last executing test programs: 5.911464278s ago: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/207, 0xcf}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.882702992s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) sendmmsg$unix(r3, &(0x7f0000000240)=[{{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x12, 0x0}}], 0x1, 0x0) 4.962112424s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r2, 0x0, 0x0) 4.120484424s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 4.110980036s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x5, {0x5, 0x0, '\x00\x00\a'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 3.816855221s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01030001000000d40b0005"], 0x14}}, 0x0) 3.766489859s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000300)=""/211, 0xd3}], 0x1) rt_sigreturn() write$binfmt_elf32(r2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8946, &(0x7f0000000500)) 3.676515862s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c87e01cd", "920252f1"}}, 0x0}, 0x0) 2.745644686s ago: executing program 4: open(0x0, 0x149000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0a000600ffffffffffff000005008a000000"], 0x30}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x68, 0x0, &(0x7f00000009c0)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000008c0)={@fda={0x66646185, 0x5, 0x1, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/207, 0xcf, 0x0, 0xe}, @fda}, 0x0}}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001800ffff00000000000000000a0000000000000900000000040008802921df8f536de6b2ad63756a8f2d13b89c480af48e36278bb8a2df8823e7c1768b5e1612c07af3d3d94493c8f7dce8b453e6b62eb09a303f3b7eeee123ddb52b57d685699b914c7a8f4976a0b6cd3b1e0a6e79f7e08f7df3c7247a1d6cab0e780859a6"], 0x20}}, 0x0) 2.493642265s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001340)=ANY=[], 0x10}], 0x1}, 0x0) rt_sigreturn() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000000100)=""/229, 0xe5}], 0x1}}], 0x1, 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) 2.33448208s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) rt_sigreturn() shutdown(r1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 2.328145941s ago: executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x5452, &(0x7f0000002100)) 2.318436772s ago: executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0xb8) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="190dd2df6635833a2d369df737dfba92fa278cdd127bf625d5177c41b18e39868a852a96130889e808de7ba217c15608d2aa1d63ae763f630c76fca7ad4781406076999216e9aeec1915fc869c5f2592c0b2bc8324c651a54756574cfd8dfc7efdd64bb68542f93ce73a9b1ad5b45f7a66929e2c65856d93ad2af33d60f0d45a220f9d569089c40c675dca6cc019fe16bdf51cae2e26c60d179c41144177a81560e912778dfb3879517c1b0f8e0f30d84642d0016d85c431d38276f19584527975d210e06c7829b45fc83abe55773a52075fd0b69b078f761bbbb4cfd6c088b6583597a0d2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @private1, 0xffff}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) fchmod(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x3, @desc1}) chdir(&(0x7f00000003c0)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 2.033228976s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r2}, 0x10) write$cgroup_pid(r1, &(0x7f0000000980), 0x12) 1.94225991s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4031ccc400003b228402dc17dd62768915504c8d486b086b1367501e24cab926e50c75c38e2d658c6f631c306938c5794e43140cdeb5b4c759402b229bd5373535"], &(0x7f0000000340)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "7a67fc252ad10707a61bf0f283e9954eb1ec6417d889777616f3193194d3a930150da38c4591e42522e5c8e4e5aa46986b7e5e6674e3fc19a689b0e2c006d3b0bb467b99ba2ae276884006bf93c6f864464baa924bc833ff7bbcc01829191356959998de604fd81b44cf9d39ca1f0a1cbb8d6321fdbdbcd5eb086b20ac0f24794a0739e1b7a18fda32bbe92fd641ac1413ad287481529bb50622b21351eb9948d76ba6992077b476"}}, &(0x7f0000000000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x2, 0x6, "c87e01cd", "920252f1"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x1f, 0x0, 0x63, 0x20, 0x198b}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x30, 0x14, "412a993c1f46dcfb8e8202e2abcaf1417da95cbd"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0xb, 0x2, "6fd0"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x13, 0x6, @random="1e8bac7317e6"}, &(0x7f0000000740)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "c5af"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x81}}) 1.846129845s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800008000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000013213f0000c50000000e0095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.836200136s ago: executing program 2: unshare(0x20020000) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffcc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window={0x3, 0x0, 0x8000}, @timestamp, @mss={0x2, 0x2}, @window={0x3, 0x0, 0x7fff}, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) 1.770365767s ago: executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x11) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 1.450951946s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x0, 0x400, 0x200, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x5}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000850000000500000095", @ANYBLOB="31fb7e"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0xfffff07a, 0x5bb6, 0x141, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18009636000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r11 = open(&(0x7f0000000200)='./file0\x00', 0xe20040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x1204, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r10}, 0x10) 985.034638ms ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x81, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x2, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010103}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xde, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 879.336934ms ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000340)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_DIRENTPLUS(r7, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 549.126415ms ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="1201000000000040ac052a0200100000000109022400010000000009040000010300020009210000f601220000090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x8, "8d6f01a2abcf87c3"}, 0x0}) 513.25962ms ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000010140)) timer_settime(0x0, 0x0, &(0x7f00000101c0)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r2 = dup(r1) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") write$P9_RSYMLINK(r2, 0x0, 0x0) 347.868356ms ago: executing program 4: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 343.965427ms ago: executing program 2: socket$inet6(0xa, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/93, 0x5d) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000005300000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 189.30804ms ago: executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 183.188352ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r2}, 0x10) write$cgroup_pid(r1, &(0x7f0000000980), 0x12) 128.67684ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 19.583457ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xdd, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0xe065) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x800, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000580)=""/137, 0x89}], 0x3) open(&(0x7f0000000240)='./file0\x00', 0x341, 0x0) open(0x0, 0x0, 0x0) 0s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000b00)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001e80)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) kernel console output (not intermixed with test programs): us mode [ 542.906964][ T332] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 543.880850][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 543.946969][T12599] loop4: detected capacity change from 0 to 131072 [ 544.484422][T12645] loop0: detected capacity change from 0 to 512 [ 544.545331][T12645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 544.573369][T12645] EXT4-fs (loop0): 1 orphan inode deleted [ 544.578997][T12645] EXT4-fs (loop0): 1 truncate cleaned up [ 544.584568][T12645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 544.611724][T12599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 544.681022][ T332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.697220][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.710181][ T332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 544.719342][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.728512][ T332] usb 4-1: config 0 descriptor?? [ 544.773215][ T8513] EXT4-fs (loop0): unmounting filesystem. [ 544.779358][ T332] hub 4-1:0.0: bad descriptor, ignoring hub [ 544.785655][ T332] hub: probe of 4-1:0.0 failed with error -5 [ 544.797368][ T332] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 546.523429][T11613] usb 4-1: USB disconnect, device number 38 [ 547.586245][T12689] device veth0_vlan left promiscuous mode [ 547.594459][T12689] device veth0_vlan entered promiscuous mode [ 548.003821][T12692] device veth0_vlan left promiscuous mode [ 548.009907][T12692] device veth0_vlan entered promiscuous mode [ 548.318157][T12703] loop1: detected capacity change from 0 to 512 [ 548.361965][T12703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.515764][T12703] EXT4-fs (loop1): 1 orphan inode deleted [ 548.521386][T12703] EXT4-fs (loop1): 1 truncate cleaned up [ 548.526796][T12703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 548.606531][T12711] device pim6reg1 entered promiscuous mode [ 548.811449][T12706] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 548.948649][T12706] EXT4-fs (loop1): Remounting filesystem read-only [ 548.956468][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 549.111002][T11613] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 549.307676][T12701] loop2: detected capacity change from 0 to 131072 [ 549.316844][T12701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 549.341141][T12701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 549.354467][ T28] audit: type=1326 audit(1718328091.843:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bbda7cea9 code=0x0 [ 549.381047][T11613] usb 1-1: Using ep0 maxpacket: 32 [ 549.384432][T12735] loop4: detected capacity change from 0 to 256 [ 549.581243][T11613] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.636137][T11613] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 549.726220][T11613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.741206][T11613] usb 1-1: config 0 descriptor?? [ 549.791787][T11613] hub 1-1:0.0: bad descriptor, ignoring hub [ 549.799553][T11613] hub: probe of 1-1:0.0 failed with error -5 [ 549.805853][T11613] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 549.932635][T12750] device veth0_vlan left promiscuous mode [ 549.940693][T12750] device veth0_vlan entered promiscuous mode [ 550.872019][T12763] device pim6reg1 entered promiscuous mode [ 551.669818][T12773] loop1: detected capacity change from 0 to 512 [ 551.704206][T12773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 551.898609][T12773] EXT4-fs (loop1): 1 orphan inode deleted [ 551.904291][T12773] EXT4-fs (loop1): 1 truncate cleaned up [ 551.909764][T12773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 551.991200][ T234] usb 1-1: USB disconnect, device number 30 [ 552.346020][T12794] device veth0_vlan left promiscuous mode [ 552.352172][T12794] device veth0_vlan entered promiscuous mode [ 552.396829][T12801] device veth0_vlan left promiscuous mode [ 552.405017][T12801] device veth0_vlan entered promiscuous mode [ 552.467912][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 554.679693][T12842] loop3: detected capacity change from 0 to 512 [ 554.712543][T12842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 554.843828][ T332] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 554.856892][T12842] EXT4-fs (loop3): 1 orphan inode deleted [ 554.862504][T12842] EXT4-fs (loop3): 1 truncate cleaned up [ 554.867916][T12842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 555.510238][T12847] device veth0_vlan left promiscuous mode [ 555.522633][T12847] device veth0_vlan entered promiscuous mode [ 555.896644][T12849] device veth0_vlan left promiscuous mode [ 555.910317][T12849] device veth0_vlan entered promiscuous mode [ 556.015067][ T2275] EXT4-fs (loop3): unmounting filesystem. [ 556.097877][T12862] device pim6reg1 entered promiscuous mode [ 556.140095][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 556.223340][T12872] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 556.232118][T12872] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 556.240335][T12872] overlayfs: empty lowerdir [ 556.261119][ T332] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.274523][ T332] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.548682][T12881] loop4: detected capacity change from 0 to 512 [ 556.557407][T12881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 556.647424][T12881] EXT4-fs (loop4): 1 orphan inode deleted [ 556.653174][T12881] EXT4-fs (loop4): 1 truncate cleaned up [ 556.658758][T12881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 556.763428][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.812244][ T332] usb 2-1: config 0 descriptor?? [ 556.849173][ T332] usb 2-1: can't set config #0, error -71 [ 556.856271][ T332] usb 2-1: USB disconnect, device number 36 [ 557.204849][ T7453] EXT4-fs (loop4): unmounting filesystem. [ 557.748493][T12897] device veth0_vlan left promiscuous mode [ 557.756705][T12897] device veth0_vlan entered promiscuous mode [ 557.842241][T12909] device veth0_vlan left promiscuous mode [ 557.850301][T12909] device veth0_vlan entered promiscuous mode [ 557.928059][T12911] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 557.936875][T12911] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 557.945217][T12911] overlayfs: empty lowerdir [ 559.040986][ T332] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 559.184701][T12943] loop2: detected capacity change from 0 to 512 [ 559.195426][T12943] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 559.308752][T12943] EXT4-fs (loop2): 1 orphan inode deleted [ 559.314493][T12943] EXT4-fs (loop2): 1 truncate cleaned up [ 559.320042][T12943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 559.660987][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 559.781008][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.805822][ T332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.864129][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.883426][ T332] usb 4-1: config 0 descriptor?? [ 559.892818][ T2110] EXT4-fs (loop2): unmounting filesystem. [ 559.912679][T12954] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 559.921535][ T332] hub 4-1:0.0: bad descriptor, ignoring hub [ 559.927319][ T332] hub: probe of 4-1:0.0 failed with error -5 [ 559.931128][T12954] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 559.941141][ T332] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 559.953473][T12954] overlayfs: empty lowerdir [ 560.322300][T12967] loop2: detected capacity change from 0 to 256 [ 561.703180][T12969] device veth0_vlan left promiscuous mode [ 561.709361][T12969] device veth0_vlan entered promiscuous mode [ 561.959835][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.967920][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.979788][ T234] usb 