last executing test programs: 5.461936245s ago: executing program 3 (id=2736): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000003c0)) 3.479455133s ago: executing program 2 (id=2755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 3.469337803s ago: executing program 1 (id=2756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) 3.445713524s ago: executing program 1 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = gettid() read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) 3.445398465s ago: executing program 2 (id=2759): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @dev}, 0x10) 3.403281598s ago: executing program 3 (id=2761): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.402802578s ago: executing program 3 (id=2762): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000180)={{}, "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"}) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="12f8a2b2236d539f42b67e083fcd9b5de2cb490c038d25210290c4cc3afacede0f7d823ef5968c9a", 0x28}], 0x1}}, {{&(0x7f0000000440)=@abs, 0x18, 0x0}}], 0x2, 0x0) 3.383731919s ago: executing program 2 (id=2764): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) timer_create(0x2, 0x0, &(0x7f0000000540)) 3.37191659s ago: executing program 3 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = gettid() read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) 2.802222372s ago: executing program 2 (id=2767): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x6, 0x1500, &(0x7f0000003f40)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) lseek(r0, 0xfffffffffffffffc, 0x1) 2.664321013s ago: executing program 2 (id=2771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="00222200000096231317f7940ef7070c00000026b8ef0a1a7083"], 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x14de, &(0x7f0000002a40)="$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") syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 2.631846655s ago: executing program 0 (id=2773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) 2.615418896s ago: executing program 0 (id=2774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 2.56721164s ago: executing program 1 (id=2775): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000006a80)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="53d2d9de939847c9dd37ed564f2be0a4f9d29f7e23b3a032bbe730dc52348cbe87ceee766fd6025fe3e79ae4be665c25801faff43856dd4a90209ef9ad9a90beca5921e77f0b0248d2793d9a477240b4d3e13b1079fb066ea5b89316eaa679c336a781bafb6020144f23f787a4057fcb152a4a807a2fda22545953e4650264b5f42a2712642c0e"], 0x25, 0x558f, &(0x7f00000014c0)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x198) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="e5", 0x1}], 0x1, 0x7c00, 0x0, 0x0) fallocate(r0, 0x10, 0x70, 0x7000) 2.55798095s ago: executing program 0 (id=2776): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = open(0x0, 0x14103e, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ftruncate(r3, 0x20cf01) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') read$FUSE(r4, &(0x7f0000008580)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000001300)=0x1, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 2.472195137s ago: executing program 3 (id=2777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x10b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b24b4a10e60407007501000005010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) 2.366840975s ago: executing program 0 (id=2778): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) 1.882685151s ago: executing program 1 (id=2779): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000a4a6"], 0x48}}, 0x0) 1.797681747s ago: executing program 0 (id=2780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) 1.632212839s ago: executing program 1 (id=2782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.598944071s ago: executing program 0 (id=2783): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.555130654s ago: executing program 1 (id=2784): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc038480a, &(0x7f00000000c0)={0x3, 0x100}) 1.490428169s ago: executing program 4 (id=2785): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.370939348s ago: executing program 4 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x48) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb6f68000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 660.993811ms ago: executing program 3 (id=2787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = gettid() read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) 302.404657ms ago: executing program 4 (id=2788): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100), 0x1, 0x769, &(0x7f0000000340)="$eJzs3M9rHOUbAPBnptmmP/L9bgQP6kGEFloonSTNpT0ZL+KlUCh4rSGZhJBJtmQ3tYmFtp6F2lwUBNGzHr0Kpf4BXkQKCt4F0RoP4iUym03aptm4bTfZkn4+MNn3nXnffd5nZ/JmBvJuAC+sN8ofScRARFyIiGprfxoRB5ulQxE31tut3r82UW5JrK1d/D0pu8XqWnXzvZLW69FodolXIuJuJeLUh4/HrS8tz44XRb7Qqg815i4P1ZeWT8/MjU/n0/n8yOi54bOjo2eHR7uW6/F3zx2+/f3bKys/ftO49Xrf6STGmnlHK7euBXrI+mdSibEt++d3I1gPJR206duDcQAAsLPyPv9A696sEtU44C4NAAAA9p21/jUAAABg30ui1yMAAAAAdtfG/wFsrO3drXWw7fz2VkQMbhe/r7mGOOJQVCLiyGryyMqEZL0bPJMbNyPiztg211/Suv6e3vCWeidrpNlbd8r5Z2y7+SfdnH9im/mnb+O7E55R+/nvQfwDbea/Cx3G+PbzVytt49+MeK1vu/jJZvykTfz3Oox/a+Wj2+2OrX0ZcWLbvz/JI7F2+H6IoamZYsdfrbv/nLy3U/5HHoufJM2oyc75X+4w/w9W/5xtN5eU8U8e2/n8r8fvf6RfeU183BpHGhG3W69lfWVLjGNzP333eOTkxkb8yTaf//bn/53N/L/oMP9fvu6/2mFTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaEojYiCSNNssp2mWRRyNiJfjSFrU6o1TU7XF+cnyWMRgVNKpmSIfjojqej0p6yPN8oP6mS310Yh46efD60FnijybqBWTvU4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATUcjYiCSNIuINCL+qqZplvV6VAAAAEDXDfZ6AAAAAMCu8/wPAAAA+9/TPv8nXR4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK9dOH++3NZW71+bKOuTV5YWZ2tXTk/m9dlsbnEim6gtXM6ma7XpIs8manP/9X5pRIyci8WrQ4283hiqLy1fmqstzjcuzcyNT+eX8sqeZAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTGmhuSZpFRNosp2mWRfwvIgajkkzNFPlwRPw/Iu5VK/1lfaTXgwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDr6kvLs+NFkS8oPJeFr2LHNpFEPC9DfcELEU/S63p09cT90P28ej0zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQC/Wl5dnxosgX6r0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL2V/ppERLmdqB4f2Hr0YPJ3tfkaEe9/dvGTq+ONxsJIuf+Pzf2NT1v7zzzU8fpe5gAAAAD73ptP0njjOX3jOR4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBT9aXl2fGiyBeesVCJiHZt4mavswQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7GvwEAAP//lhHByQ==") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0046686, &(0x7f0000000000)={0x0, 0x0, 0xfffffca8, 0x0}) 79.531064ms ago: executing program 4 (id=2789): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 37.888857ms ago: executing program 4 (id=2790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x258, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0xdc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xfff3}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0xb4, 0x2, [@m_gact={0xb0, 0x20, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xc, 0x1, 0x7, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x1, 0x4, 0x6, 0x45}}]}, {0x51, 0x6, "d871ed204c11deb87cc8b7ffd3b5f90068e394f8191e0343857e38e56ce94992f86e8952f47b912714395ffd6104f1ec474f1e2b74ee9b18fa213d70c5b4be00e14b813e3c92699d461e852a78"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0xb1c53254cd377db2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x12c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x120, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_csum={0x74, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x45, 0x6, "6ff7fc3261b3668f9e3bb8f4b5dffb173df475d820317a8647dede896e4ec999dd2c0862d475a6c071c272307b7d1840c4a5b610fb082c69a57efcadd702d16965"}, {0xc}, {0xc}}}]}]}}]}, 0x258}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 26.446657ms ago: executing program 4 (id=2791): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x700, 0x7, 0x1, 0x3, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x4c, 0xd5, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xf8d}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x2}, {@local, 0x81}, {@local, 0x800}, {@multicast2, 0x100}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@multicast1, 0x40}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, r3, 0x3d0}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000000)=""/172, 0x0, 0x4, '\x00', 0x0, 0xd}, 0x80) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000000)=0x800, 0x4) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000540)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) bind$inet(r5, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004011, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000500)=0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e29, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000b40)="a47cbe20eddfb7db5aafd8ea46ce4cc614bcc5e64e5d868ee39b1f2e123ceffb03c0517f", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340), 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @loopback}, 0x8) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, 0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x80) write$binfmt_elf64(r5, &(0x7f0000000740)=ANY=[@ANYRES16=r8, @ANYRES64=r6, @ANYRESHEX=r6, @ANYBLOB="b262b1bbf84ee97680886aa60284a41cb553e2ea50fd53317fab70eb9ad32900cbbcbe55b78e5ce381f4f80a15c44fa572b3bff1e1ed6d613365", @ANYBLOB="f46c41fe83049b8649c50b5eec", @ANYRESOCT=r7, @ANYRES16=r5, @ANYRESOCT=r4, @ANYRESHEX=r6, @ANYRESDEC=r3, @ANYRES32=r7], 0xfffffffffffffe89) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 2 (id=2792): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600702, 0x19) kernel console output (not intermixed with test programs): 7593][ T1139] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 305.209242][ T1121] kone 0003:1E7D:2CED.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 305.393342][ T7555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.477589][ T1139] usb 1-1: Using ep0 maxpacket: 8 [ 305.503432][ T383] usb 4-1: USB disconnect, device number 24 [ 305.543172][ T7569] netlink: 'syz.1.2086': attribute type 8 has an invalid length. [ 305.550841][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 305.604439][ T7579] loop1: detected capacity change from 0 to 128 [ 305.612731][ T7579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 305.618116][ T1139] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 305.621891][ T7579] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 305.632375][ T1139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.674178][ T1139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.680460][ T7579] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x0c) [ 305.684390][ T1139] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 305.704965][ T1139] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 305.705771][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 305.714129][ T1139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.728590][ T1139] usb 1-1: config 0 descriptor?? [ 305.756668][ T7587] loop1: detected capacity change from 0 to 16 [ 305.763352][ T7587] erofs: (device loop1): mounted with root inode @ nid 36. [ 305.772498][ T7587] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.783315][ T7587] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 305.796121][ T7587] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 305.815907][ T7587] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 305.824907][ T7587] syz.1.2094: attempt to access beyond end of device [ 305.824907][ T7587] loop1: rw=524288, sector=1049272, nr_sectors = 8 limit=16 [ 305.838680][ T7587] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 305.839664][ T443] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 305.858798][ T443] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 305.906884][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2098'. [ 306.114257][ T7608] loop3: detected capacity change from 0 to 2048 [ 306.128884][ T7608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 306.140509][ T7608] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 306.155389][ T7608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 306.167653][ T7608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 306.167653][ T7608] [ 306.177176][ T7608] EXT4-fs (loop3): Total free blocks count 0 [ 306.183051][ T7608] EXT4-fs (loop3): Free/Dirty block details [ 306.188833][ T7608] EXT4-fs (loop3): free_blocks=2415919104 [ 306.194351][ T7608] EXT4-fs (loop3): dirty_blocks=32 [ 306.199463][ T7608] EXT4-fs (loop3): Block reservation details [ 306.206085][ T7608] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 306.214670][ T7608] 9pnet_fd: Insufficient options for proto=fd [ 306.218688][ T1139] kye 0003:0458:5011.0018: unknown main item tag 0x0 [ 306.227348][ T1139] kye 0003:0458:5011.0018: unknown main item tag 0x0 [ 306.233970][ T1139] kye 0003:0458:5011.0018: unknown main item tag 0x0 [ 306.240740][ T383] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 306.240805][ T1139] kye 0003:0458:5011.0018: unknown main item tag 0x0 [ 306.257198][ T1139] kye 0003:0458:5011.0018: unknown main item tag 0x0 [ 306.264857][ T1139] kye 0003:0458:5011.0018: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 306.277727][ T1139] kye 0003:0458:5011.0018: tablet-enabling feature report not found [ 306.277816][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 306.285610][ T1139] kye 0003:0458:5011.0018: tablet enabling failed [ 306.347597][ T1137] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 306.455480][ T316] usb 1-1: USB disconnect, device number 23 [ 306.489036][ T7618] loop3: detected capacity change from 0 to 40427 [ 306.495821][ T7618] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 306.497587][ T383] usb 5-1: Using ep0 maxpacket: 16 [ 306.503445][ T7618] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 306.516872][ T7618] F2FS-fs (loop3): invalid crc value [ 306.523156][ T7618] F2FS-fs (loop3): Found nat_bits in checkpoint [ 306.546980][ T7618] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 306.553879][ T7618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 306.627580][ T1137] usb 2-1: Using ep0 maxpacket: 8 [ 306.638536][ T7624] loop2: detected capacity change from 0 to 2048 [ 306.649001][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 306.757890][ T1137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.814602][ T1137] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.848094][ T1137] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 306.857414][ T1137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.869375][ T1137] usb 2-1: config 0 descriptor?? [ 306.889062][ T10] tipc: Left network mode [ 306.889477][ T2036] EXT4-fs (loop2): unmounting filesystem. [ 306.977640][ T383] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 306.986558][ T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.994396][ T383] usb 5-1: Product: syz [ 306.998359][ T383] usb 5-1: Manufacturer: syz [ 307.002736][ T383] usb 5-1: SerialNumber: syz [ 307.008772][ T383] r8152-cfgselector 5-1: config 0 descriptor?? [ 307.049228][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.056122][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.063387][ T7631] device bridge_slave_0 entered promiscuous mode [ 