last executing test programs: 3.688133133s ago: executing program 4 (id=1835): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8], 0x0) 2.319684148s ago: executing program 2 (id=1865): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000d40)={[{@i_version}, {@dioread_lock}, {@barrier_val}]}, 0x26, 0x762, &(0x7f0000000e80)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRLFQo3SSNh/bUePFWKBS81pBMQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8Ab1JQ8C6I1ngQLyuzSbY0zW63Sdqt6ecD033emXnneZ+d4e0OZCaA59brxT9JxFBEXIyI8ub6NCIOt6IjEdc39lu/d22qWJJoNi/9nhTdYr1Zbh8r2fw8Hq0u8XJE3ClFnPro4by1xur8ZJ5ny5vtkfrC0kitsXp6bmFyNpvNFsfGz42eHR8/Ozr+yBpe6rHWE++eO3rrh3fW1n78tn7ztYHTSUy06o7N2jr3bCY9pnjIRsdSTGxbv7jbAz6jdv0FAQDwVBW/8w9FxEDrV2o5DrUiAAAA4CBpDjYBAACAAy+Jfo8AAAAAeLK2/g5g69ne7s/B7r/f3o6I4Z3yD7SeIY44EqWIOLaePPBkQrLRDfbk+o2IuD2x/fr7urjCru/x2KPb2g8+I314j0dnP9wu5p+JneaftD3/xA7zz8DWuxP2qPP8dz//oQ7z38Uec3z3xSuljvlvRLw6sFP+pJ0/6ZD/vR7z31z7+Fanbc2vIk7u+P9P8kCuLu+HmJiZy7u+fuDOP2/e7Vb/sU75k+71L/VY/wfrf853mEva56Xb+d8pf3FNfLI5jjQibm1+Fu21bUneWPjp+271T0c0d3P+v+yx/l++Gbza464AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQkkbEUCRppR2naaUScTwiXoxjaV6t1U/NVFcWp4ttEcNRSmfm8mw0Isob7aRoj7Xi++0z29rjEfHCz0c3ks7lWWWqmk/3u3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADajkfEUCRpJSLSiPirnKaVSsRAD30Hn8L4AAAAgH0y3O8BAAAAAE+c+38AAAA4+HZz//9WRCRPYCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAgXXxwoViaa7fuzZVtKevNFbmq1dOT2e1+crCylRlqrq8VJmtVmfzrDJVXXjU8fJqdWnsXKxcHalntfpIrbF6eaG6sli/PLcwOZtdzkpPpSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe11BrSdJKRKStOE0rlYj/RcRwlJKZuTwbjYj/R8TdcmmwaI/1e9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsu1pjdX4yz7NlQcdg67t6VsYj+O8HH0bEMzCMLkF/5yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPqj1lidn8zzbLnW75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQX+mvSUQUy8nyiaHtWw8nf5dbnxHx/ueXPr06Wa8vjxXr/2ivr3+2uf5MP8YPAAAAz4Xzj7Pz1n361n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAr2qN1fnJPM+W9xacj8ZqM+mwT79rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAduffAAAA//9g2MNC") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x240, 0x13) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.241676588s ago: executing program 2 (id=1866): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffd}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) getpeername$inet6(r0, 0x0, 0x0) 2.182497968s ago: executing program 2 (id=1868): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xe4e, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.172630628s ago: executing program 4 (id=1870): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000a40)="9a2352ca6b", 0x5, 0x20000000, &(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10) 2.132932997s ago: executing program 4 (id=1872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.132563977s ago: executing program 0 (id=1873): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000005100)) 2.098848058s ago: executing program 4 (id=1874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(0x0, 0x0) 2.098603847s ago: executing program 4 (id=1875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.008070297s ago: executing program 4 (id=1876): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x48, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x1, 0x7, {0x7, 0x25, 0x1, 0x2, 0x4, 0x2d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x1, {0x7, 0x25, 0x1, 0x80, 0xea, 0x9}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000d40)={0x14, 0x0, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000051c0)={0x14, 0x0, &(0x7f00000050c0)={0x0, 0x3, 0x38, @string={0x38, 0x3, "1ca0143b52763246e74e5ec40a3803c57616fb8f41a1f632c3bda625f16140fd920829d5d16ad6b1f0989bb7bed992b3b549b10f0660"}}}, 0x0) 1.873630917s ago: executing program 0 (id=1877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)=""/20, &(0x7f0000000240)=0x14) 1.863241837s ago: executing program 0 (id=1878): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() 1.808061056s ago: executing program 0 (id=1879): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000002800050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 1.807882967s ago: executing program 0 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 1.807745977s ago: executing program 0 (id=1881): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8], 0x0) 756.126253ms ago: executing program 3 (id=1891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 755.979763ms ago: executing program 3 (id=1892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e0a00d00"]) 736.779203ms ago: executing program 3 (id=1893): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r1, 0x0) 717.692013ms ago: executing program 3 (id=1894): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 371.477342ms ago: executing program 3 (id=1898): syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x1020, 0x0, 0x1, 0x0, &(0x7f0000000fc0)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 371.068872ms ago: executing program 1 (id=1899): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 305.004951ms ago: executing program 1 (id=1900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000007380000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaa0daaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090"], 0x0) 292.101361ms ago: executing program 1 (id=1901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) 244.880302ms ago: executing program 2 (id=1902): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) capset(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 232.300531ms ago: executing program 2 (id=1903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 200.458871ms ago: executing program 1 (id=1904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 198.017741ms ago: executing program 3 (id=1905): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f0000000780)={[{@noinline_xattr}, {@noinline_dentry}, {@disable_ext_identify}, {@jqfmt_vfsv1}, {@acl}, {@gc_merge}, {@lazytime}, {@inlinecrypt}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==") mkdir(&(0x7f0000000140)='./control\x00', 0x0) 166.182601ms ago: executing program 1 (id=1906): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x5, 0x3) ptrace$cont(0x18, r0, 0xfffffffffffffffd, 0x0) 141.568401ms ago: executing program 2 (id=1907): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 0s ago: executing program 1 (id=1908): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) kernel console output (not intermixed with test programs): 427 [ 42.310486][ T1681] netlink: 156 bytes leftover after parsing attributes in process `syz.2.569'. [ 42.320426][ T1681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 42.321862][ T1667] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 42.348042][ T1667] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 42.384883][ T1693] loop0: detected capacity change from 0 to 512 [ 42.392192][ T1667] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.430305][ T1693] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 42.447507][ T1667] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 42.450909][ T1693] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.465853][ T1667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.532064][ T290] attempt to access beyond end of device [ 42.532064][ T290] loop1: rw=2049, want=45104, limit=40427 [ 42.558145][ T1712] loop4: detected capacity change from 0 to 2048 [ 42.747018][ T1722] loop4: detected capacity change from 0 to 512 [ 42.827485][ T1722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.856995][ T1717] loop0: detected capacity change from 0 to 40427 [ 42.905394][ T1717] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 42.913360][ T1722] EXT4-fs (loop4): 1 truncate cleaned up [ 42.918856][ T1722] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 42.921317][ T1717] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.944370][ T1717] F2FS-fs (loop0): fault_injection options not supported [ 42.951731][ T1717] F2FS-fs (loop0): fault_type options not supported [ 42.960030][ T1717] F2FS-fs (loop0): invalid crc value [ 42.966829][ T1717] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.010451][ T1717] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.017445][ T1717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.070194][ T288] attempt to access beyond end of device [ 43.070194][ T288] loop0: rw=2049, want=45104, limit=40427 [ 43.261887][ T1758] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 43.276964][ T1758] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 43.295458][ T1737] loop3: detected capacity change from 0 to 40427 [ 43.352457][ T1737] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 43.360009][ T1737] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 43.362416][ T1766] loop1: detected capacity change from 0 to 512 [ 43.383860][ T1768] loop0: detected capacity change from 0 to 1024 [ 43.392370][ T1768] EXT4-fs (loop0): Ignoring removed orlov option [ 43.401582][ T1768] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 43.433462][ T1737] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.444517][ T1766] EXT4-fs (loop1): Ignoring removed orlov option [ 43.466627][ T1766] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.474208][ T1766] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.605: bg 0: block 248: padding at end of block bitmap is not set [ 43.488787][ T1766] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.605: Failed to acquire dquot type 1 [ 43.495444][ T1737] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 43.500884][ T1766] EXT4-fs (loop1): 1 truncate cleaned up [ 43.506871][ T1737] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.524319][ T1766] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,noblock_validity,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 43.564491][ T289] attempt to access beyond end of device [ 43.564491][ T289] loop3: rw=2049, want=45104, limit=40427 [ 43.570806][ T1766] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 43.591603][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.598458][ T1772] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.607235][ T1772] device bridge_slave_0 entered promiscuous mode [ 43.613969][ T1766] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 43.614286][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.628341][ T1772] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.628458][ T1766] ext4 filesystem being remounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.651829][ T1772] device bridge_slave_1 entered promiscuous mode [ 43.663541][ T1766] syz.1.605 (1766) used greatest stack depth: 19824 bytes left [ 43.843496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.850997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.890364][ T1808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1808 comm=syz.1.619 [ 43.891936][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.931229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.939401][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.946285][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.970799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.979185][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.987571][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.994450][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.009004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.038412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.046327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.080905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.098740][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.106745][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.114466][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.123982][ T8] device bridge_slave_1 left promiscuous mode [ 44.129968][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.138296][ T8] device bridge_slave_0 left promiscuous mode [ 44.144715][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.152963][ T8] device veth1_macvtap left promiscuous mode [ 44.159012][ T8] device veth0_vlan left promiscuous mode [ 44.226359][ T1772] device veth0_vlan entered promiscuous mode [ 44.244431][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.256549][ T1772] device veth1_macvtap entered promiscuous mode [ 44.268437][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.280961][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.325083][ T1833] device ip6tnl1 entered promiscuous mode [ 44.397586][ T1840] loop1: detected capacity change from 0 to 512 [ 44.432960][ T1840] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.631: invalid indirect mapped block 256 (level 2) [ 44.456983][ T1831] loop2: detected capacity change from 0 to 40427 [ 44.465296][ T1840] EXT4-fs (loop1): 2 truncates cleaned up [ 44.470990][ T1840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.545722][ T1831] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 44.557585][ T1853] x_tables: duplicate underflow at hook 4 [ 44.571761][ T1831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 44.611680][ T1831] F2FS-fs (loop2): invalid crc value [ 44.618897][ T1864] loop4: detected capacity change from 0 to 256 [ 44.647505][ T1831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.706351][ T1864] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 44.740713][ T1881] netlink: 71 bytes leftover after parsing attributes in process `syz.0.651'. [ 44.775184][ T1864] exFAT-fs (loop4): hint_cluster is invalid (1) [ 44.809267][ T1831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 44.822469][ T1864] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 44.831032][ T1864] exFAT-fs (loop4): Filesystem has been set read-only [ 44.838268][ T1864] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812e0f7040 iblock : 9, err : -5) [ 44.858216][ T1831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 44.911452][ T1864] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 44.918804][ T1864] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 44.951440][ T1898] loop3: detected capacity change from 0 to 128 [ 45.014314][ T1904] loop4: detected capacity change from 0 to 16 [ 45.038849][ T1898] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.050812][ T1886] loop1: detected capacity change from 0 to 40427 [ 45.055738][ T1898] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.090057][ T1898] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x1c) [ 45.101437][ T1904] erofs: (device loop4): mounted with root inode @ nid 36. [ 45.111735][ T1886] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 45.121347][ T1886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.134269][ T1904] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 45.160561][ T1904] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 45.171098][ T1886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.190390][ T1904] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 45.210018][ T1904] overlayfs: failed to get redirect (-117) [ 45.235234][ T1886] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 45.266942][ T1886] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.280646][ T1886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.355495][ T1886] attempt to access beyond end of device [ 45.355495][ T1886] loop1: rw=2049, want=45104, limit=40427 [ 45.584470][ T1959] loop4: detected capacity change from 0 to 512 [ 45.659236][ T1959] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.683: invalid block [ 45.718650][ T1959] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.683: invalid indirect mapped block 4294967295 (level 1) [ 45.756677][ T1947] loop2: detected capacity change from 0 to 40427 [ 45.763551][ T1959] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.683: invalid indirect mapped block 4294967295 (level 1) [ 45.787096][ T1959] EXT4-fs (loop4): 2 truncates cleaned up [ 45.793621][ T1947] F2FS-fs (loop2): invalid crc value [ 45.797713][ T1959] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,nodelalloc,noblock_validity,,errors=continue. Quota mode: writeback. [ 45.818558][ T1959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.683: bg 0: block 5: invalid block bitmap [ 45.834277][ T1959] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 45.845614][ T1947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.988870][ T1947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.009351][ T1992] loop1: detected capacity change from 0 to 512 [ 46.069757][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 46.069773][ T30] audit: type=1326 audit(1737655732.215:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.099864][ T30] audit: type=1326 audit(1737655732.245:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.124168][ T30] audit: type=1326 audit(1737655732.275:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.147849][ T30] audit: type=1326 audit(1737655732.275:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.204230][ T1992] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 46.241092][ T1979] loop0: detected capacity change from 0 to 40427 [ 46.247683][ T30] audit: type=1326 audit(1737655732.275:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.270846][ T30] audit: type=1326 audit(1737655732.295:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.281477][ T1992] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.294668][ T30] audit: type=1326 audit(1737655732.295:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.328815][ T30] audit: type=1326 audit(1737655732.295:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.352054][ T30] audit: type=1326 audit(1737655732.295:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.375389][ T30] audit: type=1326 audit(1737655732.303:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 46.401303][ T2008] Zero length message leads to an empty skb [ 46.451703][ T1979] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.467428][ T2022] loop3: detected capacity change from 0 to 256 [ 46.474249][ T2020] loop2: detected capacity change from 0 to 128 [ 46.518385][ T2022] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf8244977, utbl_chksum : 0xe619d30d) [ 46.565958][ T1979] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 46.583119][ T1979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.757535][ T1979] attempt to access beyond end of device [ 46.757535][ T1979] loop0: rw=2049, want=45104, limit=40427 [ 46.867154][ T8] tipc: Subscription rejected, illegal request [ 46.944651][ T2089] bridge_slave_0: default FDB implementation only supports local addresses [ 47.052350][ T2101] xt_hashlimit: size too large, truncated to 1048576 [ 47.257822][ T2118] loop1: detected capacity change from 0 to 1024 [ 47.381909][ T2118] EXT4-fs (loop1): Ignoring removed orlov option [ 47.396198][ T2118] EXT4-fs (loop1): Ignoring removed orlov option [ 47.412627][ T2118] EXT4-fs (loop1): Ignoring removed oldalloc option [ 47.428890][ T2118] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.456638][ T2118] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 47.477280][ T2118] EXT4-fs (loop1): invalid journal inode [ 47.483101][ T2118] EXT4-fs (loop1): can't get journal size [ 47.503186][ T2130] netlink: 72 bytes leftover after parsing attributes in process `syz.0.753'. [ 47.512819][ T2118] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 47.553534][ T2122] loop2: detected capacity change from 0 to 40427 [ 47.596054][ T2122] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 47.614861][ T2122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.626288][ T2140] loop0: detected capacity change from 0 to 512 [ 47.649755][ T2122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.714785][ T2122] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.722318][ T2140] EXT4-fs (loop0): error: journal path ./bus is not a block device [ 47.738391][ T2122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.881494][ T941] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 48.096781][ T2194] overlayfs: missing 'lowerdir' [ 48.192748][ T2210] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 48.251521][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.261097][ T941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.279508][ T941] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 48.291134][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.299281][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 48.305155][ T941] usb 4-1: config 0 descriptor?? [ 48.375373][ T2232] device syz_tun entered promiscuous mode [ 48.397592][ T2232] device syz_tun left promiscuous mode [ 48.537491][ T2244] loop0: detected capacity change from 0 to 512 [ 48.602315][ T2254] devtmpfs: Unknown parameter 'd„à irsync' [ 48.632069][ T2244] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 48.648311][ T2244] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.648482][ T2261] loop4: detected capacity change from 0 to 256 [ 48.721851][ T2261] FAT-fs (loop4): bogus logical sector size 128 [ 48.728578][ T2261] FAT-fs (loop4): Can't find a valid FAT filesystem [ 48.786110][ T2261] loop4: detected capacity change from 0 to 512 [ 48.793624][ T941] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 48.800133][ T941] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 48.806696][ T941] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 48.813247][ T941] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 48.819659][ T941] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 48.826864][ T941] kye 0003:0458:5011.0006: hidraw0: USB HID ve.4e Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 48.837583][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.844869][ T941] kye 0003:0458:5011.0006: tablet-enabling feature report not found [ 48.852994][ T941] kye 0003:0458:5011.0006: tablet enabling failed [ 48.853167][ T2261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.870210][ T2261] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.887994][ T2261] EXT4-fs (loop4): Unrecognized mount option "vÏ¢k" or missing value [ 49.005622][ T6] usb 4-1: USB disconnect, device number 3 [ 49.011556][ T941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 49.091467][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 49.211482][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.222297][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.231918][ T26] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 49.240705][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.249238][ T26] usb 3-1: config 0 descriptor?? [ 49.371500][ T941] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 49.382129][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 49.392883][ T941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 49.405530][ T941] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 49.414372][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.422806][ T941] usb 2-1: config 0 descriptor?? [ 49.530892][ T2280] loop3: detected capacity change from 0 to 512 [ 49.552421][ T2280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.563586][ T2280] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.576682][ T2280] EXT4-fs (loop3): 1 truncate cleaned up [ 49.582252][ T2280] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 49.705340][ T2285] loop3: detected capacity change from 0 to 512 [ 49.732229][ T26] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x1 [ 49.740443][ T26] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 49.820319][ T2285] EXT4-fs (loop3): 1 orphan inode deleted [ 49.826067][ T2285] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,nodiscard,noquota,init_itable,sb=0x0000000000000007,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 49.847874][ T2285] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.892360][ T941] holtek 0003:1241:5015.0008: item fetching failed at offset 1/4 [ 49.900166][ T941] holtek 0003:1241:5015.0008: parse failed [ 49.905955][ T941] holtek: probe of 0003:1241:5015.0008 failed with error -22 [ 49.911035][ T2293] loop4: detected capacity change from 0 to 8192 [ 49.933509][ T2295] loop3: detected capacity change from 0 to 2048 [ 49.937677][ T6] usb 3-1: USB disconnect, device number 4 [ 49.962959][ T2293] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.974576][ T2293] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 49.982482][ T2293] FAT-fs (loop4): Filesystem has been set read-only [ 50.095771][ T60] usb 2-1: USB disconnect, device number 3 [ 50.551505][ T941] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.597518][ T2344] loop2: detected capacity change from 0 to 2048 [ 50.618789][ T2344] EXT4-fs (loop2): Ignoring removed nobh option [ 50.622464][ T2346] input: syz0 as /devices/virtual/input/input10 [ 50.628263][ T2344] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 50.628263][ T2344] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 50.628263][ T2344] [ 50.649994][ T2344] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 50.674578][ T2344] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,i_version,nobh,delalloc,minixdf,lazytime,nouser_xattr,quota,nomblk_io_submit,bsddf,,errors=continue. Quota mode: writeback. [ 50.675822][ T2350] loop1: detected capacity change from 0 to 256 [ 50.774132][ T2350] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7bdf4db, utbl_chksum : 0xe619d30d) [ 50.893000][ T2366] syz.1.855[2366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.893073][ T2366] syz.1.855[2366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.912022][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 50.933060][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 51.101518][ T941] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 51.122531][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.130509][ T941] usb 5-1: Product: syz [ 51.136109][ T941] usb 5-1: Manufacturer: syz [ 51.140558][ T941] usb 5-1: SerialNumber: syz [ 51.146688][ T941] usb 5-1: config 0 descriptor?? [ 51.171628][ T2333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.180772][ T2333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.393101][ T2333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.399978][ T2333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.601644][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.789297][ T2403] input: syz0 as /devices/virtual/input/input11 [ 51.812186][ T2405] loop2: detected capacity change from 0 to 16 [ 51.894981][ T2405] erofs: (device loop2): mounted with root inode @ nid 36. [ 51.961472][ T39] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 51.972127][ T39] usb 4-1: config 0 has no interface number 0 [ 51.984602][ T39] usb 4-1: config 0 interface 104 has no altsetting 0 [ 52.071521][ T941] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 52.083795][ T941] usb 5-1: USB disconnect, device number 4 [ 52.151488][ T39] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 52.166792][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.175058][ T39] usb 4-1: Product: syz [ 52.182345][ T39] usb 4-1: Manufacturer: syz [ 52.186892][ T39] usb 4-1: SerialNumber: syz [ 52.197701][ T39] usb 4-1: config 0 descriptor?? [ 52.233534][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 52.233551][ T30] audit: type=1326 audit(2000000004.569:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.272492][ T2422] syz.2.879[2422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.272570][ T2422] syz.2.879[2422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.286089][ T30] audit: type=1326 audit(2000000004.619:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.345550][ T30] audit: type=1326 audit(2000000004.629:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.371526][ T30] audit: type=1326 audit(2000000004.629:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.416508][ T30] audit: type=1326 audit(2000000004.669:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.466140][ T941] usb 4-1: USB disconnect, device number 4 [ 52.469850][ T30] audit: type=1326 audit(2000000004.669:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.500870][ T30] audit: type=1326 audit(2000000004.669:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.531522][ T30] audit: type=1326 audit(2000000004.669:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.536436][ T2442] Â: renamed from pim6reg1 [ 52.554869][ T30] audit: type=1326 audit(2000000004.669:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.582489][ T30] audit: type=1326 audit(2000000004.669:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 52.626380][ T2444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 52.635272][ T2444] erspan0: default FDB implementation only supports local addresses [ 52.709639][ T2448] loop1: detected capacity change from 0 to 8192 [ 52.711503][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.793506][ T2448] netlink: 64 bytes leftover after parsing attributes in process `syz.1.890'. [ 52.802428][ T2448] tipc: Invalid UDP bearer configuration [ 52.802458][ T2448] tipc: Enabling of bearer rejected, failed to enable media [ 53.091509][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.104780][ T39] usb 3-1: config 0 has no interfaces? [ 53.110102][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.119846][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.134422][ T39] usb 3-1: config 0 descriptor?? [ 53.275374][ T2474] loop3: detected capacity change from 0 to 40427 [ 53.285960][ T2474] F2FS-fs (loop3): fault_injection options not supported [ 53.292946][ T2474] F2FS-fs (loop3): fault_type options not supported [ 53.300350][ T2474] F2FS-fs (loop3): invalid crc value [ 53.306746][ T2474] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.339032][ T2474] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.375381][ T289] attempt to access beyond end of device [ 53.375381][ T289] loop3: rw=2049, want=45104, limit=40427 [ 53.378353][ T39] usb 3-1: USB disconnect, device number 5 [ 53.643928][ T2489] loop4: detected capacity