last executing test programs: 5.440254508s ago: executing program 2 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0xfff, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 5.419092299s ago: executing program 2 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close(r1) 5.391176871s ago: executing program 2 (id=1577): r0 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x141003, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 4.549268263s ago: executing program 2 (id=1589): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="20013f"], 0x0}) 4.377865638s ago: executing program 3 (id=1593): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x5000004, 0xffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000300), 0x0}, 0x20) 4.361951709s ago: executing program 3 (id=1594): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0x10000) 4.173150385s ago: executing program 3 (id=1596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x80ffff00000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.975307942s ago: executing program 3 (id=1601): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000a40)=[{0x0, 0x2198}], 0x1}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x7fff, 0x4) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x4000000000000aa, 0x0) 3.090296347s ago: executing program 3 (id=1612): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4b, 0xdc, 0xad, 0x40, 0xa766, 0x7cb5, 0x553a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2, 0x50}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) select(0x20000048, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000100)) 1.685104197s ago: executing program 3 (id=1606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x8, "8200279ea983"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.682675717s ago: executing program 2 (id=1617): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$eJzs3EtvG9UXAPBju2n/ff4jxIJdR6qQEqm26vQh2BVoxUO0qngsWIFju5Zb2xPFrhOyQoIlYsE3QSCxQmLDZ2DBmh1iAWKHBPLMmBLCo5XdOGl/P2l85t65PnPvyEp0ZiwH8MRaTn75qRRn4nhEVCLiVCmy/VKxZa7m4ZmIOBsR5T9tpaL/j46jEXEiIs5Mkkd8PczHTA59en587vKPr/381bfHjpz87MvvFrdqYNGejYj+Rr6/1c9j2snjnaK/Me5msX9pXMT8QP9u0U7zuNVezzJsNabjGlm82MnHpxv3hpN4u9doTmKnezvr3xjkJxyOO9M82RvuNDazdqu9nsXuMM1iZyef1/ZO/vdyZzjK87SKfO9n6WM0msa8v73dztezcTeLzcGo6M/zpq329iSOi1icLpppr5XNY32WK32wvd4d3NtOxu3NYTcdJJdr9edq9SvV+mbaao/al6qNfuvKpWSl05sMq47ajf7VTpp2eu1aM+2vJiudZrNarycr19rr3cYgqddrF2sXqpdXi73zycs33056rWRlEl/sDu4d7faGye10M8nfsZqs1S4+v5qcqydv3riV3Hrj+vUbt95699o7N1+48epLxaA900pW1i6srVXrF6pr9dUDsP7J/90HXP9olvV/VEz6IdZfmu3ywL/zAQN4aHvq/5hv/V8J9T+w12Gv/2Oe9f+kpFL//3f9W569/p+p/j2o9f8hXj/MRP0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDE+n7p81eyneW8fbLoP110PVW0SxFRjojf/kYlju7KWSnyLP3D+KW/zOGbUmQZJuc4VmwnIuJqsf36/0d9FQAAAODx9cUHZz/Jq/X8ZXnRE2I/5Tdtyqfem1O+UkQsLf8wp2zlycvTc0qWfb6PxPacsmU3sP43p2T5Lbcj88r2QCrT8OHp+53Zgkp5KO/rdAAAgH1R2RX2twoBAABgP3286AmwGKWYPsqcPgvOvnl//9Hm8V3HAAAAgEOotOgJAAAAAI9cVv/7/T8AAAB4vOW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3kpg1EcQB+NhjoPxVV3fcq3cExeoQuuywcoJfgCPQKuQBnILvss4kgwh4hOQIpCuNYoO+TbDM2+s0MsHljYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSfbWe///749+lObv9ZfLMBgAAADhlW63n9Ytp0/6Uzn9Jp76ldhERZUScqt0HMWplDlJOdeb91Ysx3EXUCYc+xmn7GBE/0/b0tetPAQAAAG7XZrmaNdV6s5v2PSDeU7NoU37+lSmviIhq+pAprTzsvmcKq3/fw/iTKa1ewJpkCmuW3Ianr41yddI2aB3STCaL+kusW2U3/QIAAH1qVwJnqhAAAABuwO++B0A/iuPueJ9x3BzSDcEPrRYAAABwhYq+BwAAAAB0rq7/r+H5f4/+lgAAAABv1jz/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/V8s1zNzl1fvDJnt79MvhkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sz/3KBACYQxAs4u/ncz9DysRLa1t3oOBkDDFBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3v/yfcDVHkqltw9x6JFk6NaydGrbODXs/jK+vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu6fN24yDAD4c77z9Q8gQkAZAqhIDLDQ5FpaOsIAihj4CEhReimBK4U2A60iUBaYUOYuCEaEkEBh63fo3EhdytYhQ5CYQfbZV7e90qM09tH8ftJ773O2877P67OiPLETAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKO2+Ey8lRdzOXmaGcbntxt7GStbv3NNnrm3dnM9aFrceNtE3bz/+5Kfby9U3x+Yqb76qPxkAAAAOhnZZ30fErXR7KeuTmbz+T8tjspr/+2eGcVnP31v37+xtHC52zZf1/2+/3n5hNNHMcJ5s0NW1QX/x/lQ6+7TEqffsQ4/o5Gc+/91LO/9Akvc3n99N8/PZ+vb69Xe7eXiojmwBgEdxvOyLoPx5KOt7TSYGwIHRqRTeZf3fnmk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA67G7GU2Xcioj5zp04s7O3sTKuv7Z1c75sp69e3aqOmQ2RRsTq2qCf1riWaXfp8pVPlgeD/sWxQcQDd/334FhE7M/IDwhizK4PJ/jyiH8+prg8o55V/LugNR1pNBokxedTbOnWe9Xtb1Bee49/5Ia+IQEA8MRKi5bV9bfS7aVsW2s24q8f7q7/X6vEMWH9f/uj0zeqc1Xr/15tK5x+C+vnP1u4dPnKG2vnl8/1z/U/ffNE763eyTOnTp1ZyM7V4sJqJP3FptMEAADgf6xbtGr9n8zef///aCWOCev/z7/rfVmdq63+H+vOTb+mMwEAADiIuqPouVf+/KM15ohWtxtfLK+vX+wNX0fvTwxfa033ER0qWrX+b882nRUAAABQh93N1l33/89W4pjw/v/TP774c3XMdkQcibgQEf3jKxcGZ+tbzlSr4w+V84m6Ta8UAACAphwpWvX+f5o//5+MHnlIIuL1V4dx+b+uJqn/2+99/VN1rurz/yfrW+JUSuaG5yPv5yI6c01nBAAAwJPscNGyYv/3dHvp41+OftD1/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//1AjNPw=") r0 = open(&(0x7f0000000000)='./file1\x00', 0xc0842, 0x0) fallocate(r0, 0x0, 0x0, 0x7000000) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') pipe2(0x0, 0x0) 1.465981685s ago: executing program 2 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "f1dad412"}, @local=@item_4={0x3, 0x2, 0x0, "5d3d17a5"}]}}, 0x0}, 0x0) 578.798401ms ago: executing program 1 (id=1613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffffa00d"]) 524.941615ms ago: executing program 4 (id=1618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffe01, 0x0, [{}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {}, {}, {}, {0x0, 0xff}, {}, {}, {0x0, 0xa}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0xff}]}}) 456.226361ms ago: executing program 1 (id=1620): unshare(0x42000000) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 409.320905ms ago: executing program 4 (id=1624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, 0x0, 0x0) 399.636635ms ago: executing program 4 (id=1625): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 398.420206ms ago: executing program 1 (id=1626): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x8}, 0x0) 385.786597ms ago: executing program 4 (id=1627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) 346.667ms ago: executing program 4 (id=1628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4107}, 0x4c) setsockopt$sock_attach_bpf(r0, 0x1, 0xb, &(0x7f0000000000), 0x4) 333.951282ms ago: executing program 4 (id=1629): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGSND(r1, 0x604, 0x0) 325.760612ms ago: executing program 1 (id=1630): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 311.928513ms ago: executing program 1 (id=1632): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6574635f6d61696c5f743a7330202f7362696e0eae2317ee7a2f6468636c69656e742030"], 0x44) 297.108934ms ago: executing program 1 (id=1633): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "5254abe2"}]}}, 0x0}, 0x0) 193.423683ms ago: executing program 0 (id=1634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="040052000600050001"], 0x24}}, 0x0) 162.599986ms ago: executing program 0 (id=1635): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)) 152.960317ms ago: executing program 0 (id=1636): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', 0x1}) 144.733497ms ago: executing program 0 (id=1637): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e22006490"], 0x0) 33.642957ms ago: executing program 0 (id=1638): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 0 (id=1639): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd86, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2, @private1, @private1, @loopback, @local]}, @dstopts={0x0, 0x193, '\x00', [@generic={0x0, 0x5f, "f0edb1af7badf7491d2500721be4cce0542133657e2d12f0ae3e134727e49fe7c04867be7426e8cbefd47520beacbe5c36083a972cb3b73de48f661a252e0b0a5a236ddf29543f29a5e18fd1c7b54248c8b03dc91385c9160f3394ff0708c8"}, @hao={0xc9, 0x10, @private1}, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x800, 0x0, 0x0, 0x4]}}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xbc4, "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"}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): becomes ready [ 86.134984][ T2822] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 86.150204][ T841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.176319][ T2815] device veth0_vlan entered promiscuous mode [ 86.188875][ T2815] device veth1_macvtap entered promiscuous mode [ 86.197908][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.206139][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.206611][ T2829] loop3: detected capacity change from 0 to 1024 [ 86.221265][ T28] audit: type=1400 audit(1724693917.445:581): avc: denied { setattr } for pid=2821 comm="syz.4.1013" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.221516][ T2829] EXT4-fs: Ignoring removed orlov option [ 86.262438][ T2829] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.270017][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.282116][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.307598][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.318430][ T2829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.360232][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.376228][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.437957][ T1799] EXT4-fs (loop3): unmounting filesystem. [ 86.462867][ T2831] loop2: detected capacity change from 0 to 40427 [ 86.472032][ T2841] loop0: detected capacity change from 0 to 2048 [ 86.480333][ T2831] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 86.492355][ T2831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 86.496452][ T2841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.502462][ T2831] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 86.509411][ T2841] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 86.543776][ T2831] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 86.550760][ T2831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.551881][ T2815] EXT4-fs (loop0): unmounting filesystem. [ 86.581070][ T2851] loop0: detected capacity change from 0 to 256 [ 86.586005][ T2831] syz.2.1015: attempt to access beyond end of device [ 86.586005][ T2831] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 86.587736][ T2851] exfat: Deprecated parameter 'utf8' [ 86.605101][ T2831] syz.2.1015: attempt to access beyond end of device [ 86.605101][ T2831] loop2: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 86.608646][ T2851] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 86.621208][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 86.642076][ T10] device bridge_slave_1 left promiscuous mode [ 86.650222][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.658359][ T10] device bridge_slave_0 left promiscuous mode [ 86.669295][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.673466][ T2500] syz-executor: attempt to access beyond end of device [ 86.673466][ T2500] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.690748][ T10] device veth1_macvtap left promiscuous mode [ 86.696582][ T10] device veth0_vlan left promiscuous mode [ 86.717090][ T302] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 86.777032][ T2505] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 86.812360][ T2864] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 86.821841][ T2864] SELinux: failed to load policy [ 86.884923][ T2875] loop0: detected capacity change from 0 to 512 [ 86.900079][ T2875] EXT4-fs: Ignoring removed orlov option [ 86.905742][ T2875] EXT4-fs: Ignoring removed i_version option [ 86.914547][ T2875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.922439][ T2875] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.930530][ T2875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 86.938994][ T2875] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.945229][ T2875] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 86.955491][ T2875] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.970834][ T2875] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 86.977796][ T2875] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1030: bg 0: block 40: padding at end of block bitmap is not set [ 86.992623][ T2875] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 87.001641][ T2875] EXT4-fs (loop0): 1 truncate cleaned up [ 87.007601][ T2875] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.027842][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.033156][ T2875] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1030: bad symlink. [ 87.044486][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.059313][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 87.068237][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.076618][ T24] usb 5-1: config 0 descriptor?? [ 87.087175][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.103898][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.123744][ T302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.150802][ T302] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 87.170053][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.178242][ T2505] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 87.192275][ T2505] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 87.210235][ T302] usb 2-1: config 0 descriptor?? [ 87.270712][ T2815] EXT4-fs (loop0): unmounting filesystem. [ 87.377096][ T2505] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 87.389614][ T2505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.407958][ T2505] usb 4-1: Product: syz [ 87.411968][ T2505] usb 4-1: Manufacturer: syz [ 87.416393][ T2505] usb 4-1: SerialNumber: syz [ 87.424058][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.425350][ T2505] usb 4-1: config 0 descriptor?? [ 87.435748][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.444119][ T2884] device bridge_slave_0 entered promiscuous mode [ 87.451184][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.458153][ T2843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 87.465103][ T2843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 87.474401][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.481963][ T2884] device bridge_slave_1 entered promiscuous mode [ 87.558120][ T24] lg-g15 0003:046D:C222.0047: unknown main item tag 0x0 [ 87.564424][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.571674][ T24] lg-g15 0003:046D:C222.0047: item fetching failed at offset 10/11 [ 87.571789][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.586601][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.587325][ T24] lg-g15: probe of 0003:046D:C222.0047 failed with error -22 [ 87.593393][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.647219][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.654884][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.662186][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.689649][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.698029][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.704873][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.712216][ T2505] dm9601: probe of 4-1:0.0 failed with error -71 [ 87.713754][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.720054][ T302] holtek_mouse 0003:04D9:A070.0048: invalid report_size 862009739 [ 87.738317][ T2505] usb 4-1: USB disconnect, device number 23 [ 87.738824][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.746429][ T302] holtek_mouse 0003:04D9:A070.0048: item 0 4 1 7 parsing failed [ 87.751037][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.767602][ T302] holtek_mouse 0003:04D9:A070.0048: hid parse failed: -22 [ 87.774683][ T302] holtek_mouse: probe of 0003:04D9:A070.0048 failed with error -22 [ 87.797864][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.818974][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.828667][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.836821][ T302] usb 5-1: USB disconnect, device number 24 [ 87.853901][ T2884] device veth0_vlan entered promiscuous mode [ 87.864178][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.878901][ T2884] device veth1_macvtap entered promiscuous mode [ 87.887207][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.894595][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.904440][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.927286][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.935295][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.950139][ T24] usb 2-1: USB disconnect, device number 22 [ 87.950460][ T10] device bridge_slave_1 left promiscuous mode [ 87.981989][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.989835][ T10] device bridge_slave_0 left promiscuous mode [ 87.995932][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.004974][ T10] device veth1_macvtap left promiscuous mode [ 88.010901][ T10] device veth0_vlan left promiscuous mode [ 88.137021][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.145105][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.154699][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.163192][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.273023][ T2912] loop3: detected capacity change from 0 to 512 [ 88.281285][ T2912] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.292677][ T2912] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 88.302499][ T2912] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1047: Corrupt directory, running e2fsck is recommended [ 88.315869][ T2912] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 88.324695][ T2912] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.1047: corrupted in-inode xattr [ 88.336969][ T60] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 88.344496][ T2912] EXT4-fs (loop3): Remounting filesystem read-only [ 88.355372][ T2912] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1047: couldn't read orphan inode 15 (err -117) [ 88.368368][ T2912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.373594][ T2919] loop4: detected capacity change from 0 to 2048 [ 88.400101][ T2912] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.411747][ T2912] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 88.422632][ T2912] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1047: Corrupt directory, running e2fsck is recommended [ 88.422643][ T2919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.422702][ T2919] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 88.437784][ T2912] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.472188][ T2912] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 88.482950][ T2912] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1047: Corrupt directory, running e2fsck is recommended [ 88.497599][ T2929] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.514460][ T2929] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 88.514467][ T2356] EXT4-fs (loop4): unmounting filesystem. [ 88.514483][ T2929] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1047: Corrupt directory, running e2fsck is recommended [ 88.543454][ T2912] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.582801][ T1799] EXT4-fs (loop3): unmounting filesystem. [ 88.587009][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 88.619809][ T2942] loop3: detected capacity change from 0 to 512 [ 88.642003][ T2942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.651147][ T2942] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 88.654256][ T2953] loop4: detected capacity change from 0 to 512 [ 88.668617][ T2942] EXT4-fs (loop3): shut down requested (0) [ 88.675024][ T2953] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 88.683242][ T2953] EXT4-fs (loop4): invalid journal inode [ 88.688838][ T2953] EXT4-fs (loop4): can't get journal size [ 88.695198][ T1799] EXT4-fs (loop3): unmounting filesystem. [ 88.695811][ T2953] EXT4-fs (loop4): 1 truncate cleaned up [ 88.707176][ T60] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 88.707204][ T60] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 88.715681][ T2953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.724410][ T60] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 