307.070324][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.077746][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.084901][ T7631] device bridge_slave_1 entered promiscuous mode [ 307.125760][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.132637][ T7631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.139848][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.146599][ T7631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.172901][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.181035][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.189760][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.238574][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.246722][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.253620][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.262613][ T443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 307.271811][ T443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 307.287777][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.295901][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.302795][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.337804][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.346643][ T1137] nti 0003:0757:0A00.0019: item fetching failed at offset 6/70 [ 307.353484][ T7644] loop0: detected capacity change from 0 to 40427 [ 307.367016][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.375440][ T1137] nti: probe of 0003:0757:0A00.0019 failed with error -22 [ 307.378977][ T7644] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 307.394219][ T7644] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 307.405052][ T7644] F2FS-fs (loop0): invalid crc value [ 307.406284][ T7631] device veth0_vlan entered promiscuous mode [ 307.417702][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.426043][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.434383][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.441918][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.442321][ T7644] F2FS-fs (loop0): Found nat_bits in checkpoint [ 307.464116][ T7631] device veth1_macvtap entered promiscuous mode [ 307.478615][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.487659][ T383] r8152-cfgselector 5-1: Unknown version 0x0000 [ 307.488291][ T7649] loop3: detected capacity change from 0 to 4096 [ 307.493781][ T383] r8152-cfgselector 5-1: bad CDC descriptors [ 307.512831][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.513039][ T7649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 307.523087][ T7644] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 307.541638][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.547686][ T383] r8152-cfgselector 5-1: Unknown version 0x0000 [ 307.555185][ T1137] usb 2-1: USB disconnect, device number 21 [ 307.563661][ T383] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 307.565584][ T7644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 307.579200][ T7649] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 8709239245 [ 307.589826][ T10] device veth1_macvtap left promiscuous mode [ 307.595690][ T10] device veth0_vlan left promiscuous mode [ 307.603514][ T7649] fs-verity (loop3, inode 13): Error -27 building Merkle tree [ 307.632720][ T7653] loop2: detected capacity change from 0 to 1024 [ 307.663206][ T7653] EXT4-fs: Ignoring removed orlov option [ 307.672391][ T7653] EXT4-fs (loop2): Test dummy encryption mode enabled [ 307.673611][ T1650] EXT4-fs (loop3): unmounting filesystem. [ 307.788048][ T7662] loop2: detected capacity change from 0 to 2048 [ 307.835056][ T7664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.977344][ T7662] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 307.992780][ T7662] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 308.005511][ T7662] EXT4-fs (loop2): This should not happen!! Data will be lost [ 308.005511][ T7662] [ 308.016278][ T7662] EXT4-fs (loop2): Total free blocks count 0 [ 308.022481][ T7662] EXT4-fs (loop2): Free/Dirty block details [ 308.028383][ T7662] EXT4-fs (loop2): free_blocks=2415919104 [ 308.035366][ T7662] EXT4-fs (loop2): dirty_blocks=32 [ 308.040378][ T7662] EXT4-fs (loop2): Block reservation details [ 308.046265][ T7662] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 308.064051][ T344] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 308.074326][ T7662] 9pnet_fd: Insufficient options for proto=fd [ 308.083866][ T344] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 308.094047][ T7670] device sit3 entered promiscuous mode [ 308.106534][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 308.135805][ T8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 308.135805][ T8] [ 308.337783][ T28] audit: type=1400 audit(3470163472.081:523): avc: denied { bind } for pid=7702 comm="syz.3.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.340838][ T7701] loop4: detected capacity change from 0 to 2048 [ 308.401106][ T7708] loop3: detected capacity change from 0 to 512 [ 308.404666][ T7705] loop0: detected capacity change from 0 to 2048 [ 308.422065][ T7701] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.436992][ T7701] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 308.450163][ T7701] EXT4-fs (loop4): This should not happen!! Data will be lost [ 308.450163][ T7701] [ 308.453787][ T7705] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.460683][ T7701] EXT4-fs (loop4): Total free blocks count 0 [ 308.475904][ T7708] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038 (0x7fffffff) [ 308.481157][ T7701] EXT4-fs (loop4): Free/Dirty block details [ 308.505357][ T7705] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 308.514683][ T7701] EXT4-fs (loop4): free_blocks=2415919104 [ 308.521183][ T7705] EXT4-fs (loop0): This should not happen!! Data will be lost [ 308.521183][ T7705] [ 308.526464][ T7701] EXT4-fs (loop4): dirty_blocks=32 [ 308.532791][ T7705] EXT4-fs (loop0): Total free blocks count 0 [ 308.537923][ T7701] EXT4-fs (loop4): Block reservation details [ 308.543415][ T7705] EXT4-fs (loop0): Free/Dirty block details [ 308.550126][ T7701] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 308.556333][ T7705] EXT4-fs (loop0): free_blocks=2415919104 [ 308.566469][ T7705] EXT4-fs (loop0): dirty_blocks=32 [ 308.571697][ T7705] EXT4-fs (loop0): Block reservation details [ 308.571714][ T7705] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 308.595133][ T7701] 9pnet_fd: Insufficient options for proto=fd [ 308.600405][ T28] audit: type=1400 audit(3470163472.331:524): avc: denied { validate_trans } for pid=7720 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 308.626144][ T7705] 9pnet_fd: Insufficient options for proto=fd [ 308.632756][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 308.645082][ T8] EXT4-fs (loop4): This should not happen!! Data will be lost [ 308.645082][ T8] [ 308.661312][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 308.673656][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 308.673656][ T8] [ 308.809273][ T7739] loop3: detected capacity change from 0 to 16 [ 308.858562][ T7739] erofs: (device loop3): mounted with root inode @ nid 36. [ 308.871829][ T7739] input: syz0 as /devices/virtual/input/input62 [ 309.048606][ T7748] loop0: detected capacity change from 0 to 2048 [ 309.057800][ T28] audit: type=1400 audit(3470163472.791:525): avc: denied { wake_alarm } for pid=7750 comm="syz.4.2151" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.148677][ T7748] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 309.163514][ T7748] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 309.175656][ T7748] EXT4-fs (loop0): This should not happen!! Data will be lost [ 309.175656][ T7748] [ 309.185511][ T7748] EXT4-fs (loop0): Total free blocks count 0 [ 309.191522][ T7748] EXT4-fs (loop0): Free/Dirty block details [ 309.197498][ T7748] EXT4-fs (loop0): free_blocks=2415919104 [ 309.203745][ T7748] EXT4-fs (loop0): dirty_blocks=32 [ 309.210530][ T7748] EXT4-fs (loop0): Block reservation details [ 309.216478][ T7748] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 309.259819][ T7766] tipc: Enabled bearer , priority 10 [ 309.267838][ T7766] tipc: Disabling bearer [ 309.304740][ T7748] 9pnet_fd: Insufficient options for proto=fd [ 309.350302][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 309.363434][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 309.363434][ T8] [ 309.445960][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 309.617704][ T7772] loop0: detected capacity change from 0 to 40427 [ 309.633529][ T7772] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 309.644376][ T7772] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 309.666200][ T7772] F2FS-fs (loop0): invalid crc value [ 309.685847][ T28] audit: type=1400 audit(3470163473.421:526): avc: denied { listen } for pid=7788 comm="syz.3.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.713479][ T7772] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.754909][ T7793] loop3: detected capacity change from 0 to 2048 [ 309.761558][ T7772] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 309.768625][ T7772] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.844269][ T7793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 309.859218][ T7793] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 309.871415][ T7793] EXT4-fs (loop3): This should not happen!! Data will be lost [ 309.871415][ T7793] [ 309.881020][ T7793] EXT4-fs (loop3): Total free blocks count 0 [ 309.886859][ T7793] EXT4-fs (loop3): Free/Dirty block details [ 309.892605][ T7793] EXT4-fs (loop3): free_blocks=2415919104 [ 309.898254][ T7793] EXT4-fs (loop3): dirty_blocks=32 [ 309.903409][ T7793] EXT4-fs (loop3): Block reservation details [ 310.535669][ T7793] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 310.564784][ T7793] 9pnet_fd: Insufficient options for proto=fd [ 310.590367][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 310.606624][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 310.606624][ T8] [ 310.694807][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 310.705799][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 310.805522][ T7821] loop3: detected capacity change from 0 to 16 [ 310.850236][ T7821] erofs: (device loop3): mounted with root inode @ nid 36. [ 310.863985][ T7821] input: syz0 as /devices/virtual/input/input63 [ 311.160394][ T7841] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.179242][ T28] audit: type=1400 audit(3470163474.921:527): avc: denied { ioctl } for pid=7842 comm="syz.4.2184" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 311.221024][ T7845] loop4: detected capacity change from 0 to 128 [ 311.234164][ T7845] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038 (0x7fffffff) [ 311.239471][ T7776] loop1: detected capacity change from 0 to 131072 [ 311.327802][ T7850] tipc: Enabled bearer , priority 10 [ 311.336254][ T7850] tipc: Disabling bearer [ 311.539532][ T7776] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.561480][ T7857] loop4: detected capacity change from 0 to 2048 [ 311.611875][ T7776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 311.622520][ T7857] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 311.638020][ T7857] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 311.656867][ T7857] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.656867][ T7857] [ 311.666974][ T7857] EXT4-fs (loop4): Total free blocks count 0 [ 311.673030][ T7857] EXT4-fs (loop4): Free/Dirty block details [ 311.682420][ T7857] EXT4-fs (loop4): free_blocks=2415919104 [ 311.688012][ T7857] EXT4-fs (loop4): dirty_blocks=32 [ 311.693085][ T7857] EXT4-fs (loop4): Block reservation details [ 311.698872][ T7857] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 311.761397][ T7874] loop3: detected capacity change from 0 to 16 [ 311.809171][ T7874] erofs: (device loop3): mounted with root inode @ nid 36. [ 311.825248][ T7874] input: syz0 as /devices/virtual/input/input64 [ 311.854170][ T7857] 9pnet_fd: Insufficient options for proto=fd [ 311.920389][ T814] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 311.932945][ T814] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.932945][ T814] [ 312.046372][ T7884] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 312.154450][ T7880] loop2: detected capacity change from 0 to 40427 [ 312.184374][ T7880] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 312.192129][ T7880] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 312.215146][ T7880] F2FS-fs (loop2): invalid crc value [ 312.275529][ T7891] loop4: detected capacity change from 0 to 16 [ 312.284736][ T7891] erofs: (device loop4): mounted with root inode @ nid 36. [ 312.301747][ T7891] input: syz0 as /devices/virtual/input/input65 [ 312.496828][ T7880] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.553373][ T7880] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 312.560416][ T7880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.868908][ T814] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 312.878776][ T814] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 313.051531][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2209'. [ 313.183655][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 313.249477][ T7962] loop4: detected capacity change from 0 to 256 [ 313.259056][ T28] audit: type=1400 audit(3470163477.001:528): avc: denied { compute_member } for pid=7961 comm="syz.2.2229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 313.260756][ T7962] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 313.292735][ T7962] exfat filesystem being mounted at /353/file1 supports timestamps until 2107 (0x10391447f) [ 313.313761][ T7962] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 313.313761][ T7962] [ 313.325996][ T7962] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811c977670 iblock : 0, err : -5) [ 313.447120][ T7987] loop1: detected capacity change from 0 to 1024 [ 313.469891][ T7992] loop3: detected capacity change from 0 to 512 [ 313.521681][ T7992] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038 (0x7fffffff) [ 313.759109][ T7996] loop1: detected capacity change from 0 to 40427 [ 313.769746][ T7996] F2FS-fs (loop1): invalid crc value [ 313.789401][ T7996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.806855][ T8006] loop3: detected capacity change from 0 to 40427 [ 313.817612][ T8006] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 313.833696][ T8015] loop4: detected capacity change from 0 to 2048 [ 313.833849][ T8006] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 313.851275][ T7996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 313.860888][ T8006] F2FS-fs (loop3): invalid crc value [ 313.873048][ T8006] F2FS-fs (loop3): Found nat_bits in checkpoint [ 313.898479][ T8015] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038 (0x7fffffff) [ 313.928916][ T8015] fs-verity (loop4, inode 13): fs-verity keyring is empty, rejecting signed file! [ 313.974026][ T8022] syz.1.2243: attempt to access beyond end of device [ 313.974026][ T8022] loop1: rw=2049, sector=77824, nr_sectors = 8736 limit=40427 [ 313.988653][ T8006] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 313.995744][ T8006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.047006][ T8022] syz.1.2243: attempt to access