change from 0 to 40427 [ 53.721787][ T2489] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 53.737050][ T2489] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 53.748212][ T2489] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 53.771415][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.781177][ T2489] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 53.788340][ T2489] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.840002][ T1772] attempt to access beyond end of device [ 53.840002][ T1772] loop4: rw=2049, want=45104, limit=40427 [ 53.860845][ T2491] loop0: detected capacity change from 0 to 40427 [ 53.871932][ T2491] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 53.879496][ T2491] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 53.888919][ T2491] F2FS-fs (loop0): invalid crc value [ 53.895478][ T2491] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.938486][ T2491] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 53.946926][ T2491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.011399][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 54.083425][ T2511] loop4: detected capacity change from 0 to 256 [ 54.131499][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.142767][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 54.152093][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.160648][ T26] usb 4-1: config 0 descriptor?? [ 54.188610][ T2511] FAT-fs (loop4): Directory bread(block 64) failed [ 54.199434][ T2511] FAT-fs (loop4): Directory bread(block 65) failed [ 54.206752][ T2511] FAT-fs (loop4): Directory bread(block 66) failed [ 54.213497][ T2511] FAT-fs (loop4): Directory bread(block 67) failed [ 54.221277][ T2511] FAT-fs (loop4): Directory bread(block 68) failed [ 54.233461][ T2511] FAT-fs (loop4): Directory bread(block 69) failed [ 54.239942][ T2511] FAT-fs (loop4): Directory bread(block 70) failed [ 54.248356][ T2511] FAT-fs (loop4): Directory bread(block 71) failed [ 54.254979][ T2511] FAT-fs (loop4): Directory bread(block 72) failed [ 54.261898][ T2511] FAT-fs (loop4): Directory bread(block 73) failed [ 54.314307][ T2527] loop0: detected capacity change from 0 to 512 [ 54.393290][ T2527] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 54.407488][ T2527] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.470799][ T2535] loop0: detected capacity change from 0 to 256 [ 54.564203][ T2535] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 54.601497][ T294] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 54.642492][ T26] logitech 0003:046D:C287.0009: unknown main item tag 0x0 [ 54.650168][ T26] logitech 0003:046D:C287.0009: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 54.661564][ T26] logitech 0003:046D:C287.0009: no inputs found [ 54.806128][ T2542] loop2: detected capacity change from 0 to 512 [ 54.841436][ T294] usb 5-1: Using ep0 maxpacket: 16 [ 54.849906][ T26] usb 4-1: USB disconnect, device number 5 [ 54.909343][ T2542] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.926: casefold flag without casefold feature [ 54.922153][ T2542] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.926: couldn't read orphan inode 15 (err -117) [ 54.934246][ T2542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.961540][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.973155][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.982841][ T294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.995561][ T294] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.004601][ T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.013266][ T294] usb 5-1: config 0 descriptor?? [ 55.380713][ T2553] device veth1_to_batadv entered promiscuous mode [ 55.387118][ T2553] device macsec2 entered promiscuous mode [ 55.492534][ T294] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 55.511154][ T294] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 55.511201][ T294] microsoft 0003:045E:07DA.000A: no inputs found [ 55.511214][ T294] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 55.628517][ T2583] loop2: detected capacity change from 0 to 256 [ 55.702726][ T2593] syz.2.947[2593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.702804][ T2593] syz.2.947[2593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.704508][ T294] usb 5-1: USB disconnect, device number 5 [ 55.744830][ T2596] futex_wake_op: syz.1.949 tries to shift op by -1; fix this program [ 55.772199][ T2598] xt_hashlimit: max too large, truncated to 1048576 [ 55.833250][ T2609] loop1: detected capacity change from 0 to 256 [ 55.883507][ T2618] device ip6tnl1 entered promiscuous mode [ 55.911946][ T2609] FAT-fs (loop1): bogus logical sector size 128 [ 55.918329][ T2609] FAT-fs (loop1): Can't find a valid FAT filesystem [ 55.962061][ T2609] loop1: detected capacity change from 0 to 512 [ 55.984578][ T2609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.001323][ T2609] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.017139][ T2609] EXT4-fs (loop1): Unrecognized mount option "vÏ¢k" or missing value [ 56.237673][ T2647] netlink: 'syz.2.972': attribute type 4 has an invalid length. [ 56.245405][ T2647] netlink: 17 bytes leftover after parsing attributes in process `syz.2.972'. [ 56.300632][ T2639] loop1: detected capacity change from 0 to 40427 [ 56.335952][ T2639] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 56.355315][ T2639] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 56.374243][ T2639] F2FS-fs (loop1): invalid crc value [ 56.404751][ T2639] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.470168][ T2675] loop3: detected capacity change from 0 to 256 [ 56.474251][ T2639] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 56.483284][ T2639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 56.536052][ T2678] loop0: detected capacity change from 0 to 128 [ 56.602261][ T2678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.627261][ T2658] loop4: detected capacity change from 0 to 40427 [ 56.633826][ T2678] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.653648][ T2678] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x0d) [ 56.721417][ T2042] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.732609][ T2658] F2FS-fs (loop4): invalid crc value [ 56.757335][ T2658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.764355][ T2703] loop0: detected capacity change from 0 to 512 [ 56.775781][ T2705] loop1: detected capacity change from 0 to 512 [ 56.798511][ T2703] EXT4-fs (loop0): Ignoring removed orlov option [ 56.806521][ T2658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.811099][ T2703] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.831256][ T2703] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.995: bg 0: block 248: padding at end of block bitmap is not set [ 56.851761][ T2705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.882039][ T2705] EXT4-fs (loop1): 1 orphan inode deleted [ 56.887880][ T2703] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.995: Failed to acquire dquot type 1 [ 56.888228][ T2705] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.910149][ T1772] attempt to access beyond end of device [ 56.910149][ T1772] loop4: rw=2049, want=45104, limit=40427 [ 56.924117][ T2703] EXT4-fs (loop0): 1 truncate cleaned up [ 56.929844][ T2703] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,noblock_validity,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 56.967185][ T2703] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 56.982089][ T2703] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 56.989529][ T2703] ext4 filesystem being remounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.001602][ T2703] syz.0.995 (2703) used greatest stack depth: 19592 bytes left [ 57.101462][ T2042] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.158877][ T2723] loop4: detected capacity change from 0 to 16 [ 57.182838][ T2723] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.281573][ T2042] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.293877][ T2042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.302172][ T2042] usb 3-1: Product: syz [ 57.306231][ T2042] usb 3-1: Manufacturer: syz [ 57.310669][ T2042] usb 3-1: SerialNumber: syz [ 57.317553][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 57.317569][ T30] audit: type=1326 audit(2000000009.659:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 57.382469][ T2741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 57.387089][ T2739] loop4: detected capacity change from 0 to 1024 [ 57.391771][ T2741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 57.403483][ T30] audit: type=1326 audit(2000000009.659:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 57.438124][ T30] audit: type=1326 audit(2000000009.659:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 57.461599][ T30] audit: type=1326 audit(2000000009.659:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 57.485738][ T30] audit: type=1326 audit(2000000009.659:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 57.511108][ T30] audit: type=1400 audit(2000000009.779:828): avc: denied { create } for pid=2742 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.532797][ T30] audit: type=1400 audit(2000000009.779:829): avc: denied { ioctl } for pid=2742 comm="syz.1.1013" path="socket:[25405]" dev="sockfs" ino=25405 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.558505][ T2739] EXT4-fs (loop4): Ignoring removed orlov option [ 57.566873][ T30] audit: type=1400 audit(2000000009.889:830): avc: denied { create } for pid=2747 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.583824][ T2739] EXT4-fs (loop4): Ignoring removed orlov option [ 57.597901][ T2739] EXT4-fs (loop4): Ignoring removed oldalloc option [ 57.604909][ T2739] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.615883][ T2739] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 57.625720][ T2739] EXT4-fs (loop4): invalid journal inode [ 57.631323][ T2739] EXT4-fs (loop4): can't get journal size [ 57.638179][ T2739] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 57.759313][ T30] audit: type=1400 audit(2000000010.099:831): avc: denied { read write } for pid=2764 comm="syz.3.1022" name="uhid" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.774128][ T2767] loop4: detected capacity change from 0 to 512 [ 57.790002][ T2765] UHID_CREATE from different security context by process 421 (syz.3.1022), this is not allowed. [ 57.795500][ T30] audit: type=1400 audit(2000000010.099:832): avc: denied { open } for pid=2764 comm="syz.3.1022" path="/dev/uhid" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.832149][ T2767] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 57.844088][ T2767] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 57.852958][ T2767] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 57.860871][ T2767] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 57.869762][ T2767] EXT4-fs (loop4): 1 truncate cleaned up [ 57.875796][ T2767] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 57.900727][ T2767] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.1023: lblock 0 mapped to illegal pblock 4 (length 1) [ 57.917092][ T2767] EXT4-fs (loop4): Remounting filesystem read-only [ 57.924051][ T2767] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.1023: lblock 0 mapped to illegal pblock 4 (length 1) [ 57.938533][ T2767] EXT4-fs (loop4): Remounting filesystem read-only [ 58.002832][ T2777] loop0: detected capacity change from 0 to 256 [ 58.077913][ T2771] loop1: detected capacity change from 0 to 40427 [ 58.087642][ T2777] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 58.090337][ T2769] loop3: detected capacity change from 0 to 40427 [ 58.122030][ T2769] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 58.128578][ T2771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.129654][ T2769] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 58.175348][ T2769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.210901][ T2771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.251682][ T2769] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 58.261528][ T2042] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 58.263130][ T2769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.281509][ T2042] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 58.302595][ T290] attempt to access beyond end of device [ 58.302595][ T290] loop1: rw=2049, want=45104, limit=40427 [ 58.321487][ T2042] cdc_ncm 3-1:1.0: bind() failure [ 58.327448][ T2042] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 58.349168][ T2042] cdc_ncm 3-1:1.1: bind() failure [ 58.369160][ T2042] usb 3-1: USB disconnect, device number 6 [ 58.386859][ T2785] loop0: detected capacity change from 0 to 40427 [ 58.423230][ T2785] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 58.441452][ T2785] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.466490][ T2785] F2FS-fs (loop0): invalid crc value [ 58.479728][ T2785] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.496372][ T2796] loop1: detected capacity change from 0 to 256 [ 58.532064][ T2796] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0e5ad3fb, utbl_chksum : 0xe619d30d) [ 58.541870][ T2785] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.550851][ T2785] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 58.652575][ T2807] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 58.786427][ T2822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 58.854454][ T2831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.008138][ T2851] input: syz1 as /devices/virtual/input/input12 [ 59.080171][ T2862] loop1: detected capacity change from 0 to 256 [ 59.089715][ T2866] loop2: detected capacity change from 0 to 16 [ 59.111226][ T2866] erofs: (device loop2): mounted with root inode @ nid 36. [ 59.127086][ T2862] FAT-fs (loop1): Directory bread(block 64) failed [ 59.151469][ T2862] FAT-fs (loop1): Directory bread(block 65) failed [ 59.161614][ T2862] FAT-fs (loop1): Directory bread(block 66) failed [ 59.172683][ T2874] loop3: detected capacity change from 0 to 512 [ 59.176368][ T2862] FAT-fs (loop1): Directory bread(block 67) failed [ 59.183181][ T2876] loop4: detected capacity change from 0 to 512 [ 59.185283][ T2862] FAT-fs (loop1): Directory bread(block 68) failed [ 59.198092][ T2862] FAT-fs (loop1): Directory bread(block 69) failed [ 59.204724][ T2862] FAT-fs (loop1): Directory bread(block 70) failed [ 59.211081][ T2862] FAT-fs (loop1): Directory bread(block 71) failed [ 59.217743][ T2862] FAT-fs (loop1): Directory bread(block 72) failed [ 59.224228][ T2862] FAT-fs (loop1): Directory bread(block 73) failed [ 59.260728][ T2876] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 59.277659][ T2874] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.1069: corrupted inode contents [ 59.283340][ T2876] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.290037][ T2874] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #3: comm syz.3.1069: mark_inode_dirty error [ 59.311384][ T10] attempt to access beyond end