88.742416][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.752088][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.761829][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.773437][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.783436][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.796618][ T60] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 88.797347][ T2356] EXT4-fs (loop4): unmounting filesystem. [ 88.806512][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.811939][ T302] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 88.820477][ T60] usb 3-1: config 0 descriptor?? [ 88.888277][ T2968] loop4: detected capacity change from 0 to 512 [ 88.906355][ T2968] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.919068][ T2968] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 88.929971][ T323] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 88.930095][ T2968] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1068: Corrupt directory, running e2fsck is recommended [ 88.952937][ T2968] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 88.962592][ T2968] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.1068: corrupted in-inode xattr [ 88.975537][ T2968] EXT4-fs (loop4): Remounting filesystem read-only [ 88.983151][ T2968] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1068: couldn't read orphan inode 15 (err -117) [ 88.995373][ T2968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.012274][ T2968] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.023785][ T2968] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 89.034562][ T2968] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1068: Corrupt directory, running e2fsck is recommended [ 89.047774][ T2968] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.059200][ T2968] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 89.070659][ T2968] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1068: Corrupt directory, running e2fsck is recommended [ 89.083763][ T2972] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.087617][ T60] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 89.096013][ T302] usb 2-1: Using ep0 maxpacket: 32 [ 89.108693][ T2972] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 89.122958][ T2972] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1068: Corrupt directory, running e2fsck is recommended [ 89.136148][ T2968] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.267047][ T302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.292326][ T2981] loop4: detected capacity change from 0 to 40427 [ 89.299194][ T2981] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 89.307223][ T2981] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 89.315510][ T2981] F2FS-fs (loop4): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 89.328611][ T60] usb 3-1: USB disconnect, device number 23 [ 89.336801][ T60] usblp0: removed [ 89.348859][ T2981] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.357977][ T2981] FAT-fs (loop4): unable to read boot sector [ 89.374417][ T2983] raw_sendmsg: syz.4.1075 forgot to set AF_INET. Fix it! [ 89.381753][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.392891][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.402482][ T323] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 89.411403][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.421242][ T323] usb 1-1: config 0 descriptor?? [ 89.477094][ T302] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 89.486568][ T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.494550][ T302] usb 2-1: Product: syz [ 89.498728][ T302] usb 2-1: Manufacturer: syz [ 89.503056][ T302] usb 2-1: SerialNumber: syz [ 89.511606][ T302] usb 2-1: config 0 descriptor?? [ 89.557858][ T302] usb 2-1: bad CDC descriptors [ 89.761951][ T60] usb 2-1: USB disconnect, device number 23 [ 89.898210][ T323] lg-g15 0003:046D:C222.0049: unknown main item tag 0x0 [ 89.905143][ T323] lg-g15 0003:046D:C222.0049: item fetching failed at offset 10/11 [ 89.913192][ T323] lg-g15: probe of 0003:046D:C222.0049 failed with error -22 [ 90.100180][ T60] usb 1-1: USB disconnect, device number 20 [ 90.273211][ T3001] loop1: detected capacity change from 0 to 512 [ 90.281890][ T3001] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.293487][ T3001] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 90.304077][ T3001] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1082: Corrupt directory, running e2fsck is recommended [ 90.317977][ T3001] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 90.329131][ T3001] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1082: corrupted in-inode xattr [ 90.341246][ T3001] EXT4-fs (loop1): Remounting filesystem read-only [ 90.349277][ T3001] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1082: couldn't read orphan inode 15 (err -117) [ 90.371453][ T3001] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.383012][ T3001] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 90.393113][ T3001] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1082: Corrupt directory, running e2fsck is recommended [ 90.407776][ T3001] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.419285][ T3001] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 90.429639][ T3001] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1082: Corrupt directory, running e2fsck is recommended [ 90.443479][ T3008] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.454817][ T3008] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 90.465521][ T3008] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1082: Corrupt directory, running e2fsck is recommended [ 90.480099][ T3001] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.620974][ T28] audit: type=1400 audit(1724693921.845:582): avc: denied { create } for pid=3012 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.646735][ T3013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 90.646838][ T28] audit: type=1400 audit(1724693921.865:583): avc: denied { write } for pid=3012 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.678440][ T3013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 90.680023][ T3014] loop0: detected capacity change from 0 to 4096 [ 90.707864][ T3014] EXT4-fs: Ignoring removed oldalloc option [ 90.726181][ T3014] EXT4-fs (loop0): Test dummy encryption mode enabled [ 90.758103][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 90.771117][ T323] kernel write not supported for file task/162/attr/prev (pid: 323 comm: kworker/0:4) [ 90.977670][ T302] kernel write not supported for file /input/event2 (pid: 302 comm: kworker/0:2) [ 91.197020][ T805] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 91.197155][ T2505] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 91.267030][ T302] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 91.287012][ T37] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 91.507065][ T302] usb 1-1: Using ep0 maxpacket: 32 [ 91.536982][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 91.567031][ T805] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.567062][ T2505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.574954][ T805] usb 3-1: config 0 has no interface number 0 [ 91.585790][ T2505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.591656][ T805] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.601247][ T2505] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 91.611836][ T805] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.620898][ T2505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.630405][ T805] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 91.638229][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.647062][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.658238][ T2505] usb 5-1: config 0 descriptor?? [ 91.670247][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.670860][ T805] usb 3-1: config 0 descriptor?? [ 91.679797][ T302] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 91.684689][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.693546][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.704321][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.712925][ T302] usb 1-1: config 0 descriptor?? [ 91.724318][ T37] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 91.735059][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.743960][ T37] usb 2-1: config 0 descriptor?? [ 92.158149][ T2505] hid-steam 0003:28DE:1142.004A: unknown main item tag 0x1 [ 92.165257][ T2505] hid-steam 0003:28DE:1142.004A: unknown main item tag 0x2 [ 92.172298][ T2505] hid-steam 0003:28DE:1142.004A: item fetching failed at offset 4/5 [ 92.180236][ T2505] hid-steam 0003:28DE:1142.004A: steam_probe:parse of hid interface failed [ 92.188701][ T2505] hid-steam: probe of 0003:28DE:1142.004A failed with error -22 [ 92.196478][ T805] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.004B/input/input27 [ 92.197676][ T302] hkems 0003:2006:0118.004C: unbalanced delimiter at end of report description [ 92.219796][ T302] hkems 0003:2006:0118.004C: parse failed [ 92.225596][ T302] hkems: probe of 0003:2006:0118.004C failed with error -22 [ 92.238810][ T37] hid-multitouch 0003:1FD2:6007.004D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 92.279984][ T805] holtek_kbd 0003:04D9:A055.004B: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 92.363834][ T2505] usb 5-1: USB disconnect, device number 25 [ 92.402568][ T302] usb 3-1: USB disconnect, device number 24 [ 92.447341][ T805] usb 1-1: USB disconnect, device number 21 [ 92.448347][ T19] usb 2-1: USB disconnect, device number 24 [ 92.882281][ T3073] loop4: detected capacity change from 0 to 512 [ 92.889000][ T3073] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.897899][ T3073] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 92.906499][ T3073] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 92.918937][ T3073] System zones: 0-2, 18-18, 34-34 [ 92.924499][ T3073] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 92.939375][ T3073] EXT4-fs (loop4): 1 truncate cleaned up [ 93.005268][ T3090] loop4: detected capacity change from 0 to 512 [ 93.021468][ T3090] EXT4-fs (loop4): Test dummy encryption mode enabled [ 93.037069][ T3090] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22669!