4-1: USB disconnect, device number 39 [ 562.014163][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 562.050503][T12984] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 562.059541][T12984] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 562.068285][T12984] overlayfs: empty lowerdir [ 562.832278][T12997] loop0: detected capacity change from 0 to 512 [ 563.590905][T12994] device veth0_vlan left promiscuous mode [ 563.597328][T12994] device veth0_vlan entered promiscuous mode [ 564.018619][T12997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 564.059907][T12997] EXT4-fs (loop0): 1 orphan inode deleted [ 564.065873][T12997] EXT4-fs (loop0): 1 truncate cleaned up [ 564.071546][T12997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 564.082164][T13009] loop2: detected capacity change from 0 to 256 [ 564.243051][ T8513] EXT4-fs (loop0): unmounting filesystem. [ 565.030962][ T887] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 565.280572][T13029] device veth0_vlan left promiscuous mode [ 565.288894][T13029] device veth0_vlan entered promiscuous mode [ 565.351032][ T887] usb 4-1: Using ep0 maxpacket: 32 [ 565.471036][ T887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.474686][T13033] loop4: detected capacity change from 0 to 256 [ 565.484584][ T887] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 565.496126][ T887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.586385][ T887] usb 4-1: config 0 descriptor?? [ 566.523357][ T887] hub 4-1:0.0: bad descriptor, ignoring hub [ 566.529127][ T887] hub: probe of 4-1:0.0 failed with error -5 [ 566.536194][ T887] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 566.595520][T13046] incfs: Backing dir is not set, filesystem can't be mounted. [ 566.605060][T13046] incfs: mount failed -2 [ 566.651406][T13056] loop2: detected capacity change from 0 to 256 [ 567.708611][T13064] loop1: detected capacity change from 0 to 512 [ 567.723466][T13057] device veth0_vlan left promiscuous mode [ 567.731310][T13057] device veth0_vlan entered promiscuous mode [ 567.854143][T13064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 567.876029][T13064] EXT4-fs (loop1): 1 orphan inode deleted [ 567.881990][T13064] EXT4-fs (loop1): 1 truncate cleaned up [ 567.887447][T13064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 568.164747][T13081] device veth0_vlan left promiscuous mode [ 568.172407][T13081] device veth0_vlan entered promiscuous mode [ 568.294323][ T887] usb 4-1: USB disconnect, device number 40 [ 568.361980][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 568.467536][T13089] device veth0_vlan left promiscuous mode [ 568.473716][T13089] device veth0_vlan entered promiscuous mode [ 569.418549][T13097] loop1: detected capacity change from 0 to 256 [ 569.655066][T13111] loop4: detected capacity change from 0 to 256 [ 570.518069][T13126] loop1: detected capacity change from 0 to 512 [ 570.528318][T13126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 570.631025][ T887] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 570.696800][T13126] EXT4-fs (loop1): 1 orphan inode deleted [ 570.702496][T13126] EXT4-fs (loop1): 1 truncate cleaned up [ 570.708073][T13126] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 571.665752][T13136] device veth0_vlan left promiscuous mode [ 571.675425][T13136] device veth0_vlan entered promiscuous mode [ 571.828288][ T887] usb 1-1: Using ep0 maxpacket: 32 [ 571.885341][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 572.155001][ T887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.165334][ T887] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 572.176343][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.410995][ T887] usb 1-1: config 0 descriptor?? [ 572.493319][ T887] hub 1-1:0.0: bad descriptor, ignoring hub [ 572.512541][ T887] hub: probe of 1-1:0.0 failed with error -5 [ 572.568707][ T887] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 573.321657][T13173] device veth0_vlan left promiscuous mode [ 573.327808][T13173] device veth0_vlan entered promiscuous mode [ 573.345933][T13180] loop3: detected capacity change from 0 to 512 [ 573.371918][T13180] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 573.490093][T13180] EXT4-fs (loop3): 1 orphan inode deleted [ 573.496163][T13180] EXT4-fs (loop3): 1 truncate cleaned up [ 573.502099][T13180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 573.850091][ T2275] EXT4-fs (loop3): unmounting filesystem. [ 575.461173][T13195] device veth0_vlan left promiscuous mode [ 575.474796][T13195] device veth0_vlan entered promiscuous mode [ 575.961815][ T887] usb 1-1: USB disconnect, device number 31 [ 576.792958][T13230] loop0: detected capacity change from 0 to 40427 [ 576.801710][T13230] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 576.809268][T13230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 576.824604][T13230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 576.857821][T13230] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 576.864936][T13230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 576.877563][T13226] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 576.887789][T13226] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 577.211084][ T339] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 577.554949][T13257] device veth0_vlan left promiscuous mode [ 577.563177][T13257] device veth0_vlan entered promiscuous mode [ 577.646638][ T339] usb 5-1: Using ep0 maxpacket: 32 [ 579.207267][T13266] device veth0_vlan left promiscuous mode [ 579.220232][T13266] device veth0_vlan entered promiscuous mode [ 579.449404][T13276] geneve1: tun_chr_ioctl cmd 1074025681 [ 579.475339][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.485217][ T339] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.494346][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.503003][ T339] usb 5-1: config 0 descriptor?? [ 579.557546][ T339] hub 5-1:0.0: bad descriptor, ignoring hub [ 579.565494][ T339] hub: probe of 5-1:0.0 failed with error -5 [ 579.575736][ T339] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 579.928055][T13291] device veth0_vlan left promiscuous mode [ 579.936379][T13291] device veth0_vlan entered promiscuous mode [ 580.081034][ T339] usb 5-1: USB disconnect, device number 26 [ 580.173723][T13300] 9pnet_fd: Insufficient options for proto=fd [ 581.016448][T13315] geneve1: tun_chr_ioctl cmd 1074025681 [ 582.009346][T13323] device veth0_vlan left promiscuous mode [ 582.015614][T13323] device veth0_vlan entered promiscuous mode [ 582.300864][ T332] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 582.491010][T13345] device veth0_vlan left promiscuous mode [ 582.499426][T13345] device veth0_vlan entered promiscuous mode [ 582.680876][ T332] usb 5-1: Using ep0 maxpacket: 32 [ 582.800951][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.811836][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.821446][ T332] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 582.830254][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.838614][ T332] usb 5-1: config 0 descriptor?? [ 582.884461][ T332] hub 5-1:0.0: USB hub found [ 583.039370][T13357] 9pnet_fd: Insufficient options for proto=fd [ 583.161018][ T332] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 584.059952][T13370] device veth0_vlan left promiscuous mode [ 584.068286][T13370] device veth0_vlan entered promiscuous mode [ 584.401045][ T332] usbhid 5-1:0.0: can't add hid device: -71 [ 584.406956][ T332] usbhid: probe of 5-1:0.0 failed with error -71 [ 584.443387][ T332] usb 5-1: USB disconnect, device number 27 [ 584.754398][T13388] device veth0_vlan left promiscuous mode [ 584.760498][T13388] device veth0_vlan entered promiscuous mode [ 584.778653][T13391] loop1: detected capacity change from 0 to 512 [ 584.791647][T13391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 584.850729][T13391] EXT4-fs (loop1): 1 orphan inode deleted [ 584.856364][T13391] EXT4-fs (loop1): 1 truncate cleaned up [ 584.861907][T13391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 585.353139][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 585.621010][ T339] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 585.758270][T13417] device veth0_vlan left promiscuous mode [ 585.766504][T13417] device veth0_vlan entered promiscuous mode [ 586.088728][T13422] 9pnet_fd: Insufficient options for proto=fd [ 586.201082][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.212238][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.222331][ T339] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 586.231573][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.240081][ T339] usb 3-1: config 0 descriptor?? [ 586.640911][ T332] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 586.880909][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 587.067155][T13443] device veth0_vlan left promiscuous mode [ 587.075531][T13443] device veth0_vlan entered promiscuous mode [ 587.221182][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.237157][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.252227][ T332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 587.261654][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.270704][ T332] usb 4-1: config 0 descriptor?? [ 587.376749][T13453] loop0: detected capacity change from 0 to 512 [ 587.389819][T13453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 587.411138][ T339] usb 3-1: string descriptor 0 read error: -71 [ 587.441471][ T339] uclogic 0003:256C:006D.0042: failed retrieving string descriptor #200: -71 [ 587.489153][ T339] uclogic 0003:256C:006D.0042: failed retrieving pen parameters: -71 [ 587.510549][T13453] EXT4-fs (loop0): 1 orphan inode deleted [ 587.516454][T13453] EXT4-fs (loop0): 1 truncate cleaned up [ 587.518012][ T332] hub 4-1:0.0: USB hub found [ 587.522027][T13453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 587.568068][ T339] uclogic 0003:256C:006D.0042: failed probing pen v2 parameters: -71 [ 587.576343][ T339] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 587.583646][ T339] uclogic: probe of 0003:256C:006D.0042 failed with error -71 [ 587.591680][ T339] usb 3-1: USB disconnect, device number 39 [ 587.601028][ T332] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 587.924386][T13463] device veth0_vlan left promiscuous mode [ 587.932546][T13463] device veth0_vlan entered promiscuous mode [ 588.051876][ T8513] EXT4-fs (loop0): unmounting filesystem. [ 588.100928][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 588.122697][ T332] usbhid: probe of 4-1:0.0 failed with error -71 [ 588.151348][ T332] usb 4-1: USB disconnect, device number 41 [ 588.330239][T13474] device veth0_vlan left promiscuous mode [ 588.338487][T13474] device veth0_vlan entered promiscuous mode [ 588.443966][T13478] loop1: detected capacity change from 0 to 256 [ 589.093343][T13494] device veth0_vlan left promiscuous mode [ 589.101565][T13494] device veth0_vlan entered promiscuous mode [ 589.472726][T13500] device veth0_vlan left promiscuous mode [ 589.480963][T13500] device veth0_vlan entered promiscuous mode [ 589.803894][T13505] loop4: detected capacity change from 0 to 512 [ 589.831612][T13505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 589.929658][T13505] EXT4-fs (loop4): 1 orphan inode deleted [ 589.935412][T13505] EXT4-fs (loop4): 1 truncate cleaned up [ 589.940929][T13505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 589.949364][ T8794] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 590.163868][T13491] loop3: detected capacity change from 0 to 131072 [ 590.173592][T13491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 590.217789][T13491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 590.228675][ T28] audit: type=1326 audit(1718328132.713:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feab407cea9 code=0x0 [ 590.321063][ T8794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.331908][ T8794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.341829][ T8794] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 590.350762][ T8794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.359718][ T8794] usb 3-1: config 0 descriptor?? [ 590.471888][ T7453] EXT4-fs (loop4): unmounting filesystem. [ 590.510863][ T6643] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 590.950896][ T6643] usb 1-1: Using ep0 maxpacket: 32 [ 591.311047][ T6643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.321810][ T6643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.331430][ T6643] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 591.542979][T13544] device veth0_vlan left promiscuous mode [ 591.549126][T13544] device veth0_vlan entered promiscuous mode [ 591.652667][ T6643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.661162][ T6643] usb 1-1: config 0 descriptor?? [ 591.670990][ T8794] usb 3-1: string descriptor 0 read error: -71 [ 591.690898][ T8794] uclogic 0003:256C:006D.0043: failed retrieving string descriptor #200: -71 [ 591.699623][ T8794] uclogic 0003:256C:006D.0043: failed retrieving pen parameters: -71 [ 591.708021][ T6643] hub 1-1:0.0: USB hub found [ 591.714446][ T8794] uclogic 0003:256C:006D.0043: failed probing pen v2 parameters: -71 [ 591.722411][ T8794] uclogic 0003:256C:006D.0043: failed probing parameters: -71 [ 591.729673][ T8794] uclogic: probe of 0003:256C:006D.0043 failed with error -71 [ 591.737766][ T8794] usb 3-1: USB disconnect, device number 40 [ 592.614140][T13558] device veth0_vlan left promiscuous mode [ 592.622357][T13558] device veth0_vlan entered promiscuous mode [ 592.694104][T13562] device veth0_vlan left promiscuous mode [ 592.702257][T13562] device veth0_vlan entered promiscuous mode [ 592.810975][ T6643] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 593.049295][T13574] loop2: detected capacity change from 0 to 512 [ 593.059458][T13574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 593.183194][T13574] EXT4-fs (loop2): 1 orphan inode deleted [ 593.188815][T13574] EXT4-fs (loop2): 1 truncate cleaned up [ 593.194384][T13574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 593.284043][ T6643] usbhid 1-1:0.0: can't add hid device: -71 [ 593.289807][ T6643] usbhid: probe of 1-1:0.0 failed with error -71 [ 593.321121][ T6643] usb 1-1: USB disconnect, device number 32 [ 593.641262][T13582] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 593.651020][T13582] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 593.659328][T13582] overlayfs: empty lowerdir [ 593.740155][T13570] loop4: detected capacity change from 0 to 131072 [ 593.747410][ T2110] EXT4-fs (loop2): unmounting filesystem. [ 594.759109][T13596] device veth0_vlan left promiscuous mode [ 594.771805][T13596] device veth0_vlan entered promiscuous mode [ 594.952271][T13570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 594.996099][T13570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 595.008197][ T28] audit: type=1326 audit(1718328137.493:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6911e7cea9 code=0x0 [ 595.113226][T13611] 9pnet_fd: Insufficient options for proto=fd [ 595.458211][T13606] device veth0_vlan left promiscuous mode [ 595.464280][T13606] device veth0_vlan entered promiscuous mode [ 595.471365][T13615] device veth0_vlan left promiscuous mode [ 595.477440][T13615] device veth0_vlan entered promiscuous mode [ 595.520975][ T6643] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 596.247167][T13628] device veth0_vlan left promiscuous mode [ 596.259901][T13628] device veth0_vlan entered promiscuous mode [ 596.572347][T13632] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 596.574794][ T6643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.581233][T13632] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 596.600415][T13632] overlayfs: empty lowerdir [ 596.606796][ T6643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.616479][ T6643] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 596.625410][ T6643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.661115][ T6643] usb 3-1: config 0 descriptor?? [ 597.372104][ T332] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 598.334078][T13654] device veth0_vlan left promiscuous mode [ 598.342315][T13654] device veth0_vlan entered promiscuous mode [ 598.354543][T13658] device veth0_vlan left promiscuous mode [ 598.362246][T13658] device veth0_vlan entered promiscuous mode [ 598.461168][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 598.581092][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.926284][T13665] device veth0_vlan left promiscuous mode [ 598.939488][T13665] device veth0_vlan entered promiscuous mode [ 599.291889][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.303094][ T332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 599.314198][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.348402][T13671] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 599.357280][ T6643] usb 3-1: string descriptor 0 read error: -71 [ 599.370709][ T332] usb 4-1: config 0 descriptor?? [ 599.381075][ T6643] uclogic 0003:256C:006D.0044: failed retrieving string descriptor #200: -71 [ 599.390659][T13671] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 599.399090][ T6643] uclogic 0003:256C:006D.0044: failed retrieving pen parameters: -71 [ 599.407218][ T332] usb 4-1: can't set config #0, error -71 [ 599.413487][ T6643] uclogic 0003:256C:006D.0044: failed probing pen v2 parameters: -71 [ 599.421653][ T332] usb 4-1: USB disconnect, device number 42 [ 599.427773][T13671] overlayfs: empty lowerdir [ 599.432853][ T6643] uclogic 0003:256C:006D.0044: failed probing parameters: -71 [ 599.544171][T13679] loop4: detected capacity change from 0 to 512 [ 599.580509][T13679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 599.639167][ T6643] uclogic: probe of 0003:256C:006D.0044 failed with error -71 [ 599.647790][ T6643] usb 3-1: USB disconnect, device number 41 [ 599.694844][T13679] EXT4-fs (loop4): 1 orphan inode deleted [ 599.700430][T13679] EXT4-fs (loop4): 1 truncate cleaned up [ 599.706028][T13679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 600.563067][T13690] device veth0_vlan left promiscuous mode [ 600.576450][T13690] device veth0_vlan entered promiscuous mode [ 600.638156][ T7453] EXT4-fs (loop4): unmounting filesystem. [ 600.974938][T13710] device veth0_vlan left promiscuous mode [ 600.983202][T13710] device veth0_vlan entered promiscuous mode [ 601.187085][T13716] 9pnet_fd: Insufficient options for proto=fd [ 601.250958][ T8794] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 601.500876][ T8794] usb 1-1: Using ep0 maxpacket: 32 [ 601.589648][T13715] loop3: detected capacity change from 0 to 40427 [ 601.612309][T13715] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 601.612472][T13718] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 601.629548][T13715] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 601.631033][ T8794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.654795][ T8794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.664604][T13718] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 601.673041][ T8794] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 601.682152][T13718] overlayfs: empty lowerdir [ 601.686737][ T8794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.702605][ T8794] usb 1-1: config 0 descriptor?? [ 601.704087][T13715] F2FS-fs (loop3): Found nat_bits in checkpoint [ 601.741486][ T8794] hub 1-1:0.0: USB hub found [ 601.791296][T13715] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 601.800997][T13715] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 601.830477][T13709] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 602.136350][T13725] device veth0_vlan left promiscuous mode [ 602.142574][T13725] device veth0_vlan entered promiscuous mode [ 602.160831][T13735] loop4: detected capacity change from 0 to 512 [ 602.169232][T13735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 602.194138][T13735] EXT4-fs (loop4): 1 orphan inode deleted [ 602.199728][T13735] EXT4-fs (loop4): 1 truncate cleaned up [ 602.205413][T13735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 602.300392][T13709] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 602.381085][ T8794] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 603.042416][ T7453] EXT4-fs (loop4): unmounting filesystem. [ 603.180916][ T8794] usbhid 1-1:0.0: can't add hid device: -71 [ 603.186801][ T8794] usbhid: probe of 1-1:0.0 failed with error -71 [ 604.119969][T13757] device veth0_vlan left promiscuous mode [ 604.133018][T13757] device veth0_vlan entered promiscuous mode [ 604.335376][ T8794] usb 1-1: USB disconnect, device number 33 [ 604.372263][T13764] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 604.389214][T13764] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 604.398177][T13764] overlayfs: empty lowerdir [ 605.270226][T13771] device veth0_vlan left promiscuous mode [ 605.283270][T13771] device veth0_vlan entered promiscuous mode [ 605.310874][T13774] device veth0_vlan left promiscuous mode [ 605.323826][T13774] device veth0_vlan entered promiscuous mode [ 606.199976][T13789] device veth0_vlan left promiscuous mode [ 606.206178][T13789] device veth0_vlan entered promiscuous mode [ 607.074779][T13787] loop1: detected capacity change from 0 to 512 [ 607.121019][T13787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 607.192983][T13787] EXT4-fs (loop1): 1 orphan inode deleted [ 607.198679][T13787] EXT4-fs (loop1): 1 truncate cleaned up [ 607.230874][T13787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 607.316036][T13799] loop4: detected capacity change from 0 to 40427 [ 607.324326][T13799] F2FS-fs (loop4): invalid crc value [ 607.333901][T13799] F2FS-fs (loop4): Found nat_bits in checkpoint [ 607.621259][T13799] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 607.825226][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 607.853917][T13820] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 607.862821][T13820] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 607.871094][T13820] overlayfs: empty lowerdir [ 608.295633][T13826] syz-executor.4: attempt to access beyond end of device [ 608.295633][T13826] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 608.309863][T13826] syz-executor.4: attempt to access beyond end of device [ 608.309863][T13826] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 608.324098][T13826] syz-executor.4: attempt to access beyond end of device [ 608.324098][T13826] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 608.338247][T13826] syz-executor.4: attempt to access beyond end of device [ 608.338247][T13826] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 608.352680][T13826] syz-executor.4: attempt to access beyond end of device [ 608.352680][T13826] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 608.367223][T13826] syz-executor.4: attempt to access beyond end of device [ 608.367223][T13826] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 608.381265][T13826] syz-executor.4: attempt to access beyond end of device [ 608.381265][T13826] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 608.395568][T13826] syz-executor.4: attempt to access beyond end of device [ 608.395568][T13826] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 608.409854][T13826] syz-executor.4: attempt to access beyond end of device [ 608.409854][T13826] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 608.424308][T13826] syz-executor.4: attempt to access beyond end of device [ 608.424308][T13826] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 608.861008][ T332] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 609.476255][T13836] device veth0_vlan left promiscuous mode [ 609.482404][T13836] device veth0_vlan entered promiscuous mode [ 609.515555][T13839] device veth0_vlan left promiscuous mode [ 609.521683][T13839] device veth0_vlan entered promiscuous mode [ 609.835824][T13850] device veth0_vlan left promiscuous mode [ 609.848478][T13850] device veth0_vlan entered promiscuous mode [ 610.264666][T13852] device veth0_vlan left promiscuous mode [ 610.277935][T13852] device veth0_vlan entered promiscuous mode [ 610.965850][T13861] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 610.974809][T13861] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 610.982929][T13861] overlayfs: empty lowerdir [ 611.170218][T13871] loop2: detected capacity change from 0 to 512 [ 611.207487][T13871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 612.191142][T13870] device veth0_vlan left promiscuous mode [ 612.197277][T13870] device veth0_vlan entered promiscuous mode [ 612.220285][T13871] EXT4-fs (loop2): 1 orphan inode deleted [ 612.226628][T13871] EXT4-fs (loop2): 1 truncate cleaned up [ 612.232509][T13871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 612.357823][T13882] loop3: detected capacity change from 0 to 40427 [ 612.368517][T13882] F2FS-fs (loop3): invalid crc value [ 612.375967][T13882] F2FS-fs (loop3): Found nat_bits in checkpoint [ 612.417464][T13882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 612.441079][ T332] usb 2-1: device not accepting address 37, error -71 [ 612.471415][ T2110] EXT4-fs (loop2): unmounting filesystem. [ 613.940906][T13897] device veth0_vlan left promiscuous mode [ 613.947035][T13897] device veth0_vlan entered promiscuous mode [ 614.427826][T13902] device veth0_vlan left promiscuous mode [ 614.441257][T13902] device veth0_vlan entered promiscuous mode [ 614.637613][ T2275] bio_check_eod: 85 callbacks suppressed [ 614.637634][ T2275] syz-executor.3: attempt to access beyond end of device [ 614.637634][ T2275] loop3: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 614.731672][T13906] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 614.746744][T13906] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 614.755046][T13906] overlayfs: empty lowerdir [ 615.037955][T13921] device veth0_vlan left promiscuous mode [ 615.046005][T13921] device veth0_vlan entered promiscuous mode [ 615.496481][T13923] device veth0_vlan left promiscuous mode [ 615.505053][T13923] device veth0_vlan entered promiscuous mode [ 615.800880][ T19] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 616.857371][T13941] loop1: detected capacity change from 0 to 512 [ 617.126538][T13943] device veth0_vlan left promiscuous mode [ 617.139352][T13943] device veth0_vlan entered promiscuous mode [ 617.225734][T13941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 617.399983][T13941] EXT4-fs (loop1): 1 orphan inode deleted [ 617.405599][T13941] EXT4-fs (loop1): 1 truncate cleaned up [ 617.411254][T13941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 617.456956][T13938] loop4: detected capacity change from 0 to 40427 [ 617.464994][T13938] F2FS-fs (loop4): invalid crc value [ 617.471489][T13938] F2FS-fs (loop4): Found nat_bits in checkpoint [ 617.500885][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 617.503991][T13938] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 618.496078][T13960] syz-executor.4: attempt to access beyond end of device [ 618.496078][T13960] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 618.511247][T13960] syz-executor.4: attempt to access beyond end of device [ 618.511247][T13960] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 618.525324][T13960] syz-executor.4: attempt to access beyond end of device [ 618.525324][T13960] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 618.539695][T13960] syz-executor.4: attempt to access beyond end of device [ 618.539695][T13960] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 618.553977][T13960] syz-executor.4: attempt to access beyond end of device [ 618.553977][T13960] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 618.568480][T13960] syz-executor.4: attempt to access beyond end of device [ 618.568480][T13960] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 618.582511][T13960] syz-executor.4: attempt to access beyond end of device [ 618.582511][T13960] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 618.596852][T13960] syz-executor.4: attempt to access beyond end of device [ 618.596852][T13960] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 618.611208][T13960] syz-executor.4: attempt to access beyond end of device [ 618.611208][T13960] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 618.697750][T13959] device veth0_vlan left promiscuous mode [ 618.710897][T13959] device veth0_vlan entered promiscuous mode [ 618.982561][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 619.031264][T13965] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 619.039951][T13965] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 619.048492][T13965] overlayfs: empty lowerdir [ 619.061029][ T19] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 619.080985][ T19] usb 4-1: can't read configurations, error -71 [ 619.121462][T13974] loop0: detected capacity change from 0 to 256 [ 620.800915][T13993] device veth0_vlan left promiscuous mode [ 620.807764][T13993] device veth0_vlan entered promiscuous mode [ 621.026172][T14007] device veth0_vlan left promiscuous mode [ 621.051623][T14007] device veth0_vlan entered promiscuous mode [ 621.134343][T14011] loop1: detected capacity change from 0 to 512 [ 621.308012][T14011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 621.332739][T14011] EXT4-fs (loop1): 1 orphan inode deleted [ 621.338328][T14011] EXT4-fs (loop1): 1 truncate cleaned up [ 621.343860][T14011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 621.432320][ T1245] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 621.700909][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 622.000561][T14019] device veth0_vlan left promiscuous mode [ 622.006734][T14019] device veth0_vlan entered promiscuous mode [ 622.029145][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 622.090746][ T1245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.101853][ T1245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.111936][ T1245] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 622.121383][ T1245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.122321][T14021] loop2: detected capacity change from 0 to 40427 [ 622.136688][ T1245] usb 5-1: config 0 descriptor?? [ 622.137747][T14021] F2FS-fs (loop2): invalid crc value [ 622.148627][T14021] F2FS-fs (loop2): Found nat_bits in checkpoint [ 622.218034][T14021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 622.239410][ T1245] hub 5-1:0.0: USB hub found [ 622.245012][T14039] loop1: detected capacity change from 0 to 256 [ 622.946990][T14044] bio_check_eod: 39 callbacks suppressed [ 622.947011][T14044] syz-executor.2: attempt to access beyond end of device [ 622.947011][T14044] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 622.967068][T14044] syz-executor.2: attempt to access beyond end of device [ 622.967068][T14044] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 622.981147][T14044] syz-executor.2: attempt to access beyond end of device [ 622.981147][T14044] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 622.995492][T14044] syz-executor.2: attempt to access beyond end of device [ 622.995492][T14044] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 623.009807][T14044] syz-executor.2: attempt to access beyond