of device [ 59.311384][ T10] loop1: rw=1, want=1832, limit=256 [ 59.321189][ T2874] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.1069: corrupted inode contents [ 59.323294][ T10] attempt to access beyond end of device [ 59.323294][ T10] loop1: rw=1, want=3308, limit=256 [ 59.345208][ T2874] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1069: mark_inode_dirty error [ 59.365464][ T2874] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.1069: Failed to acquire dquot type 0 [ 59.379481][ T2874] EXT4-fs (loop3): 1 orphan inode deleted [ 59.385408][ T2874] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.402116][ T2874] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.600614][ T2915] loop4: detected capacity change from 0 to 128 [ 59.666242][ T2915] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.690977][ T2915] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 59.712112][ T2915] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.750459][ T2915] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 59.767733][ T2915] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 59.967130][ T2932] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1089'. [ 59.967380][ T2930] loop2: detected capacity change from 0 to 2048 [ 59.984570][ T2932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 60.022142][ T2934] loop0: detected capacity change from 0 to 512 [ 60.033391][ T2896] loop1: detected capacity change from 0 to 131072 [ 60.042951][ T2934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.054345][ T2896] F2FS-fs (loop1): invalid crc value [ 60.054927][ T2934] EXT4-fs (loop0): 1 truncate cleaned up [ 60.061653][ T2896] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.065466][ T2934] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 60.124872][ T2896] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 60.162415][ T2942] input: syz0 as /devices/virtual/input/input13 [ 60.167260][ T2943] loop2: detected capacity change from 0 to 512 [ 60.222983][ T2943] EXT4-fs (loop2): error: journal path ./bus is not a block device [ 60.311531][ T2042] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 60.374218][ T2945] loop0: detected capacity change from 0 to 40427 [ 60.445513][ T2945] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 60.459479][ T2945] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 60.471664][ T2945] F2FS-fs (loop0): invalid crc value [ 60.504596][ T2945] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.548125][ T2961] bridge_slave_0: default FDB implementation only supports local addresses [ 60.631825][ T2945] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 60.639074][ T2945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.711466][ T2042] usb 5-1: config 0 has no interfaces? [ 60.891495][ T2042] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.900505][ T2042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.908510][ T2042] usb 5-1: Product: syz [ 60.912475][ T2042] usb 5-1: Manufacturer: syz [ 60.916842][ T2042] usb 5-1: SerialNumber: syz [ 60.922105][ T2042] usb 5-1: config 0 descriptor?? [ 61.141465][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 61.163793][ T294] usb 5-1: USB disconnect, device number 6 [ 61.391426][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 61.541523][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.552599][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 61.561520][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.570205][ T60] usb 2-1: config 0 descriptor?? [ 61.686708][ T2993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1123'. [ 61.709197][ T2994] loop4: detected capacity change from 0 to 2048 [ 61.720304][ T2993] netlink: 'syz.2.1123': attribute type 15 has an invalid length. [ 61.728984][ T2993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 61.820948][ T3007] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.860859][ T3015] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 61.876045][ T3015] pim6reg0: linktype set to 65534 [ 61.940284][ T3024] loop4: detected capacity change from 0 to 512 [ 62.055074][ T3024] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1128: invalid indirect mapped block 256 (level 2) [ 62.062013][ T3013] loop2: detected capacity change from 0 to 40427 [ 62.071859][ T3024] EXT4-fs (loop4): 2 truncates cleaned up [ 62.080195][ T3024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.088601][ T3013] F2FS-fs (loop2): invalid crc value [ 62.092668][ T60] logitech 0003:046D:C287.000B: unknown main item tag 0x0 [ 62.107642][ T60] logitech 0003:046D:C287.000B: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0 [ 62.108147][ T3024] EXT4-fs (loop4): shut down requested (2) [ 62.119211][ T60] logitech 0003:046D:C287.000B: no inputs found [ 62.131964][ T3013] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.173961][ T3013] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 62.180809][ T3013] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 62.202661][ T3042] loop3: detected capacity change from 0 to 256 [ 62.232129][ T3042] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0e5ad3fb, utbl_chksum : 0xe619d30d) [ 62.310945][ T60] usb 2-1: USB disconnect, device number 4 [ 62.328392][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 62.328417][ T30] audit: type=1326 audit(2000000014.669:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.3.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 62.359368][ T30] audit: type=1326 audit(2000000014.699:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.3.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 62.385381][ T30] audit: type=1326 audit(2000000014.699:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.3.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 62.433371][ T30] audit: type=1326 audit(2000000014.719:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.3.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 62.488011][ T3061] loop3: detected capacity change from 0 to 16 [ 62.495787][ T30] audit: type=1326 audit(2000000014.719:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.3.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ada9bd29 code=0x7ffc0000 [ 62.523256][ T30] audit: type=1400 audit(2000000014.749:916): avc: denied { append } for pid=3056 comm="syz.0.1139" name="001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.565441][ T3063] loop0: detected capacity change from 0 to 1024 [ 62.577588][ T3061] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 62.605138][ T3063] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 62.620919][ T3063] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 62.862917][ T30] audit: type=1400 audit(2000000015.209:917): avc: denied { relabelfrom } for pid=3072 comm="syz.1.1149" name="TCPv6" dev="sockfs" ino=27095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.862939][ T3073] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 62.923450][ T30] audit: type=1400 audit(2000000015.209:918): avc: denied { relabelto } for pid=3072 comm="syz.1.1149" name="TCPv6" dev="sockfs" ino=27095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:login_exec_t:s0" [ 62.961870][ T3076] loop0: detected capacity change from 0 to 512 [ 62.992634][ T30] audit: type=1400 audit(2000000015.339:919): avc: denied { create } for pid=3085 comm="syz.3.1154" dev="anon_inodefs" ino=26337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.014932][ T30] audit: type=1400 audit(2000000015.339:920): avc: denied { ioctl } for pid=3085 comm="syz.3.1154" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26337 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.085382][ T3076] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1147: inode #1: comm syz.0.1147: iget: illegal inode # [ 63.126958][ T3076] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1147: error while reading EA inode 1 err=-117 [ 63.143289][ T3076] EXT4-fs (loop0): 1 orphan inode deleted [ 63.149279][ T3076] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,usrjquota=,grpquota,nogrpid,journal_dev=0x0000000000000dcc,grpjquota=,,errors=continue. Quota mode: writeback. [ 63.200207][ T3076] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5857: inode #15: comm syz.0.1147: bad extra_isize 6 (inode size 256) [ 65.031369][ C0] sched: RT throttling activated [ 65.031369][ C1] sched: RT throttling activated [ 66.292703][ T3139] loop4: detected capacity change from 0 to 512 [ 66.380596][ T3139] EXT4-fs (loop4): 1 truncate cleaned up [ 66.404037][ T3139] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 66.465525][ T3162] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.502409][ T3165] syz.4.1185[3165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.502486][ T3165] syz.4.1185[3165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.527580][ T3167] loop0: detected capacity change from 0 to 512 [ 66.595498][ T3171] input: syz0 as /devices/virtual/input/input14 [ 66.646770][ T3179] loop1: detected capacity change from 0 to 16 [ 66.662717][ T3179] erofs: (device loop1): mounted with root inode @ nid 36. [ 66.676429][ T3167] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.711682][ T3167] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.793374][ T3188] SELinux: policydb version 280 does not match my version range 15-33 [ 66.796765][ T3190] loop3: detected capacity change from 0 to 2048 [ 66.807434][ T3188] SELinux: failed to load policy [ 66.824528][ T3193] loop0: detected capacity change from 0 to 256 [ 66.857129][ T3190] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 66.865645][ T3190] System zones: 0-4 [ 66.870272][ T3190] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.881604][ T3190] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.941163][ T3190] fs-verity: sha512 using implementation "sha512-avx2" [ 66.964856][ T3190] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 21815706907 [ 66.975759][ T3203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1201'. [ 66.984720][ T3190] fs-verity (loop3, inode 13): Error -27 building Merkle tree [ 67.324526][ T3240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 67.385935][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 67.385952][ T30] audit: type=1400 audit(2000000019.729:954): avc: denied { read } for pid=3245 comm="syz.3.1222" name="uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.457860][ T30] audit: type=1400 audit(2000000019.729:955): avc: denied { open } for pid=3245 comm="syz.3.1222" path="/dev/uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.496727][ T30] audit: type=1400 audit(2000000019.729:956): avc: denied { create } for pid=3243 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.522705][ T30] audit: type=1400 audit(2000000019.770:957): avc: denied { read write } for pid=3245 comm="syz.3.1222" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.548542][ T30] audit: type=1400 audit(2000000019.770:958): avc: denied { open } for pid=3245 comm="syz.3.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.633566][ T30] audit: type=1400 audit(2000000019.770:959): avc: denied { ioctl } for pid=3245 comm="syz.3.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.666372][ T30] audit: type=1326 audit(2000000019.780:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.1.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 67.691974][ T30] audit: type=1326 audit(2000000019.780:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.1.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 67.715684][ T3266] device veth0_virt_wifi entered promiscuous mode [ 67.726491][ T3266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1232'. [ 67.729858][ T30] audit: type=1326 audit(2000000019.780:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.1.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 67.741403][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 67.759233][ T30] audit: type=1326 audit(2000000019.800:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.1.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 67.789840][ T3248] loop2: detected capacity change from 0 to 40427 [ 67.904628][ T3248] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.044928][ T3248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.113251][ T3248] attempt to access beyond end of device [ 68.113251][ T3248] loop2: rw=2049, want=45104, limit=40427 [ 68.171569][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.183567][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.199085][ T3305] overlayfs: workdir and upperdir must reside under the same mount [ 68.272254][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.285296][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.298202][ T6] usb 4-1: SerialNumber: syz [ 68.314337][ T3322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 68.324899][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.351436][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.386821][ T3328] device wireguard0 entered promiscuous mode [ 68.408343][ T3331] loop0: detected capacity change from 0 to 1024 [ 68.432205][ T3331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 68.443827][ T3331] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 68.531009][ T3345] xt_hashlimit: max too large, truncated to 1048576 [ 68.602296][ T6] usb 4-1: 0:2 : does not exist [ 68.609028][ T6] usb 4-1: USB disconnect, device number 6 [ 68.711497][ T39] usb 5-1: config 0 has no interfaces? [ 68.811925][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.871497][ T39] usb 5-1: New USB device found, idVendor=dd3d, idProduct=0321, bcdDevice=a1.c9 [ 68.880523][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.888676][ T39] usb 5-1: Product: syz [ 68.893083][ T39] usb 5-1: Manufacturer: syz [ 68.897546][ T39] usb 5-1: SerialNumber: syz [ 68.906766][ T39] usb 5-1: config 0 descriptor?? [ 69.071465][ T2042] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 69.152679][ T26] usb 5-1: USB disconnect, device number 7 [ 72.135491][ T3385] loop3: detected capacity change from 0 to 512 [ 72.151901][ T2042] usb 3-1: device descriptor read/all, error -71 [ 72.192200][ T3385] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 72.199385][ T3385] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 72.226007][ T3385] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 72.234119][ T3385] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 72.243331][ T3385] EXT4-fs (loop3): 1 truncate cleaned up [ 72.249082][ T3385] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 72.274604][ T3385] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 4: comm syz.3.1281: lblock 0 mapped to illegal pblock 4 (length 1) [ 72.331633][ T3385] EXT4-fs (loop3): Remounting filesystem read-only [ 72.338866][ T3385] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 4: comm syz.3.1281: lblock 0 mapped to illegal pblock 4 (length 1) [ 72.353371][ T3385] EXT4-fs (loop3): Remounting filesystem read-only [ 72.469418][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 72.469434][ T30] audit: type=1400 audit(2000000024.810:1036): avc: denied { module_request } for pid=3411 comm="syz.4.1291" kmod="nfct-helper-Q.931" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.634008][ T30] audit: type=1400 audit(2000000024.980:1037): avc: denied { create } for pid=3421 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.691443][ T30] audit: type=1400 audit(2000000024.980:1038): avc: denied { write } for pid=3421 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.723413][ T30] audit: type=1400 audit(2000000024.980:1039): avc: denied { nlmsg_write } for pid=3421 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.781648][ T30] audit: type=1400 audit(2000000025.110:1040): avc: denied { setopt } for pid=3431 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.807432][ T30] audit: type=1400 audit(2000000025.120:1041): avc: denied { unlink } for pid=3433 comm="syz.4.1302" name="#5" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.877746][ T3440] loop4: detected capacity change from 0 to 512 [ 72.918243][ T3408] loop1: detected capacity change from 0 to 40427 [ 72.936893][ T3440] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 72.952431][ T3408] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.963097][ T3440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 72.978018][ T3440] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1304: corrupted in-inode xattr [ 72.987073][ T3445] loop2: detected capacity change from 0 to 2048 [ 72.996179][ T3408] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.004833][ T3440] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1304: couldn't read orphan inode 15 (err -117) [ 73.028030][ T3440] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 73.042692][ T3408] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.064741][ T30] audit: type=1400 audit(2000000025.400:1042): avc: denied { setattr } for pid=3439 comm="syz.4.1304" name="cgroup.