beyond end of device [ 314.047006][ T8022] loop1: rw=2049, sector=86560, nr_sectors = 17896 limit=40427 [ 314.076041][ T8022] syz.1.2243: attempt to access beyond end of device [ 314.076041][ T8022] loop1: rw=2049, sector=104456, nr_sectors = 2296 limit=40427 [ 314.098315][ T2877] syz-executor: attempt to access beyond end of device [ 314.098315][ T2877] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.377799][ T341] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 314.458849][ T814] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 314.478445][ T814] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 314.627746][ T341] usb 5-1: Using ep0 maxpacket: 8 [ 314.691930][ T8030] loop2: detected capacity change from 0 to 40427 [ 314.711257][ T8030] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 314.727624][ T8030] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 314.743840][ T8034] loop1: detected capacity change from 0 to 40427 [ 314.750413][ T8030] F2FS-fs (loop2): invalid crc value [ 314.755960][ T8034] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 314.759166][ T341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.763726][ T8034] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 314.782532][ T8034] F2FS-fs (loop1): invalid crc value [ 314.788622][ T8030] F2FS-fs (loop2): Found nat_bits in checkpoint [ 314.809184][ T8037] loop3: detected capacity change from 0 to 40427 [ 314.818306][ T8034] F2FS-fs (loop1): Found nat_bits in checkpoint [ 314.824427][ T8037] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 314.839342][ T8037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 314.849513][ T8030] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 314.855691][ T8037] F2FS-fs (loop3): invalid crc value [ 314.856501][ T8030] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 314.861973][ T8034] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 314.875972][ T8034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 314.891677][ T8037] F2FS-fs (loop3): Found nat_bits in checkpoint [ 314.947148][ T8037] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 314.954094][ T8037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 315.250074][ T341] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 315.271574][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.328237][ T8057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.482710][ T341] usb 5-1: Product: syz [ 315.486887][ T341] usb 5-1: Manufacturer: syz [ 315.491880][ T341] usb 5-1: SerialNumber: syz [ 315.498214][ T814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 315.498656][ T341] usb 5-1: config 0 descriptor?? [ 315.512316][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 315.522374][ T814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 315.532208][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 315.587158][ T28] audit: type=1400 audit(3470163479.321:529): avc: denied { write } for pid=8066 comm="syz.0.2261" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.678589][ T8069] loop1: detected capacity change from 0 to 2048 [ 315.712145][ T8069] EXT4-fs mount: 24 callbacks suppressed [ 315.712171][ T8069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 315.728702][ T8069] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 315.743797][ T8069] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 315.758723][ T8069] EXT4-fs (loop1): This should not happen!! Data will be lost [ 315.758723][ T8069] [ 315.769031][ T8069] EXT4-fs (loop1): Total free blocks count 0 [ 315.776475][ T8069] EXT4-fs (loop1): Free/Dirty block details [ 315.778631][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'. [ 315.782853][ T8069] EXT4-fs (loop1): free_blocks=2415919104 [ 315.791587][ T341] usb 5-1: Found UVC 0.00 device syz (8086:0b03) [ 315.797223][ T8069] EXT4-fs (loop1): dirty_blocks=32 [ 315.808272][ T8069] EXT4-fs (loop1): Block reservation details [ 315.809700][ T341] usb 5-1: No valid video chain found. [ 315.814152][ T8069] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 315.831021][ T8069] 9pnet_fd: Insufficient options for proto=fd [ 315.839887][ T341] usb 5-1: USB disconnect, device number 19 [ 315.851017][ T814] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 315.897290][ T8088] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.951346][ T8098] loop0: detected capacity change from 0 to 512 [ 315.959842][ T8098] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.973174][ T8098] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 315.981418][ T8098] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2271: invalid indirect mapped block 2683928664 (level 1) [ 315.996497][ T8098] EXT4-fs (loop0): Remounting filesystem read-only [ 316.003849][ T8098] EXT4-fs (loop0): 1 truncate cleaned up [ 316.009706][ T8098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 316.024086][ T8098] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 13: comm syz.0.2271: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 316.036964][ T8105] loop1: detected capacity change from 0 to 512 [ 316.046402][ T8098] EXT4-fs (loop0): Remounting filesystem read-only [ 316.070391][ T1147] EXT4-fs (loop0): unmounting filesystem. [ 316.076129][ T8105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 316.085657][ T8105] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038 (0x7fffffff) [ 316.121273][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 316.167719][ T1138] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 316.321673][ T8130] xt_hashlimit: max too large, truncated to 1048576 [ 316.348740][ T8137] loop4: detected capacity change from 0 to 256 [ 316.366025][ T8137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 316.376110][ T8141] loop1: detected capacity change from 0 to 512 [ 316.378067][ T341] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 316.393212][ T8137] exfat filesystem being mounted at /363/file0 supports timestamps until 2107 (0x10391447f) [ 316.403742][ T8141] EXT4-fs: Ignoring removed i_version option [ 316.411670][ T8141] EXT4-fs: Ignoring removed nobh option [ 316.418104][ T8141] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 316.430547][ T8141] EXT4-fs (loop1): 1 truncate cleaned up [ 316.435802][ T28] audit: type=1400 audit(3604381208.177:530): avc: denied { mount } for pid=8142 comm="syz.4.2291" name="/" dev="configfs" ino=12824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 316.436280][ T8141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 316.458865][ T1138] usb 3-1: Using ep0 maxpacket: 16 [ 316.476000][ T28] audit: type=1400 audit(3604381208.177:531): avc: denied { read } for pid=8142 comm="syz.4.2291" name="/" dev="configfs" ino=12824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.497896][ T28] audit: type=1400 audit(3604381208.177:532): avc: denied { open } for pid=8142 comm="syz.4.2291" path="/364/file0" dev="configfs" ino=12824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.520785][ T28] audit: type=1400 audit(3604381208.177:533): avc: denied { unmount } for pid=2796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 316.521647][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 316.557145][ T28] audit: type=1400 audit(3604381208.297:534): avc: denied { write } for pid=8147 comm="syz.1.2293" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.627671][ T1138] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 316.646252][ T1138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.670291][ T8161] loop4: detected capacity change from 0 to 128 [ 316.671278][ T1138] usb 3-1: config 0 descriptor?? [ 316.676885][ T8161] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 316.718211][ T1138] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 316.726288][ T1138] usb 3-1: Detected FT4232H [ 316.774461][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2301'. [ 316.807680][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.820052][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.829868][ T341] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 316.838656][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.846987][ T341] usb 4-1: config 0 descriptor?? [ 316.937673][ T1138] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 316.988145][ T1138] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 316.997606][ T1132] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 317.094037][ T8190] loop4: detected capacity change from 0 to 16 [ 317.103717][ T8190] erofs: (device loop4): mounted with root inode @ nid 36. [ 317.118212][ T8190] input: syz0 as /devices/virtual/input/input66 [ 317.267669][ T1132] usb 2-1: Using ep0 maxpacket: 8 [ 317.287147][ T1138] usb 3-1: USB disconnect, device number 15 [ 317.298452][ T1138] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 317.309452][ T1138] ftdi_sio 3-1:0.0: device disconnected [ 317.374740][ T8188] loop0: detected capacity change from 0 to 40427 [ 317.381559][ T8188] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 317.389454][ T8188] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 317.391260][ T341] hid-multitouch 0003:0EEF:72D0.001A: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 317.402196][ T8188] F2FS-fs (loop0): invalid crc value [ 317.409316][ T1132] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.415416][ T8188] F2FS-fs (loop0): Found nat_bits in checkpoint [ 317.448040][ T8188] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 317.454925][ T8188] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 317.627979][ T1132] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 317.649385][ T1132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.732907][ T1132] usb 2-1: Product: syz [ 317.756260][ T1132] usb 2-1: Manufacturer: syz [ 317.761045][ T1132] usb 2-1: SerialNumber: syz [ 317.762678][ T383] usb 4-1: USB disconnect, device number 25 [ 317.766126][ T1132] usb 2-1: config 0 descriptor?? [ 317.889278][ T814] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 317.898586][ T814] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 317.948865][ T8201] loop4: detected capacity change from 0 to 40427 [ 317.957709][ T8201] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 317.970652][ T8201] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 317.990075][ T8201] F2FS-fs (loop4): invalid crc value [ 317.990775][ T8207] loop2: detected capacity change from 0 to 16 [ 318.006019][ T8207] erofs: (device loop2): mounted with root inode @ nid 36. [ 318.008377][ T8201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.030692][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.039176][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.046990][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.054779][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.062235][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.067618][ T1132] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 318.071243][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.083330][ T1132] usb 2-1: No valid video chain found. [ 318.087868][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.096108][ T1132] usb 2-1: USB disconnect, device number 22 [ 318.099195][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.109844][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.110171][ T8201] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 318.118385][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.131872][ T8201] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 318.132906][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.149261][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.156943][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.168351][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.175836][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.183368][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.191163][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.198763][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.206449][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.214626][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.222883][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.233336][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.240989][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.248463][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.255933][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.263599][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.271180][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.278623][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.286114][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.564028][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.571706][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.579538][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.587336][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.594818][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.602340][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.617575][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.625111][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.669831][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.677949][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.685591][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.693453][ T344] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 318.702930][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.710670][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.718142][ T344] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 318.737584][ T383] hid-generic 0000:0000:200000.001B: unknown main item tag 0x0 [ 318.748026][ T383] hid-generic 0000:0000:200000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 318.818749][ T28] audit: type=1400 audit(3738598938.565:535): avc: denied { map } for pid=8241 comm="syz.1.2327" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 318.826621][ T8227] loop3: detected capacity change from 0 to 40427 [ 318.852187][ T8227] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 318.874893][ T8227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 318.896539][ T8227] F2FS-fs (loop3): invalid crc value [ 318.920855][ T8227] F2FS-fs (loop3): Found nat_bits in checkpoint [ 318.975642][ T8264] loop1: detected capacity change from 0 to 256 [ 318.980462][ T8227] F2FS-fs (loop3): Start checkpoint disabled! [ 318.990147][ T8227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 318.998806][ T8227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 319.005272][ T8264] exfat filesystem being mounted at /387/file1 supports timestamps until 2107 (0x10391447f) [ 319.038883][ T28] audit: type=1400 audit(3738598938.785:536): avc: denied { create } for pid=8226 comm="syz.3.2320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 319.046732][ T8227] syz.3.2320: attempt to access beyond end of device [ 319.046732][ T8227] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 319.074212][ T1132] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.121824][ T8] kworker/u4:0: attempt to access beyond end of device [ 319.121824][ T8] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 319.135777][ T8] kworker/u4:0: attempt to access beyond end of device [ 319.135777][ T8] loop3: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 319.200062][ T383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 319.207775][ T8289] UHID_CREATE from different security context by process 1114 (syz.0.2348), this is not allowed. [ 319.223453][ T383] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 319.270286][ T8298] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 319.280519][ T8298] SELinux: failed to load policy [ 319.367831][ T8309] netlink: 'syz.1.2356': attribute type 2 has an invalid length. [ 319.368217][ T1132] usb 3-1: Using ep0 maxpacket: 16 [ 319.447092][ T8314] loop1: detected capacity change from 0 to 1024 [ 319.453918][ T8314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.465347][ T8314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 319.484465][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 319.497733][ T1132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.516188][ T1132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.529527][ T1132] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.539193][ T1132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.542245][ T8302] loop3: detected capacity change from 0 to 40427 [ 319.555024][ T1132] usb 3-1: config 0 descriptor?? [ 319.561145][ T8302] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 319.569238][ T8302] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 319.578348][ T8302] F2FS-fs (loop3): invalid crc value [ 319.589152][ T8302] F2FS-fs (loop3): Found nat_bits in checkpoint [ 319.631655][ T8302] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 319.638734][ T8302] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 319.724481][ T8318] loop1: detected capacity change from 0 to 40427 [ 319.731577][ T8318] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 319.739207][ T8318] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 319.748105][ T8318] F2FS-fs (loop1): invalid crc value [ 319.754541][ T8318] F2FS-fs (loop1): Found nat_bits in checkpoint [ 319.863818][ T8318] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 319.871510][ T8318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 319.917838][ T1132] usbhid 3-1:0.0: can't add hid device: -71 [ 319.940300][ T1132] usbhid: probe of 3-1:0.0 failed with error -71 [ 320.000648][ T1132] usb 3-1: USB disconnect, device number 16 [ 320.303842][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 320.313255][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 320.419409][ T814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 320.437648][ T814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 320.624129][ T8344] loop4: detected capacity change from 0 to 16 [ 320.740047][ T8346] loop3: detected capacity change from 0 to 16 [ 320.836329][ T8344] erofs: (device loop4): mounted with root inode @ nid 36. [ 320.943815][ T8346] erofs: (device loop3): mounted with root inode @ nid 36. [ 320.973695][ T8337] input: syz0 as /devices/virtual/input/input67 [ 320.990379][ T8346] input: syz0 as /devices/virtual/input/input68 [ 321.910997][ T8371] tipc: Enabled bearer , priority 10 [ 321.920575][ T8364] tipc: Disabling bearer [ 321.961104][ T8375] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 321.962270][ T8377] loop1: detected capacity change from 0 to 256 [ 321.976849][ T8377] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 321.994618][ T8377] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 322.004057][ T8377] exfat filesystem being mounted at /404/file2 supports timestamps until 2107 (0x10391447f) [ 322.124936][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 322.133371][ T8397] loop0: detected capacity change from 0 to 256 [ 322.144452][ T8395] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 322.169225][ T8397] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 322.188746][ T8362] loop2: detected capacity change from 0 to 40427 [ 322.199709][ T8362] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 322.212126][ T8362] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 322.220628][ T8397] exfat filesystem being mounted at /421/bus supports timestamps until 2107 (0x10391447f) [ 322.247822][ T8362] F2FS-fs (loop2): invalid crc value [ 322.278660][ T8362] F2FS-fs (loop2): Found nat_bits in checkpoint [ 322.286288][ T28] audit: type=1400 audit(3738598942.025:537): avc: denied { remove_name } for pid=1147 comm="syz-executor" name=".index" dev="loop0" ino=1048779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.345966][ T28] audit: type=1400 audit(3738598942.025:538): avc: denied { rmdir } for pid=1147 comm="syz-executor" name=".index" dev="loop0" ino=1048779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.356687][ T8362] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 322.385883][ T814] tipc: Left network mode [ 322.385910][ T8362] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 322.431081][ T28] audit: type=1400 audit(3738598942.025:539): avc: denied { unlink } for pid=1147 comm="syz-executor" name="file0" dev="loop0" ino=1048788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 322.456482][ T8388] loop3: detected capacity change from 0 to 40427 [ 322.474658][ T8388] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 322.482725][ T8388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 322.492325][ T8388] F2FS-fs (loop3): invalid crc value [ 322.783581][ T8388] F2FS-fs (loop3): Found nat_bits in checkpoint [ 322.791909][ T344] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 322.830639][ T344] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 322.840344][ T8388] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 322.847198][ T8388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 322.948351][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.955209][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.006464][ T8436] device bridge_slave_0 entered promiscuous mode [ 323.264069][ T8453] loop4: detected capacity change from 0 to 16 [ 323.312846][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.320717][ T8453] erofs: (device loop4): mounted with root inode @ nid 36. [ 323.366109][ T443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 323.407894][ T8453] input: syz0 as /devices/virtual/input/input69 [ 323.460432][ T443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 323.489225][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.496774][ T8436] device bridge_slave_1 entered promiscuous mode [ 323.624222][ T8441] loop1: detected capacity change from 0 to 40427 [ 323.634671][ T8441] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 323.644431][ T8441] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 323.658137][ T8441] F2FS-fs (loop1): invalid crc value [ 323.676692][ T8441] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.727026][ T814] device veth1_macvtap left promiscuous mode [ 323.734068][ T814] device veth0_vlan left promiscuous mode [ 323.757486][ T8470] loop3: detected capacity change from 0 to 256 [ 323.764711][ T8441] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 323.773390][ T8441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 323.784250][ T8470] vfat filesystem being mounted at /390/file1 supports timestamps until 2107 (0x103901ffe) [ 323.891626][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2412'. [ 324.189921][ T8480] netlink: 'syz.3.2415': attribute type 32 has an invalid length. [ 324.201284][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 324.217918][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 324.265433][ T8463] loop2: detected capacity change from 0 to 40427 [ 324.306475][ T8463] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 324.320757][ T8463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 324.341055][ T8463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.074475][ T8494] loop3: detected capacity change from 0 to 16 [ 326.093084][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.105020][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.105610][ T8494] erofs: (device loop3): mounted with root inode @ nid 36. [ 326.123934][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.138425][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.148526][ T8463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 326.155930][ T8463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.167183][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.174166][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.187790][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.211631][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.229564][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.236804][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.239292][ T8508] syz.3.2426[8508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.243948][ T8508] syz.3.2426[8508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.255058][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.255280][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.298138][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.306735][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.319771][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.321520][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.332800][ T8436] device veth0_vlan entered promiscuous mode [ 326.343585][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.348097][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.352378][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.368316][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.370169][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.376153][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.383780][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.398423][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.402489][ T8436] device veth1_macvtap entered promiscuous mode [ 326.414004][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.415519][ T28] audit: type=1400 audit(3738598946.155:540): avc: denied { bind } for pid=8516 comm="syz.1.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.441529][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.442751][ T8517] netlink: 'syz.1.2429': attribute type 18 has an invalid length. [ 326.456652][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.457452][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.471025][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.473904][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.491155][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.497284][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.508777][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.514761][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.526333][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.533973][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.545650][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.553469][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.558118][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.568520][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.577491][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.577900][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.587935][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.600583][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.603162][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.608016][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.623040][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.627965][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.631089][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.645734][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.674107][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.681680][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.689278][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.696932][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.697690][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 326.705362][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.719600][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.738898][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.746208][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.753671][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.758796][ T8515] loop2: detected capacity change from 0 to 40427 [ 326.761045][ T1121] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 326.775554][ T1121] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 326.783776][ T8515] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 326.798902][ T8515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 326.812613][ T8515] F2FS-fs (loop2): invalid crc value [ 326.819728][ T8515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.880582][ T8535] loop0: detected capacity change from 0 to 1024 [ 326.894759][ T8535] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 326.905991][ T8515] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 326.908877][ T8535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 326.913534][ T8515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.921479][ T8535] System zones: 0-1, 4-36, 102-102 [ 326.933889][ T8535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 326.989164][ T8543] loop3: detected capacity change from 0 to 2048 [ 326.995865][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 327.001333][ T8436] EXT4-fs (loop0): unmounting filesystem. [ 327.025960][ T8543] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 327.043226][ T8543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 327.157380][ T8543] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 327.170690][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 327.195327][ T8555] loop0: detected capacity change from 0 to 512 [ 327.202114][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.290126][ T8543] EXT4-fs (loop3): This should not happen!! Data will be lost [ 327.290126][ T8543] [ 327.365927][ T8543] EXT4-fs (loop3): Total free blocks count 0 [ 327.371918][ T8543] EXT4-fs (loop3): Free/Dirty block details [ 328.078675][ T8543] EXT4-fs (loop3): free_blocks=2415919104 [ 328.084574][ T8543] EXT4-fs (loop3): dirty_blocks=32 [ 328.085330][ T8555] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.2441: casefold flag without casefold feature [ 328.089663][ T8543] EXT4-fs (loop3): Block reservation details [ 328.102251][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.121609][ T329] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 328.121700][ T8555] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.2441: missing EA_INODE flag [ 328.143699][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 328.143757][ T8543] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 328.152858][ T24] usb 5-1: SerialNumber: syz [ 328.158075][ T329] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 328.163645][ T8555] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2441: error while reading EA inode 2 err=-117 [ 328.188879][ T8543] 9pnet_fd: Insufficient options for proto=fd [ 328.197680][ T8513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.211416][ T8555] EXT4-fs (loop0): 1 orphan inode deleted [ 328.222835][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 