end of device [ 623.009807][T14044] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 623.024355][T14044] syz-executor.2: attempt to access beyond end of device [ 623.024355][T14044] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 623.038673][T14044] syz-executor.2: attempt to access beyond end of device [ 623.038673][T14044] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 623.053010][T14044] syz-executor.2: attempt to access beyond end of device [ 623.053010][T14044] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 623.067315][T14044] syz-executor.2: attempt to access beyond end of device [ 623.067315][T14044] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 623.085225][T14044] syz-executor.2: attempt to access beyond end of device [ 623.085225][T14044] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 623.899275][ T1245] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 624.686949][T14066] loop1: detected capacity change from 0 to 512 [ 624.696115][ T1245] usbhid 5-1:0.0: can't add hid device: -71 [ 624.702218][ T1245] usbhid: probe of 5-1:0.0 failed with error -71 [ 624.709656][T14066] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 624.772572][T14066] EXT4-fs (loop1): 1 orphan inode deleted [ 624.778167][T14066] EXT4-fs (loop1): 1 truncate cleaned up [ 624.783684][T14066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 624.806676][ T1245] usb 5-1: USB disconnect, device number 28 [ 624.960677][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 624.997288][T14086] loop0: detected capacity change from 0 to 256 [ 625.460975][ T8794] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 625.481769][T14088] loop3: detected capacity change from 0 to 40427 [ 625.489308][T14088] F2FS-fs (loop3): invalid crc value [ 625.495571][T14088] F2FS-fs (loop3): Found nat_bits in checkpoint [ 625.519105][T14088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 626.047722][ T8794] usb 2-1: Using ep0 maxpacket: 16 [ 626.294475][T14112] device veth0_vlan left promiscuous mode [ 626.300272][T14112] device veth0_vlan entered promiscuous mode [ 626.307224][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.331024][ T8794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.347462][ T8794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.370409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.378048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.390142][ T8794] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.400107][ T8794] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 626.611243][T14124] loop4: detected capacity change from 0 to 512 [ 626.842521][T14124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 626.866058][T14124] EXT4-fs (loop4): 1 orphan inode deleted [ 626.871784][T14124] EXT4-fs (loop4): 1 truncate cleaned up [ 626.877304][T14124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 627.005522][T14128] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 627.031267][ T1140] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 627.049534][T14128] EXT4-fs (loop4): Remounting filesystem read-only [ 627.091142][ T8794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.100068][ T8794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 627.108229][ T8794] usb 2-1: SerialNumber: syz [ 627.151341][ T7453] EXT4-fs (loop4): unmounting filesystem. [ 627.152330][ T8794] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 627.164872][ T8794] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 627.275725][T14136] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 627.284477][T14136] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 627.292918][T14136] overlayfs: empty lowerdir [ 627.332711][ T1245] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 627.357660][T11613] usb 2-1: USB disconnect, device number 39 [ 627.561083][ T1140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.572648][ T1140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.584826][ T1140] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 627.585183][ T8794] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 627.594145][ T1140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.611268][ T1140] usb 4-1: config 0 descriptor?? [ 627.660907][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 627.811044][ T1245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.821796][ T1245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.831481][ T1245] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 627.840356][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.848829][ T1245] usb 3-1: config 0 descriptor?? [ 627.891402][ T1245] hub 3-1:0.0: USB hub found [ 627.971083][ T8794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.982153][ T8794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.992234][ T8794] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 628.001347][ T8794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.011284][ T8794] usb 5-1: config 0 descriptor?? [ 628.071335][T14142] loop1: detected capacity change from 0 to 40427 [ 628.078315][T14142] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 628.086121][T14142] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 628.095209][T14142] F2FS-fs (loop1): invalid crc value [ 628.101730][T14142] F2FS-fs (loop1): Found nat_bits in checkpoint [ 628.125036][T14142] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 628.132399][T14142] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 628.171027][ T1245] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 628.182054][T14148] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 628.301545][ T6330] bio_check_eod: 86 callbacks suppressed [ 628.301561][ T6330] syz-executor.1: attempt to access beyond end of device [ 628.301561][ T6330] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 628.321479][ T1140] hid-led: probe of 0003:27B8:01ED.0045 failed with error -71 [ 628.321726][ T6330] syz-executor.1: attempt to access beyond end of device [ 628.321726][ T6330] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 628.330101][ T1140] usb 4-1: USB disconnect, device number 45 [ 628.343434][ T6330] syz-executor.1: attempt to access beyond end of device [ 628.343434][ T6330] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 628.363784][ T6330] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 628.363815][ T6330] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 628.371670][ T6330] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 628.460950][ T1245] usbhid 3-1:0.0: can't add hid device: -71 [ 628.475590][ T1245] usbhid: probe of 3-1:0.0 failed with error -71 [ 628.511094][ T1245] usb 3-1: USB disconnect, device number 42 [ 628.659009][T14152] loop1: detected capacity change from 0 to 40427 [ 628.666589][T14152] F2FS-fs (loop1): invalid crc value [ 628.672781][T14152] F2FS-fs (loop1): Found nat_bits in checkpoint [ 628.696392][T14152] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 628.888553][T14160] syz-executor.1: attempt to access beyond end of device [ 628.888553][T14160] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 628.905960][T14160] syz-executor.1: attempt to access beyond end of device [ 628.905960][T14160] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 628.920619][T14160] syz-executor.1: attempt to access beyond end of device [ 628.920619][T14160] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 628.937417][T14160] syz-executor.1: attempt to access beyond end of device [ 628.937417][T14160] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 628.954042][T14160] syz-executor.1: attempt to access beyond end of device [ 628.954042][T14160] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 628.972254][T14160] syz-executor.1: attempt to access beyond end of device [ 628.972254][T14160] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 628.986853][T14160] syz-executor.1: attempt to access beyond end of device [ 628.986853][T14160] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 629.446867][ T8794] usb 5-1: string descriptor 0 read error: -71 [ 629.471120][ T8794] uclogic 0003:256C:006D.0046: failed retrieving string descriptor #200: -71 [ 629.482045][ T8794] uclogic 0003:256C:006D.0046: failed retrieving pen parameters: -71 [ 629.490588][ T8794] uclogic 0003:256C:006D.0046: failed probing pen v2 parameters: -71 [ 629.498726][ T8794] uclogic 0003:256C:006D.0046: failed probing parameters: -71 [ 629.506244][ T8794] uclogic: probe of 0003:256C:006D.0046 failed with error -71 [ 629.534757][ T8794] usb 5-1: USB disconnect, device number 29 [ 629.956790][T14175] loop2: detected capacity change from 0 to 512 [ 630.226408][T14175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 630.368607][T14175] EXT4-fs (loop2): 1 orphan inode deleted [ 630.374465][T14175] EXT4-fs (loop2): 1 truncate cleaned up [ 630.379954][T14175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 630.697487][ T2110] EXT4-fs (loop2): unmounting filesystem. [ 630.826695][T14185] loop3: detected capacity change from 0 to 256 [ 630.847549][T14185] exfat: Deprecated parameter 'utf8' [ 630.935673][T14185] exfat: Bad value for 'gid' [ 631.403403][T14212] 9pnet_fd: Insufficient options for proto=fd [ 631.637289][ T339] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 632.038656][T14223] loop4: detected capacity change from 0 to 256 [ 632.052474][T14223] exfat: Deprecated parameter 'utf8' [ 632.061758][T14223] exfat: Bad value for 'gid' [ 632.101204][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.119574][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.133866][ T339] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 632.143484][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.153984][ T339] usb 4-1: config 0 descriptor?? [ 632.570925][ T332] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 632.891013][ T339] hid-led: probe of 0003:27B8:01ED.0047 failed with error -71 [ 632.902577][ T339] usb 4-1: USB disconnect, device number 46 [ 632.931839][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.951015][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.976228][ T332] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 632.999640][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.017315][ T332] usb 1-1: config 0 descriptor?? [ 633.216085][T14254] loop2: detected capacity change from 0 to 256 [ 633.222839][T14254] exfat: Deprecated parameter 'utf8' [ 633.228083][T14254] exfat: Bad value for 'gid' [ 633.464087][T14259] loop4: detected capacity change from 0 to 40427 [ 633.470893][T14259] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 633.478475][T14259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 633.488307][T14259] F2FS-fs (loop4): Found nat_bits in checkpoint [ 633.530893][T14259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 633.537804][T14259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 633.572758][T14274] 9pnet_fd: Insufficient options for proto=fd [ 633.604250][T14256] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 633.618807][T14256] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 633.721085][ T19] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 633.961087][ T332] usb 1-1: string descriptor 0 read error: -71 [ 633.967236][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 633.991104][ T332] uclogic 0003:256C:006D.0048: failed retrieving string descriptor #200: -71 [ 633.999831][ T332] uclogic 0003:256C:006D.0048: failed retrieving pen parameters: -71 [ 634.008225][ T332] uclogic 0003:256C:006D.0048: failed probing pen v2 parameters: -71 [ 634.016744][ T332] uclogic 0003:256C:006D.0048: failed probing parameters: -71 [ 634.024362][ T332] uclogic: probe of 0003:256C:006D.0048 failed with error -71 [ 634.033253][ T332] usb 1-1: USB disconnect, device number 34 [ 634.091204][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.102197][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.111965][ T19] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 634.121546][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 634.450581][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.460644][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 634.469246][ T19] usb 4-1: SerialNumber: syz [ 634.511419][ T19] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 634.521398][ T19] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 634.637500][T14294] device veth0_vlan left promiscuous mode [ 634.644770][T14294] device veth0_vlan entered promiscuous mode [ 634.664210][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.674276][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.682705][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.742636][ T19] usb 4-1: USB disconnect, device number 47 [ 634.880894][ T332] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 635.270188][T14302] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 635.279016][T14302] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 635.287358][T14302] overlayfs: empty lowerdir [ 635.411055][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.430992][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.442750][ T332] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 635.458738][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.467890][ T332] usb 3-1: config 0 descriptor?? [ 635.592857][T14315] 9pnet_fd: Insufficient options for proto=fd [ 635.661997][T14310] loop1: detected capacity change from 0 to 40427 [ 635.676460][T14310] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 635.691315][T14310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 635.711210][T14310] F2FS-fs (loop1): invalid crc value [ 635.738504][T14310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 635.883815][T14310] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 635.891165][T14310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 636.170956][ T332] hid-led: probe of 0003:27B8:01ED.0049 failed with error -71 [ 636.201549][ T332] usb 3-1: USB disconnect, device number 43 [ 636.553192][ T6330] bio_check_eod: 41 callbacks suppressed [ 636.553233][ T6330] syz-executor.1: attempt to access beyond end of device [ 636.553233][ T6330] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 636.573593][ T6330] syz-executor.1: attempt to access beyond end of device [ 636.573593][ T6330] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 636.588196][ T6330] syz-executor.1: attempt to access beyond end of device [ 636.588196][ T6330] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 636.602782][ T234] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 636.603043][ T6330] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 636.610353][ T6330] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 636.626340][ T6330] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 636.702522][T14338] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 636.719452][T14338] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 636.727869][T14338] overlayfs: empty lowerdir [ 636.870964][T11613] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 637.472707][T14344] device veth0_vlan left promiscuous mode [ 637.485902][T14344] device veth0_vlan entered promiscuous mode [ 637.981005][ T234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.984339][T14351] loop4: detected capacity change from 0 to 256 [ 637.991799][ T234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.991838][ T234] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 637.998811][T14351] exfat: Deprecated parameter 'utf8' [ 638.020927][ T234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.032122][ T234] usb 4-1: config 0 descriptor?? [ 