last executing test programs: 3.261479514s ago: executing program 2 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc303) 3.190230244s ago: executing program 2 (id=670): syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYBLOB="e17e7a78aafcf8"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 3.065049433s ago: executing program 2 (id=672): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x8015, 0x0, 0x0) 3.042481517s ago: executing program 2 (id=673): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0x14, r2, 0xb01}, 0x14}}, 0x0) 3.003368802s ago: executing program 2 (id=674): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r6}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000b70200001400"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x9}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.95574189s ago: executing program 3 (id=678): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000e00)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x554d, &(0x7f0000005e40)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537S1EbiOMA/ks0av9RKX3vVfqmx+gR+ljoS/UAvYRHsFfoBTyD+7ZHWHQxGYQsBgQnG1Y+H8jEych3ZjQvM4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTpodou//359vfWnMPxNnlmAwAAAFyyr7bL+sO8qX9I1z+lS19SvYiIMiIurd1HMWlljlJO1fH96sUY/kfUCac+pul4HxHf0/H0ue9fAQAAAO7Xbr1ZNKv1ppgPPSBeU7NpU378kSmviIhq/pgprTwVXzOF1ff3OH5lSqs3sGaZwpott/HltkmuTtpGrVOayWxV/4l1reynXwAAYEjtlUDHKgQAAIA78HPoATCM4lycnzNOm1N6IPiuVQMAAADeoGLoAQAAAAC9q9f/3v8HAAAA9615/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92lfb5W69WXS1r67MORyv8DsiOpryzQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Zn/eUSAEwiAM9q7vTOb+h5UGDY1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnbvnjaMIAwA8t3t7+QCEMegKAwoSBTTEvoRASihAFgU/AclyzsFwIZC4IJEFcgMVch0hISgRQgKZLv8hNZbShC6FCyNRUQTNfjjrD+AUJbsX+3mk2Xl3vZ59Z+9k+fWsDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLL1dnghKeM0bqaKuDr2+/bqYuw39/TRzfXbM7HFuLNv5HT37tdvPZoJTK4X6zun+rWdL5tPBgAAgKMhrVXkd7KN+dgnU3n9n1XnxJr/+6eKuKrn99b9m9urx8svzVT1/2+/3n1u50JTxXXioEvLo+Hc/lS6j2iKE+/p/z2jm9/5/G8vaf6CJO+tPbuV5fez882tW+/08vBYE9kCAA/idNWXQfX7UOwHbSYGwJHRrRXeVf2fTrWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATttbCE1XcCSHMdO/H0eb26uJB/c312zNVe+PGjfX6mHGILISwtDwaZg3OZdJdvXb944XRaHil+eBUCKG9q5fBB2OcE8J/n1O+PUN7s/j3oDMZabQaJOXrMyn5PMygeu89/JFb+oEEAMChlZUt1vV3so35eKwzHcK9H3bX/69Ucb84PE79f/fDv+8Viu+t1/+Dxmc6uWZXLn06e/Xa9deWLy1cHF4cfvL6mcGbg7Pnz507Pxvv1dzsUkiGc22nCQAAwGOic8CxXtnq9X8yvX/9/+SeMcap/z/7bvBFefq3cZOq/w90f9Gv7UwAAACOot5O9MxLf/15UO3c6fXC5wsrK1cGxXZn/0yxbTTdB3SsbPX6P51uOysAAACgCVtrnV3r/xdqcRhz/f/JH5//uT5mGkI4EcLlEMLw9OLl0YXmpjPRmvhH5fxCvbZnCgAAQFtOlK2+/p/lz/8nO488JCGEV18u4uqzrsap/9N3v/qpfq368/9nm5viREr6xf3I+34I3X7bGQEAAHCYHS9bLPb/yDbmP/rl5Ps9z/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO2fAAAA//8Nujoo") quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fallocate(r0, 0x100000010, 0x2, 0x1000) 2.208676414s ago: executing program 4 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}) 2.191905846s ago: executing program 4 (id=689): setpriority(0x2, 0x0, 0xfffffffffffffff9) 2.179427808s ago: executing program 4 (id=690): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.700086351s ago: executing program 4 (id=691): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x3b, "8fc131b2836636f1faa25fdc5724cfa6823f5d12bbe92eba0e87e4f4e6b6e953beea048b83e96a7b34be5c083839356e8e847047e7fa9b08fcef7d"}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x1b, "40ab5b57947acc06381569dfd34a580453f9b21e8065c9580a0620"}, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000101}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x10200}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.698957402s ago: executing program 2 (id=692): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f00000008c0)=""/206, 0xce) 1.64191488s ago: executing program 3 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) 1.596639517s ago: executing program 4 (id=694): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x8015, 0x0, 0x0) 1.239708351s ago: executing program 1 (id=698): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x0, 0x0, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xa) 1.172636632s ago: executing program 1 (id=699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}) 1.027114354s ago: executing program 1 (id=700): setpriority(0x2, 0x0, 0xfffffffffffffff9) 962.834363ms ago: executing program 1 (id=701): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 846.354801ms ago: executing program 1 (id=703): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000e00)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x554d, &(0x7f0000005e40)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537S1EbiOMA/ks0av9RKX3vVfqmx+gR+ljoS/UAvYRHsFfoBTyD+7ZHWHQxGYQsBgQnG1Y+H8jEych3ZjQvM4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTpodou//359vfWnMPxNnlmAwAAAFyyr7bL+sO8qX9I1z+lS19SvYiIMiIurd1HMWlljlJO1fH96sUY/kfUCac+pul4HxHf0/H0ue9fAQAAAO7Xbr1ZNKv1ppgPPSBeU7NpU378kSmviIhq/pgprTwVXzOF1ff3OH5lSqs3sGaZwpott/HltkmuTtpGrVOayWxV/4l1reynXwAAYEjtlUDHKgQAAIA78HPoATCM4lycnzNOm1N6IPiuVQMAAADeoGLoAQAAAAC9q9f/3v8HAAAA9615/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92lfb5W69WXS1r67MORyv8DsiOpryzQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Zn/eUSAEwiAM9q7vTOb+h5UGDY1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnbvnjaMIAwA8t3t7+QCEMegKAwoSBTTEvoRASihAFgU/AclyzsFwIZC4IJEFcgMVch0hISgRQgKZLv8hNZbShC6FCyNRUQTNfjjrD+AUJbsX+3mk2Xl3vZ59Z+9k+fWsDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLL1dnghKeM0bqaKuDr2+/bqYuw39/TRzfXbM7HFuLNv5HT37tdvPZoJTK4X6zun+rWdL5tPBgAAgKMhrVXkd7KN+dgnU3n9n1XnxJr/+6eKuKrn99b9m9urx8svzVT1/2+/3n1u50JTxXXioEvLo+Hc/lS6j2iKE+/p/z2jm9/5/G8vaf6CJO+tPbuV5fez882tW+/08vBYE9kCAA/idNWXQfX7UOwHbSYGwJHRrRXeVf2fTrWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATttbCE1XcCSHMdO/H0eb26uJB/c312zNVe+PGjfX6mHGILISwtDwaZg3OZdJdvXb944XRaHil+eBUCKG9q5fBB2OcE8J/n1O+PUN7s/j3oDMZabQaJOXrMyn5PMygeu89/JFb+oEEAMChlZUt1vV3so35eKwzHcK9H3bX/69Ucb84PE79f/fDv+8Viu+t1/+Dxmc6uWZXLn06e/Xa9deWLy1cHF4cfvL6mcGbg7Pnz507Pxvv1dzsUkiGc22nCQAAwGOic8CxXtnq9X8yvX/9/+SeMcap/z/7bvBFefq3cZOq/w90f9Gv7UwAAACOot5O9MxLf/15UO3c6fXC5wsrK1cGxXZn/0yxbTTdB3SsbPX6P51uOysAAACgCVtrnV3r/xdqcRhz/f/JH5//uT5mGkI4EcLlEMLw9OLl0YXmpjPRmvhH5fxCvbZnCgAAQFtOlK2+/p/lz/8nO488JCGEV18u4uqzrsap/9N3v/qpfq368/9nm5viREr6xf3I+34I3X7bGQEAAHCYHS9bLPb/yDbmP/rl5Ps9z/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO2fAAAA//8Nujoo") quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fallocate(r0, 0x100000010, 0x2, 0x1000) 776.725312ms ago: executing program 3 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x10e, 0x5, 0x0, 0x7ffffffff000) 772.411983ms ago: executing program 3 (id=705): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x1ffffff) 764.053574ms ago: executing program 1 (id=706): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xa6, 0x0, 0x5}, 0xc) 686.297306ms ago: executing program 3 (id=708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 609.863537ms ago: executing program 3 (id=709): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\t\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008700000008000300", @ANYRES32=0x0, @ANYBLOB="05092a00100100250300000075140000000010f8b5f8b0f84e9c00aff749ab2a10638325000000ffffffffffff000000000000000000000000080211000000000000008c18000009728837faa3eb0208ef3fecc2dae409f4a41dd9651626a0000000753a99b9d2a54c0bdfda2f18b0b8ed5b1c0f163750d74a50d6b0610ac383d17a281bf6d16eb22439d626913213ff76ce7016d8109ac18c06592392b651a096412b7d3d6f9ccb1ce125527cbaa6b4ee0f0b31f80e758eac62d6da722fd15839aa1c41836716dedf52ad763f7385b4b962ea51fde6b17fd5945df6efbc91f8583fb44c12c8fc2a267b2f1d6e84eba135978e3deeb540afa915b7c9a4a19bddb3834b08ae622fe1c8e4a9ae16040c50416acb33538cb4baa7dfe22f48061503a00b8a6fa90ce3e0a9df990f5308e6dbc8d222e8702400ed0fc0118287aa490b96869f1292bbac698028e7179a93f9fdd7f7769d85d60e85182391fab815ca8ec4760cbe2083fb07e9a44103be697e72f26a5efbf888b07a40d08f0efd9886e91bfe840821ac07873983899f37cd0d04c6089c8755bc53d9a59792131490806cae86c7260f8809e85e8db5506d3de1620471320c3ea9fe9213b2bda97779ecfc1849bdbff51e311744e8a99e505caf1150bd451a80c62af27e34d68a57709d739c28129f2a066c78eae87d0e306e1d911e666593dabe34a1e01f39060b39a0b3a717caf615377a506c2f1a1e91a1ef666dc371d87bf2d08f371b85e6e1cd7b0c985b8d6f3d03c7986e1f074647d7e50fd4fce6e439f2d6018b260b8da99b491f3088fbdd9563dd637773c3f93bf873717a9824f573135e334d99972a5bc69cb43ed8e998ea60061e0c75c54a0b115066d5d6caccf4565e7b9afa198237acd43b09e19549da12fa751fe296d8350e1ac625700d401c50ce72b34975a240bc4cf188e281904a6071b20aaeac7cd64cd3fd0aca33d60c6f6c8fa8c9ccc6a7d79b34a9be3dec18d91743ccf7c3004b20da583458d3f745f57c671b980ba914e0818c79d93cecee784e2b545b67bd6a7014420d3e5c2239ec9373d10e7a3460d0045fbd9ba3d52fa6db16c7329cf4adbf28afbfd90fd86ca3e4dc2646a249efeadb9a83af46d9ee5ad2223dad5bf86c9586ddf6ea597420bcd85cf6640ec3d7403025c3200eafe063185231a9948f794ad0e1ad6e77b11e450cf31b4117659518acf7bc8247862554dc43ddfbb09c37ac080780722b754da507e5013cbecb600fb15bf14480d6b0d5ff3e15aa4e22681374a65df152b94ac721ba86a26a402241a5a0663803c9ed86d1f75acae4099b3e9444682568589ecf7994430466c24665114909c8eab7d2145811d1ab88354419ca0692a4b6c69c9219e8d2daf45c87343cd8dd3d7a80fecd2f00f1bbd0d8b619a68928002ef83fc81ee6be6770f83dd71e9b09334de52b224a2029227bb815c2d47692c9d94dd4c2b98ed370aa16e0aad7716d7fce2e0a84e8cc86c497fff9013a99df9d2f0d04e1d807f9c705cc96e032af610889837b8d35c34474723f32f5d14e8b29b4e86e1505f9716ab0a0c91afe78f878658ce899957923355fa906857f1abb2e5bc279f6e4145e62e29169b2b8a0620de16878143e7605088306a2461e8557d728b9c986d68a642137f7bdb233a52e59cfe81c282b992d499ba53996b21f398b2e76dd4bba1e90f1f540cf38f3d396cbe71fd495ede0f491c5a47ff91e1d65df0d3190f30bea2ec0e11854d3e728ee90d8970738ca68b3296aa1fb6149ea7e97d0cd40e249665d1095030a2f6caa917959b17a28946be3464511d429653d0a5a5498b2f3e9f5e82390b0f77e34cfb5f126eb0585859771f636ba030cca4176132486ec0365926eacdf7a8db4721b891e86530d2c636184703caa223feebe2bc3700e0006d1bfa8d31037548eea2ffee48e492ccc2c0e5e5d5ff2cabe510850d230cd76bcbfc57e4f93e11f02c90207491c4b1921c2ba5b4e27f090af8abc810225517035db14cc5a46d26ce2a66587091de2d90734f9b0b1418d94e013a60aee2e291b46da45ae31bee68e6fa2801253cbb98e9719408e2cedd73f734548c70cf9c08aefc2c8d4b08085f1bc2c9fab46b40d6fa69d5a0d96d455bfb2c53ae13858f9518dda35a9d56a0f41619a4cb46b1da1c59aad2e70f94f29477254d5023048d245be2dfa2d29ab575adef250f4dd6facaa839f722b2d3c5bb68a23eb9552843fd4d8607af3f82b7293e04a44c175e15386ddbf356b25c58604b6b5a114c9e6a439cb93d359c2475b452c733ba457e6bb2f29294d77bd95e5aee658c37cd2a648d7ff3dd7243f083763373d1f365a56189afc8056c47851ce7aff9ff80f0c2bf55312e8c786f12e599ff2b7133ffc8f5a15b4a94e53fe501821f70c5a4ef51e22db4b71e4997acb3f058c597832f387c3a23f7b3aefb5b73e00499dfd438b49afcdedfafbd2f8dfa578a28126b1402037378ff745ce76f69f0a4994555974cc8a98d4c7d451ca4907faed0b9423fd6083937fd776dae36b1d2f7aecc8c391b7d7c0558ca26e3f3242fc64c41328bbd536584fc77c6c01c0773e7ab2882f020effa0b66ecd320c45912f9eb2117c6ee98b789e4113a45d9926d4dccbc8db91432235d0441d460028d0b57161471a6d7a60cdce37771a9ed31b84aa697e96f9f098ae191f1170086d8c63e3b60eb5a2beacce5d97afcd5bfa0b432e78b4335ae1421cff8fef02a4f3de83ec1b2916965f3821b6736c37c39b51998eb0e3d7b00b9061e77351216336a5a70b260a3edd3e8a666fe700109ee39932ec034aef0859d041f96c95fd5695a94a63c0fd7f6104fa8a8296d640ca4ba5475fd762d18fa8554af9e86f55025e0228d691916c13a3c3a015496282b1af1b5e7657a692cccd77869358dde80e94168251277cc96ec586a899caf98cd2fbfe1b8e4a456ed9961ace5b1772b541ad8c1f217c5f251b189b2ced86b2346b195dcee40f7da53d107b6406620443f4d8934ad4673b1953d3ebe80f6ddb876e297f34f93308bce3feb416952a70430a4663776240c01ffac965a1c6f52df977fa5e5b05a59a1c4e8b4a3ead63241687ce4c6039e292842ed88aa7f8cd8deb8e72392914ad681fdb35fa14c82af795388e2ff3fc3a9804b58acd2e7f1ee07d0cca553abd6b3aba8a34eb0fb748e48bffcea3dde525154a2ddf7e0f4930d0cc3b76cb04a17b5afa00b8c972db5111d6e0c25bb172552a74b9560000581af532647cf121071d2fc51b553d16238d499715242df04b31955258b828c3b570e07bcf02b1894ecca1"], 0x924}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f00000000c0)=[{0x14}, {0x3d}, {0x6, 0x0, 0x0, 0x7ffffdc2}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) 488.858115ms ago: executing program 0 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}) 461.989049ms ago: executing program 4 (id=694): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x8015, 0x0, 0x0) 156.712916ms ago: executing program 0 (id=711): setpriority(0x2, 0x0, 0xfffffffffffffff9) 106.802424ms ago: executing program 0 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newnexthop={0x1c, 0x68, 0x317, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 50.664622ms ago: executing program 0 (id=713): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 474.2µs ago: executing program 0 (id=714): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 0 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x10e, 0x5, 0x0, 0x7ffffffff000) kernel console output (not intermixed with test programs): T373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.595619][ T373] usb 3-1: Product: syz [ 32.601585][ T373] usb 3-1: Manufacturer: syz [ 32.606305][ T373] usb 3-1: SerialNumber: syz [ 32.608513][ T745] EXT4-fs (loop4): Ignoring removed orlov option [ 32.626947][ T745] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 32.634337][ T745] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 32.679657][ T613] syz-executor (613) used greatest stack depth: 18488 bytes left [ 32.819130][ T9] device bridge_slave_1 left promiscuous mode [ 32.825219][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.833485][ T9] device bridge_slave_0 left promiscuous mode [ 32.839891][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.849812][ T757] EXT4-fs (loop3): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 32.928401][ T373] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 32.975546][ T373] usb 3-1: USB disconnect, device number 3 [ 33.115223][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.122337][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.130109][ T759] device bridge_slave_0 entered promiscuous mode [ 33.137458][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.144481][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.154891][ T759] device bridge_slave_1 entered promiscuous mode [ 33.533822][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.542408][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.559536][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.568157][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.576683][ T654] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.583537][ T654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.606786][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.615280][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.623818][ T654] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.630739][ T654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.641236][ T788] sit0: mtu less than device minimum [ 33.649246][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.667698][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.676722][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.700713][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.712370][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.728408][ T788] EXT4-fs (loop0): Ignoring removed orlov option [ 33.730221][ T796] EXT4-fs (loop2): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 33.744545][ T788] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 33.756133][ T788] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 33.767819][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.794078][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.802707][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.876500][ T802] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 33.900261][ T802] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 33.914200][ T802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 33.923272][ T802] System zones: 1-12 [ 33.931442][ T802] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.146: corrupted in-inode xattr [ 33.943373][ T802] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.146: couldn't read orphan inode 15 (err -117) [ 34.013336][ T802] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 34.039279][ T9] device bridge_slave_1 left promiscuous mode [ 34.052986][ T824] EXT4-fs (loop3): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 34.058538][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.082674][ T9] device bridge_slave_0 left promiscuous mode [ 34.098313][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.105367][ T802] EXT4-fs error (device loop1): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz.1.146: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 34.125510][ T802] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.146: Invalid inode table block 0 in block_group 0 [ 34.138328][ T802] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 34.186202][ T759] EXT4-fs error (device loop1): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 34.248252][ T355] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.256673][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 34.256682][ T23] audit: type=1400 audit(1719645492.950:147): avc: denied { create } for pid=831 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.302425][ T834] sit0: mtu less than device minimum [ 34.334952][ T258] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 34.471457][ T834] EXT4-fs (loop3): Ignoring removed orlov option [ 34.487800][ T834] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 34.507177][ T834] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 34.529713][ T355] usb 5-1: Using ep0 maxpacket: 8 [ 34.548628][ T23] audit: type=1400 audit(1719645493.250:148): avc: denied { mount } for pid=840 comm="syz.2.170" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.620205][ T23] audit: type=1400 audit(1719645493.320:149): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.658292][ T355] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.689592][ T355] usb 5-1: config 1 has no interface number 1 [ 34.695585][ T355] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 34.720515][ T355] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.790949][ T844] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.797948][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.806074][ T844] device bridge_slave_0 entered promiscuous mode [ 34.815831][ T844] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.828542][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.829791][ T857] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 34.843896][ T844] device bridge_slave_1 entered promiscuous mode [ 34.863348][ T857] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.873611][ T857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 34.881619][ T857] System zones: 1-12 [ 34.892399][ T857] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.176: corrupted in-inode xattr [ 34.904314][ T355] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.913397][ T355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.921848][ T355] usb 5-1: Product: syz [ 34.925810][ T355] usb 5-1: Manufacturer: syz [ 34.930688][ T857] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.176: couldn't read orphan inode 15 (err -117) [ 34.942716][ T355] usb 5-1: SerialNumber: syz [ 34.948018][ T857] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 35.004855][ T844] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.011713][ T844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.018928][ T844] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.025857][ T844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.072320][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.080254][ T857] EXT4-fs error (device loop3): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz.3.176: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 35.101761][ T857] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.176: Invalid inode table block 0 in block_group 0 [ 35.114434][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.114748][ T857] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 35.126506][ T862] EXT4-fs (loop0): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 35.142443][ T564] EXT4-fs error (device loop3): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 35.162320][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.169392][ T258] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 35.187780][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.195807][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.202646][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.219200][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.227214][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.234045][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.241761][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.249560][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.279599][ T355] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 35.286703][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.296526][ T9] device bridge_slave_1 left promiscuous mode [ 35.302688][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.309743][ T23] audit: type=1400 audit(1719645494.000:150): avc: denied { append } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9278 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.333204][ T9] device bridge_slave_0 left promiscuous mode [ 35.339273][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.346633][ T23] audit: type=1400 audit(1719645494.000:151): avc: denied { open } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9278 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.375958][ T355] usb 5-1: USB disconnect, device number 2 [ 35.388377][ T23] audit: type=1400 audit(1719645494.000:152): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9278 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.468512][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.480404][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.491595][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.519690][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.527927][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.545152][ T874] sit0: mtu less than device minimum [ 35.555910][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.565860][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.621102][ T877] EXT4-fs (loop0): Ignoring removed orlov option [ 35.653495][ T877] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 35.659431][ T879] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.667824][ T879] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.675761][ T879] device bridge_slave_0 entered promiscuous mode [ 35.682861][ T879] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.683045][ T877] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 35.689720][ T879] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.690496][ T879] device bridge_slave_1 entered promiscuous mode [ 35.733707][ T23] audit: type=1400 audit(1719645494.430:153): avc: denied { create } for pid=888 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.887081][ T23] audit: type=1400 audit(1719645494.450:154): avc: denied { listen } for pid=888 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.979570][ T23] audit: type=1400 audit(1719645494.470:155): avc: denied { mounton } for pid=888 comm="syz.2.187" path="/root/syzkaller.g3d90f/33/file0" dev="sda1" ino=2004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 36.049100][ T893] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 36.059991][ T893] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 36.069214][ T893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 36.077100][ T893] System zones: 1-12 [ 36.082330][ T893] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.188: corrupted in-inode xattr [ 36.091866][ T879] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.101369][ T879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.108483][ T879] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.112806][ T893] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.188: couldn't read orphan inode 15 (err -117) [ 36.115223][ T879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.156227][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.164531][ T893] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 36.183910][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.192365][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.210138][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.218416][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.225272][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.225394][ T893] EXT4-fs error (device loop4): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz.4.188: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 36.232964][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.252185][ T893] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.188: Invalid inode table block 0 in block_group 0 [ 36.260449][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.272788][ T893] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 36.279296][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.313041][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.329194][ T708] EXT4-fs error (device loop4): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 36.353269][ T258] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 36.366859][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.375659][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.383845][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.399926][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.411649][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.424870][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.443990][ T23] audit: type=1400 audit(1719645495.140:156): avc: denied { write } for pid=905 comm="syz.0.193" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.584692][ T919] sit0: mtu less than device minimum [ 36.685103][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.692544][ T923] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.699987][ T923] device bridge_slave_0 entered promiscuous mode [ 36.706814][ T9] device bridge_slave_1 left promiscuous mode [ 36.712862][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.720338][ T9] device bridge_slave_0 left promiscuous mode [ 36.726334][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.735009][ T919] EXT4-fs (loop0): Ignoring removed orlov option [ 36.738451][ T925] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.754435][ T925] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 36.767174][ T925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 36.767601][ T919] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 36.782376][ T925] System zones: 1-12 [ 36.793292][ T925] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.202: corrupted in-inode xattr [ 36.805258][ T925] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.202: couldn't read orphan inode 15 (err -117) [ 36.817133][ T925] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 36.822839][ T919] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 36.901374][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.911630][ T923] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.927051][ T923] device bridge_slave_1 entered promiscuous mode [ 36.935327][ T925] EXT4-fs error (device loop1): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz.1.202: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 36.955940][ T925] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.202: Invalid inode table block 0 in block_group 0 [ 36.969290][ T925] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 37.000348][ T844] EXT4-fs error (device loop1): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 37.191841][ T384] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 