ 257.350848][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.360717][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.384254][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.399254][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.409705][ T4721] attempt to access beyond end of device [ 257.409705][ T4721] loop1: rw=2049, want=45104, limit=40427 [ 257.643749][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.663516][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.673063][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.689384][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.698845][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.710558][ T13] usb 5-1: config 0 descriptor?? [ 257.726396][ T5153] F2FS-fs (loop0): invalid crc value [ 257.733196][ T5153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.819228][ T5153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.822033][ T5156] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.909727][ T5156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.010219][ T5168] EXT4-fs (loop1): 1 orphan inode deleted [ 258.016024][ T5168] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 258.033304][ T5168] ext4 filesystem being mounted at /root/syzkaller-testdir3102500423/syzkaller.sVvWha/19/file1 supports timestamps until 2038 (0x7fffffff) [ 258.085905][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 258.094994][ T5173] ext4 filesystem being mounted at /root/syzkaller-testdir1153652095/syzkaller.nFmtjN/24/file0 supports timestamps until 2038 (0x7fffffff) [ 258.153540][ T395] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 258.491251][ T5181] syz-executor.3[5181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.491317][ T5181] syz-executor.3[5181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.515311][ T4721] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 258.541875][ T4721] EXT4-fs (loop1): Remounting filesystem read-only [ 258.576197][ T5126] attempt to access beyond end of device [ 258.576197][ T5126] loop2: rw=2049, want=45104, limit=40427 [ 258.745204][ T13] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 258.753701][ T13] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 258.763349][ T13] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 258.964085][ T377] usb 5-1: USB disconnect, device number 13 [ 258.972273][ T23] audit: type=1400 audit(1719131399.412:473): avc: denied { write } for pid=5184 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 258.994381][ T5185] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 259.012599][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.027196][ T23] audit: type=1400 audit(1719131399.472:474): avc: denied { getopt } for pid=5187 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.057631][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.064716][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.093764][ T395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.105327][ T395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.114950][ T395] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 259.127616][ T395] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 259.136549][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.145348][ T395] usb 1-1: config 0 descriptor?? [ 259.307787][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.314757][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.322168][ T5186] device bridge_slave_0 entered promiscuous mode [ 259.329461][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.336368][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.346629][ T5186] device bridge_slave_1 entered promiscuous mode [ 259.403711][ T5198] input: syz1 as /devices/virtual/input/input109 [ 259.597182][ T5152] device batadv_slave_1 left promiscuous mode [ 259.603884][ T5152] device team_slave_0 left promiscuous mode [ 259.698762][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.705678][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.712774][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.719638][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.783719][ T395] usbhid 1-1:0.0: can't add hid device: -71 [ 259.805466][ T5202] input: syz1 as /devices/virtual/input/input110 [ 259.830663][ T395] usbhid: probe of 1-1:0.0 failed with error -71 [ 259.896418][ T395] usb 1-1: USB disconnect, device number 18 [ 259.979911][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.988211][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.999597][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.017906][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.026559][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.034761][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.041604][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.056348][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.065324][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.073435][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.080284][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.098564][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.112585][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.128110][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.141691][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.172439][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.182890][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.193733][ T9] device bridge_slave_1 left promiscuous mode [ 260.199740][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.209608][ T9] device bridge_slave_0 left promiscuous mode [ 260.215903][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.269459][ T5188] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.301973][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.318304][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.346030][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.355469][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.363282][ T5188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.371434][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.379915][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.392793][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.400954][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.414604][ T5188] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.418233][ T5204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.503836][ T5204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.581872][ T5216] EXT4-fs (loop4): Ignoring removed orlov option [ 260.605018][ T5216] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,orlov,init_itable,journal_dev=0x00000000000000e1,dioread_nolock,grpquota,,errors=continue [ 260.813576][ T2117] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 260.821236][ T395] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 260.974340][ T5216] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 261.073461][ T395] usb 2-1: Using ep0 maxpacket: 32 [ 261.078517][ T2117] usb 4-1: Using ep0 maxpacket: 8 [ 261.116226][ T5228] EXT4-fs (loop4): 1 orphan inode deleted [ 261.121861][ T5228] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 261.139287][ T5228] ext4 filesystem being mounted at /root/syzkaller-testdir1219864571/syzkaller.z6RREN/10/file1 supports timestamps until 2038 (0x7fffffff) [ 261.166548][ T4864] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 261.183336][ T4864] EXT4-fs (loop4): Remounting filesystem read-only [ 261.213960][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.224820][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.235332][ T395] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.244217][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.253036][ T395] usb 2-1: config 0 descriptor?? [ 261.293665][ T2117] usb 4-1: config 64 has an invalid interface number: 14 but max is 0 [ 261.301645][ T2117] usb 4-1: config 64 has no interface number 0 [ 261.308110][ T395] hub 2-1:0.0: USB hub found [ 261.313249][ T2117] usb 4-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 261.324207][ T2117] usb 4-1: config 64 interface 14 has no altsetting 0 [ 261.362169][ T5231] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.406216][ T5231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.503746][ T395] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 261.535625][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.542467][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.637077][ T5239] device bridge_slave_0 entered promiscuous mode [ 261.648041][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.655118][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.665284][ T5239] device bridge_slave_1 entered promiscuous mode [ 261.803525][ T377] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 261.815999][ T2117] usb 4-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 261.843657][ T2117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.851566][ T2117] usb 4-1: Product: syz [ 261.855874][ T2117] usb 4-1: Manufacturer: syz [ 261.860280][ T2117] usb 4-1: SerialNumber: syz [ 261.900989][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.907900][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.915024][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.921853][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.953996][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.961998][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.981937][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.999606][ T5126] attempt to access beyond end of device [ 261.999606][ T5126] loop2: rw=2049, want=45104, limit=40427 [ 262.022184][ T5256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 262.031371][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.044068][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.051015][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.073740][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.090131][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.097031][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.114149][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.122462][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.131199][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.139349][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.173730][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.192550][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.214712][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.222623][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.233550][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.245350][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.255042][ T2117] usb 4-1: USB disconnect, device number 24 [ 262.261275][ T377] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.274753][ T377] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.283724][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.292440][ T377] usb 1-1: config 0 descriptor?? [ 262.299768][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.307923][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.316362][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.324763][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.333052][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.342787][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.464164][ T9] device bridge_slave_1 left promiscuous mode [ 262.471070][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.479979][ T9] device bridge_slave_0 left promiscuous mode [ 262.486904][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.526667][ T5262] input: syz1 as /devices/virtual/input/input111 [ 262.774612][ T4627] attempt to access beyond end of device [ 262.774612][ T4627] loop3: rw=2049, want=45104, limit=40427 [ 262.787292][ T377] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.805173][ T377] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 262.824303][ T377] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 262.987633][ T2541] usb 1-1: USB disconnect, device number 19 [ 263.105563][ T5260] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 263.114988][ T5260] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 263.124744][ T5260] F2FS-fs (loop4): invalid crc value [ 263.131703][ T5260] F2FS-fs (loop4): Found nat_bits in checkpoint [ 263.164992][ T5260] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 263.165577][ T5265] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz-executor.3: bad orphan inode 8192 [ 263.175923][ T5260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 263.184096][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 263.272834][ T5274] fuse: Unknown parameter '0x0000000000000008' [ 265.245676][ T5277] input: syz1 as /devices/virtual/input/input112 [ 265.318170][ T4627] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 265.331127][ T4627] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 265.363593][ T395] usbhid 2-1:0.0: can't add hid device: -71 [ 265.369423][ T395] usbhid: probe of 2-1:0.0 failed with error -71 [ 265.403849][ T395] usb 2-1: USB disconnect, device number 12 [ 265.468471][ T23] audit: type=1400 audit(1719131405.912:475): avc: denied { bind } for pid=5280 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.726362][ T5285] EXT4-fs (loop2): 1 orphan inode deleted [ 