638.041645][T14351] exfat: Bad value for 'gid' [ 638.151098][T11613] usb 1-1: Using ep0 maxpacket: 16 [ 638.311372][T11613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.336689][T11613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 638.367742][T11613] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 638.401637][T11613] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 638.491059][T11613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 638.503076][T11613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 638.520742][T11613] usb 1-1: SerialNumber: syz [ 638.561482][T11613] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 638.573930][T11613] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 638.753555][T14368] loop1: detected capacity change from 0 to 256 [ 638.765772][ T339] usb 1-1: USB disconnect, device number 35 [ 638.990339][T14372] 9pnet_fd: Insufficient options for proto=fd [ 639.061390][ T234] usb 4-1: string descriptor 0 read error: -71 [ 639.081403][ T234] uclogic 0003:256C:006D.004A: failed retrieving string descriptor #200: -71 [ 639.126157][ T234] uclogic 0003:256C:006D.004A: failed retrieving pen parameters: -71 [ 639.147985][ T234] uclogic 0003:256C:006D.004A: failed probing pen v2 parameters: -71 [ 639.156168][ T234] uclogic 0003:256C:006D.004A: failed probing parameters: -71 [ 639.163545][ T234] uclogic: probe of 0003:256C:006D.004A failed with error -71 [ 639.175049][ T234] usb 4-1: USB disconnect, device number 48 [ 640.386771][T14393] device veth0_vlan left promiscuous mode [ 640.395045][T14393] device veth0_vlan entered promiscuous mode [ 641.719008][T14415] loop2: detected capacity change from 0 to 256 [ 643.008938][T14417] device veth0_vlan left promiscuous mode [ 643.015644][T14417] device veth0_vlan entered promiscuous mode [ 643.314292][T14431] device veth0_vlan left promiscuous mode [ 643.322477][T14431] device veth0_vlan entered promiscuous mode [ 643.518440][T11613] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 643.628787][T14426] loop1: detected capacity change from 0 to 40427 [ 643.644061][T14426] F2FS-fs (loop1): invalid crc value [ 643.654231][T14426] F2FS-fs (loop1): Found nat_bits in checkpoint [ 643.760866][T11613] usb 1-1: Using ep0 maxpacket: 16 [ 643.777184][T14426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 644.611288][T14443] syz-executor.1: attempt to access beyond end of device [ 644.611288][T14443] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 644.625881][T14443] syz-executor.1: attempt to access beyond end of device [ 644.625881][T14443] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 644.639939][T14443] syz-executor.1: attempt to access beyond end of device [ 644.639939][T14443] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 644.654313][T14443] syz-executor.1: attempt to access beyond end of device [ 644.654313][T14443] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 644.668617][T14443] syz-executor.1: attempt to access beyond end of device [ 644.668617][T14443] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 644.683044][T14443] syz-executor.1: attempt to access beyond end of device [ 644.683044][T14443] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 644.697098][T14443] syz-executor.1: attempt to access beyond end of device [ 644.697098][T14443] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 644.711336][T14443] syz-executor.1: attempt to access beyond end of device [ 644.711336][T14443] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 644.725582][T14443] syz-executor.1: attempt to access beyond end of device [ 644.725582][T14443] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 644.739901][T14443] syz-executor.1: attempt to access beyond end of device [ 644.739901][T14443] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 645.231062][T11613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.251950][T11613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 645.331293][T11613] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 645.341554][T11613] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 645.441265][T11613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.504132][T11613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 645.604051][T11613] usb 1-1: SerialNumber: syz [ 645.619899][T14454] 9pnet_fd: Insufficient options for proto=fd [ 645.690651][T14435] loop2: detected capacity change from 0 to 40427 [ 645.691273][T11613] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 645.705870][T11613] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 645.716528][T14435] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 645.732689][T14435] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 645.761762][T14435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 645.825223][T14435] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 645.832316][T14435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 645.871551][T14434] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 645.881485][T14434] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 646.036038][T11613] usb 1-1: USB disconnect, device number 36 [ 646.650906][ T8794] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 646.798574][T14488] device veth0_vlan left promiscuous mode [ 646.805759][T14488] device veth0_vlan entered promiscuous mode [ 646.825873][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.844405][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.897544][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 647.161037][ T8794] usb 5-1: Using ep0 maxpacket: 16 [ 647.281051][ T8794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.300684][ T8794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 647.328438][ T8794] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 647.348330][ T8794] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 647.451128][ T8794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.484578][ T8794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 647.508354][ T8794] usb 5-1: SerialNumber: syz [ 648.321498][T14505] device veth0_vlan left promiscuous mode [ 648.327613][T14505] device veth0_vlan entered promiscuous mode [ 648.523905][ T8794] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 648.531884][ T8794] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 648.539213][ T8794] usb 5-1: USB disconnect, device number 30 [ 648.631215][T14506] 9pnet_fd: Insufficient options for proto=fd [ 648.786851][T14523] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 648.817612][T14523] IPv6: sit1: Disabled Multicast RS [ 648.871942][T14524] device veth0_vlan left promiscuous mode [ 648.902561][T14524] device veth0_vlan entered promiscuous mode [ 649.670678][T14521] loop1: detected capacity change from 0 to 40427 [ 649.682801][T14521] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 649.694444][T14521] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 649.726966][T14521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 649.820174][T14521] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 649.892774][T14521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 649.970698][T14533] loop3: detected capacity change from 0 to 40427 [ 649.984530][T14533] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 649.993002][T14533] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 650.029256][T14533] F2FS-fs (loop3): Found nat_bits in checkpoint [ 650.226440][T14519] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 650.287849][T14519] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 650.304354][T14533] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 650.324691][T14533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 650.344450][T14533] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 650.360975][T14533] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 650.944085][T14582] 9pnet_fd: Insufficient options for proto=fd [ 650.997244][T14572] loop1: detected capacity change from 0 to 40427 [ 651.023218][T14572] F2FS-fs (loop1): invalid crc value [ 651.059975][T14572] F2FS-fs (loop1): Found nat_bits in checkpoint [ 651.122677][T14579] loop4: detected capacity change from 0 to 256 [ 651.129236][T14579] exfat: Deprecated parameter 'utf8' [ 651.131455][T14572] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 651.181266][T14579] exfat: Bad value for 'gid' [ 651.348077][T14587] bio_check_eod: 38 callbacks suppressed [ 651.348108][T14587] syz-executor.1: attempt to access beyond end of device [ 651.348108][T14587] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 651.368857][T14587] syz-executor.1: attempt to access beyond end of device [ 651.368857][T14587] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 651.383047][T14587] syz-executor.1: attempt to access beyond end of device [ 651.383047][T14587] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 651.397897][T14587] syz-executor.1: attempt to access beyond end of device [ 651.397897][T14587] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 651.412708][T14587] syz-executor.1: attempt to access beyond end of device [ 651.412708][T14587] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 651.428020][T14587] syz-executor.1: attempt to access beyond end of device [ 651.428020][T14587] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 651.442017][T14587] syz-executor.1: attempt to access beyond end of device [ 651.442017][T14587] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 651.504942][T14566] loop2: detected capacity change from 0 to 131072 [ 651.530907][T14566] F2FS-fs (loop2): Found nat_bits in checkpoint [ 651.588964][ T6330] syz-executor.1: attempt to access beyond end of device [ 651.588964][ T6330] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 651.598197][T14566] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 651.656104][ T28] audit: type=1326 audit(1718328194.143:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bbda7cea9 code=0x0 [ 651.880385][T14593] loop4: detected capacity change from 0 to 256 [ 651.954431][T14593] exfat: Deprecated parameter 'utf8' [ 651.959644][T14593] exfat: Bad value for 'gid' [ 652.242359][T14608] device veth0_vlan left promiscuous mode [ 652.250425][T14608] device veth0_vlan entered promiscuous mode [ 653.229276][T14622] loop0: detected capacity change from 0 to 40427 [ 653.242761][T14622] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 653.250358][T14622] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 653.440939][T14622] F2FS-fs (loop0): Found nat_bits in checkpoint [ 653.482841][T14622] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 653.489706][T14622] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 653.523859][T14620] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 654.064523][T14633] device veth0_vlan left promiscuous mode [ 654.078212][T14633] device veth0_vlan entered promiscuous mode [ 654.477594][T14620] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 655.308706][T14652] device veth0_vlan left promiscuous mode [ 655.321420][T14652] device veth0_vlan entered promiscuous mode [ 655.445314][T14656] device veth0_vlan left promiscuous mode [ 655.458011][T14656] device veth0_vlan entered promiscuous mode [ 656.010626][T14664] 9pnet_fd: Insufficient options for proto=fd [ 656.516284][T14661] loop3: detected capacity change from 0 to 40427 [ 656.531979][T14661] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 656.544036][T14661] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 656.579943][T14661] F2FS-fs (loop3): Found nat_bits in checkpoint [ 656.704376][T14661] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 656.715496][T14661] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 656.931503][T14681] device veth0_vlan left promiscuous mode [ 656.937619][T14681] device veth0_vlan entered promiscuous mode [ 657.135394][T14643] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 657.145138][T14643] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 657.152209][T14659] loop2: detected capacity change from 0 to 131072 [ 657.163642][T14659] F2FS-fs (loop2): Found nat_bits in checkpoint [ 657.495585][T14687] device veth0_vlan left promiscuous mode [ 657.501807][T14687] device veth0_vlan entered promiscuous mode [ 657.541992][T14659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 657.555972][ T28] audit: type=1326 audit(1718328200.043:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bbda7cea9 code=0x0 [ 657.743628][T14699] loop0: detected capacity change from 0 to 256 [ 657.750345][T14699] exfat: Deprecated parameter 'utf8' [ 657.822310][T14699] exfat: Bad value for 'gid' [ 658.170503][T14720] 9pnet_fd: Insufficient options for proto=fd [ 659.081620][T14732] loop4: detected capacity change from 0 to 40427 [ 659.088824][T14732] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 659.096611][T14732] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 659.107933][T14732] F2FS-fs (loop4): Found nat_bits in checkpoint [ 659.144716][T14732] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 659.151639][T14732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 659.179358][T14730] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 659.188609][T14730] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 659.992742][T14744] loop2: detected capacity change from 0 to 40427 [ 659.999478][T14744] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 660.007047][T14744] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 660.015167][ T332] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 660.024529][T14744] F2FS-fs (loop2): Found nat_bits in checkpoint [ 660.057885][T14744] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 660.064849][T14744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 660.160128][T14744] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 660.203246][T14759] device veth0_vlan left promiscuous mode [ 660.211268][T14759] device veth0_vlan entered promiscuous mode [ 660.250285][ T6221] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 660.257971][T14744] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 660.451005][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 660.571147][ T332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.582116][ T332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 660.591978][ T332] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 660.601881][ T332] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 660.620924][ T6221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.632043][ T6221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.641771][ T6221] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 660.650793][ T6221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.659513][ T6221] usb 2-1: config 0 descriptor?? [ 660.672022][T14764] loop2: detected capacity change from 0 to 131072 [ 660.680617][T14764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 660.690909][ T332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.701787][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 660.710085][ T332] usb 1-1: SerialNumber: syz [ 660.717250][T14764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 660.728103][ T28] audit: type=1326 audit(1718328203.213:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bbda7cea9 code=0x0 [ 660.751300][ T332] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 660.751594][ T332] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 660.767898][T14770] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 661.062035][ T887] usb 1-1: USB disconnect, device number 37 [ 661.501054][ T6221] hid-led: probe of 0003:27B8:01ED.004B failed with error -71 [ 