328.224580][ T8555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 328.287887][ T8555] fscrypt (loop0, inode 18): Unsupported encryption flags (0xbe) [ 328.308768][ T8436] EXT4-fs (loop0): unmounting filesystem. [ 328.325406][ T8577] loop0: detected capacity change from 0 to 16 [ 328.334339][ T8577] erofs: (device loop0): mounted with root inode @ nid 36. [ 328.419160][ T8513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.440686][ T8591] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 328.544410][ T8611] loop2: detected capacity change from 0 to 2048 [ 328.658768][ T8611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.670250][ T8611] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.685125][ T8611] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 328.697375][ T8611] EXT4-fs (loop2): This should not happen!! Data will be lost [ 328.697375][ T8611] [ 328.707018][ T8611] EXT4-fs (loop2): Total free blocks count 0 [ 328.712822][ T8611] EXT4-fs (loop2): Free/Dirty block details [ 328.712849][ T383] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 328.718915][ T8611] EXT4-fs (loop2): free_blocks=2415919104 [ 328.731538][ T8611] EXT4-fs (loop2): dirty_blocks=32 [ 328.736556][ T8611] EXT4-fs (loop2): Block reservation details [ 328.742795][ T8611] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 328.754259][ T8611] 9pnet_fd: Insufficient options for proto=fd [ 328.763553][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 328.825145][ T8628] loop2: detected capacity change from 0 to 2048 [ 328.838754][ T8628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.847200][ T8628] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 328.860592][ T8628] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3 [ 328.871350][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 328.877657][ T24] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 328.897937][ T8632] loop2: detected capacity change from 0 to 2048 [ 328.908975][ T8632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.920498][ T8632] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 328.927929][ T1139] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 328.936019][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 329.041857][ T8636] loop2: detected capacity change from 0 to 40427 [ 329.049525][ T8636] F2FS-fs (loop2): invalid crc value [ 329.056130][ T8636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 329.077652][ T383] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 329.081670][ T8636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 329.097568][ T383] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 329.117571][ T383] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 329.126733][ T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.126848][ T7631] syz-executor: attempt to access beyond end of device [ 329.126848][ T7631] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.141868][ T1121] usb 5-1: USB disconnect, device number 20 [ 329.154121][ T8585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.197615][ T1139] usb 4-1: Using ep0 maxpacket: 16 [ 329.222086][ T8645] syz.2.2475[8645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.222134][ T8645] syz.2.2475[8645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.239149][ T8645] loop2: detected capacity change from 0 to 2048 [ 329.259827][ T8645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.268599][ T8645] EXT4-fs (loop2): unmounting filesystem. [ 329.327607][ T1139] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 329.335688][ T1139] usb 4-1: config 0 has no interface number 0 [ 329.341788][ T1139] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 329.352352][ T1139] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.485464][ T8653] loop2: detected capacity change from 0 to 40427 [ 329.492312][ T8653] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 329.499961][ T8653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 329.508628][ T8653] F2FS-fs (loop2): invalid crc value [ 329.514975][ T8653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 329.537650][ T1139] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 329.539615][ T8653] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 329.546716][ T1139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.553749][ T8653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 329.561409][ T1139] usb 4-1: Product: syz [ 329.574962][ T1139] usb 4-1: Manufacturer: syz [ 329.579469][ T1139] usb 4-1: SerialNumber: syz [ 329.607682][ T383] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 329.620059][ T1139] usb 4-1: config 0 descriptor?? [ 329.625786][ T383] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input70 [ 329.636685][ T383] usb 2-1: USB disconnect, device number 23 [ 329.647714][ T8615] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 329.654847][ T8615] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 329.886864][ T8615] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 329.903847][ T8615] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 329.919384][ T8663] input: syz1 as /devices/virtual/input/input71 [ 330.256460][ T329] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 330.268768][ T329] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 330.371795][ T8679] loop0: detected capacity change from 0 to 40427 [ 330.401081][ T8679] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 330.410962][ T8679] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 330.437403][ T8679] F2FS-fs (loop0): invalid crc value [ 330.471027][ T8688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2491'. [ 330.481159][ T8679] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.538024][ T8695] user requested TSC rate below hardware speed [ 330.549523][ T8694] loop2: detected capacity change from 0 to 2048 [ 330.570283][ T8679] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 330.577219][ T8679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 330.577590][ T1139] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 330.648932][ T1139] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 330.650713][ T8694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 330.660654][ T1139] asix: probe of 4-1:0.251 failed with error -71 [ 330.676889][ T1139] usb 4-1: USB disconnect, device number 26 [ 330.683659][ T24] kernel write not supported for file /985/oom_score_adj (pid: 24 comm: kworker/1:0) [ 330.850475][ T8694] 9pnet_fd: Insufficient options for proto=fd [ 331.034676][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 331.041403][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 331.067280][ T8711] loop4: detected capacity change from 0 to 256 [ 331.077837][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 331.089577][ T8711] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 331.107860][ T8711] exfat filesystem being mounted at /409/file0 supports timestamps until 2107 (0x10391447f) [ 331.132335][ T8711] exFAT-fs (loop4): hint_cluster is invalid (4278190089) [ 331.152456][ T8711] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811c9e8d30 iblock : 8, err : -5) [ 331.174667][ T8711] exFAT-fs (loop4): Filesystem has been set read-only [ 331.188131][ T8711] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 331.203565][ T8711] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 331.436526][ T8716] loop2: detected capacity change from 0 to 40427 [ 331.439022][ T8718] loop1: detected capacity change from 0 to 40427 [ 331.457828][ T8716] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 331.465394][ T8716] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 331.469855][ T8718] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 331.476498][ T8716] F2FS-fs (loop2): invalid crc value [ 331.492858][ T8718] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 331.503799][ T8718] F2FS-fs (loop1): invalid crc value [ 331.510650][ T8716] F2FS-fs (loop2): Found nat_bits in checkpoint [ 331.521976][ T8718] F2FS-fs (loop1): Found nat_bits in checkpoint [ 331.529560][ T8745] loop3: detected capacity change from 0 to 2048 [ 331.568181][ T8745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 331.585186][ T8745] 9pnet_fd: Insufficient options for proto=fd [ 331.591723][ T8718] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 331.594882][ T8753] loop0: detected capacity change from 0 to 2048 [ 331.598914][ T8716] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 331.598940][ T8716] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 331.602850][ T8718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 331.639123][ T1650] EXT4-fs (loop3): unmounting filesystem. [ 331.651283][ T8753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 331.675278][ T8753] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 331.677905][ T1139] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 331.691144][ T8753] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 331.721226][ T8758] syz.3.2511[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.721329][ T8758] syz.3.2511[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.753112][ T8753] EXT4-fs (loop0): This should not happen!! Data will be lost [ 331.753112][ T8753] [ 331.774722][ T8753] EXT4-fs (loop0): Total free blocks count 0 [ 331.780741][ T8753] EXT4-fs (loop0): Free/Dirty block details [ 331.786454][ T8753] EXT4-fs (loop0): free_blocks=2415919104 [ 331.792383][ T8753] EXT4-fs (loop0): dirty_blocks=32 [ 331.797412][ T8753] EXT4-fs (loop0): Block reservation details [ 331.803488][ T8753] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 332.167672][ T1139] usb 5-1: Using ep0 maxpacket: 8 [ 332.173815][ T8753] 9pnet_fd: Insufficient options for proto=fd [ 332.279415][ T329] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 332.288414][ T814] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 332.301529][ T344] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 332.318885][ T814] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 332.339973][ T344] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 332.381587][ T1139] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.537960][ T8789] netlink: 'syz.1.2524': attribute type 6 has an invalid length. [ 332.617969][ T1139] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 332.662736][ T8797] tipc: Started in network mode [ 332.667591][ T8797] tipc: Node identity ac1414aa, cluster identity 4711 [ 332.675122][ T8797] tipc: Enabled bearer , priority 10 [ 332.684036][ T8797] tipc: Disabling bearer [ 332.697855][ T1139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.770571][ T1139] usb 5-1: Product: syz [ 332.805096][ T1139] usb 5-1: Manufacturer: syz [ 332.814871][ T1139] usb 5-1: SerialNumber: syz [ 332.819336][ T8771] loop3: detected capacity change from 0 to 40427 [ 332.826898][ T1139] usb 5-1: config 0 descriptor?? [ 332.835620][ T8771] F2FS-fs (loop3): Found nat_bits in checkpoint [ 332.875431][ T8771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 332.913270][ T1650] syz-executor: attempt to access beyond end of device [ 332.913270][ T1650] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.989577][ T8796] loop1: detected capacity change from 0 to 40427 [ 333.000513][ T8796] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 333.020471][ T8796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 333.033553][ T8796] F2FS-fs (loop1): invalid crc value [ 333.044557][ T8796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.091977][ T8796] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 333.099470][ T8796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.108084][ T1139] usb 5-1: Found UVC 0.00 device syz (8086:0b03) [ 333.156838][ T1139] usb 5-1: No valid video chain found. [ 333.165567][ T1139] usb 5-1: USB disconnect, device number 21 [ 333.188138][ T8825] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 333.197768][ T8825] SELinux: failed to load policy [ 333.211943][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 333.545872][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2540'. [ 333.555632][ T344] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 333.572326][ T344] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 333.574934][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 333.654605][ T8849] loop0: detected capacity change from 0 to 512 [ 333.675201][ T8849] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.686888][ T8849] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 333.704711][ T8849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 333.712950][ T8849] System zones: 1-12 [ 333.724914][ T8849] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.2547: corrupted in-inode xattr [ 333.737276][ T8849] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2547: couldn't read orphan inode 15 (err -117) [ 333.759069][ T8849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 333.775515][ T8436] EXT4-fs (loop0): unmounting filesystem. [ 333.813585][ T8870] loop1: detected capacity change from 0 to 128 [ 333.834419][ T8870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 333.843171][ T8870] ext4 filesystem being mounted at /445/mnt supports timestamps until 2038 (0x7fffffff) [ 333.858861][ T383] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 333.874320][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 333.908915][ T8876] loop1: detected capacity change from 0 to 2048 [ 333.929153][ T8876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 333.952316][ T8876] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 333.967608][ T8876] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 333.972288][ T8868] loop0: detected capacity change from 0 to 40427 [ 333.979961][ T8876] EXT4-fs (loop1): This should not happen!! Data will be lost [ 333.979961][ T8876] [ 333.986394][ T8868] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 333.999624][ T8876] EXT4-fs (loop1): Total free blocks count 0 [ 334.003383][ T8868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 334.009522][ T8876] EXT4-fs (loop1): Free/Dirty block details [ 334.027888][ T8876] EXT4-fs (loop1): free_blocks=2415919104 [ 334.029700][ T8868] F2FS-fs (loop0): invalid crc value [ 334.033573][ T8876] EXT4-fs (loop1): dirty_blocks=32 [ 334.040096][ T8868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.043704][ T8876] EXT4-fs (loop1): Block reservation details [ 334.055729][ T8876] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 334.070426][ T8876] 9pnet_fd: Insufficient options for proto=fd [ 334.081909][ T814] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 334.082023][ T8868] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 334.101117][ T8868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 334.127589][ T383] usb 4-1: Using ep0 maxpacket: 16 [ 334.406206][ T383] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 334.414617][ T383] usb 4-1: config 0 has no interface number 0 [ 334.477625][ T1132] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 334.563267][ T8900] loop2: detected capacity change from 0 to 256 [ 334.570651][ T8900] vfat filesystem being mounted at /85/bus supports timestamps until 2107 (0x10391447e) [ 334.580714][ T383] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01fa, bcdDevice=ff.3d [ 