265.732073][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 265.748983][ T5285] ext4 filesystem being mounted at /root/syzkaller-testdir2819596212/syzkaller.ZiQATD/5/file1 supports timestamps until 2038 (0x7fffffff) [ 265.767452][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.996168][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.012605][ T5288] device bridge_slave_0 entered promiscuous mode [ 266.022641][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.031251][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.039978][ T5288] device bridge_slave_1 entered promiscuous mode [ 266.102306][ T5126] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 266.118719][ T5126] EXT4-fs (loop2): Remounting filesystem read-only [ 266.127374][ T5299] device team_slave_0 entered promiscuous mode [ 266.135985][ T5299] device batadv_slave_1 entered promiscuous mode [ 266.222398][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.229285][ T5288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.236442][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.243268][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.322112][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.351058][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.361043][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.390144][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.410845][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.417815][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.438352][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.446540][ T5299] F2FS-fs (loop4): invalid crc value [ 266.452780][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.459729][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.468516][ T9] device bridge_slave_1 left promiscuous mode [ 266.474552][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.475843][ T5299] F2FS-fs (loop4): Found nat_bits in checkpoint [ 266.495235][ T9] device bridge_slave_0 left promiscuous mode [ 266.501638][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.602083][ T5299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 266.628998][ T5301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 266.644069][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.662684][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.698206][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.706568][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.711869][ T5301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.751323][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.758471][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.765826][ T5304] device bridge_slave_0 entered promiscuous mode [ 266.772922][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.780006][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.787417][ T5304] device bridge_slave_1 entered promiscuous mode [ 266.831295][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.840030][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.864209][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.871983][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.894982][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.902997][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.924407][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.932657][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.941653][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.950367][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.953512][ T395] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 266.958495][ T2541] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.003944][ T2578] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 267.019151][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.034878][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.043321][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.050178][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.057996][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.067363][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.074220][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.095889][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.104868][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.112877][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.137221][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.153905][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.173846][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.192011][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.201140][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.254772][ T2578] usb 1-1: Using ep0 maxpacket: 8 [ 267.334480][ T2541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.353552][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.353590][ T2541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.373529][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.393453][ T2541] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 267.403509][ T395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.406159][ T2541] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 267.439433][ T395] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.443692][ T2541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.449525][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.463552][ T2578] usb 1-1: config 64 has an invalid interface number: 14 but max is 0 [ 267.472235][ T2578] usb 1-1: config 64 has no interface number 0 [ 267.478526][ T2541] usb 5-1: config 0 descriptor?? [ 267.484288][ T395] usb 2-1: config 0 descriptor?? [ 267.493593][ T2578] usb 1-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 267.514374][ T2578] usb 1-1: config 64 interface 14 has no altsetting 0 [ 267.673727][ T2578] usb 1-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 267.682586][ T2578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.703516][ T2578] usb 1-1: Product: syz [ 267.707502][ T2578] usb 1-1: Manufacturer: syz [ 267.711932][ T2578] usb 1-1: SerialNumber: syz [ 267.737649][ T5298] device batadv_slave_1 left promiscuous mode [ 267.753696][ T5298] device team_slave_0 left promiscuous mode [ 267.853675][ T2541] usbhid 5-1:0.0: can't add hid device: -71 [ 267.859482][ T2541] usbhid: probe of 5-1:0.0 failed with error -71 [ 267.866086][ T9] device bridge_slave_1 left promiscuous mode [ 267.872052][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.880753][ T2541] usb 5-1: USB disconnect, device number 14 [ 267.887660][ T9] device bridge_slave_0 left promiscuous mode [ 267.894057][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.914720][ T5328] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 267.925188][ T5328] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.945608][ T5328] F2FS-fs (loop2): invalid crc value [ 267.964973][ T395] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.972950][ T395] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 267.992055][ T5328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.994961][ T395] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 268.034936][ T5330] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 268.045898][ T5330] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.046276][ T5328] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 268.061055][ T5330] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 268.063764][ T2578] usb 1-1: USB disconnect, device number 20 [ 268.074686][ T5328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 268.166348][ T1437] usb 2-1: USB disconnect, device number 13 [ 268.367494][ T5338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5338 comm=syz-executor.3 [ 268.490028][ T5056] attempt to access beyond end of device [ 268.490028][ T5056] loop0: rw=2049, want=45104, limit=40427 [ 268.665742][ T5342] EXT4-fs (loop2): 1 orphan inode deleted [ 268.671299][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 268.707739][ T5342] ext4 filesystem being mounted at /root/syzkaller-testdir3459727635/syzkaller.425Nbv/1/file1 supports timestamps until 2038 (0x7fffffff) [ 268.868039][ T5304] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 268.889574][ T5304] EXT4-fs (loop2): Remounting filesystem read-only [ 268.896949][ T5340] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.966013][ T5358] input: syz1 as /devices/virtual/input/input113 [ 269.130944][ T5347] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.133337][ T5340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.167945][ T5347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.209263][ T5362] EXT4-fs (loop0): 1 orphan inode deleted [ 269.217385][ T5362] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 269.240639][ T5288] attempt to access beyond end of device [ 269.240639][ T5288] loop3: rw=2049, want=45104, limit=40427 [ 269.266314][ T5362] ext4 filesystem being mounted at /root/syzkaller-testdir2017069442/syzkaller.CQnwBm/9/file1 supports timestamps until 2038 (0x7fffffff) [ 269.730486][ T5056] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.0: lblock 0 mapped to illegal pblock 3 (length 1) [ 269.745715][ T5239] attempt to access beyond end of device [ 269.745715][ T5239] loop4: rw=2049, want=45104, limit=40427 [ 269.746074][ T5056] EXT4-fs (loop0): Remounting filesystem read-only [ 269.859156][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.867905][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.875776][ T5370] device bridge_slave_0 entered promiscuous mode [ 269.888690][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.895608][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.903070][ T5370] device bridge_slave_1 entered promiscuous mode [ 270.042471][ T5374] F2FS-fs (loop1): Found nat_bits in checkpoint [ 270.054829][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.061684][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.068842][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.075685][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.133557][ T5374] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 270.290732][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.299337][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.307719][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.724706][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.733614][ T5186] attempt to access beyond end of device [ 270.733614][ T5186] loop1: rw=2049, want=45104, limit=40427 [ 270.746648][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.755048][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.763226][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.770074][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.777395][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.785391][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.794778][ T5383] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.801619][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.836704][ T5383] device bridge_slave_0 entered promiscuous mode [ 270.866626][ T5383] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.881058][ T5383] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.896208][ T5383] device bridge_slave_1 entered promiscuous mode [ 270.933628][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.941772][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.967902][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.991968][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.017149][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.041932][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.070228][ T9] device bridge_slave_1 left promiscuous mode [ 271.076411][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.097220][ T9] device bridge_slave_0 left promiscuous mode [ 271.103220][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.226704][ T5385] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 271.249553][ T5385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 271.276322][ T5385] F2FS-fs (loop3): invalid crc value [ 271.298108][ T5385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 271.390023][ T5385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 271.399106][ T5385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 271.426546][ T5410] EXT4-fs (loop1): 1 orphan inode deleted [ 271.439111][ T5410] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 271.513754][ T5410] ext4 filesystem being mounted at /root/syzkaller-testdir288611341/syzkaller.KwNRZi/7/file1 supports timestamps until 2038 (0x7fffffff) [ 271.529982][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.547526][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.563644][ T2117] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 271.600174][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.608994][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.623822][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.630696][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.639612][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.647945][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.656102][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.662929][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.686475][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.704642][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.712517][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.760758][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.769401][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.798063][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.814478][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.907796][ T5419] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.936718][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.944854][ T2117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.956357][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.973910][ T2117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.984839][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.992979][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.005393][ T2117] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 272.023687][ T2117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.053381][ T2117] usb 3-1: config 0 descriptor?? [ 272.075377][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.093231][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.115100][ T5422] FAT-fs (loop4): Unrecognized mount option "?" or missing value [ 272.309210][ T23] audit: type=1400 audit(1719131412.752:476): avc: denied { ioctl } for pid=5404 comm="syz-executor.2" path="/dev/usbmon7" dev="devtmpfs" ino=9303 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 272.415084][ T5186] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 272.434790][ T5186] EXT4-fs (loop1): Remounting filesystem read-only [ 272.465902][ T23] audit: type=1400 audit(1719131412.912:477): avc: denied { append } for pid=5404 comm="syz-executor.2" name="001" dev="devtmpfs" ino=9305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 272.575584][ T5408] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 272.579178][ T5425] F2FS-fs (loop0): Found nat_bits in checkpoint [ 272.603560][ T9] device bridge_slave_1 left promiscuous mode [ 272.609624][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.625256][ T5432] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.636159][ T9] device bridge_slave_0 left promiscuous mode [ 272.643543][ T5432] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 272.654456][ T5432] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 272.690317][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.717683][ T5425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 272.823659][ T2117] usbhid 3-1:0.0: can't add hid device: -71 [ 272.827430][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.834354][ T2117] usbhid: probe of 3-1:0.0 failed with error -71 [ 272.836368][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.850062][ T5439] device bridge_slave_0 entered promiscuous mode [ 272.850440][ T2117] usb 3-1: USB disconnect, device number 19 [ 272.861437][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.869181][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.876748][ T5439] device bridge_slave_1 entered promiscuous mode [ 272.951244][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.958297][ T5439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.965359][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.972199][ T5439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.007815][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.016963][ T1437] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.024253][ T13] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 273.032516][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.047448][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.055903][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.062745][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.070417][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.079694][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.086678][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.104899][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.112920][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.136800][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.154264][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.173730][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.227595][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.242420][ T5446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 273.254153][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.263595][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 273.373797][ T5446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 273.478306][ T5459] input: syz1 as /devices/virtual/input/input114 [ 273.523803][ T13] usb 1-1: config 64 has an invalid interface number: 14 but max is 0 [ 274.073293][ T13] usb 1-1: config 64 has no interface number 0 [ 274.079533][ T13] usb 1-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 274.090417][ T13] usb 1-1: config 64 interface 14 has no altsetting 0 [ 274.638807][ T13] usb 1-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 274.648122][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.655952][ T13] usb 1-1: Product: syz [ 274.659906][ T13] usb 1-1: Manufacturer: syz [ 274.664511][ T13] usb 1-1: SerialNumber: syz [ 274.727477][ T5239] attempt to access beyond end of device [ 274.727477][ T5239] loop4: rw=2049, want=45104, limit=40427 [ 274.849240][ T5454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.891739][ T5454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 274.908824][ T5478] EXT4-fs (loop2): 1 orphan inode deleted [ 274.933514][ T5478] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 274.973599][ T5478] ext4 filesystem being mounted at /root/syzkaller-testdir2771270280/syzkaller.VRiqJK/3/file1 supports timestamps until 2038 (0x7fffffff) [ 275.080786][ T13] usb 1-1: USB disconnect, device number 21 [ 275.315059][ T5439] attempt to access beyond end of device [ 275.315059][ T5439] loop1: rw=2049, want=45104, limit=40427 [ 275.423671][ T9] device bridge_slave_1 left promiscuous mode [ 275.429800][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.473860][ T9] device bridge_slave_0 left promiscuous mode [ 275.479825][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.611871][ T5383] attempt to access beyond end of device [ 275.611871][ T5383] loop0: rw=2049, want=45104, limit=40427 [ 275.868629][ T5370] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 275.874811][ T5466] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 275.883292][ T5370] EXT4-fs (loop2): Remounting filesystem read-only [ 275.901552][ T5466] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 275.913052][ T5466] F2FS-fs (loop3): invalid crc value [ 275.929393][ T5466] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.023740][ T5466] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 276.033561][ T5466] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 277.036070][ T5509] input: syz1 as /devices/virtual/input/input115 [ 277.305844][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.321048][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.332752][ T23] audit: type=1400 audit(1719131417.772:478): avc: denied { ioctl } for pid=5513 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.364331][ T5505] device bridge_slave_0 entered promiscuous mode [ 277.380506][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.394409][ T23] audit: type=1400 audit(1719131417.772:479): avc: denied { set_context_mgr } for pid=5513 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 277.395848][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.443878][ T5505] device bridge_slave_1 entered promiscuous mode [ 277.453468][ T23] audit: type=1400 audit(1719131417.802:480): avc: denied { map } for pid=5513 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.559125][ T5494] F2FS-fs (loop1): Found nat_bits in checkpoint [ 277.594177][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.601036][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.608186][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.615115][ T5505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.663393][ T9] device bridge_slave_1 left promiscuous mode [ 277.670335][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.720759][ T9] device bridge_slave_0 left promiscuous mode [ 277.732497][ T5494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 277.732577][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.761577][ T5494] F2FS-fs (loop1): inode (7) has corrupted xattr [ 277.773539][ T5494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=7 [ 277.803578][ T5494] F2FS-fs (loop1): inode (7) has corrupted xattr [ 277.820357][ T5494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=7 [ 277.843602][ T5494] F2FS-fs (loop1): inode (7) has corrupted xattr [ 277.849773][ T5494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=7 [ 277.890043][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.900194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.908380][ T5514] F2FS-fs (loop0): Invalid log sectors per block(3) log sectorsize(12) [ 277.923614][ T5514] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 277.933621][ T5531] debugfs: Directory 'vcpu1' with parent '5494-9' already present! [ 277.942452][ T5514] F2FS-fs (loop0): Unrecognized mount option "*bs" or missing value [ 277.974952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.983159][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.011462][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.031948][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.040321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.047207][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.073812][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.092300][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.100818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.107689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.123706][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.131804][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.140046][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.147810][ T5530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.148142][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.180658][ T5528] F2FS-fs (loop4): Found nat_bits in checkpoint [ 278.197834][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.206418][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.243825][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.246142][ T5528] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 278.251665][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.278949][ T5530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 279.564762][ T5288] attempt to access beyond end of device [ 279.564762][ T5288] loop3: rw=2049, want=45104, limit=40427 [ 279.594139][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.602215][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.633946][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.642102][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.714919][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.725936][ T5239] attempt to access beyond end of device [ 279.725936][ T5239] loop4: rw=2049, want=45112, limit=40427 [ 279.737662][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.086996][ T5562] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 280.106857][ T5562] ext4 filesystem being mounted at /root/syzkaller-testdir242752291/syzkaller.OQ5Lsp/6/file0 supports timestamps until 2038 (0x7fffffff) [ 280.370032][ T5577] bridge0: port 3(syz_tun) entered blocking state [ 280.376487][ T5577] bridge0: port 3(syz_tun) entered disabled state [ 280.383384][ T5577] device syz_tun entered promiscuous mode [ 280.389103][ T5577] bridge0: port 3(syz_tun) entered blocking state [ 280.395341][ T5577] bridge0: port 3(syz_tun) entered forwarding state [ 280.402952][ T5577] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 280.485643][ T5580] input: syz1 as /devices/virtual/input/input116 [ 280.684369][ T23] audit: type=1400 audit(1719131421.132:481): avc: denied { create } for pid=5553 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.689466][ T5567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.767420][ T5567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 281.023550][ T18] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 281.053463][ T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 281.169981][ T5569] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 281.179705][ T5569] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 281.192127][ T5569] F2FS-fs (loop3): invalid crc value [ 281.199266][ T5569] F2FS-fs (loop3): Found nat_bits in checkpoint [ 281.241039][ T5569] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 281.248133][ T5569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 281.274590][ T5600] EXT4-fs (loop4): 1 orphan inode deleted [ 281.293560][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 281.298562][ T5600] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 281.323810][ T5600] ext4 filesystem being mounted at /root/syzkaller-testdir3222489646/syzkaller.B0Vgm9/14/file1 supports timestamps until 2038 (0x7fffffff) [ 281.438015][ T5599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 281.444221][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.454908][ T18] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.463796][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.594949][ T18] usb 3-1: config 0 descriptor?? [ 281.612911][ T5599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 281.719776][ T13] usb 2-1: config 64 has an invalid interface number: 14 but max is 0 [ 281.728323][ T13] usb 2-1: config 64 has no interface number 0 [ 281.734775][ T13] usb 2-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 281.745564][ T13] usb 2-1: config 64 interface 14 has no altsetting 0 [ 281.913848][ T13] usb 2-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 281.938985][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.984016][ T13] usb 2-1: Product: syz [ 281.995960][ T13] usb 2-1: Manufacturer: syz [ 282.000487][ T13] usb 2-1: SerialNumber: syz [ 282.069640][ T5383] attempt to access beyond end of device [ 282.069640][ T5383] loop0: rw=2049, want=45112, limit=40427 [ 282.179178][ T5586] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 282.188210][ T5586] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 282.197118][ T5586] Quota error (device loop2): write_blk: dquota write failed [ 282.204546][ T23] audit: type=1400 audit(1719131422.642:482): avc: denied { name_bind } for pid=5622 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 282.226733][ T5586] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 282.237376][ T5586] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 282.245563][ T5586] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 282.253826][ T5586] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 282.261946][ T5586] EXT4-fs error (device loop2) in ext4_orphan_del:3211: error 27 [ 282.269760][ T5586] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 282.277924][ T5586] EXT4-fs error (device loop2) in ext4_orphan_cleanup:2816: error 27 [ 282.286359][ T5586] EXT4-fs (loop2): 1 truncate cleaned up [ 282.293294][ T5586] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,resuid=0x0000000000000000,user_xattr,barrier,usrquota,usrquota,resuid=0x0000000000000000,,errors=continue [ 282.311611][ T5586] ext4 filesystem being mounted at /root/syzkaller-testdir221682516/syzkaller.JO9mTG/1/file1 supports timestamps until 2038 (0x7fffffff) [ 282.357539][ T5586] EXT4-fs error (device loop2): ext4_generic_delete_entry:2620: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 282.379405][ T13] usb 2-1: USB disconnect, device number 14 [ 282.414515][ T5586] EXT4-fs error (device loop2) in ext4_delete_entry:2679: Corrupt filesystem [ 282.437421][ T5586] EXT4-fs warning (device loop2): ext4_rename_delete:3787: inode #2: comm syz-executor.2: Deleting old file: nlink 6, error=-117 [ 282.893874][ T23] audit: type=1400 audit(1719131423.342:483): avc: denied { ioctl } for pid=5585 comm="syz-executor.2" path="socket:[53512]" dev="sockfs" ino=53512 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.924653][ T5632] F2FS-fs (loop0): Found nat_bits in checkpoint [ 282.952068][ T5439] attempt to access beyond end of device [ 282.952068][ T5439] loop1: rw=2049, want=45104, limit=40427 [ 283.024628][ T5632] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 283.259137][ T5646] EXT4-fs (loop4): Ignoring removed nobh option [ 283.277561][ T5646] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 283.578733][ T23] audit: type=1400 audit(1719131424.022:484): avc: denied { shutdown } for pid=5645 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.590954][ T5654] bridge0: port 3(syz_tun) entered blocking state [ 283.604798][ T5654] bridge0: port 3(syz_tun) entered disabled state [ 283.605598][ T5383] attempt to access beyond end of device [ 283.605598][ T5383] loop0: rw=2049, want=45104, limit=40427 [ 283.612325][ T5654] device syz_tun entered promiscuous mode [ 283.628342][ T5654] bridge0: port 3(syz_tun) entered blocking state [ 283.634590][ T5654] bridge0: port 3(syz_tun) entered forwarding state [ 283.641871][ T5657] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 283.853522][ T377] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 284.643611][ T18] usbhid 3-1:0.0: can't add hid device: -71 [ 284.649596][ T18] usbhid: probe of 3-1:0.0 failed with error -71 [ 284.673099][ T18] usb 3-1: USB disconnect, device number 20 [ 284.906342][ T5671] input: syz1 as /devices/virtual/input/input119 [ 285.103559][ T377] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 285.112535][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.125764][ T377] usb 2-1: config 0 descriptor?? [ 285.216632][ T5656] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 285.226205][ T5656] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 285.235836][ T5656] F2FS-fs (loop4): invalid crc value [ 285.247213][ T5656] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.332011][ T5656] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 285.338984][ T5656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 285.393466][ T13] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.984436][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.999065][ T5653] erofs: (device loop1): erofs_parse_options: Unrecognized mount option "18446744073709551615i(툵Fp=5L ExڮΣ7dk;\7c|Z~^~017777777777777777777770xffffffffffffffff" or missing value [ 285.999123][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.114085][ T13] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 286.134654][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.163612][ T377] usb 2-1: Cannot set autoneg [ 286.168763][ T377] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 286.169074][ T13] usb 3-1: config 0 descriptor?? [ 286.193820][ T377] usb 2-1: USB disconnect, device number 15 [ 286.522518][ T5696] F2FS-fs (loop4): Found nat_bits in checkpoint [ 286.634809][ T5696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 286.710673][ T5706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 286.815106][ T5709] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 286.823912][ T5709] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.973473][ T377] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 286.980933][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 287.233529][ T377] usb 5-1: Using ep0 maxpacket: 8 [ 287.313459][ T2117] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 287.354496][ T5725] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 287.363934][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 287.372026][ T24] usb 2-1: config 179 has no interface number 0 [ 287.373450][ T5725] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.378391][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 287.388199][ T5725] F2FS-fs (loop3): invalid crc value [ 287.397225][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 287.404781][ T5725] F2FS-fs (loop3): Found nat_bits in checkpoint [ 287.413317][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 287.430664][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 287.443917][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 287.452770][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.460169][ T5725] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 287.463531][ T377] usb 5-1: config 64 has an invalid interface number: 14 but max is 0 [ 287.467450][ T5725] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 287.475618][ T5705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 287.489368][ T377] usb 5-1: config 64 has no interface number 0 [ 287.492745][ T5705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 287.496650][ T377] usb 5-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 287.513078][ T377] usb 5-1: config 64 interface 14 has no altsetting 0 [ 287.521978][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input120 [ 287.563466][ T2117] usb 1-1: Using ep0 maxpacket: 16 [ 287.683568][ T377] usb 5-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 287.683579][ T2117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 287.683600][ T2117] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 287.692428][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.692437][ T377] usb 5-1: Product: syz [ 287.692447][ T377] usb 5-1: Manufacturer: syz [ 287.692455][ T377] usb 5-1: SerialNumber: syz [ 287.733246][ T2117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.742107][ T2117] usb 1-1: config 0 descriptor?? [ 287.747720][ T121] usb 2-1: USB disconnect, device number 16 [ 287.753488][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 287.762020][ T121] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 287.861451][ T13] usb 3-1: USB disconnect, device number 21 [ 287.893507][ T23] audit: type=1326 audit(1719131428.332:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b07e2e0a9 code=0x0 [ 288.056162][ T5734] input: syz1 as /devices/virtual/input/input121 [ 288.163568][ T377] usb 5-1: USB disconnect, device number 15 [ 288.263595][ T2117] usbhid 1-1:0.0: can't add hid device: -71 [ 288.269721][ T2117] usbhid: probe of 1-1:0.0 failed with error -71 [ 288.318460][ T2117] usb 1-1: USB disconnect, device number 22 [ 288.556178][ T5239] attempt to access beyond end of device [ 288.556178][ T5239] loop4: rw=2049, want=45104, limit=40427 [ 288.796288][ T23] audit: type=1400 audit(1719131429.242:486): avc: denied { create } for pid=5760 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 288.823530][ T377] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 288.848314][ T5763] bridge0: port 3(syz_tun) entered blocking state [ 288.854672][ T5763] bridge0: port 3(syz_tun) entered disabled state [ 288.861507][ T5763] device syz_tun entered promiscuous mode [ 288.867459][ T5763] bridge0: port 3(syz_tun) entered blocking state [ 288.873705][ T5763] bridge0: port 3(syz_tun) entered forwarding state [ 288.888577][ T5763] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 289.050215][ T5768] EXT4-fs (loop2): 1 orphan inode deleted [ 289.055885][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 289.072974][ T5768] ext4 filesystem being mounted at /root/syzkaller-testdir221682516/syzkaller.JO9mTG/6/file1 supports timestamps until 2038 (0x7fffffff) [ 290.655750][ T5784] FAT-fs (loop4): Directory bread(block 64) failed [ 290.662243][ T5784] FAT-fs (loop4): Directory bread(block 65) failed [ 290.668627][ T5784] FAT-fs (loop4): Directory bread(block 66) failed [ 290.674887][ T5784] FAT-fs (loop4): Directory bread(block 67) failed [ 290.681380][ T5784] FAT-fs (loop4): Directory bread(block 68) failed [ 290.687784][ T5784] FAT-fs (loop4): Directory bread(block 69) failed [ 290.694260][ T5784] FAT-fs (loop4): Directory bread(block 70) failed [ 290.700656][ T5784] FAT-fs (loop4): Directory bread(block 71) failed [ 290.707225][ T5784] FAT-fs (loop4): Directory bread(block 72) failed [ 290.713651][ T5784] FAT-fs (loop4): Directory bread(block 73) failed [ 290.723561][ T377] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 290.732411][ T5782] FAT-fs (loop2): Directory bread(block 64) failed [ 290.732428][ T5782] FAT-fs (loop2): Directory bread(block 65) failed [ 290.732483][ T5782] FAT-fs (loop2): Directory bread(block 66) failed [ 290.748670][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.754334][ T5782] FAT-fs (loop2): Directory bread(block 67) failed [ 290.773534][ T5782] FAT-fs (loop2): Directory bread(block 68) failed [ 290.787842][ T5782] FAT-fs (loop2): Directory bread(block 69) failed [ 290.816059][ T5782] FAT-fs (loop2): Directory bread(block 70) failed [ 290.842988][ T5782] FAT-fs (loop2): Directory bread(block 71) failed [ 290.869841][ T5782] FAT-fs (loop2): Directory bread(block 72) failed [ 290.881532][ T5782] FAT-fs (loop2): Directory bread(block 73) failed [ 290.884760][ T377] usb 4-1: config 0 descriptor?? [ 291.041468][ T23] audit: type=1400 audit(1719131431.472:487): avc: denied { getopt } for pid=5780 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.474370][ T5783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 291.525486][ T5783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 292.373468][ T2117] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 292.565178][ T5753] erofs: (device loop3): erofs_parse_options: Unrecognized mount option "18446744073709551615i(툵Fp=5L ExڮΣ7dk;\7c|Z~^~017777777777777777777770xffffffffffffffff" or missing value [ 292.568773][ T5802] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 292.598283][ T5802] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 292.606550][ T5802] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 292.613501][ T2117] usb 1-1: Using ep0 maxpacket: 8 [ 292.628154][ T5808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.670461][ T5808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.813562][ T2117] usb 1-1: config 64 has an invalid interface number: 14 but max is 0 [ 292.823529][ T377] usb 4-1: Cannot set autoneg [ 292.828103][ T377] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 292.836142][ T2117] usb 1-1: config 64 has no interface number 0 [ 292.853580][ T377] usb 4-1: USB disconnect, device number 25 [ 292.919846][ T2117] usb 1-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 292.931026][ T2117] usb 1-1: config 64 interface 14 has no altsetting 0 [ 293.853674][ T2117] usb 1-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 293.873459][ T2117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.892705][ T2117] usb 1-1: Product: syz [ 293.897620][ T2117] usb 1-1: Manufacturer: syz [ 293.904217][ T5439] attempt to access beyond end of device [ 293.904217][ T5439] loop1: rw=2049, want=45112, limit=40427 [ 293.923533][ T2117] usb 1-1: can't set config #64, error -71 [ 293.940086][ T2117] usb 1-1: USB