661.508969][ T6221] usb 2-1: USB disconnect, device number 40 [ 661.933902][T14793] loop0: detected capacity change from 0 to 256 [ 661.940703][T14793] exfat: Deprecated parameter 'utf8' [ 661.945956][T14793] exfat: Bad value for 'gid' [ 662.145039][T14798] loop0: detected capacity change from 0 to 256 [ 662.539245][T14794] loop3: detected capacity change from 0 to 40427 [ 662.549439][T14794] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 662.559090][T14794] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 662.569689][T14794] F2FS-fs (loop3): Found nat_bits in checkpoint [ 662.592724][T14794] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 662.599734][T14794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 662.633981][T14792] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 662.643318][T14792] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 662.819510][T14817] loop4: detected capacity change from 0 to 256 [ 663.209363][T14827] loop0: detected capacity change from 0 to 512 [ 663.220003][T14827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 663.258490][T14828] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 663.356958][T14827] EXT4-fs (loop0): 1 orphan inode deleted [ 663.363821][T14827] EXT4-fs (loop0): 1 truncate cleaned up [ 663.369379][T14827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 663.474841][T14822] loop3: detected capacity change from 0 to 256 [ 663.481656][T14822] exfat: Deprecated parameter 'utf8' [ 663.486881][T14822] exfat: Bad value for 'gid' [ 663.695087][ T887] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 663.890536][ T8513] EXT4-fs (loop0): unmounting filesystem. [ 663.936589][T14840] loop4: detected capacity change from 0 to 40427 [ 663.943550][T14840] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 663.951177][T14840] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 663.973228][T14840] F2FS-fs (loop4): Found nat_bits in checkpoint [ 664.008545][T14840] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 664.015662][T14840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 664.040254][T14838] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 664.049451][T14838] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 664.191368][ T887] usb 3-1: Using ep0 maxpacket: 16 [ 664.331012][ T887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.352624][ T887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.361019][ T6221] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 664.380338][ T887] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 664.390540][ T887] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.511058][ T887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.520026][ T887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.529792][ T887] usb 3-1: SerialNumber: syz [ 664.601162][T14862] device veth0_vlan left promiscuous mode [ 664.609206][T14862] device veth0_vlan entered promiscuous mode [ 664.662996][ T6221] usb 1-1: Using ep0 maxpacket: 16 [ 664.672839][ T887] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 664.682444][ T887] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 664.821113][ T6221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.839218][ T6221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.849434][ T6221] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 664.859224][ T6221] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.875165][ T887] usb 3-1: USB disconnect, device number 44 [ 664.951794][ T6221] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.962753][ T6221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.974686][ T6221] usb 1-1: SerialNumber: syz [ 665.021322][ T6221] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 665.030277][ T6221] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 665.226225][ T887] usb 1-1: USB disconnect, device number 38 [ 665.250988][T14869] loop3: detected capacity change from 0 to 40427 [ 665.257882][T14869] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 665.265707][T14869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 665.277350][T14869] F2FS-fs (loop3): Found nat_bits in checkpoint [ 665.312605][T14869] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 665.319520][T14869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 665.354934][T14867] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 665.364223][T14867] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 665.608509][T14879] loop2: detected capacity change from 0 to 40427 [ 665.625704][T14879] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 665.669217][T14879] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 665.701939][T14879] F2FS-fs (loop2): invalid crc value [ 665.747580][T14879] F2FS-fs (loop2): Found nat_bits in checkpoint [ 665.832683][T14879] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 665.839602][T14879] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 666.153893][T14889] device veth0_vlan left promiscuous mode [ 666.160012][T14889] device veth0_vlan entered promiscuous mode [ 666.178009][T14895] loop0: detected capacity change from 0 to 512 [ 666.192174][T14895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 666.303013][T14895] EXT4-fs (loop0): 1 orphan inode deleted [ 666.308628][T14895] EXT4-fs (loop0): 1 truncate cleaned up [ 666.314105][T14895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 666.836007][ T8513] EXT4-fs (loop0): unmounting filesystem. [ 666.933744][ T2110] syz-executor.2: attempt to access beyond end of device [ 666.933744][ T2110] loop2: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 666.948327][ T2110] syz-executor.2: attempt to access beyond end of device [ 666.948327][ T2110] loop2: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 666.962853][ T2110] syz-executor.2: attempt to access beyond end of device [ 666.962853][ T2110] loop2: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 666.977523][ T2110] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 666.977553][ T2110] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 666.978225][T14911] loop1: detected capacity change from 0 to 40427 [ 666.985422][ T2110] F2FS-fs (loop2): Issue discard(10240, 10240, 512) failed, ret: -5 [ 666.994456][T14911] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 667.015164][T14911] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 667.028365][T14917] device veth0_vlan left promiscuous mode [ 667.034491][T14917] device veth0_vlan entered promiscuous mode [ 667.063364][T14911] F2FS-fs (loop1): invalid crc value [ 667.069717][T14911] F2FS-fs (loop1): Found nat_bits in checkpoint [ 667.106726][T14911] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 667.114140][T14911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 667.297615][T14928] device veth0_vlan left promiscuous mode [ 667.305756][T14928] device veth0_vlan entered promiscuous mode [ 667.570476][ T6330] syz-executor.1: attempt to access beyond end of device [ 667.570476][ T6330] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 667.585224][ T6330] syz-executor.1: attempt to access beyond end of device [ 667.585224][ T6330] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 668.398108][ T6330] syz-executor.1: attempt to access beyond end of device [ 668.398108][ T6330] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 668.535017][ T6330] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 668.535060][ T6330] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 668.547356][ T6330] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 668.937580][T14953] loop3: detected capacity change from 0 to 512 [ 668.955788][T14958] loop0: detected capacity change from 0 to 512 [ 668.963190][T14958] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 669.023849][T14958] EXT4-fs (loop0): 1 orphan inode deleted [ 669.029453][T14958] EXT4-fs (loop0): 1 truncate cleaned up [ 669.035046][T14958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 669.051751][T14953] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 669.089143][T14953] EXT4-fs (loop3): 1 orphan inode deleted [ 669.094799][T14953] EXT4-fs (loop3): 1 truncate cleaned up [ 669.100222][T14953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 669.154315][T14950] loop2: detected capacity change from 0 to 40427 [ 669.162587][T14950] F2FS-fs (loop2): invalid crc value [ 669.168660][T14950] F2FS-fs (loop2): Found nat_bits in checkpoint [ 669.207350][T14950] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 669.251017][ T8794] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 669.795973][T14964] loop1: detected capacity change from 0 to 256 [ 669.922322][T14968] syz-executor.2: attempt to access beyond end of device [ 669.922322][T14968] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 669.937565][T14968] syz-executor.2: attempt to access beyond end of device [ 669.937565][T14968] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 669.951702][T14968] syz-executor.2: attempt to access beyond end of device [ 669.951702][T14968] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 669.966504][T14968] syz-executor.2: attempt to access beyond end of device [ 669.966504][T14968] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 669.991929][ T8513] EXT4-fs (loop0): unmounting filesystem. [ 669.993456][ T2275] EXT4-fs (loop3): unmounting filesystem. [ 670.190935][ T8794] usb 5-1: Using ep0 maxpacket: 16 [ 670.244023][T14979] device veth0_vlan left promiscuous mode [ 670.250169][T14979] device veth0_vlan entered promiscuous mode [ 670.280995][ T6221] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 670.311030][ T8794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.321938][ T8794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.331557][ T8794] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 670.341248][ T8794] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 670.538506][ T8794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.547825][ T8794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 670.555709][ T8794] usb 5-1: SerialNumber: syz [ 670.591272][ T8794] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 670.599149][ T8794] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 670.651006][ T6221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.661902][ T6221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.671404][ T6221] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 670.680224][ T6221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.688549][ T6221] usb 4-1: config 0 descriptor?? [ 670.793841][ T8794] usb 5-1: USB disconnect, device number 31 [ 671.530229][T14984] device veth0_vlan left promiscuous mode [ 671.536389][T14984] device veth0_vlan entered promiscuous mode [ 672.804228][T14992] device veth0_vlan left promiscuous mode [ 672.810078][T14992] device veth0_vlan entered promiscuous mode [ 672.849376][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.869382][ T6221] hid-led: probe of 0003:27B8:01ED.004C failed with error -71 [ 672.877573][ T6221] usb 4-1: USB disconnect, device number 49 [ 672.985207][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 672.992793][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.133983][T15015] loop4: detected capacity change from 0 to 512 [ 674.144657][T15018] loop1: detected capacity change from 0 to 512 [ 674.172455][T15018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 674.182702][T15015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 674.252511][T15022] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 674.301411][T15018] EXT4-fs (loop1): 1 orphan inode deleted [ 674.307054][T15018] EXT4-fs (loop1): 1 truncate cleaned up [ 674.307303][T15015] EXT4-fs (loop4): 1 orphan inode deleted [ 674.312521][T15018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 674.326944][T15015] EXT4-fs (loop4): 1 truncate cleaned up [ 674.332522][T15015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 674.425818][T15026] loop3: detected capacity change from 0 to 40427 [ 674.475852][T15026] F2FS-fs (loop3): invalid crc value [ 674.482585][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 674.498996][ T7453] EXT4-fs (loop4): unmounting filesystem. [ 674.505955][T15026] F2FS-fs (loop3): Found nat_bits in checkpoint [ 674.546739][T15026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 675.569052][T15044] bio_check_eod: 44 callbacks suppressed [ 675.569087][T15044] syz-executor.3: attempt to access beyond end of device [ 675.569087][T15044] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 675.589289][T15044] syz-executor.3: attempt to access beyond end of device [ 675.589289][T15044] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 675.603355][T15044] syz-executor.3: attempt to access beyond end of device [ 675.603355][T15044] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 675.617698][T15044] syz-executor.3: attempt to access beyond end of device [ 675.617698][T15044] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 675.631998][T15044] syz-executor.3: attempt to access beyond end of device [ 675.631998][T15044] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 675.646662][T15044] syz-executor.3: attempt to access beyond end of device [ 675.646662][T15044] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 675.660839][T15044] syz-executor.3: attempt to access beyond end of device [ 675.660839][T15044] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 675.675636][T15044] syz-executor.3: attempt to access beyond end of device [ 675.675636][T15044] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 675.697384][T15044] syz-executor.3: attempt to access beyond end of device [ 675.697384][T15044] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 675.711835][T15044] syz-executor.3: attempt to access beyond end of device [ 675.711835][T15044] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 675.930918][T15045] device veth0_vlan left promiscuous mode [ 675.937884][T15045] device veth0_vlan entered promiscuous mode [ 676.012386][T15046] device veth0_vlan left promiscuous mode [ 676.019373][T15046] device veth0_vlan entered promiscuous mode [ 676.232226][T15059] fuse: Bad value for 'fd' [ 676.253586][T15059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 676.461107][T15065] device veth0_vlan left promiscuous mode [ 676.468909][T15065] device veth0_vlan entered promiscuous mode [ 676.884956][T15068] device veth0_vlan left promiscuous mode [ 676.899590][T15068] device veth0_vlan entered promiscuous mode [ 677.258012][T15081] loop3: detected capacity change from 0 to 512 [ 677.274496][T15081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 677.318826][T15085] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 677.401904][T15081] EXT4-fs (loop3): 1 orphan inode deleted [ 677.407509][T15081] EXT4-fs (loop3): 1 truncate cleaned up [ 677.413125][T15081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 677.910998][T15092] loop2: detected capacity change from 0 to 40427 [ 677.918374][T15092] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 677.926014][T15092] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 677.943664][ T2275] EXT4-fs (loop3): unmounting filesystem. [ 677.953936][T15092] F2FS-fs (loop2): Found nat_bits in checkpoint [ 677.961034][T15099] device veth0_vlan left promiscuous mode [ 677.967179][T15099] device veth0_vlan entered promiscuous mode [ 677.995087][T15092] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 678.002209][T15092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 678.037015][T15089] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 678.062319][T15089] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 