=50318) [ 93.057384][ T3090] EXT4-fs (loop4): group descriptors corrupted! [ 93.119150][ T3090] request_module fs-nfs succeeded, but still no fs? [ 93.362779][ T3094] loop2: detected capacity change from 0 to 40427 [ 93.406281][ T3094] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.463720][ T3125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 93.466307][ T3094] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.824868][ T3150] overlayfs: invalid origin (0000) [ 93.888298][ T3083] loop1: detected capacity change from 0 to 131072 [ 93.900437][ T3083] F2FS-fs (loop1): Test dummy encryption mode enabled [ 93.909721][ T3083] F2FS-fs (loop1): invalid crc value [ 93.918349][ T3083] F2FS-fs (loop1): Invalid segment type: 16, segno: 21 [ 93.926494][ T3083] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 94.096967][ T805] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 94.118246][ T3167] loop4: detected capacity change from 0 to 16 [ 94.133268][ T3167] erofs: (device loop4): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 94.215871][ T3165] loop0: detected capacity change from 0 to 40427 [ 94.232931][ T3165] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 94.246999][ T3165] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 94.283553][ T3165] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 94.307195][ T3165] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 94.314062][ T3165] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.348139][ T3165] syz.0.1151: attempt to access beyond end of device [ 94.348139][ T3165] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 94.362072][ T3165] syz.0.1151: attempt to access beyond end of device [ 94.362072][ T3165] loop0: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 94.375870][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 94.386720][ T2884] syz-executor: attempt to access beyond end of device [ 94.386720][ T2884] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.507059][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.517816][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.527329][ T805] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 94.536139][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.544705][ T805] usb 3-1: config 0 descriptor?? [ 94.567002][ T302] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 94.567024][ T37] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 94.727103][ T60] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 94.807031][ T302] usb 2-1: Using ep0 maxpacket: 16 [ 94.827056][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 94.967007][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 95.018404][ T805] hid-multitouch 0003:1FD2:6007.004E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 95.087096][ T302] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 95.096021][ T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.103836][ T302] usb 2-1: Product: syz [ 95.107774][ T302] usb 2-1: Manufacturer: syz [ 95.112781][ T302] usb 2-1: SerialNumber: syz [ 95.117737][ T302] r8152-cfgselector 2-1: config 0 descriptor?? [ 95.127130][ T37] usb 5-1: New USB device found, idVendor=19d2, idProduct=1119, bcdDevice=39.9d [ 95.136097][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.143940][ T37] usb 5-1: Product: syz [ 95.148088][ T37] usb 5-1: Manufacturer: syz [ 95.152483][ T37] usb 5-1: SerialNumber: syz [ 95.157608][ T37] usb 5-1: config 0 descriptor?? [ 95.197441][ T37] usb 5-1: bad CDC descriptors [ 95.220594][ T37] usb 3-1: USB disconnect, device number 25 [ 95.257061][ T60] usb 1-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 95.265911][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.273838][ T60] usb 1-1: Product: syz [ 95.277789][ T60] usb 1-1: Manufacturer: syz [ 95.282141][ T60] usb 1-1: SerialNumber: syz [ 95.287478][ T60] usb 1-1: config 0 descriptor?? [ 95.327530][ T60] ipheth 1-1:0.0: Unable to find alternate settings interface [ 95.529590][ T37] usb 1-1: USB disconnect, device number 22 [ 95.597066][ T302] r8152-cfgselector 2-1: Unknown version 0x0000 [ 95.603235][ T302] r8152-cfgselector 2-1: bad CDC descriptors [ 95.606079][ T3187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.617358][ T3187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.627228][ T302] r8152-cfgselector 2-1: Unknown version 0x0000 [ 95.628181][ T60] usb 5-1: USB disconnect, device number 26 [ 95.633955][ T302] r8152-cfgselector 2-1: USB disconnect, device number 25 [ 95.887996][ T3208] loop2: detected capacity change from 0 to 512 [ 95.898741][ T3208] EXT4-fs mount: 7 callbacks suppressed [ 95.898758][ T3208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.913245][ T3208] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038 (0x7fffffff) [ 95.928636][ T3208] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.943163][ T3208] Quota error (device loop2): write_blk: dquota write failed [ 95.950508][ T3208] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 95.960315][ T3208] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.1168: Failed to acquire dquot type 0 [ 95.975121][ T2500] EXT4-fs (loop2): unmounting filesystem. [ 96.114701][ T3225] loop1: detected capacity change from 0 to 1024 [ 96.123974][ T3225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.155839][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 96.162790][ T3232] loop0: detected capacity change from 0 to 512 [ 96.179619][ T3232] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1177: casefold flag without casefold feature [ 96.193194][ T3232] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.1177: missing EA_INODE flag [ 96.205183][ T3232] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1177: error while reading EA inode 2 err=-117 [ 96.219851][ T3232] EXT4-fs (loop0): 1 orphan inode deleted [ 96.225612][ T3232] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.254957][ T2884] EXT4-fs (loop0): unmounting filesystem. [ 96.257045][ T302] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 96.262839][ T3246] netlink: 'syz.1.1183': attribute type 4 has an invalid length. [ 96.289923][ T3248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 96.329035][ T3255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1187'. [ 96.339323][ T3255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1187'. [ 96.374299][ T28] audit: type=1400 audit(1724693927.595:584): avc: denied { validate_trans } for pid=3260 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.397466][ T3265] loop0: detected capacity change from 0 to 7 [ 96.417586][ T3270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'. [ 96.507037][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 96.512067][ T3286] loop4: detected capacity change from 0 to 256 [ 96.534371][ T3286] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 96.546574][ T3286] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 96.565395][ T3292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 96.627090][ T302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.637373][ T3302] loop1: detected capacity change from 0 to 2048 [ 96.637918][ T302] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 96.654657][ T302] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 96.668122][ T302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.671302][ T3302] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.1209: casefold flag without casefold feature [ 96.677221][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.690176][ T3302] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 96.708489][ T3302] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 96.715850][ T3302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.724666][ T3213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.737437][ T302] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 96.747558][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 96.761621][ T3306] syz.1.1211[3306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.761667][ T3306] syz.1.1211[3306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.826641][ T28] audit: type=1400 audit(1724693928.045:585): avc: denied { mounton } for pid=3315 comm="syz.0.1216" path="/57/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 96.862076][ T3314] loop1: detected capacity change from 0 to 8192 [ 96.868461][ T19] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 96.897416][ T3314] loop1: p3 p4 < > [ 96.901167][ T3314] loop1: p3 start 619312 is beyond EOD, truncated [ 96.927696][ T315] udevd[315]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 96.942958][ T315] udevd[315]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 96.958024][ T302] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 96.975366][ T302] usb 3-1: USB disconnect, device number 26 [ 97.227023][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.237771][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.247296][ T19] usb 5-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 97.256102][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.256973][ T60] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 97.266447][ T19] usb 5-1: config 0 descriptor?? [ 97.523498][ T3340] loop2: detected capacity change from 0 to 2048 [ 97.589952][ T3340] Alternate GPT is invalid, using primary GPT. [ 97.596023][ T3340] loop2: p2 p3 p7 [ 97.616825][ T28] audit: type=1400 audit(1724693928.835:586): avc: denied { setopt } for pid=3341 comm="syz.2.