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.108144][ T3451] loop3: detected capacity change from 0 to 2048 [ 73.132833][ T30] audit: type=1400 audit(2000000025.430:1043): avc: denied { write } for pid=3439 comm="syz.4.1304" name="cgroup.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.152622][ T3445] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.166745][ T3445] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.177352][ T3451] EXT4-fs (loop3): Ignoring removed bh option [ 73.192404][ T30] audit: type=1400 audit(2000000025.530:1044): avc: denied { write } for pid=3458 comm="syz.4.1312" name="ptp0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.215991][ T3408] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 73.222911][ T3408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.227887][ T3451] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 73.261151][ T30] audit: type=1400 audit(2000000025.600:1045): avc: denied { create } for pid=3407 comm="syz.1.1289" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.289549][ T3451] EXT4-fs (loop3): Ignoring removed nobh option [ 73.341632][ T3451] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 73.411894][ T3451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1310'. [ 73.509630][ T3486] xt_bpf: check failed: parse error [ 73.676469][ T3505] kvm [3504]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x0 [ 73.721203][ T3514] input: syz1 as /devices/virtual/input/input15 [ 73.731414][ T294] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 73.731414][ T2042] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 73.798407][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.806239][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.813558][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.820838][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.828145][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.835717][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.843189][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.850454][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.858243][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.865766][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.873354][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.880631][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.888093][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.895591][ T39] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 73.903633][ T39] hid-generic 0000:0004:261D.000C: hidraw0: HID v0.03 Device [syz1] on syz0 [ 74.067945][ T3541] loop3: detected capacity change from 0 to 16 [ 74.078912][ T3541] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.101513][ T2042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.111464][ T294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.111553][ T2042] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.130879][ T2042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.140251][ T2042] usb 5-1: config 0 descriptor?? [ 74.148381][ T294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.181992][ T2042] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 74.194099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.241842][ T294] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.251122][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.259817][ T294] usb 3-1: SerialNumber: syz [ 74.325029][ T3568] tun0: tun_chr_ioctl cmd 1074812117 [ 74.387826][ T3577] tun0: tun_chr_ioctl cmd 1074812118 [ 74.391900][ T2042] usb 5-1: USB disconnect, device number 8 [ 74.454818][ T3585] loop3: detected capacity change from 0 to 1024 [ 74.506913][ T3595] loop0: detected capacity change from 0 to 1024 [ 74.515189][ T3585] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.526142][ T3585] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.526185][ T3595] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.544105][ T3585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 74.551258][ T294] usb 3-1: 0:2 : does not exist [ 74.566806][ T294] usb 3-1: unit 255 not found! [ 74.588152][ T294] usb 3-1: USB disconnect, device number 9 [ 74.803490][ T3634] loop0: detected capacity change from 0 to 512 [ 74.855443][ T3634] EXT4-fs (loop0): Ignoring removed nobh option [ 74.862579][ T3634] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 74.862579][ T3634] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 74.862579][ T3634] [ 74.893665][ T3634] EXT4-fs (loop0): 1 orphan inode deleted [ 74.899512][ T3634] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,nodiscard,noquota,grpid,abort,abort,sysvgroups,noacl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 74.919550][ T3634] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.087214][ T3658] loop3: detected capacity change from 0 to 256 [ 75.103031][ T3658] FAT-fs (loop3): Directory bread(block 64) failed [ 75.128386][ T3658] FAT-fs (loop3): Directory bread(block 65) failed [ 75.135185][ T3658] FAT-fs (loop3): Directory bread(block 66) failed [ 75.149221][ T3665] loop0: detected capacity change from 0 to 512 [ 75.149559][ T3658] FAT-fs (loop3): Directory bread(block 67) failed [ 75.167060][ T3658] FAT-fs (loop3): Directory bread(block 68) failed [ 75.175205][ T3658] FAT-fs (loop3): Directory bread(block 69) failed [ 75.182111][ T3658] FAT-fs (loop3): Directory bread(block 70) failed [ 75.188666][ T3658] FAT-fs (loop3): Directory bread(block 71) failed [ 75.196151][ T3658] FAT-fs (loop3): Directory bread(block 72) failed [ 75.203052][ T3658] FAT-fs (loop3): Directory bread(block 73) failed [ 75.221396][ T3665] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1402: inode #1: comm syz.0.1402: iget: illegal inode # [ 75.228149][ T3658] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 75.253409][ T3665] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1402: error while reading EA inode 1 err=-117 [ 75.265790][ T3665] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1402: inode #1: comm syz.0.1402: iget: illegal inode # [ 75.279055][ T3665] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1402: error while reading EA inode 1 err=-117 [ 75.292084][ T3665] EXT4-fs (loop0): 1 orphan inode deleted [ 75.297740][ T3665] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 75.338454][ T3679] incfs: Error accessing: ./file0. [ 75.352546][ T3679] incfs: mount failed -2 [ 75.368427][ T3681] loop3: detected capacity change from 0 to 512 [ 75.396425][ T3681] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 75.409477][ T3681] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.426385][ T3689] loop2: detected capacity change from 0 to 2048 [ 75.426912][ T3681] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 75.502884][ T3689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.518541][ T3689] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.678013][ T3720] loop4: detected capacity change from 0 to 256 [ 75.701750][ T3720] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 75.821615][ T3730] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 75.832739][ T3730] EXT4-fs (loop9): unable to read superblock [ 75.865612][ T3734] tmpfs: Unknown parameter '(' [ 76.049946][ T3761] loop3: detected capacity change from 0 to 256 [ 76.096880][ T3761] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.136108][ T3767] device bridge_slave_0 left promiscuous mode [ 76.142340][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.150570][ T3767] device bridge_slave_1 left promiscuous mode [ 76.157064][ T3767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.303898][ T3789] SELinux: policydb version 0 does not match my version range 15-33 [ 76.316480][ T3789] SELinux: failed to load policy [ 76.372237][ T3799] nicvf0: tun_chr_ioctl cmd 35108 [ 76.396002][ T3803] loop3: detected capacity change from 0 to 128 [ 76.453131][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 76.530320][ T3818] tap0: tun_chr_ioctl cmd 1074025677 [ 76.557666][ T3818] tap0: linktype set to 774 [ 76.637733][ T3832] binder: 3831:3832 ioctl 541b 0 returned -22 [ 76.691464][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.737937][ T3841] loop3: detected capacity change from 0 to 128 [ 76.759337][ T3841] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 76.783929][ T3841] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 76.788652][ T3828] loop4: detected capacity change from 0 to 40427 [ 76.864165][ T3828] F2FS-fs (loop4): fault_injection options not supported [ 76.876822][ T3828] F2FS-fs (loop4): invalid crc value [ 76.897050][ T3828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.931225][ T3860] loop2: detected capacity change from 0 to 1024 [ 76.941565][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 76.960911][ T3828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.976924][ T3860] EXT4-fs (loop2): Ignoring removed oldalloc option [ 76.983533][ T3860] EXT4-fs (loop2): Ignoring removed bh option [ 76.989490][ T3860] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.015304][ T1772] attempt to access beyond end of device [ 77.015304][ T1772] loop4: rw=2049, want=45104, limit=40427 [ 77.022994][ T3860] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 77.113490][ T3870] loop3: detected capacity change from 0 to 512 [ 77.163530][ T3870] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 77.170657][ T3870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.200204][ T3870] EXT4-fs (loop3): 1 truncate cleaned up [ 77.206502][ T3870] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 77.208384][ T3880] loop4: detected capacity change from 0 to 256 [ 77.232548][ T39] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 77.251427][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.259673][ T39] usb 2-1: Product: syz [ 77.263914][ T39] usb 2-1: Manufacturer: syz [ 77.268468][ T39] usb 2-1: SerialNumber: syz [ 77.274515][ T39] usb 2-1: config 0 descriptor?? [ 77.319939][ T3886] loop3: detected capacity change from 0 to 512 [ 77.344359][ T3880] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 77.357414][ T3886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.382204][ T3880] exFAT-fs (loop4): hint_cluster is invalid (17) [ 77.393900][ T3886] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1496: iget: bad extra_isize 15 (inode size 256) [ 77.415008][ T3886] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1496: couldn't read orphan inode 15 (err -117) [ 77.442270][ T3886] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 77.497758][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 77.497774][ T30] audit: type=1400 audit(2000000003.070:1274): avc: denied { ioctl } for pid=3885 comm="syz.3.1496" path="/328/bus/cpu.stat" dev="loop3" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.564880][ T30] audit: type=1400 audit(2000000003.110:1275): avc: denied { mounton } for pid=3898 comm="syz.4.1504" path="/171/file0" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.627620][ T30] audit: type=1400 audit(2000000003.110:1276): avc: denied { mount } for pid=3898 comm="syz.4.1504" name="/" dev="ramfs" ino=29816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.677711][ T30] audit: type=1326 audit(2000000003.110:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 77.721523][ T30] audit: type=1326 audit(2000000003.110:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 77.765405][ T30] audit: type=1326 audit(2000000003.110:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 77.825427][ T39] usb 2-1: USB disconnect, device number 5 [ 77.841758][ T30] audit: type=1326 audit(2000000003.110:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 77.890800][ T30] audit: type=1326 audit(2000000003.110:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 77.915237][ T30] audit: type=1326 audit(2000000003.110:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 77.938919][ T30] audit: type=1326 audit(2000000003.130:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 78.133353][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.255074][ T3951] loop3: detected capacity change from 0 to 256 [ 78.275437][ T3958] syz_tun: refused to change device tx_queue_len [ 78.293540][ T3958] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 78.320718][ T3960] loop4: detected capacity change from 0 to 1024 [ 78.351827][ T3965] SELinux: policydb version 280 does not match my version range 15-33 [ 78.359987][ T3965] SELinux: failed to load policy [ 78.401401][ T2042] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 78.424204][ T3960] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 78.454992][ T3960] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.516237][ T3989] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.566965][ T3989] syz.1.1546 (3989) used greatest stack depth: 19008 bytes left [ 78.576941][ T3993] loop4: detected capacity change from 0 to 2048 [ 78.657504][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 78.666706][ T3993] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 78.675213][ T3993] System zones: 0-4 [ 78.679401][ T3993] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.698238][ T3993] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.765852][ T3993] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 21815706907 [ 78.787929][ T3993] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 78.821432][ T2042] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 78.839579][ T2042] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 78.850112][ T2042] usb 3-1: config 0 has no interface number 0 [ 79.012006][ T4028] SELinux: policydb version 0 does not match my version range 15-33 [ 79.024572][ T4028] SELinux: failed to load policy [ 79.041534][ T2042] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 79.057995][ T2042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.080902][ T2042] usb 3-1: Product: syz [ 79.084947][ T2042] usb 3-1: Manufacturer: syz [ 79.089336][ T2042] usb 3-1: SerialNumber: syz [ 79.105657][ T2042] usb 3-1: config 0 descriptor?? [ 79.136492][ T4030] loop1: detected capacity change from 0 to 8192 [ 79.152494][ T4036] loop4: detected capacity change from 0 to 2048 [ 79.203064][ T4030] loop1: p1 < > p2 < p5 > p4 [ 79.211630][ T4030] loop1: p4 size 16776960 extends beyond EOD, truncated [ 79.221867][ T4030] loop1: p5 size 16776960 extends beyond EOD, truncated [ 79.242758][ T4036] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.313222][ T101] loop1: p1 < > p2 < p5 > p4 [ 79.321145][ T101] loop1: p4 size 16776960 extends beyond EOD, truncated [ 79.336291][ T101] loop1: p5 size 16776960 extends beyond EOD, truncated [ 79.427384][ T341] udevd[341]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 79.438025][ T469] udevd[469]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 79.448870][ T468] udevd[468]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 79.459747][ T951] udevd[951]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 79.487967][ T468] udevd[468]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 79.498637][ T469] udevd[469]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 79.510565][ T951] udevd[951]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 79.521514][ T341] udevd[341]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 79.562011][ T4061] device veth0_virt_wifi entered promiscuous mode [ 79.583005][ T4064] xt_hashlimit: max too large, truncated to 1048576 [ 79.592058][ T4061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1573'. [ 79.601165][ T2042] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 79.608131][ T2042] usb 3-1: No valid video chain found. [ 79.620028][ T2042] usb 3-1: USB disconnect, device number 10 [ 79.696717][ T4072] syz.1.1579[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.696795][ T4072] syz.1.1579[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.739290][ T4083] loop1: detected capacity change from 0 to 512 [ 79.745424][ T4079] loop4: detected capacity change from 0 to 2048 [ 79.861099][ T4070] loop3: detected capacity change from 0 to 40427 [ 81.102889][ T4070] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.110474][ T4070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.118974][ T4083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.149994][ T4070] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.159604][ T4079] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.191975][ T4083] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1585: iget: bad extra_isize 15 (inode size 256) [ 81.213724][ T4079] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.236556][ T4083] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1585: couldn't read orphan inode 15 (err -117) [ 81.269234][ T4083] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 81.316140][ T4070] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.325608][ T4070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.994074][ T4149] loop2: detected capacity change from 0 to 256 [ 82.058340][ T4151] loop3: detected capacity change from 0 to 512 [ 82.085771][ T4149] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 82.097870][ T4151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.104020][ T4149] exFAT-fs (loop2): hint_cluster is invalid (17) [ 82.123897][ T4151] EXT4-fs (loop3): 1 truncate cleaned up [ 82.129561][ T4151] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback. [ 86.057392][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 86.057408][ T30] audit: type=1400 audit(2000000011.630:1452): avc: denied { write } for pid=4180 comm="syz.1.1622" path="socket:[31255]" dev="sockfs" ino=31255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.174027][ T4191] loop1: detected capacity change from 0 to 256 [ 86.235410][ T4191] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 86.281632][ T4191] exFAT-fs (loop1): hint_cluster is invalid (17) [ 86.377393][ T30] audit: type=1326 audit(2000000011.950:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.421434][ T3383] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 86.449674][ T30] audit: type=1326 audit(2000000011.950:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.480206][ T30] audit: type=1326 audit(2000000011.980:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.519343][ T30] audit: type=1326 audit(2000000012.010:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.545912][ T4212] loop4: detected capacity change from 0 to 512 [ 86.552197][ T30] audit: type=1326 audit(2000000012.010:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.559568][ T4215] overlayfs: unrecognized mount option "reiser\s\" or missing value [ 86.579702][ T30] audit: type=1326 audit(2000000012.010:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.612600][ T4212] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.622899][ T30] audit: type=1326 audit(2000000012.010:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.651377][ T4212] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 86.698540][ T30] audit: type=1326 audit(2000000012.020:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.721758][ T30] audit: type=1326 audit(2000000012.020:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.4.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 86.725314][ T4212] EXT4-fs (loop4): 1 truncate cleaned up [ 86.761070][ T4212] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,max_dir_size_kb=0x0000000000000001,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 86.781449][ T3383] usb 3-1: Using ep0 maxpacket: 16 [ 86.901583][ T3383] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.919761][ T3383] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.949849][ T3383] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.985401][ T3383] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.000738][ T3383] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 87.026455][ T3383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.046303][ T3383] usb 3-1: config 0 descriptor?? [ 87.137295][ T4274] loop1: detected capacity change from 0 to 256 [ 87.165740][ T4274] FAT-fs (loop1): Directory bread(block 64) failed [ 87.180351][ T4274] FAT-fs (loop1): Directory bread(block 65) failed [ 87.187173][ T4278] syz.4.1666[4278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.187254][ T4278] syz.4.1666[4278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.199142][ T4274] FAT-fs (loop1): Directory bread(block 66) failed [ 87.217354][ T4274] FAT-fs (loop1): Directory bread(block 67) failed [ 87.224252][ T4274] FAT-fs (loop1): Directory bread(block 68) failed [ 87.230720][ T4274] FAT-fs (loop1): Directory bread(block 69) failed [ 87.237387][ T4274] FAT-fs (loop1): Directory bread(block 70) failed [ 87.249817][ T4274] FAT-fs (loop1): Directory bread(block 71) failed [ 87.259896][ T4274] FAT-fs (loop1): Directory bread(block 72) failed [ 87.266924][ T4274] FAT-fs (loop1): Directory bread(block 73) failed [ 87.302027][ T4274] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 87.313116][ T4283] loop4: detected capacity change from 0 to 128 [ 87.377972][ T4283] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.387824][ T4283] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 87.401526][ T4283] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.524815][ T3383] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 87.541403][ T3383] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 87.556378][ T3383] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 87.564061][ T3383] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 87.573384][ T3383] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 87.580662][ T3383] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 87.587867][ T3383] hid-generic 0003:045E:05DA.000D: unbalanced collection at end of report description [ 87.597578][ T3383] hid-generic: probe of 0003:045E:05DA.000D failed with error -22 [ 87.751831][ T3383] usb 3-1: USB disconnect, device number 11 [ 87.822598][ T4319] loop4: detected capacity change from 0 to 256 [ 87.893006][ T4314] loop1: detected capacity change from 0 to 40427 [ 87.914591][ T4319] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 87.922073][ T4314] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 87.933188][ T4314] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.973917][ T4314] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.013273][ T4329] syz.4.1686[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.013349][ T4329] syz.4.1686[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.028700][ T4314] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.049012][ T4314] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.114143][ T4335] usb usb8: usbfs: process 4335 (syz.3.1690) did not claim interface 0 before use [ 88.141148][ T4314] attempt to access beyond end of device [ 88.141148][ T4314] loop1: rw=2049, want=53256, limit=40427 [ 88.175793][ T290] attempt to access beyond end of device [ 88.175793][ T290] loop1: rw=2049, want=45104, limit=40427 [ 88.193307][ T4342] incfs: Error accessing: ./file0. [ 88.198355][ T4342] incfs: mount failed -2 [ 88.561428][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 88.649879][ T4374] loop4: detected capacity change from 0 to 40427 [ 88.663827][ T4381] incfs: Error accessing: ./file0. [ 88.668962][ T4381] incfs: mount failed -2 [ 88.675078][ T4374] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 88.687930][ T4374] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.702449][ T4385] loop2: detected capacity change from 0 to 256 [ 88.723479][ T4374] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.733499][ T4385] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 88.796312][ T4374] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.803352][ T4374] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.811578][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 88.931489][ T6] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.943989][ T4374] attempt to access beyond end of device [ 88.943989][ T4374] loop4: rw=2049, want=53256, limit=40427 [ 88.959887][ T6] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.970718][ T1772] attempt to access beyond end of device [ 88.970718][ T1772] loop4: rw=2049, want=45104, limit=40427 [ 88.990981][ T6] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.004217][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.010712][ T6] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 89.021640][ T4399] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 89.040564][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.042886][ T4399] EXT4-fs (loop3): unable to read superblock [ 89.054952][ T6] usb 4-1: config 0 descriptor?? [ 89.063342][ T4401] loop2: detected capacity change from 0 to 512 [ 89.108978][ T4401] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 89.124471][ T4401] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.152088][ T4411] loop4: detected capacity change from 0 to 2048 [ 89.160651][ T4401] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 89.171302][ T4411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.182200][ T4411] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.278276][ T4419] SELinux: policydb version 0 does not match my version range 15-33 [ 89.287240][ T4419] SELinux: failed to load policy [ 89.371444][ T2042] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.513911][ T6] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 89.521207][ T6] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 89.528387][ T6] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 89.535642][ T6] hid-generic 0003:045E:05DA.000E: ignoring exceeding usage max [ 89.544583][ T6] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 89.551875][ T6] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 89.559064][ T6] hid-generic 0003:045E:05DA.000E: unbalanced collection at end of report description [ 89.568639][ T6] hid-generic: probe of 0003:045E:05DA.000E failed with error -22 [ 89.571406][ T39] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 89.721470][ T6] usb 4-1: USB disconnect, device number 7 [ 89.751486][ T2042] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.761588][ T2042] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.861538][ T2042] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.870553][ T2042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.878405][ T2042] usb 2-1: SerialNumber: syz [ 89.941448][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.959351][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.977661][ T39] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 89.988286][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.999923][ T39] usb 3-1: config 0 descriptor?? [ 90.172162][ T2042] usb 2-1: 0:2 : does not exist [ 90.176888][ T2042] usb 2-1: unit 255 not found! [ 90.183149][ T2042] usb 2-1: USB disconnect, device number 6 [ 90.391878][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.645274][ T4456] nicvf0: tun_chr_ioctl cmd 35108 [ 90.704153][ T39] hid-led 0003:1D34:000A.000F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 90.732898][ T39] hid-led 0003:1D34:000A.000F: Dream Cheeky Webmail Notifier initialized [ 90.910201][ T294] usb 3-1: USB disconnect, device number 12 [ 90.991402][ T6] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.235262][ T4490] loop1: detected capacity change from 0 to 1024 [ 91.283342][ T4490] EXT4-fs (loop1): Ignoring removed orlov option [ 91.289614][ T4490] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 91.302717][ T4490] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 91.411523][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.421317][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.439935][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 91.449476][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.460805][ T6] usb 5-1: config 0 descriptor?? [ 91.647576][ T4498] loop2: detected capacity change from 0 to 40427 [ 91.741729][ T4498] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 91.748602][ T4498] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.757753][ T4498] F2FS-fs (loop2): invalid crc value [ 91.764349][ T4498] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.796780][ T4498] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 91.803890][ T4498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.832887][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 91.832901][ T30] audit: type=1400 audit(2000000017.410:1514): avc: denied { create } for pid=4497 comm="syz.2.1757" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 91.859900][ T30] audit: type=1400 audit(2000000017.410:1515): avc: denied { rename } for pid=4497 comm="syz.2.1757" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 91.880987][ T4506] syz.1.1768[4506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.881743][ T4506] syz.1.1768[4506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.882465][ T30] audit: type=1400 audit(2000000017.410:1516): avc: denied { rmdir } for pid=4497 comm="syz.2.1757" name="control" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 91.893389][ T291] attempt to access beyond end of device [ 91.893389][ T291] loop2: rw=2049, want=45104, limit=40427 [ 91.942795][ T6] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 91.949331][ T6] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 91.966700][ T6] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 91.978771][ T6] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 91.985495][ T6] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 91.993110][ T6] kye 0003:0458:5011.0010: hidraw0: USB HID ve.4e Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 92.004130][ T6] kye 0003:0458:5011.0010: tablet-enabling feature report not found [ 92.013008][ T6] kye 0003:0458:5011.0010: tablet enabling failed [ 92.147361][ T2042] usb 5-1: USB disconnect, device number 9 [ 92.171448][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.188166][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.195216][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.238039][ T30] audit: type=1400 audit(2000000017.810:1517): avc: denied { setopt } for pid=4527 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.592900][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.608850][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.622375][ T30] audit: type=1326 audit(2000000018.200:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 92.649376][ T30] audit: type=1326 audit(2000000018.200:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 92.673073][ T30] audit: type=1326 audit(2000000018.200:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 92.722942][ T30] audit: type=1400 audit(2000000018.280:1521): avc: denied { connect } for pid=4541 comm="syz.1.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.751633][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.765399][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.773507][ T6] usb 4-1: SerialNumber: syz [ 92.830673][ T4553] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 92.836255][ T4553] pim6reg0: linktype set to 804 [ 92.934883][ T4562] loop1: detected capacity change from 0 to 512 [ 92.975275][ T4568] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 92.983126][ T4568] netlink: 'syz.0.1786': attribute type 2 has an invalid length. [ 92.993399][ T30] audit: type=1326 audit(2000000018.570:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 93.017033][ T30] audit: type=1326 audit(2000000018.570:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3c334d29 code=0x7ffc0000 [ 93.046704][ T4562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.085991][ T4562] EXT4-fs (loop1): 1 truncate cleaned up [ 93.092470][ T6] usb 4-1: 0:2 : does not exist [ 93.097302][ T6] usb 4-1: unit 255 not found! [ 93.107967][ T4562] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 93.109571][ T6] usb 4-1: USB disconnect, device number 8 [ 93.304320][ T4607] xt_hashlimit: max too large, truncated to 1048576 [ 93.352774][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.417160][ T4620] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 93.422908][ T4620] pim6reg0: linktype set to 804 [ 93.449596][ T4625] serio: Serial port ptm0 [ 93.616823][ T4652] loop3: detected capacity change from 0 to 512 [ 93.640144][ T4652] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1824: iget: bad extended attribute block 196608 [ 93.654042][ T4652] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1824: couldn't read orphan inode 15 (err -117) [ 93.666146][ T4652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.121418][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 94.311491][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.323945][ T4700] tap0: tun_chr_ioctl cmd 1074025677 [ 94.329096][ T4700] tap0: linktype set to 5 [ 94.377104][ T4703] loop2: detected capacity change from 0 to 256 [ 94.406019][ T4703] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 94.481441][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.528877][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.611708][ T39] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.620633][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.628441][ T39] usb 5-1: SerialNumber: syz [ 94.671525][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.682288][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.688831][ T26] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 94.697814][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.707355][ T26] usb 4-1: config 0 descriptor?? [ 94.733485][ T4729] loop2: detected capacity change from 0 to 40427 [ 94.802056][ T4729] F2FS-fs (loop2): fault_injection options not supported [ 94.810068][ T4729] F2FS-fs (loop2): invalid crc value [ 94.816524][ T4729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.849197][ T4729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.884750][ T291] attempt to access beyond end of device [ 94.884750][ T291] loop2: rw=2049, want=45104, limit=40427 [ 94.922071][ T39] usb 5-1: 0:2 : does not exist [ 94.926906][ T39] usb 5-1: unit 255 not found! [ 94.934642][ T39] usb 5-1: USB disconnect, device number 10 [ 95.007527][ T4738] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 95.013351][ T4738] ip6erspan0: linktype set to 805 [ 95.044171][ T4740] loop2: detected capacity change from 0 to 256 [ 95.114752][ T4740] incfs: ino conflict with backing FS 1 [ 95.121212][ T4740] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 95.129633][ T4740] FAT-fs (loop2): Filesystem has been set read-only [ 95.192367][ T26] petalynx 0003:18B1:0037.0011: unexpected long global item [ 95.199666][ T26] petalynx 0003:18B1:0037.0011: parse failed [ 95.206072][ T26] petalynx: probe of 0003:18B1:0037.0011 failed with error -22 [ 95.258595][ T4753] loop2: detected capacity change from 0 to 2048 [ 95.293227][ T4753] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,dioread_lock,barrier=0x0000000000000000,,errors=continue. Quota mode: none. [ 95.308281][ T4753] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.392957][ T3383] usb 4-1: USB disconnect, device number 9 [ 95.418580][ T4768] loop1: detected capacity change from 0 to 256 [ 95.483062][ T4768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000006) [ 95.506665][ T4768] FAT-fs (loop1): Filesystem has been set read-only [ 95.651413][ T26] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 95.791823][ T941] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 95.866236][ T4792] loop1: detected capacity change from 0 to 40427 [ 95.910878][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.955103][ T4792] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.971626][ T4792] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.982487][ T4792] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.012032][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.031225][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.048698][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 96.058153][ T4792] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 96.065118][ T4792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.072744][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.094700][ T26] usb 3-1: config 0 descriptor?? [ 96.110246][ T290] attempt to access beyond end of device [ 96.110246][ T290] loop1: rw=2049, want=40968, limit=40427 [ 96.161463][ T941] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 96.170083][ T941] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 96.195391][ T941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.344445][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 96.353385][ T4806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1886'. [ 96.362463][ T941] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.377795][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.385654][ T4796] loop3: detected capacity change from 0 to 131072 [ 96.392357][ T941] usb 5-1: Product: syz [ 96.396358][ T941] usb 5-1: Manufacturer: syz [ 96.404617][ T941] usb 5-1: SerialNumber: syz [ 96.404663][ T4796] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 96.432262][ T4796] F2FS-fs (loop3): invalid crc value [ 96.438929][ T4796] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 96.469675][ T4796] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 96.572723][ T26] kye 0003:0458:5011.0012: unknown main item tag 0x0 [ 96.574238][ T4810] loop1: detected capacity change from 0 to 40427 [ 96.579266][ T26] kye 0003:0458:5011.0012: unknown main item tag 0x0 [ 96.579291][ T26] kye 0003:0458:5011.0012: unknown main item tag 0x0 [ 96.598651][ T26] kye 0003:0458:5011.0012: unknown main item tag 0x0 [ 96.605203][ T26] kye 0003:0458:5011.0012: unknown main item tag 0x0 [ 96.621567][ T26] kye 0003:0458:5011.0012: hidraw0: USB HID ve.4e Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 96.632328][ T26] kye 0003:0458:5011.0012: tablet-enabling feature report not found [ 96.642726][ T26] kye 0003:0458:5011.0012: tablet enabling failed [ 96.657376][ T4810] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.708771][ T4810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.749826][ T290] attempt to access beyond end of device [ 96.749826][ T290] loop1: rw=2049, want=45104, limit=40427 [ 96.785566][ T26] usb 3-1: USB disconnect, device number 13 [ 96.793742][ T4822] netem: change failed [ 96.898050][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 96.898066][ T30] audit: type=1326 audit(2000000022.470:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 96.939669][ T4833] netem: incorrect gi model size [ 96.944877][ T4833] netem: change failed [ 96.959989][ T30] audit: type=1326 audit(2000000022.470:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 96.970603][ T4835] loop1: detected capacity change from 0 to 1024 [ 97.011381][ T30] audit: type=1326 audit(2000000022.470:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 97.034695][ T30] audit: type=1326 audit(2000000022.510:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68007dcd29 code=0x7ffc0000 [ 97.073154][ T4829] loop3: detected capacity change from 0 to 40427 [ 97.074327][ T4835] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.111562][ T941] usb 5-1: 0:2 : does not exist [ 97.122748][ T4829] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.161099][ T4829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.185130][ T30] audit: type=1400 audit(2000000022.760:1586): avc: denied { unlink } for pid=4828 comm="syz.3.1894" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.207952][ T289] attempt to access beyond end of device [ 97.207952][ T289] loop3: rw=2049, want=40976, limit=40427 [ 97.213136][ T4846] syz.1.1899[4846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.219034][ T4846] syz.1.1899[4846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.238030][ T4846] binfmt_misc: register: failed to install interpreter file ./file0 [ 97.315193][ T3383] usb 5-1: USB disconnect, device number 11 [ 97.340810][ T30] audit: type=1400 audit(2000000022.910:1587): avc: denied { mount } for pid=4854 comm="syz.3.1898" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 97.371409][ T30] audit: type=1400 audit(2000000022.940:1588): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 97.397805][ T4861] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.458976][ T30] audit: type=1326 audit(2000000023.030:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 97.570043][ C1] ================================================================== [ 97.574627][ T30] audit: type=1326 audit(2000000023.030:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 97.577928][ C1] BUG: KASAN: use-after-free in cpu_map_generic_redirect+0x1a8/0x6d0 [ 97.601344][ T30] audit: type=1326 audit(2000000023.030:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c526ad29 code=0x7ffc0000 [ 97.609172][ C1] Read of size 8 at addr ffff888117cdfa18 by task kworker/1:1/39 [ 97.639980][ C1] [ 97.642149][ C1] CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted 5.15.176-syzkaller-00972-g829d9f138569 #0 [ 97.651782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 97.661677][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 97.667576][ C1] Call Trace: [ 97.670703][ C1] [ 97.673407][ C1] dump_stack_lvl+0x151/0x1c0 [ 97.677905][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 97.683370][ C1] ? panic+0x760/0x760 [ 97.687280][ C1] print_address_description+0x87/0x3b0 [ 97.692659][ C1] kasan_report+0x179/0x1c0 [ 97.696999][ C1] ? kfree+0xcc/0x270 [ 97.700817][ C1] ? cpu_map_generic_redirect+0x1a8/0x6d0 [ 97.706371][ C1] ? cpu_map_generic_redirect+0x1a8/0x6d0 [ 97.711927][ C1] __asan_report_load8_noabort+0x14/0x20 [ 97.717397][ C1] cpu_map_generic_redirect+0x1a8/0x6d0 [ 97.722777][ C1] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 97.728419][ C1] ? cpu_map_enqueue+0x370/0x370 [ 97.733196][ C1] xdp_do_generic_redirect+0x3df/0xb40 [ 97.738488][ C1] do_xdp_generic+0x50b/0x7c0 [ 97.742997][ C1] ? generic_xdp_tx+0x490/0x490 [ 97.747695][ C1] ? migrate_disable+0xd9/0x190 [ 97.752372][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 97.757926][ C1] ? ip_protocol_deliver_rcu+0x710/0x710 [ 97.763399][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 97.767819][ C1] ? ip_rcv+0x16e/0x310 [ 97.771829][ C1] ? put_prev_entity+0x460/0x460 [ 97.776585][ C1] ? ip_local_deliver_finish+0x240/0x240 [ 97.782056][ C1] ? ip_rcv_core+0xb50/0xb50 [ 97.786481][ C1] __netif_receive_skb+0x11c/0x530 [ 97.791429][ C1] ? _nohz_idle_balance+0x500/0x500 [ 97.796465][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 97.801846][ C1] ? __kasan_check_write+0x14/0x20 [ 97.806791][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 97.811390][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 97.816600][ C1] process_backlog+0x31c/0x650 [ 97.821204][ C1] __napi_poll+0xc4/0x5a0 [ 97.825369][ C1] net_rx_action+0x47d/0xc50 [ 97.829790][ C1] ? clockevents_program_event+0x22f/0x300 [ 97.835433][ C1] ? net_tx_action+0x550/0x550 [ 97.840030][ C1] ? __sched_clock_gtod_offset+0xb0/0x100 [ 97.845592][ C1] handle_softirqs+0x25e/0x5c0 [ 97.850192][ C1] __do_softirq+0xb/0xd [ 97.854183][ C1] do_softirq+0xf6/0x150 [ 97.858259][ C1] [ 97.861034][ C1] [ 97.863813][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 97.868860][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 97.874491][ C1] __local_bh_enable_ip+0x75/0x80 [ 97.879349][ C1] _raw_read_unlock_bh+0x29/0x30 [ 97.884127][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 97.889684][ C1] wg_packet_tx_worker+0x1e6/0x530 [ 97.894627][ C1] process_one_work+0x6bb/0xc10 [ 97.899436][ C1] worker_thread+0xad5/0x12a0 [ 97.903946][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 97.908639][ C1] kthread+0x421/0x510 [ 97.912534][ C1] ? worker_clr_flags+0x180/0x180 [ 97.917482][ C1] ? kthread_blkcg+0xd0/0xd0 [ 97.921910][ C1] ret_from_fork+0x1f/0x30 [ 97.926165][ C1] [ 97.929027][ C1] [ 97.931197][ C1] Allocated by task 4843: [ 97.935364][ C1] ____kasan_kmalloc+0xdb/0x110 [ 97.940048][ C1] __kasan_kmalloc+0x9/0x10 [ 97.944388][ C1] __kmalloc+0x13f/0x2c0 [ 97.948467][ C1] bpf_map_kmalloc_node+0xdb/0x160 [ 97.953415][ C1] cpu_map_update_elem+0x26c/0xea0 [ 97.958375][ C1] bpf_map_update_value+0x1a3/0x3c0 [ 97.963397][ C1] map_update_elem+0x644/0x770 [ 97.967997][ C1] __sys_bpf+0x405/0x760 [ 97.972074][ C1] __x64_sys_bpf+0x7c/0x90 [ 97.976328][ C1] x64_sys_call+0x87f/0x9a0 [ 97.980675][ C1] do_syscall_64+0x3b/0xb0 [ 97.984925][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.990650][ C1] [ 97.992824][ C1] Freed by task 4844: [ 97.996639][ C1] kasan_set_track+0x4b/0x70 [ 98.001064][ C1] kasan_set_free_info+0x23/0x40 [ 98.005927][ C1] ____kasan_slab_free+0x126/0x160 [ 98.010874][ C1] __kasan_slab_free+0x11/0x20 [ 98.015475][ C1] slab_free_freelist_hook+0xbd/0x190 [ 98.020689][ C1] kfree+0xcc/0x270 [ 98.024327][ C1] put_cpu_map_entry+0x6dd/0x750 [ 98.029100][ C1] cpu_map_kthread_run+0x22d0/0x2390 [ 98.034225][ C1] kthread+0x421/0x510 [ 98.038127][ C1] ret_from_fork+0x1f/0x30 [ 98.042378][ C1] [ 98.044556][ C1] Last potentially related work creation: [ 98.050109][ C1] kasan_save_stack+0x3b/0x60 [ 98.054619][ C1] __kasan_record_aux_stack+0xd3/0xf0 [ 98.059843][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 98.065470][ C1] insert_work+0x56/0x320 [ 98.069632][ C1] __queue_work+0x92a/0xcd0 [ 98.073971][ C1] queue_work_on+0x105/0x170 [ 98.078399][ C1] cpu_map_free+0x1e7/0x2c0 [ 98.082737][ C1] bpf_map_free_deferred+0x10d/0x1e0 [ 98.087862][ C1] process_one_work+0x6bb/0xc10 [ 98.092638][ C1] worker_thread+0xad5/0x12a0 [ 98.097151][ C1] kthread+0x421/0x510 [ 98.101057][ C1] ret_from_fork+0x1f/0x30 [ 98.105312][ C1] [ 98.107482][ C1] Second to last potentially related work creation: [ 98.113915][ C1] kasan_save_stack+0x3b/0x60 [ 98.118417][ C1] __kasan_record_aux_stack+0xd3/0xf0 [ 98.123625][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 98.129264][ C1] call_rcu+0x123/0x10b0 [ 98.133345][ C1] cpu_map_free+0x109/0x2c0 [ 98.137693][ C1] bpf_map_free_deferred+0x10d/0x1e0 [ 98.142807][ C1] process_one_work+0x6bb/0xc10 [ 98.147496][ C1] worker_thread+0xad5/0x12a0 [ 98.152005][ C1] kthread+0x421/0x510 [ 98.155909][ C1] ret_from_fork+0x1f/0x30 [ 98.160166][ C1] [ 98.162337][ C1] The buggy address belongs to the object at ffff888117cdfa00 [ 98.162337][ C1] which belongs to the cache kmalloc-192 of size 192 [ 98.176223][ C1] The buggy address is located 24 bytes inside of [ 98.176223][ C1] 192-byte region [ffff888117cdfa00, ffff888117cdfac0) [ 98.189329][ C1] The buggy address belongs to the page: [ 98.194800][ C1] page:ffffea00045f37c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117cdf [ 98.204955][ C1] flags: 0x4000000000000200(slab|zone=1) [ 98.210429][ C1] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 98.218857][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 98.227260][ C1] page dumped because: kasan: bad access detected [ 98.233520][ C1] page_owner tracks the page as allocated [ 98.239070][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 107, ts 6033084765, free_ts 0 [ 98.253904][ C1] post_alloc_hook+0x1a3/0x1b0 [ 98.258500][ C1] prep_new_page+0x1b/0x110 [ 98.262842][ C1] get_page_from_freelist+0x3550/0x35d0 [ 98.268225][ C1] __alloc_pages+0x27e/0x8f0 [ 98.272648][ C1] new_slab+0x9a/0x4e0 [ 98.276563][ C1] ___slab_alloc+0x39e/0x830 [ 98.280983][ C1] __slab_alloc+0x4a/0x90 [ 98.285148][ C1] kmem_cache_alloc_trace+0x147/0x270 [ 98.290354][ C1] kernfs_fop_open+0x324/0xab0 [ 98.294956][ C1] do_dentry_open+0x81c/0xfd0 [ 98.299477][ C1] vfs_open+0x73/0x80 [ 98.303286][ C1] path_openat+0x26f0/0x2f40 [ 98.307713][ C1] do_filp_open+0x21c/0x460 [ 98.312072][ C1] do_sys_openat2+0x13f/0x820 [ 98.316569][ C1] __x64_sys_openat+0x243/0x290 [ 98.321253][ C1] x64_sys_call+0x6bf/0x9a0 [ 98.325597][ C1] page_owner free stack trace missing [ 98.330804][ C1] [ 98.332972][ C1] Memory state around the buggy address: [ 98.338445][ C1] ffff888117cdf900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.346343][ C1] ffff888117cdf980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 98.354370][ C1] >ffff888117cdfa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.362271][ C1] ^ [ 98.366952][ C1] ffff888117cdfa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 98.374852][ C1] ffff888117cdfb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.382740][ C1] ================================================================== [ 98.390637][ C1] Disabling lock debugging due to kernel taint [ 98.396687][ C1] ================================================================================ [ 98.405772][ C1] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 98.413851][ C1] index 16382 is out of range for type 'unsigned long[8]' [ 98.420771][ C1] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G B 5.15.176-syzkaller-00972-g829d9f138569 #0 [ 98.431783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.441673][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 98.447574][ C1] Call Trace: [ 98.450702][ C1] [ 98.453398][ C1] dump_stack_lvl+0x151/0x1c0 [ 98.457905][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 98.463368][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 98.468405][ C1] ? sched_clock+0x9/0x10 [ 98.472572][ C1] dump_stack+0x15/0x20 [ 98.476563][ C1] __ubsan_handle_out_of_bounds+0x118/0x140 [ 98.482292][ C1] __pv_queued_spin_lock_slowpath+0xb9d/0xc40 [ 98.488190][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 98.493835][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 98.499824][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 98.506197][ C1] ? kasan_check_range+0x293/0x2a0 [ 98.511137][ C1] _raw_spin_lock+0x139/0x1b0 [ 98.515650][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 98.520857][ C1] ? cpu_map_generic_redirect+0x1a8/0x6d0 [ 98.526413][ C1] ? cpu_map_generic_redirect+0x1a8/0x6d0 [ 98.531967][ C1] cpu_map_generic_redirect+0x1d5/0x6d0 [ 98.537346][ C1] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 98.542991][ C1] ? cpu_map_enqueue+0x370/0x370 [ 98.547768][ C1] xdp_do_generic_redirect+0x3df/0xb40 [ 98.553059][ C1] do_xdp_generic+0x50b/0x7c0 [ 98.557569][ C1] ? generic_xdp_tx+0x490/0x490 [ 98.562256][ C1] ? migrate_disable+0xd9/0x190 [ 98.566943][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 98.572501][ C1] ? ip_protocol_deliver_rcu+0x710/0x710 [ 98.577966][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 98.582392][ C1] ? ip_rcv+0x16e/0x310 [ 98.586382][ C1] ? put_prev_entity+0x460/0x460 [ 98.591159][ C1] ? ip_local_deliver_finish+0x240/0x240 [ 98.596626][ C1] ? ip_rcv_core+0xb50/0xb50 [ 98.601054][ C1] __netif_receive_skb+0x11c/0x530 [ 98.606000][ C1] ? _nohz_idle_balance+0x500/0x500 [ 98.611034][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 98.616413][ C1] ? __kasan_check_write+0x14/0x20 [ 98.621367][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 98.625963][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 98.631173][ C1] process_backlog+0x31c/0x650 [ 98.635783][ C1] __napi_poll+0xc4/0x5a0 [ 98.639944][ C1] net_rx_action+0x47d/0xc50 [ 98.644365][ C1] ? clockevents_program_event+0x22f/0x300 [ 98.650008][ C1] ? net_tx_action+0x550/0x550 [ 98.654606][ C1] ? __sched_clock_gtod_offset+0xb0/0x100 [ 98.660163][ C1] handle_softirqs+0x25e/0x5c0 [ 98.664764][ C1] __do_softirq+0xb/0xd [ 98.668755][ C1] do_softirq+0xf6/0x150 [ 98.672833][ C1] [ 98.675608][ C1] [ 98.678389][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 98.683419][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 98.689062][ C1] __local_bh_enable_ip+0x75/0x80 [ 98.693921][ C1] _raw_read_unlock_bh+0x29/0x30 [ 98.698696][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 98.704264][ C1] wg_packet_tx_worker+0x1e6/0x530 [ 98.709197][ C1] process_one_work+0x6bb/0xc10 [ 98.713887][ C1] worker_thread+0xad5/0x12a0 [ 98.718405][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 98.723091][ C1] kthread+0x421/0x510 [ 98.726990][ C1] ? worker_clr_flags+0x180/0x180 [ 98.731942][ C1] ? kthread_blkcg+0xd0/0xd0 [ 98.736365][ C1] ret_from_fork+0x1f/0x30 [ 98.740618][ C1] [ 98.743501][ C1] ================================================================================ [ 98.752694][ C1] general protection fault, probably for non-canonical address 0xe010f4fb9f81ff65: 0000 [#1] PREEMPT SMP KASAN [ 98.764146][ C1] KASAN: maybe wild-memory-access in range [0x0087c7dcfc0ffb28-0x0087c7dcfc0ffb2f] [ 98.773260][ C1] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G B 5.15.176-syzkaller-00972-g829d9f138569 #0 [ 98.784284][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.794179][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 98.800174][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x2f3/0xc40 [ 98.806844][ C1] Code: 74 1e 48 89 4c 24 10 48 8b 7c 24 10 e8 86 98 5d 00 48 8b 4c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 21 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 ff 98 5d 00 48 ba 00 00 00 00 00 fc [ 98.826286][ C1] RSP: 0018:ffffc900001d05c0 EFLAGS: 00010206 [ 98.832186][ C1] RAX: 0010f8fb9f81ff65 RBX: ffff8881f7138ad4 RCX: ffffffff86285820 [ 98.839998][ C1] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 98.847814][ C1] RBP: ffffc900001d06b0 R08: ffffffff8141a99b R09: 0000000000000003 [ 98.855794][ C1] R10: fffffbfff0e9a84c R11: dffffc0000000001 R12: 0087c7dcfc0ffb29 [ 98.863607][ C1] R13: 1ffff11022f9be20 R14: 1ffff1103ee27159 R15: ffff888117cdf104 [ 98.869749][ T4861] loop3: detected capacity change from 0 to 40427 [ 98.871415][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 98.871437][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.871452][ C1] CR2: 00007f75a4e25000 CR3: 000000011c96f000 CR4: 00000000003506a0 [ 98.900756][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.908565][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.916377][ C1] Call Trace: [ 98.919499][ C1] [ 98.922191][ C1] ? __die_body+0x62/0xb0 [ 98.926355][ C1] ? die_addr+0x9f/0xd0 [ 98.930345][ C1] ? exc_general_protection+0x311/0x4b0 [ 98.935735][ C1] ? asm_exc_general_protection+0x27/0x30 [ 98.941281][ C1] ? check_panic_on_warn+0x5b/0xb0 [ 98.946233][ C1] ? __pv_queued_spin_lock_slowpath+0x2f3/0xc40 [ 98.952308][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 98.957949][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 98.963940][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 98.970185][ C1] ? kasan_check_range+0x293/0x2a0 [ 98.975134][ C1] _raw_spin_lock+0x139/0x1b0 [ 98.979745][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 98.984949][ C1] ? cpu_map_generic_redirect+0x1a8/0x6d0 [ 98.990506][ C1] ? cpu_map_generic_redirect+0x1a8/0x6d0 [ 98.996062][ C1] cpu_map_generic_redirect+0x1d5/0x6d0 [ 99.001442][ C1] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 99.007083][ C1] ? cpu_map_enqueue+0x370/0x370 [ 99.011858][ C1] xdp_do_generic_redirect+0x3df/0xb40 [ 99.017153][ C1] do_xdp_generic+0x50b/0x7c0 [ 99.021665][ C1] ? generic_xdp_tx+0x490/0x490 [ 99.026352][ C1] ? migrate_disable+0xd9/0x190 [ 99.031041][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 99.036592][ C1] ? ip_protocol_deliver_rcu+0x710/0x710 [ 99.042064][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 99.046487][ C1] ? ip_rcv+0x16e/0x310 [ 99.050481][ C1] ? put_prev_entity+0x460/0x460 [ 99.055259][ C1] ? ip_local_deliver_finish+0x240/0x240 [ 99.060723][ C1] ? ip_rcv_core+0xb50/0xb50 [ 99.065152][ C1] __netif_receive_skb+0x11c/0x530 [ 99.070096][ C1] ? _nohz_idle_balance+0x500/0x500 [ 99.075132][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 99.080511][ C1] ? __kasan_check_write+0x14/0x20 [ 99.085456][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 99.090059][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 99.095270][ C1] process_backlog+0x31c/0x650 [ 99.099868][ C1] __napi_poll+0xc4/0x5a0 [ 99.104033][ C1] net_rx_action+0x47d/0xc50 [ 99.108456][ C1] ? clockevents_program_event+0x22f/0x300 [ 99.114099][ C1] ? net_tx_action+0x550/0x550 [ 99.118702][ C1] ? __sched_clock_gtod_offset+0xb0/0x100 [ 99.124269][ C1] handle_softirqs+0x25e/0x5c0 [ 99.128857][ C1] __do_softirq+0xb/0xd [ 99.132857][ C1] do_softirq+0xf6/0x150 [ 99.136934][ C1] [ 99.139702][ C1] [ 99.142481][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 99.147517][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 99.153167][ C1] __local_bh_enable_ip+0x75/0x80 [ 99.158023][ C1] _raw_read_unlock_bh+0x29/0x30 [ 99.162794][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 99.168384][ C1] wg_packet_tx_worker+0x1e6/0x530 [ 99.173295][ C1] process_one_work+0x6bb/0xc10 [ 99.177985][ C1] worker_thread+0xad5/0x12a0 [ 99.182495][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 99.187181][ C1] kthread+0x421/0x510 [ 99.191096][ C1] ? worker_clr_flags+0x180/0x180 [ 99.195951][ C1] ? kthread_blkcg+0xd0/0xd0 [ 99.200372][ C1] ret_from_fork+0x1f/0x30 [ 99.204625][ C1] [ 99.207487][ C1] Modules linked in: [ 99.211296][ C1] ---[ end trace 9eb73306e0f56b9a ]--- [ 99.216520][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x2f3/0xc40 [ 99.223237][ C1] Code: 74 1e 48 89 4c 24 10 48 8b 7c 24 10 e8 86 98 5d 00 48 8b 4c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 21 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 ff 98 5d 00 48 ba 00 00 00 00 00 fc [ 99.242677][ C1] RSP: 0018:ffffc900001d05c0 EFLAGS: 00010206 [ 99.248587][ C1] RAX: 0010f8fb9f81ff65 RBX: ffff8881f7138ad4 RCX: ffffffff86285820 [ 99.256389][ C1] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 99.264281][ C1] RBP: ffffc900001d06b0 R08: ffffffff8141a99b R09: 0000000000000003 [ 99.272176][ C1] R10: fffffbfff0e9a84c R11: dffffc0000000001 R12: 0087c7dcfc0ffb29 [ 99.279968][ C1] R13: 1ffff11022f9be20 R14: 1ffff1103ee27159 R15: ffff888117cdf104 [ 99.287818][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 99.296574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.303009][ C1] CR2: 00007f75a4e25000 CR3: 000000011c96f000 CR4: 00000000003506a0 [ 99.310787][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.318628][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.326435][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 99.333679][ C1] Kernel Offset: disabled [ 99.337938][ C1] Rebooting in 86400 seconds..