disconnect, device number 23 [ 294.071761][ T5813] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 294.081289][ T5813] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 294.093049][ T5813] F2FS-fs (loop2): invalid crc value [ 294.157564][ T5813] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.187852][ T5832] syz-executor.0[5832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.187931][ T5832] syz-executor.0[5832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.208246][ T5813] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 294.233557][ T377] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 294.293079][ T5835] input: syz1 as /devices/virtual/input/input122 [ 294.408810][ T5813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 294.562704][ T5832] FAT-fs (loop0): Directory bread(block 64) failed [ 294.569182][ T5832] FAT-fs (loop0): Directory bread(block 65) failed [ 294.575599][ T5832] FAT-fs (loop0): Directory bread(block 66) failed [ 294.581894][ T5832] FAT-fs (loop0): Directory bread(block 67) failed [ 294.588279][ T5832] FAT-fs (loop0): Directory bread(block 68) failed [ 294.601821][ T5832] FAT-fs (loop0): Directory bread(block 69) failed [ 294.613463][ T5832] FAT-fs (loop0): Directory bread(block 70) failed [ 294.620057][ T5832] FAT-fs (loop0): Directory bread(block 71) failed [ 294.627256][ T5832] FAT-fs (loop0): Directory bread(block 72) failed [ 294.633753][ T5832] FAT-fs (loop0): Directory bread(block 73) failed [ 294.753629][ T5839] input: syz1 as /devices/virtual/input/input123 [ 294.793649][ T377] usb 4-1: device descriptor read/all, error -61 [ 295.021368][ T377] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 295.124012][ T13] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 295.313494][ T377] usb 4-1: device descriptor read/64, error 18 [ 295.623439][ T13] usb 1-1: device descriptor read/64, error 18 [ 295.773558][ T377] usb 4-1: device descriptor read/64, error 18 [ 295.893915][ T377] usb usb4-port1: attempt power cycle [ 296.098656][ T5850] F2FS-fs (loop2): Found nat_bits in checkpoint [ 296.144836][ T5850] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.263478][ T13] usb 1-1: device descriptor read/64, error 18 [ 296.323069][ T377] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 296.423444][ T2117] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 296.466698][ T5861] EXT4-fs (loop1): 1 orphan inode deleted [ 296.472397][ T5861] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 296.489845][ T5861] ext4 filesystem being mounted at /root/syzkaller-testdir4097298061/syzkaller.FCcMsh/11/file1 supports timestamps until 2038 (0x7fffffff) [ 296.493638][ T377] usb 4-1: device descriptor read/8, error -61 [ 296.543543][ T13] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 296.663492][ T2117] usb 3-1: Using ep0 maxpacket: 8 [ 296.833504][ T13] usb 1-1: device descriptor read/64, error 18 [ 296.863544][ T2117] usb 3-1: config 64 has an invalid interface number: 14 but max is 0 [ 296.873646][ T377] usb 4-1: device descriptor read/8, error -71 [ 296.881693][ T2117] usb 3-1: config 64 has no interface number 0 [ 296.887813][ T2117] usb 3-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 296.898905][ T2117] usb 3-1: config 64 interface 14 has no altsetting 0 [ 296.906475][ T5871] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 297.648388][ T7] attempt to access beyond end of device [ 297.648388][ T7] loop0: rw=1, want=1228, limit=256 [ 297.687906][ T2117] usb 3-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 297.696901][ T2117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.704844][ T2117] usb 3-1: Product: syz [ 297.709014][ T2117] usb 3-1: Manufacturer: syz [ 297.713485][ T2117] usb 3-1: SerialNumber: syz [ 297.894778][ T5439] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 297.908469][ T23] audit: type=1326 audit(1719131438.352:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2cd070a9 code=0x0 [ 297.932381][ T5439] EXT4-fs (loop1): Remounting filesystem read-only [ 298.025578][ T2117] usb 3-1: USB disconnect, device number 22 [ 298.140966][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 298.173608][ T13] usb usb1-port1: attempt power cycle [ 298.249623][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 298.351578][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.358468][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.365828][ T5893] device bridge_slave_0 entered promiscuous mode [ 298.372750][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.379896][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.387476][ T5893] device bridge_slave_1 entered promiscuous mode [ 298.403991][ T5895] FAT-fs (loop4): Directory bread(block 64) failed [ 298.410513][ T5895] FAT-fs (loop4): Directory bread(block 65) failed [ 298.417381][ T5895] FAT-fs (loop4): Directory bread(block 66) failed [ 298.423852][ T5895] FAT-fs (loop4): Directory bread(block 67) failed [ 298.430875][ T5895] FAT-fs (loop4): Directory bread(block 68) failed [ 298.437445][ T5895] FAT-fs (loop4): Directory bread(block 69) failed [ 298.450404][ T5895] FAT-fs (loop4): Directory bread(block 70) failed [ 298.457482][ T5895] FAT-fs (loop4): Directory bread(block 71) failed [ 298.502846][ T5505] attempt to access beyond end of device [ 298.502846][ T5505] loop2: rw=2049, want=45104, limit=40427 [ 298.514788][ T5895] FAT-fs (loop4): Directory bread(block 72) failed [ 298.525216][ T5895] FAT-fs (loop4): Directory bread(block 73) failed [ 298.623584][ T13] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 298.712107][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.719060][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.726171][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.732926][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.971476][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 298.985247][ T5288] attempt to access beyond end of device [ 298.985247][ T5288] loop3: rw=2049, want=45104, limit=40427 [ 299.003860][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.011768][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.019757][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.043498][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.051749][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.059972][ T2117] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.066807][ T2117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.074415][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.082680][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.090836][ T2117] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.097675][ T2117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.105060][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.113568][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.123544][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 299.163489][ T13] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 299.172590][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.181403][ T13] usb 1-1: config 0 descriptor?? [ 299.199852][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.208363][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.219849][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.231392][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.240006][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.247940][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.272891][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.281392][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.309256][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.320341][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.330450][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.339672][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.350348][ T7] device bridge_slave_1 left promiscuous mode [ 299.359909][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.368890][ T7] device bridge_slave_0 left promiscuous mode [ 299.375493][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.503618][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 299.913618][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.924801][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.934445][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.943501][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 299.947250][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.952935][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 300.011252][ T5918] input: syz1 as /devices/virtual/input/input124 [ 300.066234][ T13] usb 1-1: USB disconnect, device number 26 [ 300.293834][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.304511][ T24] usb 5-1: config 0 descriptor?? [ 300.513139][ T5922] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 300.725390][ T5911] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 300.735020][ T5911] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.745319][ T5911] F2FS-fs (loop3): invalid crc value [ 300.746670][ T5926] EXT4-fs (loop1): 1 orphan inode deleted [ 300.752512][ T5911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.756179][ T5926] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 300.782314][ T5926] ext4 filesystem being mounted at /root/syzkaller-testdir373493239/syzkaller.4i9tCG/1/file1 supports timestamps until 2038 (0x7fffffff) [ 301.519924][ T5911] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 301.526963][ T5911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 301.543929][ T5288] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 301.553570][ T5288] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 301.563203][ T5288] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 301.573691][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 301.585680][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 301.594702][ T24] usb 5-1: USB disconnect, device number 16 [ 301.635323][ T5288] bridge0: port 3(syz_tun) entered disabled state [ 301.642982][ T5288] device syz_tun left promiscuous mode [ 301.665237][ T5288] bridge0: port 3(syz_tun) entered disabled state [ 301.938678][ T5893] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 301.961607][ T5893] EXT4-fs (loop1): Remounting filesystem read-only [ 301.989601][ T5941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.052865][ T5941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.294727][ T5946] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.341290][ T5946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 302.345143][ T5947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.353627][ T13] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 302.378106][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.389263][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.403123][ T5955] device bridge_slave_0 entered promiscuous mode [ 302.410294][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.417783][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.438940][ T5955] device bridge_slave_1 entered promiscuous mode [ 302.446120][ T7] device bridge_slave_1 left promiscuous mode [ 302.462306][ T5947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 302.462512][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.480148][ T7] device bridge_slave_0 left promiscuous mode [ 302.486567][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.778914][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 302.851872][ T5239] attempt to access beyond end of device [ 302.851872][ T5239] loop4: rw=2049, want=45104, limit=40427 [ 302.863586][ T1448] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 302.944574][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.951476][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.959360][ T5970] device bridge_slave_0 entered promiscuous mode [ 302.966757][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.973918][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.981195][ T5970] device bridge_slave_1 entered promiscuous mode [ 302.987474][ T13] usb 3-1: config 64 has an invalid interface number: 14 but max is 0 [ 302.995774][ T13] usb 3-1: config 64 has no interface number 0 [ 303.001785][ T13] usb 3-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 303.012859][ T13] usb 3-1: config 64 interface 14 has no altsetting 0 [ 303.019810][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.027843][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.056645][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.065480][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.073558][ T2578] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.080420][ T2578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.087992][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.113463][ T1448] usb 1-1: Using ep0 maxpacket: 8 [ 303.127652][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.136348][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.145528][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.152376][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.183525][ T13] usb 3-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 303.192566][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.192780][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.200435][ T13] usb 3-1: Product: syz [ 303.212190][ T13] usb 3-1: Manufacturer: syz [ 303.216708][ T13] usb 3-1: SerialNumber: syz [ 