37.320984][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.327830][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.334948][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.341727][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.366420][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.373770][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.381262][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.391645][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.400186][ T654] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.407026][ T654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.426136][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.441707][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.448580][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.487379][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.505466][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.629077][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.639917][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.658289][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.666334][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.702549][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.709449][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.716697][ T963] device bridge_slave_0 entered promiscuous mode [ 37.730403][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.737291][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.744890][ T963] device bridge_slave_1 entered promiscuous mode [ 37.755872][ T972] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 37.770958][ T972] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.783580][ T972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 37.791573][ T972] System zones: 1-12 [ 37.796773][ T972] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #15: comm syz.2.220: corrupted in-inode xattr [ 37.816091][ T972] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.220: couldn't read orphan inode 15 (err -117) [ 37.828626][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.828700][ T972] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 37.836757][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.891300][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.914388][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.938436][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.946828][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.968968][ T972] EXT4-fs error (device loop2): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz.2.220: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 38.008668][ T972] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz.2.220: Invalid inode table block 0 in block_group 0 [ 38.027434][ T972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 38.046511][ T353] EXT4-fs error (device loop2): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 38.071077][ T509] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 38.108383][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.115307][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.123818][ T967] device bridge_slave_0 entered promiscuous mode [ 38.141451][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.150904][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.158685][ T967] device bridge_slave_1 entered promiscuous mode [ 38.180891][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.187728][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.194885][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.201643][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.291484][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.299864][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.306992][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.349741][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.357798][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.364644][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.374249][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.383178][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.390040][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.428257][ T654] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.436289][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.444258][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.449428][ T1011] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 38.459482][ T1011] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 38.468966][ T1011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 38.476818][ T1011] System zones: 1-12 [ 38.481520][ T1011] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz.0.236: corrupted in-inode xattr [ 38.493315][ T1011] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.236: couldn't read orphan inode 15 (err -117) [ 38.493496][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.504997][ T1011] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 38.571026][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.578900][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.581753][ T1011] EXT4-fs error (device loop0): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz.0.236: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 38.606658][ T1011] EXT4-fs error (device loop0): __ext4_get_inode_loc:4710: comm syz.0.236: Invalid inode table block 0 in block_group 0 [ 38.619296][ T1011] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 38.619401][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.637996][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.644862][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.645074][ T647] EXT4-fs error (device loop0): htree_dirblock_to_tree:1078: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 38.652387][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.680010][ T956] EXT4-fs error (device loop0): __ext4_get_inode_loc:4710: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 38.680527][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.698316][ T654] usb 5-1: Using ep0 maxpacket: 8 [ 38.699433][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.711736][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.724513][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.733388][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.755113][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.763499][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.788639][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.796535][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.818552][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.826947][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.835200][ T654] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.857059][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.865630][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.873644][ T654] usb 5-1: config 1 has no interface number 1 [ 38.880002][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.887486][ T654] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 38.896635][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.904139][ T654] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.929206][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.937397][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.979458][ T9] device bridge_slave_1 left promiscuous mode [ 38.985386][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.993642][ T9] device bridge_slave_0 left promiscuous mode [ 38.999683][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.014662][ T9] device bridge_slave_1 left promiscuous mode [ 39.026808][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.034522][ T9] device bridge_slave_0 left promiscuous mode [ 39.041177][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.066399][ T1027] xt_l2tp: invalid flags combination: 0 [ 39.083906][ T654] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.111562][ T654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.121284][ T654] usb 5-1: Product: syz [ 39.125258][ T654] usb 5-1: Manufacturer: syz [ 39.131083][ T654] usb 5-1: SerialNumber: syz [ 39.235106][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.242475][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.249782][ T1007] device bridge_slave_0 entered promiscuous mode [ 39.256392][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.264614][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.265040][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 39.265053][ T23] audit: type=1400 audit(1719645497.960:163): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9278 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.301908][ T23] audit: type=1400 audit(1719645497.960:164): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9278 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.327046][ T23] audit: type=1400 audit(1719645497.960:165): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.349814][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.356641][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.367749][ T1007] device bridge_slave_1 entered promiscuous mode [ 39.382063][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.390260][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.398414][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.406475][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.456827][ T1040] netlink: 11 bytes leftover after parsing attributes in process `syz.1.217'. [ 39.458557][ T654] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 39.466244][ T1040] netlink: 7 bytes leftover after parsing attributes in process `syz.1.217'. [ 39.518312][ T654] usb 5-1: USB disconnect, device number 3 [ 39.526213][ T1049] xt_l2tp: invalid flags combination: 0 [ 39.561044][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.571475][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.591694][ T23] audit: type=1400 audit(1719645498.290:166): avc: denied { write } for pid=1054 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.592840][ T1016] device bridge_slave_0 entered promiscuous mode [ 39.621929][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.629106][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.636682][ T1016] device bridge_slave_1 entered promiscuous mode [ 39.681342][ T23] audit: type=1400 audit(1719645498.380:167): avc: denied { write } for pid=1060 comm="syz.3.255" name="file0" dev="incremental-fs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.724630][ T1059] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c01c, mo2=0002] [ 39.755598][ T1059] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.762788][ T23] audit: type=1400 audit(1719645498.400:168): avc: denied { setattr } for pid=1060 comm="syz.3.255" name="file0" dev="incremental-fs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.766969][ T1059] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.786004][ T23] audit: type=1400 audit(1719645498.410:169): avc: denied { mounton } for pid=1060 comm="syz.3.255" path="/root/syzkaller.78uU6N/13/file0" dev="incremental-fs" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.802949][ T1059] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 39.826175][ T23] audit: type=1400 audit(1719645498.410:170): avc: denied { read } for pid=1060 comm="syz.3.255" name="file0" dev="incremental-fs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.832862][ T1059] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #13: comm syz.1.254: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.867480][ T23] audit: type=1400 audit(1719645498.410:171): avc: denied { write } for pid=1060 comm="syz.3.255" name="/" dev="incremental-fs" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.873914][ T1059] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.254: couldn't read orphan inode 13 (err -117) [ 39.894744][ T23] audit: type=1400 audit(1719645498.410:172): avc: denied { remove_name } for pid=1060 comm="syz.3.255" name="file0" dev="incremental-fs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.929944][ T1059] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 39.985777][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.998582][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.025730][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.034302][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.043263][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.050117][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.059071][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.067319][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.075541][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.082381][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.089918][ T1067] netlink: 11 bytes leftover after parsing attributes in process `syz.4.257'. [ 40.099422][ T1067] netlink: 7 bytes leftover after parsing attributes in process `syz.4.257'. [ 40.121983][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.129859][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.166744][ T1074] xt_l2tp: invalid flags combination: 0 [ 40.173375][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.239222][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.247493][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.268583][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.330237][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.337928][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.367240][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.375592][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.384456][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.391304][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.398726][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.406867][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.414896][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.421720][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.428924][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.436959][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.445310][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.453524][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.461913][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.498598][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.506427][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.531675][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.609007][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.631805][ T124] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 40.675316][ T1095] netlink: 11 bytes leftover after parsing attributes in process `syz.2.269'. [ 40.684860][ T1095] netlink: 7 bytes leftover after parsing attributes in process `syz.2.269'. [ 40.708543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.718836][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.752094][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 40.761367][ T1101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.272'. [ 40.775354][ T1101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.272'. [ 40.788257][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 40.797362][ T1101] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 40.822173][ T1109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c01c, mo2=0002] [ 40.827868][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.831491][ T1109] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.845305][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.855223][ T1109] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.863555][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.878799][ T1109] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 40.879056][ T124] usb 4-1: Using ep0 maxpacket: 8 [ 40.885420][ T1109] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #13: comm syz.2.276: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 40.891613][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.908897][ T1109] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.276: couldn't read orphan inode 13 (err -117) [ 40.928782][ T1109] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 41.267824][ T124] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.277742][ T124] usb 4-1: config 1 has no interface number 1 [ 41.300163][ T124] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 41.314066][ T124] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.498470][ T124] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.507357][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.515721][ T124] usb 4-1: Product: syz [ 41.519872][ T124] usb 4-1: Manufacturer: syz [ 41.524203][ T124] usb 4-1: SerialNumber: syz [ 41.584640][ T1152] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 41.646563][ T9] device bridge_slave_1 left promiscuous mode [ 41.652777][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.661173][ T9] device bridge_slave_0 left promiscuous mode [ 41.675358][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.682799][ T9] device bridge_slave_1 left promiscuous mode [ 41.688268][ T653] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 41.688801][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.703282][ T9] device bridge_slave_0 left promiscuous mode [ 41.709968][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.748321][ T9] device bridge_slave_1 left promiscuous mode [ 41.754273][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.769178][ T9] device bridge_slave_0 left promiscuous mode [ 41.775399][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.858447][ T124] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 41.913093][ T124] usb 4-1: USB disconnect, device number 2 [ 41.948249][ T653] usb 2-1: Using ep0 maxpacket: 8 [ 42.068329][ T653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.080450][ T653] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.158424][ T653] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 42.167758][ T653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 42.176210][ T653] usb 2-1: SerialNumber: syz [ 42.186096][ T653] usb 2-1: config 0 descriptor?? [ 42.187138][ T1184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c01c, mo2=0002] [ 42.210260][ T1184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.218785][ T1184] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.233968][ T1184] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 42.240581][ T1184] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #13: comm syz.4.308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.259024][ T1184] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.308: couldn't read orphan inode 13 (err -117) [ 42.270867][ T1184] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 42.541878][ T1138] Zero length message leads to an empty skb [ 42.600215][ T1193] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.628325][ T653] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 42.635332][ T653] uvcvideo: No valid video chain found. [ 42.644926][ T653] usb 2-1: USB disconnect, device number 2 [ 43.568596][ T1252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c01c, mo2=0002] [ 43.579174][ T1252] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.586202][ T1252] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.602976][ T1252] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 43.610530][ T1252] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #13: comm syz.1.333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.630739][ T1252] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.333: couldn't read orphan inode 13 (err -117) [ 43.643271][ T1252] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 44.188254][ T18] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.336054][ T1283] F2FS-fs (loop4): invalid crc value [ 44.341273][ T1283] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.350435][ T1283] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.378282][ T653] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.389238][ T1283] F2FS-fs (loop4): recover fsync data on readonly fs [ 44.395888][ T1283] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 44.402290][ T1283] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 44.417864][ T1283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.428252][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 44.447035][ T23] kauditd_printk_skb: 20 callbacks suppressed [ 44.447046][ T23] audit: type=1400 audit(1719645503.140:193): avc: denied { remount } for pid=1282 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.490182][ T1283] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 44.568316][ T18] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.590734][ T18] usb 4-1: config 0 interface 0 has no altsetting 0 [ 44.628305][ T653] usb 3-1: Using ep0 maxpacket: 32 [ 44.668324][ T18] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 44.677255][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 44.685774][ T18] usb 4-1: SerialNumber: syz [ 44.696012][ T18] usb 4-1: config 0 descriptor?? [ 44.791928][ T653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.903856][ T1301] syz.4.350[1301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.904159][ T1301] syz.4.350[1301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.997160][ T23] audit: type=1400 audit(1719645503.640:194): avc: denied { read } for pid=1298 comm="syz.4.350" name="rtc0" dev="devtmpfs" ino=9260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.029751][ T653] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 45.032580][ T23] audit: type=1400 audit(1719645503.640:195): avc: denied { open } for pid=1298 comm="syz.4.350" path="/dev/rtc0" dev="devtmpfs" ino=9260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.067388][ T23] audit: type=1400 audit(1719645503.660:196): avc: denied { ioctl } for pid=1298 comm="syz.4.350" path="/dev/rtc0" dev="devtmpfs" ino=9260 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.108279][ T18] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 45.115107][ T18] uvcvideo: No valid video chain found. [ 45.121226][ T18] usb 4-1: USB disconnect, device number 3 [ 45.228356][ T653] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40 [ 45.237417][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.245190][ T653] usb 3-1: Product: syz [ 45.249160][ T653] usb 3-1: Manufacturer: syz [ 45.253551][ T653] usb 3-1: SerialNumber: syz [ 45.444791][ T23] audit: type=1400 audit(1719645504.140:197): avc: denied { name_bind } for pid=1304 comm="syz.0.353" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.503850][ T23] audit: type=1400 audit(1719645504.200:198): avc: denied { write } for pid=1270 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.503940][ T1271] device bridge1 entered promiscuous mode [ 45.678813][ T653] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 45.687578][ T653] usb 3-1: USB disconnect, device number 4 [ 46.043005][ T23] audit: type=1400 audit(1719645504.440:199): avc: denied { create } for pid=1316 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.476770][ T23] audit: type=1400 audit(1719645504.450:200): avc: denied { bind } for pid=1316 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.569533][ T1318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c01c, mo2=0002] [ 46.598288][ T1318] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.608925][ T1318] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 46.623808][ T1318] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 46.630696][ T1318] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #13: comm syz.0.358: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.656474][ T1318] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.358: couldn't read orphan inode 13 (err -117) [ 46.670283][ T1318] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 46.724801][ T23] audit: type=1326 audit(1719645505.420:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1315 comm="syz.0.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67e276fb99 code=0x0 [ 46.892223][ T1333] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 46.899869][ T1333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 46.923071][ T1333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.962253][ T1333] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.974878][ T1333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 46.982194][ T1333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.996810][ T23] audit: type=1400 audit(1719645505.690:202): avc: denied { append } for pid=1332 comm="syz.1.362" path="/root/syzkaller.z8ZafS/25/file0/memory.events" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.997434][ T1333] F2FS-fs (loop1): Found FS corruption, run fsck to fix. [ 47.311888][ T1358] syz.2.371[1358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.312146][ T1358] syz.2.371[1358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.623446][ T1354] ====================================================== [ 47.623446][ T1354] WARNING: the mand mount option is being deprecated and [ 47.623446][ T1354] will be removed in v5.15! [ 47.623446][ T1354] ====================================================== [ 47.853843][ T1354] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.888600][ T1354] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.924319][ T1370] attempt to access beyond end of device [ 47.924319][ T1370] loop0: rw=2049, want=45104, limit=40427 [ 47.935940][ T1354] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0 [ 47.935951][ T1354] CPU: 0 PID: 1354 Comm: syz.0.370 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 47.935956][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.935959][ T1354] Call Trace: [ 47.935994][ T1354] dump_stack+0x1d8/0x241 [ 47.936007][ T1354] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 47.936021][ T1354] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 47.936032][ T1354] f2fs_is_valid_blkaddr+0xc2d/0x1380 [ 47.936044][ T1354] f2fs_map_blocks+0xbe7/0x2a30 [ 47.936066][ T1354] ? f2fs_force_buffered_io+0x4e0/0x4e0 [ 47.936078][ T1354] ? preempt_count_add+0x8f/0x180 [ 47.936088][ T1354] ? prep_new_page+0x115/0x370 [ 47.936099][ T1354] f2fs_mpage_readpages+0x1206/0x2730 [ 47.936116][ T1354] ? f2fs_update_iostat+0x240/0x240 [ 47.936129][ T1354] ? should_fail+0x1ad/0x880 [ 47.936141][ T1354] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 47.936152][ T1354] ? f2fs_read_data_pages+0xc3/0x2a0 [ 47.936163][ T1354] ? f2fs_set_data_page_dirty+0x740/0x740 [ 47.936172][ T1354] read_pages+0x119/0x400 [ 47.936186][ T1354] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 47.936198][ T1354] ? futex_wake+0x6ce/0x840 [ 47.936210][ T1354] __do_page_cache_readahead+0x448/0x4f0 [ 47.936225][ T1354] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 47.936236][ T1354] f2fs_readdir+0x417/0xaf0 [ 47.936251][ T1354] ? f2fs_fill_dentries+0xe10/0xe10 [ 47.936261][ T1354] ? down_read_killable+0x101/0x220 [ 47.936271][ T1354] ? __fsnotify_parent+0x310/0x310 [ 47.936284][ T1354] ? security_file_permission+0x1dc/0x2f0 [ 47.936296][ T1354] iterate_dir+0x266/0x4e0 [ 47.936307][ T1354] ? f2fs_fill_dentries+0xe10/0xe10 [ 47.936326][ T1354] ksys_getdents64+0x21b/0x4c0 [ 47.936340][ T1354] ? __ia32_sys_getdents+0x80/0x80 [ 47.936350][ T1354] ? ksys_getdents64+0x4c0/0x4c0 [ 47.936363][ T1354] ? fpu__clear+0x3c0/0x3c0 [ 47.936374][ T1354] __x64_sys_getdents64+0x76/0x80 [ 47.936383][ T1354] do_syscall_64+0xca/0x1c0 [ 47.936399][ T1354] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.936413][ T1354] RIP: 0033:0x7f67e276fb99 [ 47.936424][ T1354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.936430][ T1354] RSP: 002b:00007f67e19f1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 47.936442][ T1354] RAX: ffffffffffffffda RBX: 00007f67e28fdfa0 RCX: 00007f67e276fb99 [ 47.936447][ T1354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 47.936453][ T1354] RBP: 00007f67e27f077e R08: 0000000000000000 R09: 0000000000000000 [ 47.936458][ T1354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.936465][ T1354] R13: 000000000000000b R14: 00007f67e28fdfa0 R15: 00007ffc0cca9d18 [ 47.936581][ T1354] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0 [ 47.936592][ T1354] CPU: 0 PID: 1354 Comm: syz.0.370 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 47.936597][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.936600][ T1354] Call Trace: [ 47.936612][ T1354] dump_stack+0x1d8/0x241 [ 47.936626][ T1354] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 47.936639][ T1354] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 47.936651][ T1354] f2fs_is_valid_blkaddr+0xc2d/0x1380 [ 47.936663][ T1354] f2fs_get_read_data_page+0x4d1/0x8c0 [ 47.936676][ T1354] ? page_cache_prev_miss+0x410/0x410 [ 47.936687][ T1354] ? f2fs_get_block+0x1b0/0x1b0 [ 47.936702][ T1354] ? pagecache_get_page+0x5a7/0x750 [ 47.936714][ T1354] f2fs_find_data_page+0x182/0x3f0 [ 47.936726][ T1354] f2fs_readdir+0x424/0xaf0 [ 47.936742][ T1354] ? f2fs_fill_dentries+0xe10/0xe10 [ 47.936754][ T1354] ? down_read_killable+0x101/0x220 [ 47.936763][ T1354] ? __fsnotify_parent+0x310/0x310 [ 47.936776][ T1354] ? security_file_permission+0x1dc/0x2f0 [ 47.936788][ T1354] iterate_dir+0x266/0x4e0 [ 47.936799][ T1354] ? f2fs_fill_dentries+0xe10/0xe10 [ 47.936811][ T1354] ksys_getdents64+0x21b/0x4c0 [ 47.936825][ T1354] ? __ia32_sys_getdents+0x80/0x80 [ 47.936835][ T1354] ? ksys_getdents64+0x4c0/0x4c0 [ 47.936848][ T1354] ? fpu__clear+0x3c0/0x3c0 [ 47.936861][ T1354] __x64_sys_getdents64+0x76/0x80 [ 47.936871][ T1354] do_syscall_64+0xca/0x1c0 [ 47.936883][ T1354] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.936891][ T1354] RIP: 0033:0x7f67e276fb99 [ 47.936900][ T1354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.936907][ T1354] RSP: 002b:00007f67e19f1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 47.936918][ T1354] RAX: ffffffffffffffda RBX: 00007f67e28fdfa0 RCX: 00007f67e276fb99 [ 47.936924][ T1354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 47.936930][ T1354] RBP: 00007f67e27f077e R08: 0000000000000000 R09: 0000000000000000 [ 47.936936][ T1354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.936943][ T1354] R13: 000000000000000b R14: 00007f67e28fdfa0 R15: 00007ffc0cca9d18 [ 47.948224][ T1364] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 47.948298][ T1364] System zones: 0-7 [ 47.949647][ T1364] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue [ 47.952567][ T1364] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.373: bg 0: block 234: padding at end of block bitmap is not set [ 47.952719][ T1364] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 117 [ 47.952725][ T1364] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.952725][ T1364] [ 48.283529][ T1381] F2FS-fs (loop3): invalid crc value [ 48.329419][ T1384] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=21363 [ 48.337099][ T18] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.364299][ T1384] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=21363 [ 48.379115][ T1381] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 48.381366][ T1385] SELinux: Context $ is not valid (left unmapped). [ 48.408733][ T1381] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.694083][ T1381] F2FS-fs (loop3): recover fsync data on readonly fs [ 48.700762][ T1381] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 48.707134][ T1381] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 48.713589][ T1381] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.747592][ T1381] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 48.780913][ T1394] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c01c, mo2=0002] [ 48.789657][ T1394] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.796185][ T1394] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 48.810802][ T1394] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 48.817379][ T1394] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #13: comm syz.0.379: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 48.835410][ T1394] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.379: couldn't read orphan inode 13 (err -117) [ 48.847576][ T1394] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 48.868797][ T18] usb 3-1: Using ep0 maxpacket: 32 [ 48.974876][ T1392] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 48.989258][ T1392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.003002][ T1392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.038271][ T18] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.042510][ T1392] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 49.067211][ T1392] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.074225][ T1392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.103150][ T1392] F2FS-fs (loop1): Found FS corruption, run fsck to fix. [ 49.128336][ T18] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 49.298305][ T18] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40 [ 49.307251][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.315244][ T18] usb 3-1: Product: syz [ 49.319253][ T18] usb 3-1: Manufacturer: syz [ 49.323620][ T18] usb 3-1: SerialNumber: syz [ 49.407848][ T1414] fuse: Bad value for 'fd' [ 49.581802][ T1379] device bridge2 entered promiscuous mode [ 49.618945][ T18] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 49.627549][ T18] usb 3-1: USB disconnect, device number 5 [ 49.688246][ T1204] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 49.822698][ T1424] syz.0.387[1424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.822962][ T1424] syz.0.387[1424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.153619][ T1433] device syzkaller0 entered promiscuous mode [ 50.208363][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.219105][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.228597][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.241312][ T1204] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.250247][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.259297][ T1204] usb 2-1: config 0 descriptor?? [ 50.288987][ T18] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.389632][ T1439] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 50.397688][ T1439] System zones: 0-7 [ 50.401988][ T1439] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue [ 50.416485][ T1439] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.395: bg 0: block 234: padding at end of block bitmap is not set [ 50.430899][ T1439] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 117 [ 50.443897][ T1439] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.443897][ T1439] [ 50.974152][ T1447] __nla_validate_parse: 20 callbacks suppressed [ 50.974158][ T1447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 51.004021][ T1447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 51.078361][ T18] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.129774][ T1204] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 51.147638][ T1204] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 51.198037][ T1204] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 51.237177][ T1449] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 51.248416][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.267762][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.308100][ T18] usb 5-1: SerialNumber: syz [ 51.359097][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 51.359108][ T23] audit: type=1400 audit(1719645510.060:221): avc: denied { write } for pid=1448 comm="syz.2.397" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.510608][ T23] audit: type=1400 audit(1719645510.210:222): avc: denied { ioctl } for pid=1413 comm="syz.1.385" path="socket:[21461]" dev="sockfs" ino=21461 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.608844][ T1467] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=21683 [ 51.618097][ T1467] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=21683 [ 51.814100][ T1472] device syzkaller0 entered promiscuous mode [ 52.048381][ T18] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 52.055851][ T18] usb 5-1: USB disconnect, device number 4 [ 52.134814][ T1483] syz.3.406[1483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.135107][ T1483] syz.3.406[1483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.303773][ T23] audit: type=1400 audit(1719645511.000:223): avc: denied { write } for pid=1484 comm="syz.0.408" name="001" dev="devtmpfs" ino=9254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.305249][ T1485] usb usb8: usbfs: process 1485 (syz.0.408) did not claim interface 0 before use [ 52.423127][ T1482] F2FS-fs (loop2): invalid crc value [ 52.438104][ T1482] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.472074][ T1482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.518864][ T1482] F2FS-fs (loop2): recover fsync data on readonly fs [ 52.525756][ T1482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 52.532336][ T1482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 52.538962][ T1482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.578808][ T1482] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.768142][ T23] audit: type=1400 audit(1719645511.460:224): avc: denied { read } for pid=1495 comm="syz.4.413" name="msr" dev="devtmpfs" ino=9183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.793357][ T23] audit: type=1400 audit(1719645511.460:225): avc: denied { open } for pid=1495 comm="syz.4.413" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.039545][ T1498] device syzkaller0 entered promiscuous mode [ 53.073263][ T1504] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 53.105159][ T23] audit: type=1400 audit(1719645511.800:226): avc: denied { write } for pid=1514 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.157776][ T23] audit: type=1400 audit(1719645511.830:227): avc: denied { nlmsg_write } for pid=1514 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.159360][ T1521] usb usb8: usbfs: process 1521 (syz.0.419) did not claim interface 0 before use [ 53.178611][ T1523] request_module fs-autofs succeeded, but still no fs? [ 53.211286][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 53.229575][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 53.243995][ T23] audit: type=1400 audit(1719645511.890:228): avc: denied { ioctl } for pid=1517 comm="syz.2.418" path="socket:[21842]" dev="sockfs" ino=21842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.278603][ T654] usb 2-1: USB disconnect, device number 3 [ 53.282916][ T23] audit: type=1400 audit(1719645511.890:229): avc: denied { remount } for pid=1517 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.304871][ T1533] capability: warning: `syz.4.424' uses deprecated v2 capabilities in a way that may be insecure [ 53.306508][ T23] audit: type=1326 audit(1719645511.930:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879d13eb99 code=0x7ffc0000 [ 53.318838][ T1533] printk: syz.4.424 (1533): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 53.593818][ T1547] syz.4.426[1547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.594116][ T1547] syz.4.426[1547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.808976][ T1204] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.865351][ T1549] device syzkaller0 entered promiscuous mode [ 53.917898][ T1555] usb usb8: usbfs: process 1555 (syz.1.433) did not claim interface 0 before use [ 53.929895][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 54.037665][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 54.131365][ T1574] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 54.188371][ T1204] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.210365][ T1581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1581 comm=syz.3.442 [ 54.229182][ T1581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.280412][ T1204] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.291003][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.315814][ T1204] usb 1-1: SerialNumber: syz [ 54.431157][ T1588] usb usb8: usbfs: process 1588 (syz.4.445) did not claim interface 0 before use [ 54.572878][ T1594] device syzkaller0 entered promiscuous mode [ 54.587760][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 54.597229][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 54.673815][ T1606] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 54.881981][ T1610] syz.3.455[1610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.882275][ T1610] syz.3.455[1610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.132687][ T1604] F2FS-fs (loop4): invalid crc value [ 55.149041][ T1204] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 55.158108][ T1204] usb 1-1: USB disconnect, device number 2 [ 55.176290][ T1604] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.240984][ T1604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.544869][ T923] attempt to access beyond end of device [ 55.544869][ T923] loop4: rw=2049, want=45104, limit=40427 [ 55.890276][ T1636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 55.928274][ T1204] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.326148][ T1654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.458341][ T1204] usb 4-1: Using ep0 maxpacket: 32 [ 56.586912][ T1652] F2FS-fs (loop4): invalid crc value [ 56.616535][ T1652] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.623350][ T1204] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.693921][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.697299][ T1652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.700833][ T1661] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.718335][ T1661] device bridge_slave_0 entered promiscuous mode [ 56.718507][ T1204] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 56.725533][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.744473][ T1661] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.754620][ T1661] device bridge_slave_1 entered promiscuous mode [ 56.778917][ T923] attempt to access beyond end of device [ 56.778917][ T923] loop4: rw=2049, want=45104, limit=40427 [ 