334.590113][ T383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.598025][ T383] usb 4-1: Product: syz [ 334.602116][ T383] usb 4-1: Manufacturer: syz [ 334.606709][ T383] usb 4-1: SerialNumber: syz [ 334.612007][ T383] usb 4-1: config 0 descriptor?? [ 334.636712][ T8905] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2566'. [ 334.661187][ T383] ftdi_sio 4-1:0.178: FTDI USB Serial Device converter detected [ 334.675390][ T814] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 334.677055][ T383] ftdi_sio ttyUSB0: unknown device type: 0xff3d [ 334.689459][ T814] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 334.708691][ T8911] loop4: detected capacity change from 0 to 256 [ 334.714997][ T8911] exfat: Deprecated parameter 'utf8' [ 334.720759][ T8911] exfat: Deprecated parameter 'utf8' [ 334.727663][ T1132] usb 2-1: Using ep0 maxpacket: 8 [ 334.753705][ T8911] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x818efa41, utbl_chksum : 0xe619d30d) [ 334.769376][ T8911] exfat filesystem being mounted at /418/file1 supports timestamps until 2107 (0x10391447f) [ 334.798937][ T28] audit: type=1400 audit(3872816682.540:541): avc: denied { rename } for pid=8910 comm="syz.4.2570" name="file0" dev="loop4" ino=1048795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.843520][ T8921] loop4: detected capacity change from 0 to 256 [ 334.850796][ T8921] exfat: Deprecated parameter 'namecase' [ 334.858698][ T8921] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 334.877664][ T1132] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.878144][ T8921] exfat filesystem being mounted at /419/file0 supports timestamps until 2107 (0x10391447f) [ 334.913812][ T383] usb 4-1: USB disconnect, device number 27 [ 334.920325][ T383] ftdi_sio 4-1:0.178: device disconnected [ 335.057228][ T8920] loop2: detected capacity change from 0 to 40427 [ 335.064407][ T8920] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 335.072331][ T8920] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 335.080552][ T1132] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 335.081227][ T8920] F2FS-fs (loop2): invalid crc value [ 335.089573][ T1132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.096395][ T8920] F2FS-fs (loop2): Found nat_bits in checkpoint [ 335.102549][ T1132] usb 2-1: Product: syz [ 335.102564][ T1132] usb 2-1: Manufacturer: syz [ 335.117287][ T1132] usb 2-1: SerialNumber: syz [ 335.138856][ T1132] usb 2-1: config 0 descriptor?? [ 335.154436][ T8920] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 335.161546][ T8920] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.477614][ T1132] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 335.483945][ T1132] usb 2-1: No valid video chain found. [ 335.490791][ T1132] usb 2-1: USB disconnect, device number 24 [ 335.703959][ T814] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 335.713230][ T814] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 335.886989][ T8967] loop0: detected capacity change from 0 to 128 [ 335.912000][ T8967] vfat filesystem being mounted at /35/file0 supports timestamps until 2107 (0x10391447e) [ 335.951990][ T8967] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 335.983312][ T8967] FAT-fs (loop0): Filesystem has been set read-only [ 336.047837][ T8985] syz.4.2597[8985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.047909][ T8985] syz.4.2597[8985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.183565][ T9001] loop1: detected capacity change from 0 to 2048 [ 336.246631][ T9001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 336.268553][ T9001] 9pnet_fd: Insufficient options for proto=fd [ 336.280890][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 336.314740][ T28] audit: type=1400 audit(4007034412.056:542): avc: denied { mount } for pid=9014 comm="syz.1.2612" name="/" dev="ramfs" ino=45939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 336.359041][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 336.497636][ T383] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 336.561851][ T9023] loop1: detected capacity change from 0 to 16 [ 336.588380][ T9023] erofs: (device loop1): mounted with root inode @ nid 36. [ 336.603591][ T9023] input: syz0 as /devices/virtual/input/input72 [ 336.647813][ T1132] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 336.917905][ T1132] usb 3-1: Using ep0 maxpacket: 8 [ 336.936323][ T9038] loop3: detected capacity change from 0 to 2048 [ 336.948977][ T9038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 336.961583][ T9038] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 336.976374][ T9038] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 336.988739][ T9038] EXT4-fs (loop3): This should not happen!! Data will be lost [ 336.988739][ T9038] [ 336.998628][ T9038] EXT4-fs (loop3): Total free blocks count 0 [ 337.004513][ T9038] EXT4-fs (loop3): Free/Dirty block details [ 337.010339][ T9038] EXT4-fs (loop3): free_blocks=2415919104 [ 337.015930][ T9038] EXT4-fs (loop3): dirty_blocks=32 [ 337.020939][ T9038] EXT4-fs (loop3): Block reservation details [ 337.026678][ T9038] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 337.035275][ T9038] 9pnet_fd: Insufficient options for proto=fd [ 337.044545][ T814] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 337.047663][ T383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.067396][ T383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.076960][ T383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.077594][ T1132] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.089652][ T383] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 337.110339][ T383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.119567][ T383] usb 5-1: config 0 descriptor?? [ 337.123004][ T9042] loop3: detected capacity change from 0 to 2048 [ 337.138933][ T9042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 337.151753][ T9042] 9pnet_fd: Insufficient options for proto=fd [ 337.162230][ T1650] EXT4-fs (loop3): unmounting filesystem. [ 337.237862][ T9049] loop1: detected capacity change from 0 to 512 [ 337.245386][ T9049] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.2624: casefold flag without casefold feature [ 337.258317][ T9049] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 337.269615][ T9049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.281537][ T9049] fscrypt (loop1, inode 18): v1 policies can't be used on casefolded directories [ 337.290663][ T1132] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 337.299584][ T1132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.300355][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 337.307380][ T1132] usb 3-1: Product: syz [ 337.316898][ T1132] usb 3-1: Manufacturer: syz [ 337.321378][ T1132] usb 3-1: SerialNumber: syz [ 337.326168][ T1132] usb 3-1: config 0 descriptor?? [ 337.348419][ T9056] sch_tbf: peakrate 6 is lower than or equals to rate 7694164503644904053 ! [ 337.598535][ T383] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 337.605591][ T383] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 337.613030][ T383] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 337.620112][ T383] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 337.627158][ T383] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 337.627673][ T1132] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 337.640861][ T383] prodikeys 0003:041E:2801.001E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 337.650591][ T1132] usb 3-1: No valid video chain found. [ 337.661670][ T1132] usb 3-1: USB disconnect, device number 17 [ 337.808876][ T1139] usb 5-1: USB disconnect, device number 22 [ 338.132655][ T9070] netlink: 'syz.2.2631': attribute type 58 has an invalid length. [ 338.161723][ T9074] loop2: detected capacity change from 0 to 2048 [ 338.178909][ T9074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 338.196384][ T9074] 9pnet_fd: Insufficient options for proto=fd [ 338.211258][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 338.230111][ T9080] fuse: Invalid rootmode [ 338.397926][ T9086] tipc: Enabled bearer , priority 10 [ 338.406620][ T9086] tipc: Disabling bearer [ 338.597607][ T1139] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 338.610205][ T9082] loop1: detected capacity change from 0 to 40427 [ 338.617029][ T9082] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 338.624785][ T9082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.633389][ T9082] F2FS-fs (loop1): invalid crc value [ 338.639842][ T9082] F2FS-fs (loop1): Found nat_bits in checkpoint [ 338.657599][ T316] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 338.667218][ T9082] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 338.674346][ T9082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 339.007697][ T1139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.018540][ T1139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.028081][ T1139] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 339.036880][ T1139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.045640][ T1139] usb 5-1: config 0 descriptor?? [ 339.067704][ T316] usb 4-1: Using ep0 maxpacket: 32 [ 339.104069][ T329] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 339.113207][ T329] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 339.171048][ T9100] loop1: detected capacity change from 0 to 16 [ 339.177766][ T9100] erofs: (device loop1): mounted with root inode @ nid 36. [ 339.187025][ T9100] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 339.187763][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.205989][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.216304][ T316] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 339.226718][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.238339][ T9102] loop1: detected capacity change from 0 to 512 [ 339.250532][ T316] usb 4-1: config 0 descriptor?? [ 339.257829][ T9102] EXT4-fs (loop1): 1 truncate cleaned up [ 339.263366][ T9102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 339.288323][ T28] audit: type=1400 audit(4141252143.029:543): avc: denied { execute_no_trans } for pid=9101 comm="syz.1.2640" path="/464/bus/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 339.312719][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 339.420070][ T9104] loop0: detected capacity change from 0 to 40427 [ 339.426766][ T9104] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 339.434461][ T9104] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 339.443298][ T9104] F2FS-fs (loop0): invalid crc value [ 339.449909][ T9104] F2FS-fs (loop0): Found nat_bits in checkpoint [ 339.474006][ T9104] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 339.480935][ T9104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 339.548698][ T1139] samsung 0003:0419:0600.001F: unbalanced collection at end of report description [ 339.557912][ T1139] samsung 0003:0419:0600.001F: parse failed [ 339.563619][ T1139] samsung: probe of 0003:0419:0600.001F failed with error -22 [ 339.678141][ T1138] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 339.863119][ T316] greenasia 0003:0E8F:0012.0020: item fetching failed at offset 0/3 [ 339.871145][ T316] greenasia 0003:0E8F:0012.0020: parse failed [ 339.877037][ T316] greenasia: probe of 0003:0E8F:0012.0020 failed with error -22 [ 339.886638][ T1139] usb 5-1: USB disconnect, device number 23 [ 339.927994][ T1138] usb 2-1: Using ep0 maxpacket: 8 [ 339.933158][ T1132] usb 4-1: USB disconnect, device number 28 [ 340.089969][ T329] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 340.099297][ T329] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 340.108161][ T1138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.172110][ T9119] loop0: detected capacity change from 0 to 2048 [ 340.189319][ T9119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 340.205169][ T8436] EXT4-fs (loop0): unmounting filesystem. [ 340.217713][ T316] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 340.277608][ T1138] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 340.286812][ T1138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.295013][ T1138] usb 2-1: Product: syz [ 340.299320][ T1138] usb 2-1: Manufacturer: syz [ 340.303787][ T1138] usb 2-1: SerialNumber: syz [ 340.312361][ T1138] usb 2-1: config 0 descriptor?? [ 340.330498][ T9123] loop0: detected capacity change from 0 to 40427 [ 340.338255][ T9123] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 340.345843][ T9123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 340.355685][ T9123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 340.379367][ T9123] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 340.386222][ T9123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 340.457601][ T316] usb 3-1: Using ep0 maxpacket: 8 [ 340.577637][ T316] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 340.597642][ T1138] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 340.598156][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.605711][ T1138] usb 2-1: No valid video chain found. [ 340.640522][ T1138] usb 2-1: USB disconnect, device number 25 [ 340.641503][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.662143][ T9131] loop4: detected capacity change from 0 to 40427 [ 340.684940][ T316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 340.697812][ T9131] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 340.705268][ T9131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 340.713614][ T316] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 340.723345][ T9131] F2FS-fs (loop4): invalid crc value [ 340.729555][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.738062][ T316] usb 3-1: config 0 descriptor?? [ 340.742270][ T9133] loop3: detected capacity change from 0 to 40427 [ 340.756104][ T9133] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 340.761918][ T9131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 340.763921][ T9133] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 340.779742][ T9133] F2FS-fs (loop3): invalid crc value [ 340.786333][ T9133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.802087][ T9131] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 340.809184][ T9131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 340.846854][ T9133] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 340.853860][ T9133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 341.783865][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 341.799651][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 341.830735][ T329] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 341.846685][ T329] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 341.868536][ T316] hid-thrustmaster 0003:044F:B65D.0021: item fetching failed at offset 3/7 [ 341.877156][ T316] hid-thrustmaster 0003:044F:B65D.0021: parse failed with error -22 [ 341.893760][ T316] hid-thrustmaster: probe of 0003:044F:B65D.0021 failed with error -22 [ 342.033164][ T28] audit: type=1400 audit(4275469873.769:544): avc: denied { remount } for pid=9174 comm="syz.3.2661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 342.066261][ T28] audit: type=1400 audit(4275469873.799:545): avc: denied { unmount } for pid=1650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 342.093827][ T1138] usb 3-1: USB disconnect, device number 18 [ 342.127124][ T9188] input: syz1 as /devices/virtual/input/input73 [ 342.133739][ T28] audit: type=1400 audit(4275469873.869:546): avc: denied { bind } for pid=9186 comm="syz.1.