303.218606][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.246803][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.267697][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.288128][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.299047][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.307128][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.313971][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.321858][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.323812][ T1448] usb 1-1: config 64 has an invalid interface number: 14 but max is 0 [ 303.330408][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.345548][ T1448] usb 1-1: config 64 has no interface number 0 [ 303.353544][ T1448] usb 1-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 303.364958][ T1448] usb 1-1: config 64 interface 14 has no altsetting 0 [ 303.373996][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.382022][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.388935][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.404901][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.412673][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.424273][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.433707][ T2117] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 303.451472][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.460140][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.477343][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.498071][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.514239][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.523923][ T1448] usb 1-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 303.532766][ T1448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.543990][ T13] usb 3-1: USB disconnect, device number 23 [ 303.551327][ T1448] usb 1-1: Product: syz [ 303.555866][ T1448] usb 1-1: Manufacturer: syz [ 303.560264][ T1448] usb 1-1: SerialNumber: syz [ 303.578336][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.673586][ T2117] usb 5-1: Using ep0 maxpacket: 16 [ 303.793625][ T2117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 303.806680][ T2117] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 303.816981][ T2117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.828196][ T2117] usb 5-1: config 0 descriptor?? [ 303.912128][ T1448] usb 1-1: USB disconnect, device number 27 [ 303.918272][ T7] device bridge_slave_1 left promiscuous mode [ 303.926963][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.935445][ T7] device bridge_slave_0 left promiscuous mode [ 303.952923][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.001225][ T5505] attempt to access beyond end of device [ 304.001225][ T5505] loop2: rw=2049, want=45104, limit=40427 [ 304.082423][ T5986] bridge0: port 3(syz_tun) entered blocking state [ 304.092889][ T5986] bridge0: port 3(syz_tun) entered disabled state [ 304.100369][ T5986] device syz_tun entered promiscuous mode [ 304.106364][ T5986] bridge0: port 3(syz_tun) entered blocking state [ 304.112601][ T5986] bridge0: port 3(syz_tun) entered forwarding state [ 304.121550][ T5986] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 304.378558][ T5383] attempt to access beyond end of device [ 304.378558][ T5383] loop0: rw=2049, want=45104, limit=40427 [ 304.393538][ T2117] usbhid 5-1:0.0: can't add hid device: -71 [ 304.399370][ T2117] usbhid: probe of 5-1:0.0 failed with error -71 [ 304.423624][ T2117] usb 5-1: USB disconnect, device number 17 [ 304.594688][ T5988] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 304.668492][ T5994] input: syz1 as /devices/virtual/input/input125 [ 304.800425][ T5988] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 304.809898][ T5988] F2FS-fs (loop1): invalid crc value [ 304.816986][ T5988] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.856892][ T5988] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 304.865458][ T5988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 304.883591][ T5955] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 304.916436][ T5955] F2FS-fs (loop1): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 304.926629][ T5955] F2FS-fs (loop1): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 305.577983][ T6002] EXT4-fs (loop4): 1 orphan inode deleted [ 305.596789][ T6002] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 305.639452][ T6002] ext4 filesystem being mounted at /root/syzkaller-testdir3222489646/syzkaller.B0Vgm9/33/file1 supports timestamps until 2038 (0x7fffffff) [ 305.985092][ T377] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 306.110661][ T6017] input: syz1 as /devices/virtual/input/input126 [ 306.379440][ T5239] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 306.393887][ T377] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 306.402729][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.432152][ T377] usb 3-1: config 0 descriptor?? [ 306.444484][ T5239] EXT4-fs (loop4): Remounting filesystem read-only [ 306.525062][ T5239] bridge0: port 3(syz_tun) entered disabled state [ 306.543700][ T5239] device syz_tun left promiscuous mode [ 306.549494][ T5239] bridge0: port 3(syz_tun) entered disabled state [ 306.577964][ T7] device bridge_slave_1 left promiscuous mode [ 306.584969][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.599588][ T7] device bridge_slave_0 left promiscuous mode [ 306.611904][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.734536][ T6009] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 306.775693][ T6009] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 306.785935][ T6009] F2FS-fs (loop3): invalid crc value [ 306.827471][ T6009] F2FS-fs (loop3): Found nat_bits in checkpoint [ 306.900795][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.917162][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.926215][ T6019] device bridge_slave_0 entered promiscuous mode [ 306.933741][ T6009] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 306.940649][ T6009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 306.951769][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.963078][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.970971][ T6019] device bridge_slave_1 entered promiscuous mode [ 307.367416][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.378403][ T6011] erofs: (device loop2): erofs_parse_options: Unrecognized mount option "18446744073709551615i(툵Fp=5L ExڮΣ7dk;\7c|Z~^~017777777777777777777770xffffffffffffffff" or missing value [ 307.392373][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.411409][ T6027] device bridge_slave_0 entered promiscuous mode [ 307.419067][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.425923][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.433336][ T6027] device bridge_slave_1 entered promiscuous mode [ 307.444312][ T6039] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 307.463546][ T377] usb 3-1: Cannot set autoneg [ 307.468126][ T377] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 307.484306][ T377] usb 3-1: USB disconnect, device number 24 [ 307.584512][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.591393][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.598510][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.605266][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.668381][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.676159][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.685696][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.693100][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.720872][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.730244][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.739344][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.748049][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.754918][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.762184][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.771448][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.778317][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.785566][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.793932][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.802027][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.808888][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.831733][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.839604][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.847682][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.854533][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.861756][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.870876][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.894946][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.902968][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.936614][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.946458][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.954826][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.000055][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.009489][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.017540][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.104440][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.135337][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.143700][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.151778][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.160888][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.170230][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.179198][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.188612][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.197960][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.207036][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.228836][ T6046] input: syz1 as /devices/virtual/input/input127 [ 308.269995][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.443662][ T7] device bridge_slave_1 left promiscuous mode [ 308.449649][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.463769][ T7] device bridge_slave_0 left promiscuous mode [ 308.469730][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.515854][ T6049] EXT4-fs (loop2): 1 orphan inode deleted [ 308.521413][ T6049] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 308.553874][ T6049] ext4 filesystem being mounted at /root/syzkaller-testdir221682516/syzkaller.JO9mTG/19/file1 supports timestamps until 2038 (0x7fffffff) [ 309.268673][ T6042] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 309.283471][ T6042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 309.300075][ T6042] F2FS-fs (loop3): invalid crc value [ 309.372660][ T6042] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.455516][ T6042] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 309.462648][ T6042] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 309.507963][ T6052] F2FS-fs (loop1): Found nat_bits in checkpoint [ 309.581197][ T5970] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 309.671810][ T5970] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 309.681779][ T5970] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 309.694304][ T6052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 309.704880][ T5970] bridge0: port 3(syz_tun) entered disabled state [ 309.712131][ T5970] device syz_tun left promiscuous mode [ 309.717449][ T5970] bridge0: port 3(syz_tun) entered disabled state [ 310.131615][ T6019] attempt to access beyond end of device [ 310.131615][ T6019] loop1: rw=2049, want=45104, limit=40427 [ 310.184595][ T6078] F2FS-fs (loop2): Found nat_bits in checkpoint [ 310.229495][ T6078] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 310.267203][ T6085] FAT-fs (loop0): Directory bread(block 64) failed [ 310.273613][ T6085] FAT-fs (loop0): Directory bread(block 65) failed [ 310.279900][ T6085] FAT-fs (loop0): Directory bread(block 66) failed [ 310.286261][ T6085] FAT-fs (loop0): Directory bread(block 67) failed [ 310.292585][ T6085] FAT-fs (loop0): Directory bread(block 68) failed [ 310.363639][ T6092] input: syz1 as /devices/virtual/input/input128 [ 310.463540][ T6085] FAT-fs (loop0): Directory bread(block 69) failed [ 310.472394][ T6085] FAT-fs (loop0): Directory bread(block 70) failed [ 310.478870][ T6085] FAT-fs (loop0): Directory bread(block 71) failed [ 310.485313][ T6085] FAT-fs (loop0): Directory bread(block 72) failed [ 310.491641][ T6085] FAT-fs (loop0): Directory bread(block 73) failed [ 310.623452][ T13] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 311.270537][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 311.385414][ T6108] input: syz1 as /devices/virtual/input/input129 [ 311.467942][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.475135][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.484837][ T6101] device bridge_slave_0 entered promiscuous mode [ 311.495883][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.503054][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.513025][ T6101] device bridge_slave_1 entered promiscuous mode [ 311.519821][ T13] usb 3-1: config 64 has an invalid interface number: 14 but max is 0 [ 311.537430][ T13] usb 3-1: config 64 has no interface number 0 [ 311.550076][ T13] usb 3-1: config 64 interface 14 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 311.572274][ T13] usb 3-1: config 64 interface 14 has no altsetting 0 [ 311.578946][ T395] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 311.610058][ T6111] bridge0: port 3(syz_tun) entered blocking state [ 311.616693][ T6111] bridge0: port 3(syz_tun) entered disabled state [ 311.624812][ T6111] device syz_tun entered promiscuous mode [ 311.630681][ T6111] bridge0: port 3(syz_tun) entered blocking state [ 311.637013][ T6111] bridge0: port 3(syz_tun) entered forwarding state [ 311.653018][ T6111] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 311.688291][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.695183][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.702235][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.709052][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.759387][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.769297][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.777023][ T13] usb 3-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=33.da [ 311.787166][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.795098][ T13] usb 3-1: Product: syz [ 311.799156][ T13] usb 3-1: Manufacturer: syz [ 311.803896][ T13] usb 3-1: SerialNumber: syz [ 311.813542][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.821337][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.830678][ T7] device bridge_slave_1 left promiscuous mode [ 311.837310][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.846161][ T7] device bridge_slave_0 left promiscuous mode [ 311.852418][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.053856][ T395] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 312.062702][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.072987][ T395] usb 1-1: config 0 descriptor?? [ 312.079743][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.088194][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.095055][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.104467][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.112612][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.119470][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.124903][ T13] usb 3-1: USB disconnect, device number 25 [ 312.147148][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.155063][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.183128][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.191498][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.206884][ T6117] EXT4-fs (loop1): 1 orphan inode deleted [ 312.222784][ T6117] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,abort,sysvgroups,delalloc,usrquota, [ 312.241847][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.251061][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.264187][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.273925][ T6117] ext4 filesystem being mounted at /root/syzkaller-testdir2731436160/syzkaller.vF3TX9/3/file1 supports timestamps until 2038 (0x7fffffff) [ 312.853867][ T5505] attempt to access beyond end of device [ 312.853867][ T5505] loop2: rw=2049, want=45104, limit=40427 [ 312.984784][ T6129] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 313.124917][ T6115] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 313.134285][ T6115] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 313.143941][ T6115] F2FS-fs (loop4): invalid crc value [ 313.151148][ T6115] F2FS-fs (loop4): Found nat_bits in checkpoint [ 313.158801][ T6019] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 313.174497][ T6019] EXT4-fs (loop1): Remounting filesystem read-only [ 313.204960][ T6105] erofs: (device loop0): erofs_parse_options: Unrecognized mount option "18446744073709551615i(툵Fp=5L ExڮΣ7dk;\7c|Z~^~017777777777777777777770xffffffffffffffff" or missing value [ 313.231025][ T6115] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 313.237894][ T6115] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 313.266001][ T6019] bridge0: port 3(syz_tun) entered disabled state [ 313.273017][ T6019] device syz_tun left promiscuous mode [ 313.278393][ T6019] bridge0: port 3(syz_tun) entered disabled state [ 313.353870][ T6027] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 313.354203][ T395] usb 1-1: Cannot set autoneg [ 313.388325][ T6027] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 313.391510][ T395] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 313.414482][ T395] usb 1-1: USB disconnect, device number 28 [ 313.420648][ T6027] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 313.525968][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.533071][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.541341][ T6155] device bridge_slave_0 entered promiscuous mode [ 313.553205][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.561016][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.569310][ T6155] device bridge_slave_1 entered promiscuous mode [ 313.849092][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.856139][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.863254][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.870016][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.025055][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.032933][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.042610][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.075417][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.103570][ T7] device bridge_slave_1 left promiscuous mode [ 314.109542][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.139485][ T7] device bridge_slave_0 left promiscuous mode [ 314.157396][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.184860][ T6166] F2FS-fs (loop3): Found nat_bits in checkpoint [ 314.316621][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.333606][ T6166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.333785][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.347860][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.384861][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.391749][ T6101] attempt to access beyond end of device [ 314.391749][ T6101] loop3: rw=2049, want=45104, limit=40427 [ 314.412527][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.419380][ T638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.448939][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.462661][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.498310][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.514988][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.524335][ T638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.558555][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.567754][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.584655][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.593216][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.601637][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.610099][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.647025][ T6194] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 314.682232][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.856703][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.863660][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.871088][ T6186] device bridge_slave_0 entered promiscuous mode [ 314.877800][ T23] audit: type=1400 audit(1719131455.192:489): avc: denied { read } for pid=6190 comm="syz-executor.2" name="file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 314.912008][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.919057][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.939099][ T6186] device bridge_slave_1 entered promiscuous mode [ 315.003603][ T638] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 315.040720][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x1 [ 315.049535][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.056793][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.064027][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.071160][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.078423][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.085599][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x4 [ 315.092782][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.100021][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x2 [ 315.107225][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.114409][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.116041][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.123474][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.128427][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.136912][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.142764][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.149886][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x4 [ 315.156714][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.163939][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.178192][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.187251][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.194924][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.202384][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.209584][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.216950][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.224243][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.231492][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.238710][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.245961][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.253104][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.260350][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.267544][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.270130][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.274756][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.288968][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.296385][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.298303][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.310493][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.313452][ T638] usb 1-1: Using ep0 maxpacket: 32 [ 315.317788][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.322960][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.330008][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.344464][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.351609][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.359014][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.366254][ T1437] hid-generic 0000:0200:0000.000E: unknown main item tag 0x0 [ 315.374428][ T1437] hid-generic 0000:0200:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 315.378834][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.392397][ T2578] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.399258][ T2578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.409249][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.418035][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.424905][ T2578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.453831][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.461588][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.483523][ T638] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.497077][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.512551][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.520804][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.544015][ T1437] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 315.556679][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.563545][ T638] usb 1-1: config 0 has no interfaces? [ 315.565284][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.588721][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.596901][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.609865][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.618448][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.763673][ T638] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.772755][ T638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.781233][ T638] usb 1-1: Product: syz [ 315.785400][ T638] usb 1-1: Manufacturer: syz [ 315.789832][ T638] usb 1-1: SerialNumber: syz [ 315.798771][ T638] usb 1-1: config 0 descriptor?? [ 316.003727][ T7] device bridge_slave_1 left promiscuous mode [ 316.009733][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.016991][ T7] device bridge_slave_0 left promiscuous mode [ 316.022941][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.033550][ T121] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 316.086812][ T6198] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 316.096166][ T1437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.097291][ T6198] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 316.107203][ T1437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.116270][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 316.116577][ T6198] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 316.126140][ T1437] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 316.133514][ T6198] EXT4-fs (loop0): can't mount with dioread_nolock if block size != PAGE_SIZE [ 316.140369][ T1437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.167131][ T1437] usb 3-1: config 0 descriptor?? [ 316.226789][ T395] usb 1-1: USB disconnect, device number 29 [ 316.403550][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.414490][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.424404][ T121] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 