678.148021][T15100] loop4: detected capacity change from 0 to 40427 [ 678.163049][T15100] F2FS-fs (loop4): invalid crc value [ 678.376199][T15104] device veth0_vlan left promiscuous mode [ 678.382331][T15104] device veth0_vlan entered promiscuous mode [ 678.401557][T15100] F2FS-fs (loop4): Found nat_bits in checkpoint [ 678.438713][T15111] fuse: Bad value for 'fd' [ 678.449073][T15111] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 678.459520][T15100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 679.788754][T15122] loop2: detected capacity change from 0 to 512 [ 679.824176][T15119] device veth0_vlan left promiscuous mode [ 679.832528][T15119] device veth0_vlan entered promiscuous mode [ 679.863039][T15122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 680.002671][T15122] EXT4-fs (loop2): 1 orphan inode deleted [ 680.008262][T15122] EXT4-fs (loop2): 1 truncate cleaned up [ 680.014233][T15122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 680.309066][ T2110] EXT4-fs (loop2): unmounting filesystem. [ 680.472714][T15137] device veth0_vlan left promiscuous mode [ 680.491122][T15137] device veth0_vlan entered promiscuous mode [ 680.575504][T15149] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 680.666190][T15150] device veth0_vlan left promiscuous mode [ 680.688709][T15150] device veth0_vlan entered promiscuous mode [ 680.704642][T15148] loop4: detected capacity change from 0 to 256 [ 680.711730][T15148] exfat: Deprecated parameter 'utf8' [ 680.728475][T15148] exfat: Bad value for 'gid' [ 680.876429][T15153] loop0: detected capacity change from 0 to 256 [ 681.440677][T15165] device veth0_vlan left promiscuous mode [ 681.451933][T15165] device veth0_vlan entered promiscuous mode [ 682.129038][T15181] device veth0_vlan left promiscuous mode [ 682.135196][T15181] device veth0_vlan entered promiscuous mode [ 682.965608][T15182] device veth0_vlan left promiscuous mode [ 682.971686][T15182] device veth0_vlan entered promiscuous mode [ 682.978677][T15183] device veth0_vlan left promiscuous mode [ 682.984846][T15183] device veth0_vlan entered promiscuous mode [ 683.336545][T15197] loop2: detected capacity change from 0 to 256 [ 683.343285][T15197] exfat: Deprecated parameter 'utf8' [ 683.348558][T15197] exfat: Bad value for 'gid' [ 683.360747][T15195] loop1: detected capacity change from 0 to 40427 [ 683.367604][T15195] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 683.375324][T15195] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 683.384473][T15195] F2FS-fs (loop1): invalid crc value [ 683.416920][T15195] F2FS-fs (loop1): Found nat_bits in checkpoint [ 683.453384][T15209] device veth0_vlan left promiscuous mode [ 683.473185][T15209] device veth0_vlan entered promiscuous mode [ 683.503543][T15195] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 683.510691][T15195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 683.591787][T15216] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 683.980626][ T6330] bio_check_eod: 86 callbacks suppressed [ 683.980645][ T6330] syz-executor.1: attempt to access beyond end of device [ 683.980645][ T6330] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 684.000589][ T6330] syz-executor.1: attempt to access beyond end of device [ 684.000589][ T6330] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 684.015411][ T6330] syz-executor.1: attempt to access beyond end of device [ 684.015411][ T6330] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 684.030299][ T6330] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 684.030414][ T6330] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 684.038365][ T6330] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 684.484041][T15231] device veth0_vlan left promiscuous mode [ 684.499864][T15231] device veth0_vlan entered promiscuous mode [ 684.620238][T15228] device veth0_vlan left promiscuous mode [ 684.628193][T15228] device veth0_vlan entered promiscuous mode [ 684.756617][T15233] device veth0_vlan left promiscuous mode [ 684.764763][T15233] device veth0_vlan entered promiscuous mode [ 685.578900][T15245] device veth0_vlan left promiscuous mode [ 685.585056][T15245] device veth0_vlan entered promiscuous mode [ 685.592313][T15246] device veth0_vlan left promiscuous mode [ 685.598349][T15246] device veth0_vlan entered promiscuous mode [ 686.347707][T15256] device veth0_vlan left promiscuous mode [ 686.355995][T15256] device veth0_vlan entered promiscuous mode [ 686.379028][T15258] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 686.380191][T15260] loop0: detected capacity change from 0 to 256 [ 686.395071][T15258] overlayfs: empty lowerdir [ 687.779216][T15285] device veth0_vlan left promiscuous mode [ 687.787252][T15285] device veth0_vlan entered promiscuous mode [ 687.956030][T15287] device veth0_vlan left promiscuous mode [ 687.964215][T15287] device veth0_vlan entered promiscuous mode [ 688.220876][ T6221] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 688.262952][T15293] device veth0_vlan left promiscuous mode [ 688.271728][T15293] device veth0_vlan entered promiscuous mode [ 688.366282][T15298] loop1: detected capacity change from 0 to 256 [ 688.427966][T15299] device veth0_vlan left promiscuous mode [ 688.434226][T15299] device veth0_vlan entered promiscuous mode [ 688.979880][ T6221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.992682][ T6221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.006366][ T6221] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 689.016296][ T6221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.104280][ T6221] usb 4-1: config 0 descriptor?? [ 689.736811][T15317] loop1: detected capacity change from 0 to 512 [ 689.775921][T15317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 689.835798][T15317] EXT4-fs (loop1): 1 orphan inode deleted [ 689.841413][T15317] EXT4-fs (loop1): 1 truncate cleaned up [ 689.846866][T15317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 689.956881][T15323] loop4: detected capacity change from 0 to 256 [ 690.003012][T15328] loop0: detected capacity change from 0 to 256 [ 690.060942][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 691.119991][ T6221] hid-led: probe of 0003:27B8:01ED.004D failed with error -71 [ 691.132327][ T6221] usb 4-1: USB disconnect, device number 50 [ 691.334997][T15343] device veth0_vlan left promiscuous mode [ 691.340936][T15343] device veth0_vlan entered promiscuous mode [ 691.347950][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.359703][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.367526][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.735898][T15352] device veth0_vlan left promiscuous mode [ 691.745903][T15352] device veth0_vlan entered promiscuous mode [ 691.757638][T15354] loop2: detected capacity change from 0 to 40427 [ 691.764660][T15354] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 691.772230][T15354] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 691.776826][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.796889][T15353] loop4: detected capacity change from 0 to 256 [ 691.805600][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.813929][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.821765][T15353] exfat: Deprecated parameter 'utf8' [ 691.828169][T15353] exfat: Bad value for 'gid' [ 691.851188][T15354] F2FS-fs (loop2): Found nat_bits in checkpoint [ 691.887222][T15354] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 691.894122][T15354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 692.187261][T15350] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 692.198210][T15350] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 692.302922][ T65] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 693.072701][T15379] loop4: detected capacity change from 0 to 256 [ 693.303879][T15384] loop0: detected capacity change from 0 to 256 [ 694.090755][T15389] device veth0_vlan left promiscuous mode [ 694.101494][T15389] device veth0_vlan entered promiscuous mode [ 694.393277][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 694.805964][T15405] device veth0_vlan left promiscuous mode [ 694.814026][T15405] device veth0_vlan entered promiscuous mode [ 694.947965][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.958760][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 694.973618][T15407] 9pnet_fd: Insufficient options for proto=fd [ 694.980607][ T65] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 695.008845][ T65] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 695.090983][ T65] usb 2-1: string descriptor 0 read error: -71 [ 695.097029][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.409561][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 695.503748][T15411] loop1: detected capacity change from 0 to 40427 [ 695.511236][T15411] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 695.518783][T15411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 695.541031][ T65] usb 2-1: can't set config #1, error -71 [ 695.547026][ T65] usb 2-1: USB disconnect, device number 41 [ 695.584442][T15411] F2FS-fs (loop1): Found nat_bits in checkpoint [ 695.689365][T15425] loop3: detected capacity change from 0 to 512 [ 695.699808][T15425] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 696.151972][T15411] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 696.158905][T15411] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 696.435128][T15411] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 696.492118][T15411] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 696.529746][T15425] EXT4-fs (loop3): 1 orphan inode deleted [ 696.535433][T15425] EXT4-fs (loop3): 1 truncate cleaned up [ 696.540985][T15425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 696.546637][T15408] loop4: detected capacity change from 0 to 40427 [ 696.561317][T15408] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 696.575126][T15408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 696.704219][ T2275] EXT4-fs (loop3): unmounting filesystem. [ 696.765893][T15408] F2FS-fs (loop4): Found nat_bits in checkpoint [ 696.827966][T15408] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 696.840923][T15408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 696.894784][T15408] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 696.932061][T15408] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 697.020344][T15441] loop3: detected capacity change from 0 to 40427 [ 697.042245][T15441] F2FS-fs (loop3): invalid crc value [ 697.062445][T15441] F2FS-fs (loop3): Found nat_bits in checkpoint [ 697.163820][T15441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 697.299435][T15462] syz-executor.3: attempt to access beyond end of device [ 697.299435][T15462] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 697.314555][T15462] syz-executor.3: attempt to access beyond end of device [ 697.314555][T15462] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 697.328522][T15462] syz-executor.3: attempt to access beyond end of device [ 697.328522][T15462] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 697.342515][T15462] syz-executor.3: attempt to access beyond end of device [ 697.342515][T15462] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 697.356597][T15462] syz-executor.3: attempt to access beyond end of device [ 697.356597][T15462] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 697.370750][T15462] syz-executor.3: attempt to access beyond end of device [ 697.370750][T15462] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 697.384692][T15462] syz-executor.3: attempt to access beyond end of device [ 697.384692][T15462] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 697.398720][T15462] syz-executor.3: attempt to access beyond end of device [ 697.398720][T15462] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 697.703222][ T2275] syz-executor.3: attempt to access beyond end of device [ 697.703222][ T2275] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 697.995052][T15481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.091790][ T435] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 698.370900][ T435] usb 3-1: Using ep0 maxpacket: 32 [ 698.472061][ T28] audit: type=1400 audit(1718328240.963:346): avc: denied { read } for pid=15488 comm="syz-executor.4" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 698.495570][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.507493][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.517721][ T435] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 698.526921][ T28] audit: type=1400 audit(1718328240.993:347): avc: denied { open } for pid=15488 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 698.551180][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.560251][ T435] usb 3-1: config 0 descriptor?? [ 698.611208][ T435] hub 3-1:0.0: USB hub found [ 698.735276][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 699.001248][ T435] hub 3-1:0.0: 8 ports detected [ 699.064301][ T435] hub 3-1:0.0: insufficient power available to use all downstream ports [ 699.211117][ T435] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 699.217916][ T435] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 699.371210][ T435] usbhid 3-1:0.0: can't add hid device: -71 [ 699.377062][ T435] usbhid: probe of 3-1:0.0 failed with error -71 [ 699.421152][ T435] usb 3-1: USB disconnect, device number 45 [ 699.454179][T15518] loop4: detected capacity change from 0 to 40427 [ 699.461951][T15518] F2FS-fs (loop4): invalid crc value [ 699.467997][T15518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 699.491800][T15518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 699.843869][T15534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 699.990969][ T6221] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 700.043653][ T7453] syz-executor.4: attempt to access beyond end of device [ 700.043653][ T7453] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 700.101236][T15542] loop2: detected capacity change from 0 to 40427 [ 700.109053][T15542] F2FS-fs (loop2): invalid crc value [ 700.124300][T15542] F2FS-fs (loop2): Found nat_bits in checkpoint [ 700.174847][T15542] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 700.251762][ T234] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 700.954682][ T6221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.965434][ T6221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.975156][ T6221] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 701.000861][ T234] usb 2-1: Using ep0 maxpacket: 32 [ 701.020881][ T6221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.029295][ T6221] usb 1-1: config 0 descriptor?? [ 701.120978][ T234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.131903][ T234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.141982][ T234] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 701.150927][ T234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.159395][ T234] usb 2-1: config 0 descriptor?? [ 701.224323][ T28] audit: type=1400 audit(1718328243.713:348): avc: denied { block_suspend } for pid=15562 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 701.231262][ T234] hub 2-1:0.0: USB hub found [ 701.431341][ T234] hub 2-1:0.0: 1 port detected [ 701.851960][ T234] usb 2-1: USB disconnect, device number 42 [ 701.971038][ T6221] usb 1-1: string descriptor 0 read error: -71 [ 701.993741][ T6221] uclogic 0003:256C:006D.004E: failed retrieving string descriptor #200: -71 [ 702.004154][ T6221] uclogic 0003:256C:006D.004E: failed retrieving pen parameters: -71 [ 702.012583][ T6221] uclogic 0003:256C:006D.004E: failed probing pen v2 parameters: -71 [ 702.020474][ T6221] uclogic 0003:256C:006D.004E: failed probing parameters: -71 [ 702.028086][ T6221] uclogic: probe of 0003:256C:006D.004E failed with error -71 [ 702.037779][ T6221] usb 1-1: USB disconnect, device number 39 [ 702.270959][ T39] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 702.278479][ T1140] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 702.364406][ T28] audit: type=1400 audit(1718328244.853:349): avc: denied { connect } for pid=15580 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 702.384835][ T28] audit: type=1400 audit(1718328244.853:350): avc: denied { setopt } for pid=15580 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 702.384867][T15581] loop1: detected capacity change from 0 to 512 [ 702.411427][T15581] ext2: Unknown parameter 'fsmagic' [ 702.453064][ T28] audit: type=1400 audit(1718328244.943:351): avc: denied { transfer } for pid=15586 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 702.561011][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 702.657743][ T1140] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 702.751332][ T39] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 702.761322][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.775612][ T39] usb 4-1: config 0 descriptor?? [ 702.925601][T15597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.300963][ T234] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 703.361060][ T1140] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 703.373280][ T1140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.681293][ T1140] usb 5-1: string descriptor 0 read error: -71 [ 703.687779][ T1140] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 703.694792][ T1140] usb 5-1: No valid video chain found. [ 703.700481][ T1140] usb 5-1: USB disconnect, device number 32 [ 703.706298][ T234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.717268][ T234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.727235][ T234] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 703.736567][ T234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.749508][ T234] usb 3-1: config 0 descriptor?? [ 703.825570][T15608] syz-executor.1 (pid 15608) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 704.418301][T15613] loop4: detected capacity change from 0 to 131072 [ 704.427657][T15613] F2FS-fs (loop4): Found nat_bits in checkpoint [ 704.451821][T15613] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 704.463127][ T28] audit: type=1326 audit(1718328246.953:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15612 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6911e7cea9 code=0x0 [ 704.508157][T15622] loop1: detected capacity change from 0 to 256 [ 704.517335][T15622] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 704.529402][ T6] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 704.536855][ T28] audit: type=1400 audit(1718328247.023:353): avc: denied { write } for pid=15621 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.558766][ T28] audit: type=1400 audit(1718328247.023:354): avc: denied { add_name } for pid=15621 comm="syz-executor.1" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.590910][ T28] audit: type=1400 audit(1718328247.023:355): avc: denied { associate } for pid=15621 comm="syz-executor.1" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 704.617912][ T28] audit: type=1400 audit(1718328247.023:356): avc: denied { append } for pid=15621 comm="syz-executor.1" path="/root/syzkaller-testdir3945144760/syzkaller.XMqD99/503/file0/blkio.bfq.io_service_bytes_recursive" dev="loop1" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 704.649229][ T28] audit: type=1400 audit(1718328247.023:357): avc: denied { map } for pid=15621 comm="syz-executor.1" path="/root/syzkaller-testdir3945144760/syzkaller.XMqD99/503/file0/blkio.bfq.io_service_bytes_recursive" dev="loop1" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 704.931054][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.941842][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.951512][ T6221] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 704.958936][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 704.967764][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.976144][ T6] usb 1-1: config 0 descriptor?? [ 704.995216][ T65] usb 4-1: USB disconnect, device number 51 [ 705.131103][T15634] loop3: detected capacity change from 0 to 40427 [ 705.158339][T15634] F2FS-fs (loop3): invalid crc value [ 705.164492][T15634] F2FS-fs (loop3): Found nat_bits in checkpoint [ 705.191877][ T6221] usb 2-1: Using ep0 maxpacket: 32 [ 705.202369][T15634] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 705.311031][ T6221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.322094][ T6221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.332904][ T6221] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 705.341950][ T6221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.407162][T15642] bio_check_eod: 48 callbacks suppressed [ 705.407192][T15642] syz-executor.3: attempt to access beyond end of device [ 705.407192][T15642] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 705.427887][T15642] syz-executor.3: attempt to access beyond end of device [ 705.427887][T15642] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 705.442098][T15642] syz-executor.3: attempt to access beyond end of device [ 705.442098][T15642] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 705.456971][T15642] syz-executor.3: attempt to access beyond end of device [ 705.456971][T15642] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 705.471760][T15642] syz-executor.3: attempt to access beyond end of device [ 705.471760][T15642] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 705.487010][T15642] syz-executor.3: attempt to access beyond end of device [ 705.487010][T15642] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 705.501012][T15642] syz-executor.3: attempt to access beyond end of device [ 705.501012][T15642] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 705.515103][T15642] syz-executor.3: attempt to access beyond end of device [ 705.515103][T15642] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 705.533750][ T6221] usb 2-1: config 0 descriptor?? [ 705.557565][T15641] loop4: detected capacity change from 0 to 32768 [ 705.571408][ T6221] hub 2-1:0.0: USB hub found [ 705.863402][ T2275] syz-executor.3: attempt to access beyond end of device [ 705.863402][ T2275] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 705.877759][ T6221] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 705.940954][ T1140] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 705.951024][ T6] usb 1-1: string descriptor 0 read error: -71 [ 705.971096][ T6] uclogic 0003:256C:006D.004F: failed retrieving string descriptor #200: -71 [ 705.979752][ T6] uclogic 0003:256C:006D.004F: failed retrieving pen parameters: -71 [ 705.987672][ T6] uclogic 0003:256C:006D.004F: failed probing pen v2 parameters: -71 [ 705.995753][ T6] uclogic 0003:256C:006D.004F: failed probing parameters: -71 [ 706.003107][ T6] uclogic: probe of 0003:256C:006D.004F failed with error -71 [ 706.010986][ T6] usb 1-1: USB disconnect, device number 40 [ 706.041643][ T8794] usb 3-1: USB disconnect, device number 46 [ 706.054823][ T28] audit: type=1400 audit(1718328248.543:358): avc: denied { write } for pid=15656 comm="syz-executor.2" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 706.291212][ T1140] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 706.372581][ T6221] usbhid 2-1:0.0: can't add hid device: -71 [ 706.378360][ T6221] usbhid: probe of 2-1:0.0 failed with error -71 [ 706.411190][ T6221] usb 2-1: USB disconnect, device number 43 [ 706.942993][ T6] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 707.151845][ T28] audit: type=1400 audit(1718328249.633:359): avc: denied { wake_alarm } for pid=15682 comm="syz-executor.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 707.181129][ T1140] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 707.190323][ T1140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.290997][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 707.421037][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.491902][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.501954][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 707.511044][ T1140] usb 5-1: string descriptor 0 read error: -71 [ 707.511118][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.526879][ T1140] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 707.527909][ T6] usb 1-1: config 0 descriptor?? [ 707.553579][ T1140] usb 5-1: No valid video chain found. [ 707.569890][ T1140] usb 5-1: USB disconnect, device number 33 [ 707.571299][ T6] hub 1-1:0.0: USB hub found [ 707.781097][ T6] hub 1-1:0.0: 1 port detected [ 707.971134][T15697] loop2: detected capacity change from 0 to 32768 [ 708.081060][ T6221] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 708.222046][ T6] usb 1-1: USB disconnect, device number 41 [ 708.236788][T15711] loop4: detected capacity change from 0 to 1024 [ 708.243521][T15711] EXT4-fs: Ignoring removed orlov option [ 708.248992][T15711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.262552][T15711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 708.273139][ T28] audit: type=1400 audit(1718328250.763:360): avc: denied { map } for pid=15710 comm="syz-executor.4" path="/root/syzkaller-testdir2949684700/syzkaller.qisZao/454/file1/file0/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.309706][T15711] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.4: corrupt xattr in inline inode [ 708.323386][T15711] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.4: corrupted in-inode xattr [ 708.341956][ T28] audit: type=1400 audit(1718328250.833:361): avc: denied { remove_name } for pid=7453 comm="syz-executor.4" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 708.365620][ T7453] ================================================================== [ 708.373505][ T7453] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 708.381321][ T7453] Read of size 4 at addr ffff88813b5f9000 by task syz-executor.4/7453 [ 708.389296][ T7453] [ 708.391466][ T7453] CPU: 1 PID: 7453 Comm: syz-executor.4 Not tainted 6.1.78-syzkaller-00007-g7c734edeaafd #0 [ 708.401363][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 708.411262][ T7453] Call Trace: [ 708.414378][ T7453] [ 708.417155][ T7453] dump_stack_lvl+0x151/0x1b7 [ 708.421669][ T7453] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 708.426964][ T7453] ? _printk+0xd1/0x111 [ 708.430957][ T7453] ? __virt_addr_valid+0x242/0x2f0 [ 708.435904][ T7453] print_report+0x158/0x4e0 [ 708.440256][ T7453] ? __virt_addr_valid+0x242/0x2f0 [ 708.445191][ T7453] ? kasan_addr_to_slab+0xd/0x80 [ 708.449988][ T7453] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 708.455434][ T7453] kasan_report+0x13c/0x170 [ 708.459776][ T7453] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 708.465240][ T7453] __asan_report_load4_noabort+0x14/0x20 [ 708.470707][ T7453] ext4_xattr_delete_inode+0xcd0/0xce0 [ 708.476264][ T7453] ? sb_end_intwrite+0x130/0x130 [ 708.481044][ T7453] ? ext4_expand_extra_isize_ea+0x1c40/0x1c40 [ 708.486942][ T7453] ? __kasan_check_read+0x11/0x20 [ 708.491799][ T7453] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 708.497528][ T7453] ? ext4_evict_inode+0xbc2/0x1550 [ 708.502484][ T7453] ext4_evict_inode+0xef9/0x1550 [ 708.507343][ T7453] ? _raw_spin_unlock+0x4c/0x70 [ 708.512027][ T7453] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 708.517758][ T7453] ? _raw_spin_unlock+0x4c/0x70 [ 708.522437][ T7453] ? inode_io_list_del+0x18b/0x1a0 [ 708.527556][ T7453] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 708.533288][ T7453] evict+0x2a3/0x630 [ 708.537021][ T7453] iput+0x642/0x870 [ 708.540674][ T7453] vfs_rmdir+0x3c2/0x500 [ 708.544743][ T7453] do_rmdir+0x3ab/0x630 [ 708.548741][ T7453] ? d_delete_notify+0x160/0x160 [ 708.553526][ T7453] __x64_sys_unlinkat+0xdf/0xf0 [ 708.558196][ T7453] do_syscall_64+0x3d/0xb0 [ 708.562450][ T7453] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 708.568185][ T7453] RIP: 0033:0x7f6911e7c687 [ 708.572438][ T7453] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 708.591899][ T7453] RSP: 002b:00007fff95a8dfb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 708.600116][ T7453] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f6911e7c687 [ 708.607933][ T7453] RDX: 0000000000000200 RSI: 00007fff95a8f160 RDI: 00000000ffffff9c [ 708.615745][ T7453] RBP: 00007f6911ed9636 R08: 0000000000000000 R09: 0000000000000000 [ 708.623580][ T7453] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff95a8f160 [ 708.631362][ T7453] R13: 00007f6911ed9636 R14: 00000000000ace74 R15: 0000000000000007 [ 708.639177][ T7453] [ 708.642038][ T7453] [ 708.644207][ T7453] The buggy address belongs to the physical page: [ 708.650466][ T7453] page:ffffea0004ed7e40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13b5f9 [ 708.660528][ T7453] flags: 0x4000000000000000(zone=1) [ 708.665565][ T7453] raw: 4000000000000000 ffffea00049a3a88 ffffea0004dcccc8 0000000000000000 [ 708.673980][ T7453] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 708.682393][ T7453] page dumped because: kasan: bad access detected [ 708.688653][ T7453] page_owner tracks the page as freed [ 708.693859][ T7453] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 15710, tgid 15710 (syz-executor.4), ts 708233443162, free_ts 708336457265 [ 708.711904][ T7453] post_alloc_hook+0x213/0x220 [ 708.716503][ T7453] prep_new_page+0x1b/0x110 [ 708.720847][ T7453] get_page_from_freelist+0x27ea/0x2870 [ 708.726231][ T7453] __alloc_pages+0x3a1/0x780 [ 708.730649][ T7453] __folio_alloc+0x15/0x40 [ 708.734905][ T7453] wp_page_copy+0x261/0x1690 [ 708.739332][ T7453] do_wp_page+0xc25/0xdf0 [ 708.743498][ T7453] handle_mm_fault+0x15a2/0x2f40 [ 708.748357][ T7453] exc_page_fault+0x24d/0x700 [ 708.752873][ T7453] asm_exc_page_fault+0x27/0x30 [ 708.757559][ T7453] page last free stack trace: [ 708.762090][ T7453] free_unref_page_prepare+0x83d/0x850 [ 708.767364][ T7453] free_unref_page_list+0xf1/0x7b0 [ 708.772415][ T7453] release_pages+0xf7f/0xfe0 [ 708.776913][ T7453] free_pages_and_swap_cache+0x8a/0xa0 [ 708.782214][ T7453] tlb_flush_mmu+0xfe/0x1d0 [ 708.786547][ T7453] unmap_page_range+0x219d/0x2480 [ 708.791407][ T7453] unmap_vmas+0x4e4/0x660 [ 708.795575][ T7453] exit_mmap+0x2d1/0x940 [ 708.799652][ T7453] __mmput+0x95/0x310 [ 708.803471][ T7453] mmput+0x56/0x170 [ 708.807115][ T7453] do_exit+0xb29/0x2b80 [ 708.811109][ T7453] do_group_exit+0x21a/0x2d0 [ 708.815535][ T7453] get_signal+0x169d/0x1820 [ 708.819880][ T7453] arch_do_signal_or_restart+0xb0/0x16f0 [ 708.825436][ T7453] exit_to_user_mode_loop+0x74/0xa0 [ 708.830466][ T7453] exit_to_user_mode_prepare+0x5a/0xa0 [ 708.835761][ T7453] [ 708.837929][ T7453] Memory state around the buggy address: [ 708.843400][ T7453] ffff88813b5f8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 708.851298][ T7453] ffff88813b5f8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 708.859196][ T7453] >ffff88813b5f9000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.867089][ T7453] ^ 2024/06/14 01:24:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 708.870998][ T7453] ffff88813b5f9080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.878896][ T7453] ffff88813b5f9100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.886880][ T7453] ================================================================== [ 708.999767][ T7453] Disabling lock debugging due to kernel taint