56.826657][ T23] kauditd_printk_skb: 44 callbacks suppressed [ 56.826668][ T23] audit: type=1400 audit(1719645515.520:275): avc: denied { ioctl } for pid=1668 comm="syz.0.476" path="socket:[23214]" dev="sockfs" ino=23214 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.888178][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.895058][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.902185][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.908968][ T1661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.943595][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.951821][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.959342][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.977725][ T1204] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40 [ 56.988242][ T1204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.996041][ T1204] usb 4-1: Product: syz [ 57.000134][ T1204] usb 4-1: Manufacturer: syz [ 57.004459][ T1204] usb 4-1: SerialNumber: syz [ 57.017377][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.025572][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.032544][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.040010][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.048581][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.055561][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.148908][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.172123][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.256650][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.275430][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.294768][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.310415][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.326908][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.364326][ T9] device bridge_slave_1 left promiscuous mode [ 57.371423][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.378879][ T9] device bridge_slave_0 left promiscuous mode [ 57.384843][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.573316][ T1627] device bridge1 entered promiscuous mode [ 57.580208][ T1680] netlink: 'syz.2.478': attribute type 3 has an invalid length. [ 57.609377][ T1204] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 57.627105][ T1204] usb 4-1: USB disconnect, device number 4 [ 57.631634][ T1684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1684 comm=syz.2.480 [ 57.644914][ T18] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.658046][ T1684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.842224][ T1700] syz.0.488 (pid 1700) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 57.879580][ T1703] netlink: 'syz.0.489': attribute type 3 has an invalid length. [ 58.008327][ T18] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.098356][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.107320][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.118072][ T18] usb 5-1: SerialNumber: syz [ 58.287060][ T1729] netlink: 'syz.3.501': attribute type 3 has an invalid length. [ 58.293543][ T23] audit: type=1400 audit(1719645516.960:276): avc: denied { connect } for pid=1726 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.298549][ T568] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.314943][ T23] audit: type=1400 audit(1719645516.970:277): avc: denied { setopt } for pid=1726 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.809923][ T1733] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 58.818221][ T568] usb 1-1: Using ep0 maxpacket: 16 [ 58.823900][ T1733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 58.835559][ T1733] F2FS-fs (loop3): invalid crc value [ 58.859874][ T1733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.878363][ T18] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 58.894153][ T18] usb 5-1: USB disconnect, device number 5 [ 58.911523][ T1733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 58.918767][ T1733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.943034][ T963] attempt to access beyond end of device [ 58.943034][ T963] loop3: rw=2049, want=45104, limit=40427 [ 58.988361][ T568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 58.999418][ T568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 59.009116][ T568] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 59.018040][ T568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.027132][ T568] usb 1-1: config 0 descriptor?? [ 59.258242][ T373] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 59.275234][ T1761] netlink: 'syz.3.512': attribute type 3 has an invalid length. [ 59.354305][ T1763] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 59.362218][ T1763] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 59.385730][ T1763] EXT4-fs (loop3): 1 truncate cleaned up [ 59.402808][ T1763] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 59.443749][ T1774] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 59.456485][ T23] audit: type=1400 audit(1719645518.150:278): avc: denied { map } for pid=1773 comm="syz.2.517" path="/root/syzkaller.AeIYIj/21/file1/bus" dev="devtmpfs" ino=9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.489677][ T1707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.508394][ T373] usb 2-1: Using ep0 maxpacket: 32 [ 59.509002][ T568] hid (null): bogus close delimiter [ 59.518062][ T23] audit: type=1400 audit(1719645518.210:279): avc: denied { write } for pid=1773 comm="syz.2.517" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.545891][ T1774] EXT4-fs error (device loop2): ext4_validate_block_bitmap:400: comm syz.2.517: bg 0: bad block bitmap checksum [ 59.548768][ T568] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 59.571284][ T1774] EXT4-fs error (device loop2) in ext4_free_blocks:5019: Filesystem failed CRC [ 59.580739][ T23] audit: type=1400 audit(1719645518.240:280): avc: denied { open } for pid=1773 comm="syz.2.517" path="/root/syzkaller.AeIYIj/21/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.599197][ T568] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 59.622290][ T568] hid-generic 0003:0158:0100.0002: bogus close delimiter [ 59.629556][ T568] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 59.637335][ T568] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 59.652200][ T1791] cgroup: syz.4.523 (1791) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 59.668469][ T1791] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 59.669113][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.679074][ T23] audit: type=1400 audit(1719645518.370:281): avc: denied { unlink } for pid=1661 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.691976][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.728669][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.743975][ T373] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.751823][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.773272][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.788797][ T23] audit: type=1400 audit(1719645518.390:282): avc: denied { unlink } for pid=1661 comm="syz-executor" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.814625][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 0 [ 59.831768][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.847746][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 2048 [ 59.864825][ T373] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 59.881873][ T23] audit: type=1400 audit(1719645518.580:283): avc: denied { create } for pid=1795 comm="syz.4.526" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 59.885739][ T1796] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.902898][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.931631][ T500] usb 1-1: USB disconnect, device number 3 [ 59.938131][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 4096 [ 59.955867][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 59.966386][ T1796] F2FS-fs (loop8): Unable to read 1th superblock [ 59.971871][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 6144 [ 59.982671][ T1796] blk_update_request: I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.002070][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 60.014000][ T1796] F2FS-fs (loop8): Unable to read 2th superblock [ 60.021944][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 8192 [ 60.044308][ T1661] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 60.059945][ T373] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40 [ 60.069401][ T23] audit: type=1400 audit(1719645518.760:284): avc: denied { unlink } for pid=923 comm="syz-executor" name="file0" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 60.092076][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.100459][ T373] usb 2-1: Product: syz [ 60.104465][ T373] usb 2-1: Manufacturer: syz [ 60.108358][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 10240 [ 60.109124][ T373] usb 2-1: SerialNumber: syz [ 60.146283][ T1661] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.AeIYIj/21/file1/lost+found: directory fails checksum at offset 12288 [ 60.181662][ T1661] EXT4-fs error (device loop2): ext4_empty_dir:2996: inode #11: comm syz-executor: Directory block failed checksum [ 60.403644][ T1743] device bridge2 entered promiscuous mode [ 60.449824][ T373] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 60.458134][ T373] usb 2-1: USB disconnect, device number 4 [ 60.548524][ T1828] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 60.567200][ T1826] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 60.577842][ T1826] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 60.593329][ T1826] EXT4-fs (loop2): 1 truncate cleaned up [ 60.600006][ T1826] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 60.654069][ T1835] netlink: 108 bytes leftover after parsing attributes in process `syz.4.542'. [ 60.930680][ T1853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 61.071067][ T1868] EXT4-fs error (device loop0): ext4_xattr_ibody_get:601: inode #15: comm syz.0.548: corrupted in-inode xattr [ 61.093090][ T1868] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz.0.548: corrupted in-inode xattr [ 61.116326][ T1868] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:455: comm syz.0.548: Invalid block bitmap block 4294967295 in block_group 0 [ 61.259789][ T1868] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 61.345700][ T1868] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.345700][ T1868] [ 61.368357][ T1870] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 61.390125][ T1016] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.BBNTbX/58/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 61.414520][ T9] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm kworker/u4:1: corrupted in-inode xattr [ 61.431938][ T9] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm kworker/u4:1: corrupted in-inode xattr [ 61.444660][ T1016] EXT4-fs (loop0): Inode 15 (ffff8881d3213390): i_reserved_data_blocks (1) not cleared! [ 61.462990][ T1870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:400: comm syz.1.553: bg 0: bad block bitmap checksum [ 61.476670][ T1877] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 61.484917][ T1877] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 61.492842][ T500] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.500379][ T1870] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Filesystem failed CRC [ 61.509579][ T1877] EXT4-fs (loop2): 1 truncate cleaned up [ 61.515139][ T1877] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 61.534202][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.549903][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.565781][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.582337][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.599737][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.617354][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 0 [ 61.648402][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.668099][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 2048 [ 61.686269][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.702518][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 4096 [ 61.726060][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.741951][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 6144 [ 61.759330][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.775058][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 8192 [ 61.791714][ T500] usb 4-1: Using ep0 maxpacket: 16 [ 61.796797][ T967] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:389: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.812561][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 10240 [ 61.840450][ T967] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.z8ZafS/47/file1/lost+found: directory fails checksum at offset 12288 [ 61.868466][ T967] EXT4-fs error (device loop1): ext4_empty_dir:2996: inode #11: comm syz-executor: Directory block failed checksum [ 61.893293][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 61.893303][ T23] audit: type=1400 audit(1719645520.590:291): avc: denied { setopt } for pid=1891 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.918791][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 61.935448][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 61.945268][ T500] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 61.954606][ T500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.967945][ T1894] netlink: 56 bytes leftover after parsing attributes in process `syz.4.564'. [ 61.978028][ T500] usb 4-1: config 0 descriptor?? [ 62.024575][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.057258][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.064752][ T23] audit: type=1400 audit(1719645520.760:292): avc: denied { execute } for pid=1903 comm="syz.4.567" path=2F6D656D66643A0B656D31C1F8A68D4EC0A377E2CBA2BAE5F497AC232AFF202864656C6574656429 dev="tmpfs" ino=24939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.109864][ T1886] device bridge_slave_0 entered