316.433232][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.441861][ T121] usb 2-1: config 0 descriptor?? [ 316.445207][ T6206] EXT4-fs (loop2): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 316.513637][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.524603][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.534837][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 316.543709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.547103][ T23] audit: type=1400 audit(1719131456.992:490): avc: denied { mount } for pid=6205 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 316.552398][ T24] usb 5-1: config 0 descriptor?? [ 316.593576][ T638] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 316.666804][ T23] audit: type=1400 audit(1719131457.112:491): avc: denied { remount } for pid=6205 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 316.747965][ T23] audit: type=1400 audit(1719131457.192:492): avc: denied { write } for pid=6236 comm="syz-executor.0" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.769555][ T1437] usbhid 3-1:0.0: can't add hid device: -71 [ 316.775342][ T23] audit: type=1400 audit(1719131457.192:493): avc: denied { setattr } for pid=6236 comm="syz-executor.0" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.775369][ T1437] usbhid: probe of 3-1:0.0 failed with error -71 [ 316.804229][ T1437] usb 3-1: USB disconnect, device number 26 [ 316.894995][ T121] hid-rmi 0003:06CB:81A7.000F: unknown main item tag 0x0 [ 316.902001][ T121] hid-rmi 0003:06CB:81A7.000F: unknown main item tag 0x0 [ 316.908911][ T121] hid-rmi 0003:06CB:81A7.000F: unknown main item tag 0x0 [ 316.915794][ T121] hid-rmi 0003:06CB:81A7.000F: unknown main item tag 0x0 [ 316.922598][ T121] hid-rmi 0003:06CB:81A7.000F: unknown main item tag 0x0 [ 316.930529][ T121] hid-rmi 0003:06CB:81A7.000F: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 316.963529][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.974290][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.983759][ T638] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 316.992604][ T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.001285][ T638] usb 4-1: config 0 descriptor?? [ 317.023535][ T18] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 317.054901][ T24] hid-generic 0003:046D:C222.0010: item fetching failed at offset 7/11 [ 317.063270][ T24] hid-generic: probe of 0003:046D:C222.0010 failed with error -22 [ 317.094696][ T24] usb 2-1: USB disconnect, device number 17 [ 317.179276][ T23] audit: type=1400 audit(1719131457.622:494): avc: denied { unmount } for pid=5505 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 317.383492][ T18] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 317.392294][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.403098][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.412880][ T18] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 317.422565][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.432023][ T18] usb 1-1: config 0 descriptor?? [ 317.475677][ T638] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 317.483675][ T638] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 317.490608][ T638] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 317.498142][ T638] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 317.505161][ T638] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 317.515507][ T638] hid-rmi 0003:06CB:81A7.0011: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 317.675013][ T24] usb 4-1: USB disconnect, device number 30 [ 317.963508][ T18] usbhid 1-1:0.0: can't add hid device: -71 [ 317.969305][ T18] usbhid: probe of 1-1:0.0 failed with error -71 [ 317.976942][ T18] usb 1-1: USB disconnect, device number 30 [ 318.473469][ T121] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 318.693268][ T18] usb 5-1: USB disconnect, device number 18 [ 318.843531][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.854534][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.864404][ T121] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 318.881079][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.891992][ T121] usb 2-1: config 0 descriptor?? [ 319.104755][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 319.363483][ T1448] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 319.374933][ T121] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 319.381822][ T121] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 319.388720][ T121] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 319.395519][ T121] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 319.402339][ T121] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 319.410418][ T121] hid-rmi 0003:06CB:81A7.0012: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 319.583654][ T121] usb 2-1: USB disconnect, device number 18 [ 319.719336][ T23] audit: type=1400 audit(1719131460.162:495): avc: denied { execute } for pid=6340 comm="syz-executor.0" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 319.723558][ T1448] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.750975][ T1448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.761937][ T1448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.771583][ T1448] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 319.780459][ T1448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.789226][ T1448] usb 5-1: config 0 descriptor?? [ 320.333568][ T1448] usbhid 5-1:0.0: can't add hid device: -71 [ 320.339379][ T1448] usbhid: probe of 5-1:0.0 failed with error -71 [ 320.354778][ T1448] usb 5-1: USB disconnect, device number 19 [ 320.885056][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 320.954529][ T18] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 321.313551][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.324325][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.333818][ T18] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 321.342664][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.351273][ T18] usb 3-1: config 0 descriptor?? [ 321.553472][ T2578] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 321.835159][ T18] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 321.842230][ T18] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 321.849799][ T18] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 321.856987][ T18] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 321.864358][ T18] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 321.872781][ T23] audit: type=1400 audit(1719131462.312:496): avc: denied { ioctl } for pid=6452 comm="syz-executor.0" path="socket:[58130]" dev="sockfs" ino=58130 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.914366][ T18] hid-rmi 0003:06CB:81A7.0013: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 321.933497][ T2578] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.942206][ T2578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.956943][ T2578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.970775][ T2578] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 321.980463][ T2578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.989331][ T2578] usb 4-1: config 0 descriptor?? [ 322.038127][ T1448] usb 3-1: USB disconnect, device number 27 [ 322.534755][ T2578] usbhid 4-1:0.0: can't add hid device: -71 [ 322.540903][ T2578] usbhid: probe of 4-1:0.0 failed with error -71 [ 322.548428][ T2578] usb 4-1: USB disconnect, device number 31 [ 323.132279][ T6540] kasan: CONFIG_KASAN_INLINE enabled [ 323.137967][ T6540] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 323.145875][ T6540] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 323.152617][ T6540] CPU: 0 PID: 6540 Comm: syz-executor.1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 323.162589][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 323.172500][ T6540] RIP: 0010:bpf_skb_cgroup_id+0x10f/0x190 [ 323.178039][ T6540] Code: c7 a0 02 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f0 34 0c fe bb 40 01 00 00 49 03 1f 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 d2 34 0c fe 48 8b 1b 48 83 c3 68 [ 323.197483][ T6540] RSP: 0018:ffff8881d76af640 EFLAGS: 00010206 [ 323.203381][ T6540] RAX: 0000000000000028 RBX: 0000000000000140 RCX: 0000000000040000 [ 323.211194][ T6540] RDX: ffffc9000036b000 RSI: 00000000000000f4 RDI: 00000000000000f5 [ 323.219005][ T6540] RBP: ffff8881d76af690 R08: ffffffff8387ec16 R09: ffff8881d76af760 [ 323.226816][ T6540] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 323.234629][ T6540] R13: ffffffb4c535f7ef R14: ffff8881d7f0b012 R15: ffff8881d7f0b2a0 [ 323.242440][ T6540] FS: 00007fa671bd06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 323.251205][ T6540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.257628][ T6540] CR2: 00007fa6729890c0 CR3: 00000001e1710000 CR4: 00000000003406b0 [ 323.265439][ T6540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.273250][ T6540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.281072][ T6540] Call Trace: [ 323.284205][ T6540] ? __die+0xb4/0x100 [ 323.288005][ T6540] ? die+0x26/0x50 [ 323.291564][ T6540] ? do_general_protection+0x266/0x3c0 [ 323.296859][ T6540] ? __kasan_kmalloc+0x1d9/0x210 [ 323.301638][ T6540] ? do_trap+0x340/0x340 [ 323.305710][ T6540] ? __kasan_kmalloc+0x171/0x210 [ 323.310486][ T6540] ? kmem_cache_alloc+0xd9/0x250 [ 323.315256][ T6540] ? build_skb+0x26/0x440 [ 323.319421][ T6540] ? bpf_prog_test_run_skb+0x302/0xf00 [ 323.324720][ T6540] ? do_syscall_64+0xca/0x1c0 [ 323.329231][ T6540] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 323.335135][ T6540] ? general_protection+0x28/0x30 [ 323.340008][ T6540] ? bpf_skb_cgroup_id+0xd6/0x190 [ 323.344859][ T6540] ? bpf_skb_cgroup_id+0x10f/0x190 [ 323.349804][ T6540] bpf_prog_3f360b671dbac6d1+0xc6f/0x1000 [ 323.355361][ T6540] bpf_test_run+0x2ae/0x6c0 [ 323.359702][ T6540] ? bpf_ctx_init+0x1a0/0x1a0 [ 323.364213][ T6540] ? build_skb+0x259/0x440 [ 323.368466][ T6540] bpf_prog_test_run_skb+0x73c/0xf00 [ 323.373588][ T6540] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 323.379227][ T6540] ? __bpf_prog_get+0x296/0x310 [ 323.383912][ T6540] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 323.389554][ T6540] __se_sys_bpf+0x2e37/0xbcb0 [ 323.394072][ T6540] ? futex_wait+0x612/0x890 [ 323.398412][ T6540] ? do_futex+0x19f0/0x19f0 [ 323.402750][ T6540] ? __x64_sys_bpf+0x80/0x80 [ 323.407183][ T6540] ? do_futex+0x13c1/0x19f0 [ 323.411514][ T6540] ? rwsem_optimistic_spin+0x660/0x660 [ 323.416823][ T6540] ? __fdget+0x189/0x200 [ 323.420887][ T6540] ? do_recvmmsg+0x175/0x940 [ 323.425314][ T6540] ? do_recvmmsg+0x210/0x940 2024/06/23 08:31:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 323.429741][ T6540] ? futex_exit_release+0x1e0/0x1e0 [ 323.432801][ T23] audit: type=1400 audit(1719131463.592:497): avc: denied { write } for pid=346 comm="syz-fuzzer" path="pipe:[10667]" dev="pipefs" ino=10667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 323.434777][ T6540] ? fget_many+0x20/0x20 [ 323.434790][ T6540] ? __sys_recvmmsg+0x270/0x270 [ 323.434801][ T6540] ? __mm_populate+0x477/0x510 [ 323.434821][ T6540] ? check_preemption_disabled+0x153/0x320 [ 323.476801][ T6540] ? debug_smp_processor_id+0x20/0x20 [ 323.481984][ T6540] ? __se_sys_futex+0x355/0x470 [ 323.486670][ T6540] ? __schedule_bug+0x1f0/0x1f0 [ 323.491360][ T6540] do_syscall_64+0xca/0x1c0 [ 323.495692][ T6540] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 323.501419][ T6540] RIP: 0033:0x7fa6728560a9 [ 323.505670][ T6540] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 323.525110][ T6540] RSP: 002b:00007fa671bd00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.533360][ T6540] RAX: ffffffffffffffda RBX: 00007fa67298cf80 RCX: 00007fa6728560a9 [ 323.541164][ T6540] RDX: 0000000000000028 RSI: 0000000020000440 RDI: 000000000000000a [ 323.548979][ T6540] RBP: 00007fa6728c5074 R08: 0000000000000000 R09: 0000000000000000 [ 323.556791][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.564599][ T6540] R13: 000000000000000b R14: 00007fa67298cf80 R15: 00007ffd24c71a28 [ 323.572412][ T6540] Modules linked in: [ 323.576237][ T6540] ---[ end trace 20526690afe28651 ]--- [ 323.581445][ T6540] RIP: 0010:bpf_skb_cgroup_id+0x10f/0x190 [ 323.587020][ T6540] Code: c7 a0 02 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f0 34 0c fe bb 40 01 00 00 49 03 1f 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 d2 34 0c fe 48 8b 1b 48 83 c3 68 [ 323.606460][ T6540] RSP: 0018:ffff8881d76af640 EFLAGS: 00010206 [ 323.612334][ T6540] RAX: 0000000000000028 RBX: 0000000000000140 RCX: 0000000000040000 [ 323.620189][ T6540] RDX: ffffc9000036b000 RSI: 00000000000000f4 RDI: 00000000000000f5 [ 323.627981][ T6540] RBP: ffff8881d76af690 R08: ffffffff8387ec16 R09: ffff8881d76af760 [ 323.635790][ T6540] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 323.643597][ T6540] R13: ffffffb4c535f7ef R14: ffff8881d7f0b012 R15: ffff8881d7f0b2a0 [ 323.651405][ T6540] FS: 00007fa671bd06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 323.660531][ T6540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.666946][ T6540] CR2: 00007fa6729890c0 CR3: 00000001e1710000 CR4: 00000000003406b0 [ 323.674772][ T6540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.682542][ T6540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.690382][ T6540] Kernel panic - not syncing: Fatal exception [ 323.696543][ T6540] Kernel Offset: disabled [ 323.700668][ T6540] Rebooting in 86400 seconds..