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.185597][ T9195] loop3: detected capacity change from 0 to 2048 [ 342.198966][ T9195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 342.214266][ T9195] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 342.235564][ T9195] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 342.247926][ T9195] EXT4-fs (loop3): This should not happen!! Data will be lost [ 342.247926][ T9195] [ 342.258871][ T9195] EXT4-fs (loop3): Total free blocks count 0 [ 342.266230][ T9195] EXT4-fs (loop3): Free/Dirty block details [ 342.272249][ T9195] EXT4-fs (loop3): free_blocks=2415919104 [ 342.279840][ T9195] EXT4-fs (loop3): dirty_blocks=32 [ 342.285035][ T9195] EXT4-fs (loop3): Block reservation details [ 342.290942][ T9195] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 342.299860][ T9195] 9pnet_fd: Insufficient options for proto=fd [ 342.310973][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 342.334257][ T28] audit: type=1400 audit(4275469874.069:547): avc: denied { remount } for pid=9201 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 342.388009][ T9213] tipc: Started in network mode [ 342.392717][ T9213] tipc: Node identity 7f000001, cluster identity 4711 [ 342.400004][ T9213] tipc: Enabled bearer , priority 10 [ 342.427797][ T316] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 342.476820][ T1132] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 342.594850][ T9222] loop0: detected capacity change from 0 to 16 [ 342.688431][ T9222] erofs: (device loop0): mounted with root inode @ nid 36. [ 342.703286][ T9222] input: syz0 as /devices/virtual/input/input74 [ 342.811414][ T9220] loop3: detected capacity change from 0 to 40427 [ 342.827221][ T9220] F2FS-fs (loop3): invalid crc value [ 342.833945][ T9220] F2FS-fs (loop3): Found nat_bits in checkpoint [ 342.873443][ T9220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.887858][ T1132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.897651][ T316] usb 5-1: Using ep0 maxpacket: 16 [ 342.898861][ T1132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.913691][ T1132] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 342.914524][ T1650] syz-executor: attempt to access beyond end of device [ 342.914524][ T1650] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 342.924037][ T1132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.949197][ T1132] usb 2-1: config 0 descriptor?? [ 342.971201][ T9236] loop2: detected capacity change from 0 to 2048 [ 343.001543][ T9236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 343.023957][ T9236] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 343.038932][ T9236] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 343.051372][ T9236] EXT4-fs (loop2): This should not happen!! Data will be lost [ 343.051372][ T9236] [ 343.061256][ T9236] EXT4-fs (loop2): Total free blocks count 0 [ 343.067112][ T9236] EXT4-fs (loop2): Free/Dirty block details [ 343.073448][ T9236] EXT4-fs (loop2): free_blocks=2415919104 [ 343.079152][ T9236] EXT4-fs (loop2): dirty_blocks=32 [ 343.084843][ T9236] EXT4-fs (loop2): Block reservation details [ 343.090607][ T9236] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 343.099735][ T9236] 9pnet_fd: Insufficient options for proto=fd [ 343.110728][ T814] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 343.197686][ T316] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 343.211741][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.219811][ T316] usb 5-1: Product: syz [ 343.224055][ T316] usb 5-1: Manufacturer: syz [ 343.231175][ T316] usb 5-1: SerialNumber: syz [ 343.238389][ T316] r8152-cfgselector 5-1: config 0 descriptor?? [ 343.320079][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 343.356596][ T9257] loop0: detected capacity change from 0 to 512 [ 343.382272][ T9257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 343.391228][ T9257] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038 (0x7fffffff) [ 343.432513][ T8436] EXT4-fs (loop0): unmounting filesystem. [ 343.439418][ T9264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2691'. [ 343.450512][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2691'. [ 343.480913][ T9268] netlink: 'syz.2.2693': attribute type 11 has an invalid length. [ 343.507746][ T316] r8152-cfgselector 5-1: Unknown version 0x0000 [ 343.521259][ T1121] tipc: Node number set to 2130706433 [ 343.548790][ T9274] loop2: detected capacity change from 0 to 128 [ 343.556187][ T9274] vfat filesystem being mounted at /112/file0 supports timestamps until 2107 (0x10391447e) [ 343.677663][ T1132] hid-led: probe of 0003:1D34:000A.0022 failed with error -71 [ 343.687249][ T1132] usb 2-1: USB disconnect, device number 26 [ 343.767619][ T316] r8152-cfgselector 5-1: Unknown version 0x0000 [ 343.780373][ T316] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 343.885102][ T9281] loop3: detected capacity change from 0 to 512 [ 343.891796][ T9281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.903229][ T9281] EXT4-fs (loop3): 1 orphan inode deleted [ 343.909059][ T9281] EXT4-fs (loop3): 1 truncate cleaned up [ 343.914584][ T9281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 343.930726][ T1650] EXT4-fs (loop3): unmounting filesystem. [ 343.947250][ T9284] loop3: detected capacity change from 0 to 2048 [ 343.959323][ T9284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 343.976013][ T1650] EXT4-fs (loop3): unmounting filesystem. [ 343.995789][ T9288] loop3: detected capacity change from 0 to 2048 [ 344.019009][ T9288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 344.030784][ T9288] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 344.045627][ T9288] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 344.057991][ T9288] EXT4-fs (loop3): This should not happen!! Data will be lost [ 344.057991][ T9288] [ 344.067630][ T9288] EXT4-fs (loop3): Total free blocks count 0 [ 344.073509][ T9288] EXT4-fs (loop3): Free/Dirty block details [ 344.079440][ T9288] EXT4-fs (loop3): free_blocks=2415919104 [ 344.085040][ T9288] EXT4-fs (loop3): dirty_blocks=16 [ 344.090115][ T9288] EXT4-fs (loop3): Block reservation details [ 344.095913][ T9288] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 344.106670][ T1650] EXT4-fs (loop3): unmounting filesystem. [ 344.487585][ T1132] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 344.877697][ T1132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.890030][ T1132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.899641][ T1132] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 344.908721][ T1132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.917255][ T1132] usb 2-1: config 0 descriptor?? [ 345.019426][ T9312] loop3: detected capacity change from 0 to 2048 [ 345.039127][ T9312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 345.060212][ T9312] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 345.075452][ T9312] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 345.088207][ T9312] EXT4-fs (loop3): This should not happen!! Data will be lost [ 345.088207][ T9312] [ 345.097739][ T9312] EXT4-fs (loop3): Total free blocks count 0 [ 345.106992][ T9312] EXT4-fs (loop3): Free/Dirty block details [ 345.117735][ T9312] EXT4-fs (loop3): free_blocks=2415919104 [ 345.123324][ T9312] EXT4-fs (loop3): dirty_blocks=32 [ 345.128500][ T9312] EXT4-fs (loop3): Block reservation details [ 345.134342][ T9312] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 345.142792][ T9312] 9pnet_fd: Insufficient options for proto=fd [ 345.162572][ T1138] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 345.170654][ T28] audit: type=1326 audit(4275469876.909:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.4.2712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a379eb9 code=0x0 [ 345.194002][ T1138] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 345.194159][ T344] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 345.202121][ T1138] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 345.249715][ T9324] xt_hashlimit: size too large, truncated to 1048576 [ 345.395610][ T9334] loop2: detected capacity change from 0 to 2048 [ 345.438273][ T1132] holtek 0003:1241:5015.0024: item fetching failed at offset 1/5 [ 345.446074][ T1132] holtek 0003:1241:5015.0024: parse failed [ 345.451740][ T1132] holtek: probe of 0003:1241:5015.0024 failed with error -22 [ 345.517579][ T1138] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 345.533763][ T9342] loop2: detected capacity change from 0 to 16 [ 345.540303][ T9342] erofs: (device loop2): mounted with root inode @ nid 36. [ 345.550370][ T28] audit: type=1400 audit(4275469877.289:549): avc: denied { watch } for pid=9341 comm="syz.2.2721" path="/121/file0/file0" dev="loop2" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.640285][ T24] usb 2-1: USB disconnect, device number 27 [ 345.847671][ T1121] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 345.907630][ T1138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.918548][ T1138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.928069][ T1138] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 345.937018][ T1138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.945797][ T1138] usb 4-1: config 0 descriptor?? [ 346.046026][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 346.055250][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 346.096115][ T9358] loop4: detected capacity change from 0 to 256 [ 346.103156][ T9358] vfat filesystem being mounted at /444/file0 supports timestamps until 2107 (0x10391447e) [ 346.164668][ T9364] loop1: detected capacity change from 0 to 1024 [ 346.175971][ T9364] EXT4-fs mount: 2 callbacks suppressed [ 346.175990][ T9364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 346.192494][ T9364] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 346.202713][ T2877] EXT4-fs (loop1): unmounting filesystem. [ 346.317278][ T9370] loop1: detected capacity change from 0 to 40427 [ 346.324318][ T9370] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 346.332473][ T9370] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.342491][ T9370] F2FS-fs (loop1): invalid crc value [ 346.351050][ T9370] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.367777][ T1121] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 346.376723][ T1121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.380326][ T9370] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 346.384964][ T1121] usb 3-1: Product: syz [ 346.391556][ T9370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.395787][ T1121] usb 3-1: Manufacturer: syz [ 346.408252][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 346.415675][ T1121] usb 3-1: SerialNumber: syz [ 346.420811][ T1121] r8152-cfgselector 3-1: config 0 descriptor?? [ 346.455171][ T1138] hid-steam 0003:28DE:1142.0025: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 346.471543][ T1138] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 346.548498][ T1138] hid-steam 0003:28DE:1142.0025: Steam wireless receiver connected [ 346.700384][ T1132] usb 4-1: USB disconnect, device number 29 [ 346.728975][ T1121] r8152-cfgselector 3-1: Unknown version 0x0000 [ 346.732548][ T1132] hid-steam 0003:28DE:1142.0025: Steam wireless receiver disconnected [ 346.767807][ T329] usb 3-1: config 0 descriptor?? [ 346.837735][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.848649][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.858359][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 346.867176][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.875886][ T24] usb 5-1: config 0 descriptor?? [ 346.980310][ T1121] usb 3-1: USB disconnect, device number 19 [ 346.997652][ T329] usb 3-1: can't set config #0, error -71 [ 347.076805][ T329] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 347.085936][ T329] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 347.148527][ T9381] loop1: detected capacity change from 0 to 2048 [ 347.159464][ T9381] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 347.169990][ T9381] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 347.184910][ T9381] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 347.197757][ T9381] EXT4-fs (loop1): This should not happen!! Data will be lost [ 347.197757][ T9381] [ 347.207304][ T9381] EXT4-fs (loop1): Total free blocks count 0 [ 347.213303][ T9381] EXT4-fs (loop1): Free/Dirty block details [ 347.219043][ T9381] EXT4-fs (loop1): free_blocks=2415919104 [ 347.224617][ T9381] EXT4-fs (loop1): dirty_blocks=32 [ 347.229591][ T9381] EXT4-fs (loop1): Block reservation details [ 347.235380][ T9381] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 347.244158][ T9381] 9pnet_fd: Insufficient options for proto=fd [ 347.253407][ T329] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 347.370463][ T2341] Bluetooth: hci1: sending frame failed (-49) [ 347.376557][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 347.388709][ T24] hid-steam 0003:28DE:1142.0027: item fetching failed at offset 2/5 [ 347.396808][ T24] hid-steam 0003:28DE:1142.0027: steam_probe:parse of hid interface failed [ 347.405726][ T24] hid-steam: probe of 0003:28DE:1142.0027 failed with error -22 [ 347.496038][ T9400] loop2: detected capacity change from 0 to 16 [ 347.514885][ T9400] erofs: (device loop2): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 347.560541][ T9402] loop1: detected capacity change from 0 to 16 [ 347.569365][ T9402] erofs: (device loop1): mounted with root inode @ nid 36. [ 347.584652][ T9402] input: syz0 as /devices/virtual/input/input75 [ 347.791699][ T1121] usb 5-1: USB disconnect, device number 25 [ 347.794212][ T778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.881660][ T9413] loop2: detected capacity change from 0 to 2048 [ 347.899834][ T9413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 347.910698][ T9413] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 347.925807][ T9413] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 347.938418][ T9413] EXT4-fs (loop2): This should not happen!! Data will be lost [ 347.938418][ T9413] [ 347.948601][ T9413] EXT4-fs (loop2): Total free blocks count 0 [ 347.954399][ T9413] EXT4-fs (loop2): Free/Dirty block details [ 347.960301][ T9413] EXT4-fs (loop2): free_blocks=2415919104 [ 347.965850][ T9413] EXT4-fs (loop2): dirty_blocks=32 [ 347.970898][ T9413] EXT4-fs (loop2): Block reservation details [ 347.976718][ T9413] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 347.985232][ T9413] 9pnet_fd: Insufficient options for proto=fd [ 347.994800][ T329] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 348.026766][ T9417] loop2: detected capacity change from 0 to 2048 [ 348.039707][ T9417] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.053161][ T9417] 9pnet_fd: Insufficient options for proto=fd [ 348.063851][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 348.080643][ T9421] loop2: detected capacity change from 0 to 256 [ 348.089117][ T9421] exfat filesystem being mounted at /129/éq‰Y’3aK supports timestamps until 2107 (0x10391447f) [ 