promiscuous mode [ 62.130436][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.148235][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.165292][ T1886] device bridge_slave_1 entered promiscuous mode [ 62.248744][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.255607][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.262735][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.269483][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.337055][ T23] audit: type=1400 audit(1719645521.030:293): avc: denied { nlmsg_read } for pid=1924 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.372846][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.384072][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.393204][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.428404][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.437074][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.439163][ T1863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.452821][ T659] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.459657][ T659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.468892][ T500] hid (null): bogus close delimiter [ 62.487840][ T500] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 62.504793][ T500] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 62.508044][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.512547][ T500] hid-generic 0003:0158:0100.0003: bogus close delimiter [ 62.527663][ T500] hid-generic 0003:0158:0100.0003: item 0 0 2 10 parsing failed [ 62.529226][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.536409][ T500] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 62.563513][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.571631][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.588752][ T9] device bridge_slave_1 left promiscuous mode [ 62.612313][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.620996][ T1918] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.628609][ T9] device bridge_slave_0 left promiscuous mode [ 62.628687][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.641613][ T1918] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.651609][ T1918] F2FS-fs (loop2): invalid crc value [ 62.678005][ T1918] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.739831][ T1918] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.756881][ T1918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.758687][ T18] usb 4-1: USB disconnect, device number 5 [ 62.817844][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.826511][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.836299][ T1953] IPv6: NLM_F_REPLACE set, but no existing node found! [ 62.857931][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.868560][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.901622][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.910482][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.924706][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.943130][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.965316][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.973729][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.162441][ T1945] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.261095][ T1945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.287796][ T1968] attempt to access beyond end of device [ 63.287796][ T1968] loop4: rw=2049, want=45104, limit=40427 [ 63.312281][ T1945] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 63.330468][ T1945] CPU: 0 PID: 1945 Comm: syz.4.584 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 63.340072][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.349961][ T1945] Call Trace: [ 63.353096][ T1945] dump_stack+0x1d8/0x241 [ 63.357345][ T1945] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 63.363006][ T1945] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 63.368543][ T1945] f2fs_is_valid_blkaddr+0xc2d/0x1380 [ 63.373847][ T1945] f2fs_map_blocks+0xbe7/0x2a30 [ 63.378539][ T1945] ? f2fs_force_buffered_io+0x4e0/0x4e0 [ 63.383915][ T1945] ? preempt_count_add+0x8f/0x180 [ 63.388775][ T1945] ? prep_new_page+0x115/0x370 [ 63.393476][ T1945] f2fs_mpage_readpages+0x1206/0x2730 [ 63.398676][ T1945] ? f2fs_update_iostat+0x240/0x240 [ 63.403712][ T1945] ? should_fail+0x1ad/0x880 [ 63.408130][ T1945] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 63.414117][ T1945] ? f2fs_read_data_pages+0xc3/0x2a0 [ 63.419239][ T1945] ? f2fs_set_data_page_dirty+0x740/0x740 [ 63.424793][ T1945] read_pages+0x119/0x400 [ 63.428966][ T1945] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 63.434607][ T1945] __do_page_cache_readahead+0x448/0x4f0 [ 63.440072][ T1945] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 63.446407][ T1945] f2fs_readdir+0x417/0xaf0 [ 63.450748][ T1945] ? f2fs_fill_dentries+0xe10/0xe10 [ 63.455780][ T1945] ? down_read_killable+0x101/0x220 [ 63.460809][ T1945] ? __fsnotify_parent+0x310/0x310 [ 63.465758][ T1945] ? security_file_permission+0x1dc/0x2f0 [ 63.471315][ T1945] iterate_dir+0x266/0x4e0 [ 63.475567][ T1945] ? f2fs_fill_dentries+0xe10/0xe10 [ 63.480600][ T1945] ksys_getdents64+0x21b/0x4c0 [ 63.485205][ T1945] ? __ia32_sys_getdents+0x80/0x80 [ 63.490148][ T1945] ? ksys_getdents64+0x4c0/0x4c0 [ 63.494919][ T1945] ? fpu__clear+0x3c0/0x3c0 [ 63.499259][ T1945] __x64_sys_getdents64+0x76/0x80 [ 63.504117][ T1945] do_syscall_64+0xca/0x1c0 [ 63.508452][ T1945] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 63.514181][ T1945] RIP: 0033:0x7f879d13eb99 [ 63.518432][ T1945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.537870][ T1945] RSP: 002b:00007f879c3c0048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 63.546114][ T1945] RAX: ffffffffffffffda RBX: 00007f879d2ccfa0 RCX: 00007f879d13eb99 [ 63.553926][ T1945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 63.561787][ T1945] RBP: 00007f879d1bf77e R08: 0000000000000000 R09: 0000000000000000 [ 63.569546][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.577363][ T1945] R13: 000000000000000b R14: 00007f879d2ccfa0 R15: 00007ffc82c1cf08 [ 63.594129][ T1945] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 63.601955][ T1945] CPU: 1 PID: 1945 Comm: syz.4.584 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 63.611463][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.621353][ T1945] Call Trace: [ 63.624493][ T1945] dump_stack+0x1d8/0x241 [ 63.628665][ T1945] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 63.634301][ T1945] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 63.639858][ T1945] f2fs_is_valid_blkaddr+0xc2d/0x1380 [ 63.645060][ T1945] f2fs_get_read_data_page+0x4d1/0x8c0 [ 63.650348][ T1945] ? page_cache_prev_miss+0x410/0x410 [ 63.655554][ T1945] ? f2fs_get_block+0x1b0/0x1b0 [ 63.660243][ T1945] ? pagecache_get_page+0x5a7/0x750 [ 63.665274][ T1945] f2fs_find_data_page+0x182/0x3f0 [ 63.670232][ T1945] f2fs_readdir+0x424/0xaf0 [ 63.674566][ T1945] ? f2fs_fill_dentries+0xe10/0xe10 [ 63.679597][ T1945] ? down_read_killable+0x101/0x220 [ 63.684626][ T1945] ? __fsnotify_parent+0x310/0x310 [ 63.689576][ T1945] ? security_file_permission+0x1dc/0x2f0 [ 63.695130][ T1945] iterate_dir+0x266/0x4e0 [ 63.699387][ T1945] ? f2fs_fill_dentries+0xe10/0xe10 [ 63.704504][ T1945] ksys_getdents64+0x21b/0x4c0 [ 63.709105][ T1945] ? __ia32_sys_getdents+0x80/0x80 [ 63.714140][ T1945] ? ksys_getdents64+0x4c0/0x4c0 [ 63.718918][ T1945] ? fpu__clear+0x3c0/0x3c0 [ 63.723249][ T1945] __x64_sys_getdents64+0x76/0x80 [ 63.728112][ T1945] do_syscall_64+0xca/0x1c0 [ 63.732452][ T1945] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 63.738176][ T1945] RIP: 0033:0x7f879d13eb99 [ 63.742431][ T1945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.761956][ T1945] RSP: 002b:00007f879c3c0048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 63.770220][ T1945] RAX: ffffffffffffffda RBX: 00007f879d2ccfa0 RCX: 00007f879d13eb99 [ 63.778009][ T1945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 63.785825][ T1945] RBP: 00007f879d1bf77e R08: 0000000000000000 R09: 0000000000000000 [ 63.793634][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.801450][ T1945] R13: 000000000000000b R14: 00007f879d2ccfa0 R15: 00007ffc82c1cf08 [ 63.828739][ T1979] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.850978][ T1979] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.860358][ T1988] IPv6: NLM_F_REPLACE set, but no existing node found! [ 63.870047][ T1979] F2FS-fs (loop0): invalid crc value [ 63.901507][ T1979] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.034823][ T1979] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.044757][ T1979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.356703][ T1992] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 64.372474][ T1992] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 64.384598][ T1992] F2FS-fs (loop2): invalid crc value [ 64.392171][ T1992] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.438134][ T1992] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 64.445545][ T1992] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.551492][ T1661] attempt to access beyond end of device [ 64.551492][ T1661] loop2: rw=2049, want=45104, limit=40427 [ 65.419050][ T2048] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.425937][ T2048] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.433880][ T2048] device bridge_slave_0 entered promiscuous mode [ 65.441134][ T2048] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.448014][ T2048] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.455686][ T2048] device bridge_slave_1 entered promiscuous mode [ 65.528058][ T2048] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.534934][ T2048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.542058][ T2048] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.548797][ T2048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.559129][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.571366][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.599299][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.606953][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.645563][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.657087][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.668436][ T2033] F2FS-fs (loop0): Found nat_bits in checkpoint [ 65.672554][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.681390][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.711891][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.720934][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.738480][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.745409][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.764720][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.780098][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.793518][ T2033] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 65.797936][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.811700][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.848564][ T2033] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.873923][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.893789][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.961154][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.968968][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.977425][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.985710][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.003766][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.014126][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.224925][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.233498][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.278494][ T108] cfg80211: failed to load regulatory.db [ 66.348526][ T258] device bridge_slave_1 left promiscuous mode [ 66.357799][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.365649][ T258] device bridge_slave_0 left promiscuous mode [ 66.371696][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.886303][ T2084] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.900003][ T2084] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.951141][ T2084] device bridge_slave_0 entered promiscuous mode [ 66.961364][ T2084] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.994504][ T2084] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.004969][ T2084] device bridge_slave_1 entered promiscuous mode [ 67.023260][ T23] audit: type=1326 audit(1719645525.720:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz.2.