349.267683][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 349.273757][ T2340] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 349.347571][ T9454] loop4: detected capacity change from 0 to 512 [ 349.357643][ T9455] loop2: detected capacity change from 0 to 4096 [ 349.364305][ T9455] EXT4-fs: Ignoring removed nobh option [ 349.375182][ T9455] EXT4-fs: Ignoring removed i_version option [ 349.387429][ T9455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 349.539241][ T9459] loop1: detected capacity change from 0 to 16 [ 349.681165][ T9461] loop3: detected capacity change from 0 to 16 [ 349.688656][ T9459] erofs: (device loop1): mounted with root inode @ nid 36. [ 349.727999][ T9452] input: syz0 as /devices/virtual/input/input76 [ 349.736215][ T9461] erofs: (device loop3): mounted with root inode @ nid 36. [ 349.749554][ T9461] input: syz0 as /devices/virtual/input/input77 [ 349.809049][ T9454] EXT4-fs (loop4): orphan cleanup on readonly fs [ 349.877322][ T9454] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 349.886577][ T9454] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 349.902909][ T9454] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 349.903525][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 349.921818][ T9454] EXT4-fs (loop4): 1 truncate cleaned up [ 349.929855][ T9454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.959449][ T9467] loop2: detected capacity change from 0 to 256 [ 349.971632][ T9467] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 349.983904][ T2796] EXT4-fs (loop4): unmounting filesystem. [ 349.984132][ T9467] exfat filesystem being mounted at /136/file0 supports timestamps until 2107 (0x10391447f) [ 350.021827][ T9472] loop0: detected capacity change from 0 to 128 [ 350.028802][ T9472] vfat filesystem being mounted at /63/file0 supports timestamps until 2107 (0x10391447e) [ 350.181262][ T9485] loop0: detected capacity change from 0 to 2048 [ 350.240447][ T9485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 350.273925][ T9485] 9pnet_fd: Insufficient options for proto=fd [ 350.293692][ T8436] EXT4-fs (loop0): unmounting filesystem. [ 350.318613][ T1121] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 350.479260][ T9483] loop1: detected capacity change from 0 to 40427 [ 350.507565][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 350.519549][ T9483] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 350.537329][ T9483] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.556342][ T9483] F2FS-fs (loop1): invalid crc value [ 350.567564][ T1121] usb 3-1: Using ep0 maxpacket: 16 [ 350.596736][ T9483] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.676974][ T9483] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 350.686785][ T9483] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.689583][ T9473] loop4: detected capacity change from 0 to 131072 [ 350.694608][ T1121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.703027][ T9493] loop0: detected capacity change from 0 to 40427 [ 350.718147][ T9473] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 350.726475][ T9473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 350.733452][ T1121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.739741][ T9483] syz.1.2775: attempt to access beyond end of device [ 350.739741][ T9483] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 350.755709][ T1121] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 350.760495][ T9493] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 350.776911][ T1121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.777220][ T9493] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 350.792964][ T9473] F2FS-fs (loop4): invalid crc value [ 350.798745][ T9493] F2FS-fs (loop0): invalid crc value [ 350.800463][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 350.805476][ T9493] F2FS-fs (loop0): Found nat_bits in checkpoint [ 350.814635][ T9473] F2FS-fs (loop4): Found nat_bits in checkpoint [ 350.815216][ T1121] usb 3-1: config 0 descriptor?? [ 350.854832][ T814] kworker/u4:8: attempt to access beyond end of device [ 350.854832][ T814] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 350.875669][ T9493] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 350.882715][ T9493] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 350.887820][ T9473] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 350.903894][ T9473] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 350.939941][ T9473] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 350.950975][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 350.960808][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 350.970472][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 350.980281][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 351.067761][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 351.085108][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 351.094423][ T24] usb 4-1: SerialNumber: syz [ 351.151713][ T24] usb-storage 4-1:1.0: USB Mass Storage device detected [ 351.166110][ T24] usb-storage 4-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 351.174893][ T24] scsi host1: usb-storage 4-1:1.0 [ 351.218474][ T9523] loop4: detected capacity change from 0 to 512 [ 351.225187][ T9523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 351.236297][ T9523] EXT4-fs (loop4): 1 orphan inode deleted [ 351.241922][ T9523] EXT4-fs (loop4): 1 truncate cleaned up [ 351.247380][ T9523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 351.258481][ T9523] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 351.272981][ T9523] EXT4-fs (loop4): Remounting filesystem read-only [ 351.282567][ T2796] EXT4-fs (loop4): unmounting filesystem. [ 351.308885][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.317856][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.324900][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.332438][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.340296][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.347853][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.354891][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.359009][ T24] usb 4-1: USB disconnect, device number 30 [ 351.362339][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.377831][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.384984][ T1121] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 351.402906][ T1121] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0028/input/input78 [ 351.417698][ T316] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 351.457306][ T9526] loop4: detected capacity change from 0 to 40427 [ 351.464036][ T9526] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 351.471813][ T9526] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 351.482390][ T1121] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 351.483796][ T9526] F2FS-fs (loop4): invalid crc value [ 351.500597][ T9526] F2FS-fs (loop4): Found nat_bits in checkpoint [ 351.539617][ T9526] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 351.546481][ T9526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 351.548747][ T9475] loop2: detected capacity change from 0 to 256 [ 351.566525][ T9475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 351.579330][ T9475] exfat filesystem being mounted at /137/file0 supports timestamps until 2107 (0x10391447f) [ 351.849760][ T24] usb 3-1: USB disconnect, device number 20 [ 351.997672][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.009128][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.018633][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.032766][ T316] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.042126][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.051129][ T316] usb 2-1: config 0 descriptor?? [ 352.361265][ T9536] loop3: detected capacity change from 0 to 16 [ 352.425445][ T9536] erofs: (device loop3): mounted with root inode @ nid 36. [ 352.441866][ T9536] input: syz0 as /devices/virtual/input/input79 [ 352.466119][ T814] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 352.518124][ T814] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 352.579701][ T9540] loop4: detected capacity change from 0 to 2048 [ 352.598837][ T9540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.607160][ T9540] ext4 filesystem being mounted at /455/bus supports timestamps until 2038 (0x7fffffff) [ 352.624240][ T2796] EXT4-fs (loop4): unmounting filesystem. [ 352.640437][ T9544] loop4: detected capacity change from 0 to 128 [ 352.647453][ T9544] vfat filesystem being mounted at /456/file0 supports timestamps until 2107 (0x10391447e) [ 352.708652][ T316] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 352.724686][ T28] audit: type=1400 audit(4275469884.459:550): avc: denied { map } for pid=9549 comm="syz.2.2792" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 352.725525][ T316] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 352.767923][ T9550] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 352.775892][ T9550] #PF: supervisor instruction fetch in kernel mode [ 352.782307][ T9550] #PF: error_code(0x0010) - not-present page [ 352.788119][ T9550] PGD 126078067 P4D 126078067 PUD 133440067 PMD 0 [ 352.794483][ T9550] Oops: 0010 [#1] PREEMPT SMP KASAN [ 352.799671][ T9550] CPU: 1 PID: 9550 Comm: syz.2.2792 Tainted: G W 6.1.93-syzkaller-00069-ga1895da8bd3b #0 [ 352.810689][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.820625][ T9550] RIP: 0010:0x0 [ 352.823975][ T9550] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 352.831349][ T9550] RSP: 0018:ffffc90001316ff8 EFLAGS: 00010246 [ 352.837258][ T9550] RAX: 1ffff92000262eb8 RBX: dffffc0000000000 RCX: 0000000000040000 [ 352.845065][ T9550] RDX: ffffc90002563000 RSI: ffffea0005695400 RDI: ffff8881197ce900 [ 352.852918][ T9550] RBP: ffffc90001317150 R08: ffffffff81a46b48 R09: fffff94000ad2a87 [ 352.861818][ T9550] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900013175c0 [ 352.869628][ T9550] R13: ffffea0005695400 R14: ffffc900013175d8 R15: 0000000000000000 [ 352.877445][ T9550] FS: 00007f5ef06da6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 352.886260][ T9550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.892734][ T9550] CR2: ffffffffffffffd6 CR3: 000000011a2d2000 CR4: 00000000003506a0 [ 352.900676][ T9550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.908473][ T9550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.916291][ T9550] Call Trace: [ 352.919408][ T9550] [ 352.922194][ T9550] ? __die_body+0x62/0xb0 [ 352.926345][ T9550] ? __die+0x7e/0x90 [ 352.930088][ T9550] ? page_fault_oops+0x7f9/0xa90 [ 352.934857][ T9550] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 352.940332][ T9550] ? cgroup_rstat_updated+0xe5/0x370 [ 352.945445][ T9550] ? is_errata93+0xc7/0x240 [ 352.949787][ T9550] ? exc_page_fault+0x529/0x6d0 [ 352.954469][ T9550] ? asm_exc_page_fault+0x27/0x30 [ 352.959338][ T9550] ? read_pages+0x838/0xd40 [ 352.963684][ T9550] read_pages+0x89c/0xd40 [ 352.967945][ T9550] ? workingset_activation+0x430/0x430 [ 352.973247][ T9550] ? folio_add_lru+0x280/0x3f0 [ 352.978305][ T9550] ? page_cache_ra_unbounded+0x690/0x690 [ 352.983770][ T9550] ? filemap_add_folio+0x18f/0x200 [ 352.988737][ T9550] ? __filemap_add_folio+0xd10/0xd10 [ 352.993933][ T9550] page_cache_ra_order+0x822/0xc40 [ 352.998882][ T9550] ? do_page_cache_ra+0x110/0x110 [ 353.003735][ T9550] ? xas_create+0xf3a/0x1630 [ 353.008159][ T9550] ondemand_readahead+0x91a/0xee0 [ 353.013191][ T9550] ? cgroup_rstat_updated+0xe5/0x370 [ 353.018319][ T9550] ? page_cache_sync_ra+0x450/0x450 [ 353.023435][ T9550] ? blk_cgroup_congested+0x132/0x150 [ 353.028644][ T9550] page_cache_sync_ra+0x3d6/0x450 [ 353.033505][ T9550] hpage_collapse_scan_file+0x19ba/0x46e0 [ 353.039068][ T9550] ? hugepage_vma_revalidate+0x310/0x310 [ 353.044737][ T9550] ? mutex_unlock+0xb2/0x260 [ 353.049152][ T9550] ? __lru_add_drain_all+0x714/0x770 [ 353.054270][ T9550] madvise_collapse+0x639/0xcf0 [ 353.058968][ T9550] ? khugepaged_min_free_kbytes_update+0x90/0x90 [ 353.065122][ T9550] ? memset+0x35/0x40 [ 353.068948][ T9550] ? blk_start_plug+0x9c/0x130 [ 353.073546][ T9550] do_madvise+0x1604/0x40b0 [ 353.078050][ T9550] ? schedule_preempt_disabled+0x20/0x20 [ 353.083531][ T9550] ? madvise_set_anon_name+0x4c0/0x4c0 [ 353.088815][ T9550] ? __kasan_check_write+0x14/0x20 [ 353.093770][ T9550] ? wake_up_q+0x11c/0x1d0 [ 353.098013][ T9550] ? futex_wake+0x758/0xb60 [ 353.102356][ T9550] ? futex_wake_mark+0x170/0x170 [ 353.107312][ T9550] ? ____kasan_slab_free+0x13c/0x180 [ 353.112537][ T9550] ? __kasan_slab_free+0x11/0x20 [ 353.117315][ T9550] ? putname+0xfa/0x150 [ 353.121301][ T9550] ? putname+0xfa/0x150 [ 353.125290][ T9550] ? getname_flags+0x3a2/0x520 [ 353.129900][ T9550] ? do_futex+0x501/0x9a0 [ 353.134060][ T9550] ? __this_cpu_preempt_check+0x13/0x20 [ 353.139442][ T9550] ? xfd_validate_state+0x6f/0x170 [ 353.144391][ T9550] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 353.150134][ T9550] ? save_fpregs_to_fpstate+0x220/0x220 [ 353.155672][ T9550] ? fpregs_restore_userregs+0x130/0x290 [ 353.161651][ T9550] __x64_sys_madvise+0xa8/0xc0 [ 353.166248][ T9550] x64_sys_call+0xec/0x9a0 [ 353.170589][ T9550] do_syscall_64+0x3b/0xb0 [ 353.174927][ T9550] ? clear_bhb_loop+0x55/0xb0 [ 353.179439][ T9550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.185165][ T9550] RIP: 0033:0x7f5eef979eb9 [ 353.189419][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.209064][ T9550] RSP: 002b:00007f5ef06da038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 353.217480][ T9550] RAX: ffffffffffffffda RBX: 00007f5eefb15f80 RCX: 00007f5eef979eb9 [ 353.225284][ T9550] RDX: 0000000000000019 RSI: 0000000000600702 RDI: 0000000020000000 [ 353.233252][ T9550] RBP: 00007f5eef9e793e R08: 0000000000000000 R09: 0000000000000000 [ 353.241052][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.248865][ T9550] R13: 0000000000000000 R14: 00007f5eefb15f80 R15: 00007ffc3f3a9128 [ 353.256719][ T9550] [ 353.259550][ T9550] Modules linked in: [ 353.263725][ T9550] CR2: 0000000000000000 [ 353.267739][ T9550] ---[ end trace 0000000000000000 ]--- [ 353.272996][ T9550] RIP: 0010:0x0 [ 353.276296][ T9550] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 353.283618][ T9550] RSP: 0018:ffffc90001316ff8 EFLAGS: 00010246 [ 353.290252][ T9550] RAX: 1ffff92000262eb8 RBX: dffffc0000000000 RCX: 0000000000040000 [ 353.298057][ T9550] RDX: ffffc90002563000 RSI: ffffea0005695400 RDI: ffff8881197ce900 [ 353.305870][ T9550] RBP: ffffc90001317150 R08: ffffffff81a46b48 R09: fffff94000ad2a87 [ 353.313677][ T9550] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900013175c0 [ 353.322567][ T9550] R13: ffffea0005695400 R14: ffffc900013175d8 R15: 0000000000000000 [ 353.330350][ T9550] FS: 00007f5ef06da6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 353.339111][ T9550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.345731][ T9550] CR2: ffffffffffffffd6 CR3: 000000011a2d2000 CR4: 00000000003506a0 [ 353.353569][ T9550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.361352][ T9550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.369438][ T9550] Kernel panic - not syncing: Fatal exception [ 353.375578][ T9550] Kernel Offset: disabled [ 353.379713][ T9550] Rebooting in 86400 seconds..