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea40dccb99 code=0x0 [ 67.265500][ T2100] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.276890][ T2100] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.284419][ T2100] device bridge_slave_0 entered promiscuous mode [ 67.291927][ T2100] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.298799][ T2100] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.309435][ T2100] device bridge_slave_1 entered promiscuous mode [ 67.354272][ T2084] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.361219][ T2084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.368369][ T2084] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.375209][ T2084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.453641][ T2117] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 67.461906][ T2117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 67.470239][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.477384][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.485638][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.486188][ T2117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.494282][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.522066][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.530590][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.537442][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.539081][ T2117] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 67.545929][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.551408][ T2117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 67.567576][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.574456][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.613392][ T956] attempt to access beyond end of device [ 67.613392][ T956] loop2: rw=1, want=45112, limit=40427 [ 67.691676][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.700292][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.708060][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.716121][ T654] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.722962][ T654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.730701][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.738680][ T654] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.745487][ T654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.752723][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.772657][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.780608][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.792896][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.818577][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.826812][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.849905][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.875825][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.898596][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.938260][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.946518][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.968732][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.976477][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.028660][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.036706][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.078017][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.096557][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.106564][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.122204][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.234459][ T2144] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.238906][ T23] audit: type=1400 audit(1719645526.930:295): avc: denied { add_name } for pid=2147 comm="syz.3.653" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.243177][ T2144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 68.263532][ T23] audit: type=1400 audit(1719645526.930:296): avc: denied { associate } for pid=2147 comm="syz.3.653" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.281440][ T2138] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 68.296724][ T2144] System zones: 0-1, 15-15, 18-18, 34-34 [ 68.299975][ T258] device bridge_slave_1 left promiscuous mode [ 68.308999][ T2144] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.315063][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.318807][ T2144] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 68.325579][ T2138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 68.333674][ T2144] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.344067][ T2138] F2FS-fs (loop4): invalid crc value [ 68.356283][ T2144] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 68.363863][ T258] device bridge_slave_0 left promiscuous mode [ 68.374159][ T2144] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.651: bad orphan inode 16 [ 68.378814][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.384351][ T2144] ext4_test_bit(bit=15, block=18) = 1 [ 68.393461][ T2138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.396033][ T2144] is_bad_inode(inode)=0 [ 68.402722][ T258] device bridge_slave_1 left promiscuous mode [ 68.407013][ T2144] NEXT_ORPHAN(inode)=0 [ 68.412337][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.415810][ T2144] max_ino=32 [ 68.435866][ T2144] i_nlink=2 [ 68.441114][ T2144] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 68.441443][ T258] device bridge_slave_0 left promiscuous mode [ 68.467832][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.482900][ T2138] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 68.498627][ T2138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.559208][ T23] audit: type=1400 audit(1719645527.260:297): avc: denied { read } for pid=2143 comm="syz.2.651" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 68.582259][ T2144] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 68.853974][ T2162] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 68.863377][ T2162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 68.887310][ T2162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 68.954332][ T23] audit: type=1400 audit(1719645527.650:298): avc: denied { write } for pid=2182 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.008242][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 69.016276][ T2162] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.111577][ T2162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.236045][ T23] audit: type=1400 audit(1719645527.720:299): avc: denied { map } for pid=2189 comm="syz.2.663" path="/dev/ashmem" dev="devtmpfs" ino=9265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.308281][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 69.320423][ T956] attempt to access beyond end of device [ 69.320423][ T956] loop3: rw=1, want=45112, limit=40427 [ 69.334254][ T2200] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.342491][ T2200] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 69.351124][ T2200] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.357247][ T2200] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.364053][ T2200] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 69.373383][ T2200] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.387770][ T2200] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 69.394529][ T2200] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.668: bad orphan inode 16 [ 69.405771][ T2200] ext4_test_bit(bit=15, block=18) = 1 [ 69.411091][ T2200] is_bad_inode(inode)=0 [ 69.415122][ T2200] NEXT_ORPHAN(inode)=0 [ 69.419001][ T2200] max_ino=32 [ 69.422006][ T2200] i_nlink=2 [ 69.424974][ T2200] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.433846][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.444918][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.454732][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.456902][ T2200] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 69.467611][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.485609][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.494563][ T24] usb 2-1: config 0 descriptor?? [ 69.663044][ T23] audit: type=1400 audit(1719645528.360:300): avc: denied { setopt } for pid=2208 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.160184][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.173457][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.182029][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.189115][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.197844][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.205402][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.217669][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.224931][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.232148][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.239846][ T24] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 70.266133][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input7 [ 70.291988][ T23] audit: type=1400 audit(1719645528.990:301): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=26584 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.317591][ T24] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 70.373110][ T24] usb 2-1: USB disconnect, device number 5 [ 70.415633][ T2228] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 70.426075][ T2228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.528143][ T2228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.076214][ T2228] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.083435][ T2228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.148964][ T258] attempt to access beyond end of device [ 71.148964][ T258] loop3: rw=1, want=45112, limit=40427 [ 71.241686][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.248798][ T2269] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.256082][ T2269] device bridge_slave_0 entered promiscuous mode [ 71.263270][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.270298][ T2269] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.278375][ T2269] device bridge_slave_1 entered promiscuous mode [ 71.328393][ T1204] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.433344][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.440221][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.447339][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.454117][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.541413][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.550301][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.562646][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.588231][ T1204] usb 3-1: Using ep0 maxpacket: 32 [ 71.596581][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.607303][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.614165][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.627910][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.640919][ T2287] [ 71.643061][ T2287] ********************************************************** [ 71.651489][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.658341][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.665755][ T2287] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 71.673461][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.681104][ T2287] ** ** [ 71.688732][ T2287] ** trace_printk() being used. Allocating extra memory. ** [ 71.696168][ T2287] ** ** [ 71.704200][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.737248][ T2287] ** This means that this is a DEBUG kernel and it is ** [ 71.745590][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.748520][ T1204] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.759757][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.761667][ T2287] ** unsafe for production use. ** [ 71.777547][ T1204] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.786372][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.795820][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.805469][ T2287] ** ** [ 71.812766][ T1204] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.822603][ T2287] ** If you see this message and you are not debugging ** [ 71.830059][ T2287] ** the kernel, report this immediately to your vendor! ** [ 71.838316][ T1204] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.847400][ T2287] ** ** [ 71.857949][ T1204] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.862990][ T2287] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 71.867454][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.886327][ T2287] ********************************************************** [ 71.886732][ T1204] usb 3-1: config 0 descriptor?? [ 71.921426][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.939104][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.947463][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.009484][ T956] device bridge_slave_1 left promiscuous mode [ 72.015448][ T956] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.024195][ T956] device bridge_slave_0 left promiscuous mode [ 72.043649][ T956] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.149462][ T1204] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.163217][ T1204] usb 3-1: USB disconnect, device number 6 [ 72.170875][ T1204] usblp0: removed [ 72.175929][ T2304] loop0: p1 < > p2 < > p3 p4 < > [ 72.181199][ T2304] loop0: partition table partially beyond EOD, truncated [ 72.189685][ T2304] loop0: p3 start 55115776 is beyond EOD, truncated [ 72.196089][ T2304] loop0: p4 start 7012352 is beyond EOD, truncated [ 72.242920][ T162] loop0: p1 < > p2 < > p3 p4 < > [ 72.253036][ T162] loop0: partition table partially beyond EOD, truncated [ 72.262277][ T162] loop0: p3 start 55115776 is beyond EOD, truncated [ 72.268712][ T162] loop0: p4 start 7012352 is beyond EOD, truncated [ 72.603191][ T530] udevd[530]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 72.609785][ T1455] udevd[1455]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.627771][ T2306] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.634720][ T2306] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.642894][ T2306] device bridge_slave_0 entered promiscuous mode [ 72.648150][ T530] udevd[530]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 72.657208][ T2306] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.660209][ T1455] udevd[1455]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.665622][ T2306] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.683918][ T2306] device bridge_slave_1 entered promiscuous mode [ 72.767825][ T956] ================================================================== [ 72.775715][ T956] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 72.783076][ T956] Read of size 4 at addr 0000000000000010 by task kworker/u4:5/956 [ 72.790797][ T956] [ 72.792975][ T956] CPU: 1 PID: 956 Comm: kworker/u4:5 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 72.802691][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.812600][ T956] Workqueue: netns cleanup_net [ 72.817181][ T956] Call Trace: [ 72.820322][ T956] dump_stack+0x1d8/0x241 [ 72.824477][ T956] ? panic+0x89d/0x89d [ 72.828390][ T956] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 72.834026][ T956] ? idr_get_next_ul+0x32a/0x3f0 [ 72.838812][ T956] ? wake_up_q+0xa8/0xf0 [ 72.842879][ T956] ? tcf_idrinfo_destroy+0xe2/0x280 [ 72.847914][ T956] __kasan_report+0xe9/0x120 [ 72.852340][ T956] ? tcf_idrinfo_destroy+0xe2/0x280 [ 72.857389][ T956] kasan_report+0x30/0x60 [ 72.861544][ T956] check_memory_region+0x272/0x280 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 72.866486][ T956