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.648161][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 97.648430][ T315] udevd[315]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 97.659267][ T396] udevd[396]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 97.686998][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.705373][ T60] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 97.714511][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.736706][ T28] audit: type=1400 audit(1724693928.955:587): avc: denied { ioctl } for pid=3349 comm="syz.2.1232" path="socket:[31442]" dev="sockfs" ino=31442 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.738417][ T19] wacom 0003:056A:00D1.004F: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 97.764100][ T60] usb 2-1: config 0 descriptor?? [ 97.771537][ T3350] bridge0: port 3(syz_tun) entered blocking state [ 97.782374][ T3350] bridge0: port 3(syz_tun) entered disabled state [ 97.789360][ T3350] device syz_tun entered promiscuous mode [ 97.795107][ T3350] bridge0: port 3(syz_tun) entered blocking state [ 97.801464][ T3350] bridge0: port 3(syz_tun) entered forwarding state [ 97.810713][ T19] wacom 0003:056A:00D1.004F: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.4-1/input0 [ 97.821951][ T3354] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.833288][ T28] audit: type=1326 audit(1724693929.055:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.2.1235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75c9f79e79 code=0x0 [ 97.836181][ T19] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D1.004F/input/input28 [ 97.874389][ T3358] loop0: detected capacity change from 0 to 1024 [ 97.883883][ T3358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.901253][ T2884] EXT4-fs (loop0): unmounting filesystem. [ 97.973787][ T24] usb 5-1: USB disconnect, device number 27 [ 98.227344][ T2505] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 98.247749][ T60] petalynx 0003:18B1:0037.0050: unknown main item tag 0xd [ 98.254728][ T60] petalynx 0003:18B1:0037.0050: unexpected long global item [ 98.262265][ T60] petalynx 0003:18B1:0037.0050: parse failed [ 98.268290][ T60] petalynx: probe of 0003:18B1:0037.0050 failed with error -22 [ 98.460906][ T60] usb 2-1: USB disconnect, device number 26 [ 98.575367][ T3368] loop4: detected capacity change from 0 to 40427 [ 98.584167][ T3368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.587060][ T2505] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.601663][ T2505] usb 1-1: config 0 has no interface number 0 [ 98.607754][ T2505] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.618721][ T3368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.619064][ T2505] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.638876][ T2505] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 98.647940][ T2505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.668822][ T2505] usb 1-1: config 0 descriptor?? [ 98.745745][ T2356] syz-executor: attempt to access beyond end of device [ 98.745745][ T2356] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 98.760185][ T2356] syz-executor: attempt to access beyond end of device [ 98.760185][ T2356] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 98.778853][ T28] audit: type=1400 audit(1724693930.005:589): avc: denied { ioctl } for pid=3375 comm="syz.2.1242" path="socket:[30542]" dev="sockfs" ino=30542 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.803796][ T2356] syz-executor: attempt to access beyond end of device [ 98.803796][ T2356] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.015084][ T3390] loop1: detected capacity change from 0 to 16 [ 99.047469][ T3390] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.126053][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.171792][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.201546][ T3402] loop1: detected capacity change from 0 to 1024 [ 99.207809][ T2505] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0051/input/input31 [ 99.220038][ T3391] device bridge_slave_0 entered promiscuous mode [ 99.233019][ T3386] loop2: detected capacity change from 0 to 40427 [ 99.237304][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.246156][ T3391] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.259338][ T3386] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 99.260467][ T3402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.267193][ T3391] device bridge_slave_1 entered promiscuous mode [ 99.281634][ T3386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.300018][ T3386] F2FS-fs (loop2): invalid crc value [ 99.319457][ T3386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.325937][ T2505] holtek_kbd 0003:04D9:A055.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 99.341028][ T3402] EXT4-fs error (device loop1): ext4_get_inode_usage:834: inode #2: comm syz.1.1254: corrupted in-inode xattr [ 99.362650][ T3402] EXT4-fs (loop1): Remounting filesystem read-only [ 99.377409][ T3386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.384884][ T3386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.386353][ T2505] usb 1-1: USB disconnect, device number 23 [ 99.402629][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 99.406605][ T43] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.418675][ T43] Quota error (device loop1): write_blk: dquota write failed [ 99.425807][ T43] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 99.436270][ T43] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.446727][ T43] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.515688][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.523367][ T3404] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.530904][ T3404] device bridge_slave_0 entered promiscuous mode [ 99.540815][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.547830][ T3404] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.554927][ T3404] device bridge_slave_1 entered promiscuous mode [ 99.598386][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.605357][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.612449][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.620082][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.650200][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.657090][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.664161][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.670968][ T3404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.691246][ T2505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.698509][ T19] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 99.708070][ T2505] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.715589][ T2505] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.723074][ T2505] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.730318][ T2505] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.738383][ T697] device bridge_slave_1 left promiscuous mode [ 99.744387][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.752235][ T697] device bridge_slave_0 left promiscuous mode [ 99.758217][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.765546][ T697] device veth1_macvtap left promiscuous mode [ 99.771607][ T697] device veth0_vlan left promiscuous mode [ 99.787015][ T60] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 99.848388][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.856419][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.864482][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.871319][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.878539][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.886474][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.893325][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.900842][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.921348][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.929364][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.936204][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.943692][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.951997][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.958842][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.966121][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.973947][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.989908][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.998254][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.006353][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.014106][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.021899][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.029806][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.038179][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.045685][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.049486][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 100.056392][ T3404] device veth0_vlan entered promiscuous mode [ 100.063711][ T19] usb 3-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 100.075893][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.076060][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.093412][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.104098][ T3391] device veth0_vlan entered promiscuous mode [ 100.110312][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.118165][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.125995][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.133430][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.146056][ T3404] device veth1_macvtap entered promiscuous mode [ 100.153729][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.157111][ T19] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.170620][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.171351][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.179154][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.186763][ T19] usb 3-1: SerialNumber: syz [ 100.199726][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.207636][ T60] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.215776][ T60] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.224565][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.232485][ T60] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.235011][ T3391] device veth1_macvtap entered promiscuous mode [ 100.241327][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.257346][ T60] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.258318][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.266795][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.287153][ T60] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.287242][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.295987][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.304502][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.312418][ T60] usb 2-1: config 0 descriptor?? [ 100.322323][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.332443][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.348499][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.357102][ T37] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 100.364665][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.373806][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.382839][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.488182][ T19] usb 3-1: 0:2 : does not exist [ 100.492970][ T19] usb 3-1: unit 56 not found! [ 100.515522][ T19] usb 3-1: USB disconnect, device number 27 [ 100.519862][ T3436] loop4: detected capacity change from 0 to 2048 [ 100.538092][ T3436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.546402][ T3436] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 100.564520][ T3404] EXT4-fs (loop4): unmounting filesystem. [ 100.578008][ T60] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.607103][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 100.747032][ T805] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 100.827092][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 100.827265][ T19] usb 2-1: USB disconnect, device number 27 [ 100.834519][ T37] usb 1-1: can't read configurations, error -61 [ 100.844384][ T19] usblp0: removed [ 100.927021][ T312] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 100.997230][ T37] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 101.027562][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 101.237004][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 101.287049][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.297856][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.307471][ T312] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 101.316294][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.327658][ T312] usb 5-1: config 0 descriptor?? [ 101.433990][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 101.441385][ T805] usb 4-1: string descriptor 0 read error: -22 [ 101.447382][ T805] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 101.456196][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.466982][ T37] usb 1-1: can't read configurations, error -61 [ 101.476998][ T37] usb usb1-port1: attempt power cycle [ 101.482920][ T805] usb 4-1: config 0 descriptor?? [ 101.527337][ T805] hub 4-1:0.0: bad descriptor, ignoring hub [ 101.533201][ T805] hub: probe of 4-1:0.0 failed with error -5 [ 101.539376][ T805] usb 4-1: Found UVC 0.00 device (17dc:0202) [ 101.546176][ T805] usb 4-1: No valid video chain found. [ 101.656978][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 101.723428][ T3474] syz.1.1279[3474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.723473][ T3474] syz.1.1279[3474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.777060][ T3478] loop1: detected capacity change from 0 to 256 [ 101.808852][ T312] hid-multitouch 0003:1FD2:6007.0052: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 101.857104][ T805] usb 4-1: USB disconnect, device number 24 [ 101.897076][ T37] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 101.927134][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 101.997735][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 102.009961][ T312] usb 5-1: USB disconnect, device number 28 [ 102.067077][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 102.075846][ T24] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.085599][ T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 102.095160][ T24] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 102.104862][ T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 102.114475][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.120844][ T24] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 102.129865][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.167001][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 102.174433][ T805] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 102.182312][ T24] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 102.189030][ T37] usb 1-1: can't read configurations, error -61 [ 102.281144][ T3492] loop3: detected capacity change from 0 to 512 [ 102.287497][ T3492] EXT4-fs: Ignoring removed i_version option [ 102.294877][ T3492] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.1286: invalid block [ 102.305752][ T3492] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1286: couldn't read orphan inode 11 (err -117) [ 102.318192][ T3492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.335338][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 102.340992][ T37] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 102.355036][ T3496] random: crng reseeded on system resumption [ 102.357071][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 102.357083][ T28] audit: type=1400 audit(1724693933.575:590): avc: denied { write } for pid=3495 comm="syz.3.1287" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 102.390543][ T28] audit: type=1400 audit(1724693933.605:591): avc: denied { ioctl } for pid=3495 comm="syz.3.1287" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 102.416629][ T24] scsi host1: usb-storage 3-1:1.0 [ 102.436991][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 102.457066][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 102.534269][ T3505] loop4: detected capacity change from 0 to 128 [ 102.557089][ T805] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 102.570220][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.581053][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.590647][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 102.603617][ T805] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 102.612477][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.620441][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 102.620594][ T302] usb 3-1: USB disconnect, device number 28 [ 102.628150][ T37] usb 1-1: can't read configurations, error -61 [ 102.639866][ T805] usb 2-1: config 0 descriptor?? [ 102.644695][ T37] usb usb1-port1: unable to enumerate USB device [ 102.707023][ T312] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 103.067111][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.077872][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.088861][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.101759][ T312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.108303][ T805] kye 0003:0458:5011.0053: unbalanced collection at end of report description [ 103.111031][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.121937][ T805] kye 0003:0458:5011.0053: parse failed [ 103.127912][ T312] usb 4-1: config 0 descriptor?? [ 103.135269][ T805] kye: probe of 0003:0458:5011.0053 failed with error -22 [ 103.165852][ T3520] loop2: detected capacity change from 0 to 256 [ 103.172400][ T3520] FAT-fs (loop2): Unrecognized mount option "shortname}lower" or missing value [ 103.236595][ T3523] loop2: detected capacity change from 0 to 8192 [ 103.243630][ T3523] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.281832][ T3527] loop2: detected capacity change from 0 to 512 [ 103.288483][ T3527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.299135][ T3527] EXT4-fs (loop2): 1 truncate cleaned up [ 103.304571][ T3527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.325897][ T2500] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 103.337531][ T2505] usb 2-1: USB disconnect, device number 28 [ 103.345111][ T2998] bridge0: port 3(syz_tun) entered disabled state [ 103.354236][ T2998] device syz_tun left promiscuous mode [ 103.359900][ T2998] bridge0: port 3(syz_tun) entered disabled state [ 103.389549][ T2998] EXT4-fs (loop2): unmounting filesystem. [ 103.526956][ T302] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 103.539788][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.546837][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.554313][ T3540] device bridge_slave_0 entered promiscuous mode [ 103.561246][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.568149][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.575180][ T3540] device bridge_slave_1 entered promiscuous mode [ 103.617865][ T312] plantronics 0003:047F:FFFF.0054: ignoring exceeding usage max [ 103.628984][ T312] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 103.633058][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.643063][ T312] plantronics 0003:047F:FFFF.0054: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.643408][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.662648][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.669446][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.689157][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.696522][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.703699][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.712399][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.720537][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.727399][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.748154][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.756688][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.764692][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.766981][ T302] usb 1-1: Using ep0 maxpacket: 16 [ 103.771537][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.771710][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.791627][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.801321][ T3540] device veth0_vlan entered promiscuous mode [ 103.809243][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.823524][ T3540] device veth1_macvtap entered promiscuous mode [ 103.831342][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.839583][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.846781][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.864066][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.872393][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.887177][ T302] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 103.892510][ T3557] loop2: detected capacity change from 0 to 1024 [ 103.895159][ T302] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 103.895183][ T302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.922548][ T805] usb 4-1: USB disconnect, device number 25 [ 103.924628][ T302] usb 1-1: config 0 has no interface number 0 [ 103.933280][ T3557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.938244][ T302] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 103.961614][ T3557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.962228][ T302] usb 1-1: config 0 interface 104 has no altsetting 1 [ 103.986789][ T3540] EXT4-fs (loop2): unmounting filesystem. [ 104.013188][ T3562] loop1: detected capacity change from 0 to 512 [ 104.020550][ T3562] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 104.031743][ T3562] block device autoloading is deprecated and will be removed. [ 104.042514][ T3562] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.052203][ T10] device bridge_slave_1 left promiscuous mode [ 104.056395][ T3562] EXT4-fs (loop1): couldn't read superblock of external journal [ 104.058236][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.073257][ T10] device bridge_slave_0 left promiscuous mode [ 104.079507][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.087457][ T10] device veth1_macvtap left promiscuous mode [ 104.093262][ T10] device veth0_vlan left promiscuous mode [ 104.107092][ T302] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 6.79 [ 104.115953][ T302] usb 1-1: New USB device strings: Mfr=0, Product=189, SerialNumber=3 [ 104.136683][ T302] usb 1-1: Product: syz [ 104.143550][ T302] usb 1-1: SerialNumber: syz [ 104.164318][ T302] usb 1-1: config 0 descriptor?? [ 104.218650][ T3573] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1321'. [ 104.427009][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 104.427405][ T302] asix 1-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.448403][ T302] asix: probe of 1-1:0.104 failed with error -71 [ 104.457768][ T302] usb 1-1: USB disconnect, device number 28 [ 104.737008][ T2505] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 104.787248][ T24] usb 3-1: config index 0 descriptor too short (expected 65396, got 59) [ 104.798280][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 104.821056][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.926262][ T3601] loop1: detected capacity change from 0 to 40427 [ 104.937079][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.948867][ T3601] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 104.949884][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.956539][ T3601] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.975391][ T3601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.991240][ T24] usb 3-1: SerialNumber: syz [ 105.017032][ T3569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.023151][ T3601] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.031394][ T3601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.067682][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.067704][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.075384][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.082919][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.090968][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.097075][ T2505] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.098531][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.106333][ T2505] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.116135][ T2367] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 105.123174][ T2505] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.148148][ T2505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.156553][ T2505] usb 5-1: config 0 descriptor?? [ 105.236752][ T3615] sock: sock_set_timeout: `syz.1.1335' (pid 3615) tries to set negative timeout [ 105.247001][ T3569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.287003][ T805] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 105.336027][ T3619] loop1: detected capacity change from 0 to 512 [ 105.346591][ T3619] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1338: casefold flag without casefold feature [ 105.362293][ T3619] EXT4-fs (loop1): 1 truncate cleaned up [ 105.366659][ T3613] loop3: detected capacity change from 0 to 40427 [ 105.368284][ T3619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.377002][ T3613] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.392807][ T3613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.407391][ T3613] F2FS-fs (loop3): invalid crc value [ 105.413822][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 105.432979][ T3613] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.435007][ T3625] loop1: detected capacity change from 0 to 512 [ 105.452908][ T3625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.461887][ T3625] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038 (0x7fffffff) [ 105.479032][ T3613] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.485995][ T3613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.486642][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 105.513329][ T3613] syz.3.1336: attempt to access beyond end of device [ 105.513329][ T3613] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 105.531506][ T28] audit: type=1326 audit(1724693936.755:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.1.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d5cb79e79 code=0x0 [ 105.554898][ T3391] syz-executor: attempt to access beyond end of device [ 105.554898][ T3391] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 105.646295][ T3590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.654700][ T3590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.663058][ T302] usb 5-1: USB disconnect, device number 29 [ 105.698759][ T24] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 105.716845][ T28] audit: type=1400 audit(1724693936.935:593): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.745445][ T28] audit: type=1400 audit(1724693936.935:594): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=10198 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.767881][ T28] audit: type=1400 audit(1724693936.935:595): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=10198 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.769353][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.791218][ T28] audit: type=1400 audit(1724693936.935:596): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=10198 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.828338][ T28] audit: type=1400 audit(1724693936.965:597): avc: denied { read } for pid=3640 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.834727][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.867368][ T28] audit: type=1400 audit(1724693936.965:598): avc: denied { open } for pid=3640 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.877694][ T3651] loop3: detected capacity change from 0 to 512 [ 105.892229][ T28] audit: type=1400 audit(1724693936.965:599): avc: denied { getattr } for pid=3640 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.898419][ T805] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 105.935929][ T3651] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.1345: casefold flag without casefold feature [ 105.949136][ T3651] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 105.950381][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.959653][ T3651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.990828][ T805] usb 1-1: config 0 descriptor?? [ 105.996694][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 106.063584][ T3661] loop3: detected capacity change from 0 to 128 [ 106.314146][ T302] usb 3-1: USB disconnect, device number 29 [ 108.947050][ T805] usbhid 1-1:0.0: can't add hid device: -71 [ 108.952866][ T805] usbhid: probe of 1-1:0.0 failed with error -71 [ 108.967165][ T805] usb 1-1: USB disconnect, device number 29 [ 108.982193][ T2505] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 108.989910][ T302] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 108.992072][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 108.992086][ T28] audit: type=1400 audit(1724693940.215:607): avc: denied { sys_chroot } for pid=3672 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 108.992108][ T28] audit: type=1400 audit(1724693940.215:608): avc: denied { setgid } for pid=3672 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 108.992126][ T28] audit: type=1400 audit(1724693940.215:609): avc: denied { setuid } for pid=3672 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 108.992143][ T28] audit: type=1400 audit(1724693940.215:610): avc: denied { setrlimit } for pid=3672 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 109.012184][ T24] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 109.111421][ T28] audit: type=1326 audit(1724693940.335:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.2.1354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6731979e79 code=0x0 [ 109.140299][ T24] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 109.159963][ T24] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz1 [ 109.187473][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 109.252825][ T3695] loop3: detected capacity change from 0 to 8192 [ 109.274090][ T3712] loop1: detected capacity change from 0 to 1024 [ 109.294531][ T3717] loop0: detected capacity change from 0 to 256 [ 109.304221][ T3717] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.324705][ T3717] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.348129][ T3712] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.392404][ T3712] EXT4-fs (loop1): shut down requested (0) [ 109.412414][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 109.473056][ T3749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 109.490195][ T3749] IPv6: Can't replace route, no match found [ 109.700400][ T3783] loop3: detected capacity change from 0 to 512 [ 109.707001][ T19] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 109.728304][ T3783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.737373][ T3783] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 109.752495][ T3783] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #12: block 32: comm syz.3.1382: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 109.775436][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 109.776987][ T302] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 109.897047][ T805] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 109.947134][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 110.067370][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.078140][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.087664][ T19] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 110.096484][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.105172][ T19] usb 2-1: config 0 descriptor?? [ 110.117001][ T312] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 110.147102][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.158502][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.168119][ T302] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 110.177080][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.185345][ T302] usb 1-1: config 0 descriptor?? [ 110.247035][ T2505] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 110.277055][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.287803][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.297283][ T805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.310110][ T805] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 110.318909][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.327311][ T805] usb 5-1: config 0 descriptor?? [ 110.477062][ T312] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.487752][ T2505] usb 4-1: Using ep0 maxpacket: 16 [ 110.492644][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.503355][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.512882][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.578010][ T19] hid-steam 0003:28DE:1142.0056: unexpected long global item [ 110.585363][ T19] hid-steam 0003:28DE:1142.0056: steam_probe:parse of hid interface failed [ 110.593860][ T19] hid-steam: probe of 0003:28DE:1142.0056 failed with error -22 [ 110.601330][ T312] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.610162][ T2505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.621549][ T312] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.629493][ T2505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.639009][ T312] usb 3-1: Manufacturer: syz [ 110.643600][ T2505] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.656470][ T312] usb 3-1: config 0 descriptor?? [ 110.661342][ T2505] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 110.671744][ T302] lg-g15 0003:046D:C222.0057: unknown main item tag 0x0 [ 110.678565][ T2505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.686527][ T302] lg-g15 0003:046D:C222.0057: ignoring exceeding usage max [ 110.693767][ T2505] usb 4-1: config 0 descriptor?? [ 110.700146][ T302] lg-g15 0003:046D:C222.0057: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 110.797592][ T302] usb 2-1: USB disconnect, device number 29 [ 110.817543][ T805] prodikeys 0003:041E:2801.0058: unexpected long global item [ 110.824900][ T805] prodikeys 0003:041E:2801.0058: hid parse failed [ 110.831180][ T805] prodikeys: probe of 0003:041E:2801.0058 failed with error -22 [ 110.907651][ T805] usb 1-1: USB disconnect, device number 30 [ 111.037390][ T37] usb 5-1: USB disconnect, device number 30 [ 111.137696][ T312] appleir 0003:05AC:8243.0059: item fetching failed at offset 0/1 [ 111.145511][ T312] appleir 0003:05AC:8243.0059: parse failed [ 111.151420][ T312] appleir: probe of 0003:05AC:8243.0059 failed with error -22 [ 111.159468][ T2505] gt683r_led 0003:1770:FF00.005A: unknown main item tag 0x7 [ 111.166589][ T2505] gt683r_led 0003:1770:FF00.005A: unknown main item tag 0x7 [ 111.174847][ T2505] gt683r_led 0003:1770:FF00.005A: unbalanced collection at end of report description [ 111.184306][ T2505] gt683r_led 0003:1770:FF00.005A: hid parsing failed [ 111.190817][ T2505] gt683r_led: probe of 0003:1770:FF00.005A failed with error -22 [ 111.340614][ T37] usb 3-1: USB disconnect, device number 30 [ 111.362049][ T2505] usb 4-1: USB disconnect, device number 27 [ 111.419058][ T3803] device vlan2 entered promiscuous mode [ 111.424473][ T3803] device dummy0 entered promiscuous mode [ 111.427561][ T28] audit: type=1326 audit(1724693942.645:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3798 comm="syz.1.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d5cb79e79 code=0x0 [ 111.452750][ T3803] device dummy0 left promiscuous mode [ 111.575384][ T3812] loop0: detected capacity change from 0 to 1024 [ 111.582128][ T3812] EXT4-fs: Ignoring removed oldalloc option [ 111.609007][ T3818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'. [ 111.643052][ T3812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.654071][ T3824] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1398'. [ 111.702758][ T3828] syz.4.1400[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.702829][ T3828] syz.4.1400[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.730277][ T2884] EXT4-fs (loop0): unmounting filesystem. [ 111.819621][ T3822] loop1: detected capacity change from 0 to 40427 [ 111.846058][ T3822] F2FS-fs (loop1): invalid crc value [ 111.884301][ T3822] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.977783][ T3858] loop0: detected capacity change from 0 to 16 [ 112.008007][ T3858] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 112.009578][ T3822] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 112.055819][ T2367] syz-executor: attempt to access beyond end of device [ 112.055819][ T2367] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 112.089861][ T3869] loop3: detected capacity change from 0 to 512 [ 112.102877][ T3871] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1419'. [ 112.131351][ T3869] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1418: casefold flag without casefold feature [ 112.187051][ T3869] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1418: missing EA_INODE flag [ 112.188948][ T28] audit: type=1400 audit(1724693943.415:613): avc: denied { bind } for pid=3883 comm="syz.2.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.198817][ T3869] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1418: error while reading EA inode 12 err=-117 [ 112.230308][ T3869] EXT4-fs (loop3): 1 orphan inode deleted [ 112.242487][ T3869] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.263775][ T28] audit: type=1400 audit(1724693943.485:614): avc: denied { map } for pid=3887 comm="syz.2.1426" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.327049][ T3869] support for the xor transformation has been removed. [ 112.343851][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 112.487648][ T3918] usb usb8: usbfs: process 3918 (syz.3.1438) did not claim interface 0 before use [ 112.527002][ T19] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 112.567080][ T2505] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 112.675918][ T28] audit: type=1400 audit(1724693943.895:615): avc: denied { mounton } for pid=3930 comm="syz.3.1444" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 112.707435][ T28] audit: type=1400 audit(1724693943.935:616): avc: denied { bind } for pid=3932 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.741498][ T3937] xt_bpf: check failed: parse error [ 112.785907][ T3948] loop3: detected capacity change from 0 to 256 [ 112.816991][ T2505] usb 5-1: Using ep0 maxpacket: 8 [ 112.887649][ T19] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 112.898634][ T19] usb 2-1: config 0 has no interface number 0 [ 112.937138][ T2505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.948068][ T2505] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.980215][ T2505] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.993106][ T2505] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 113.004170][ T2505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.018356][ T2505] usb 5-1: config 0 descriptor?? [ 113.067096][ T19] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=5e.d2 [ 113.076895][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.085154][ T19] usb 2-1: Product: syz [ 113.099474][ T19] usb 2-1: Manufacturer: syz [ 113.103908][ T19] usb 2-1: SerialNumber: syz [ 113.122151][ T19] usb 2-1: config 0 descriptor?? [ 113.258361][ T3895] xt_hashlimit: size too large, truncated to 1048576 [ 113.283403][ T4002] loop3: detected capacity change from 0 to 512 [ 113.336585][ T4002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.346283][ T4002] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff) [ 113.360162][ T4002] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 113.375425][ T4014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.406967][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 113.557038][ T2505] usbhid 5-1:0.0: can't add hid device: -71 [ 113.562856][ T2505] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.570117][ T2505] usb 5-1: USB disconnect, device number 31 [ 113.659308][ T4033] device vlan2 entered promiscuous mode [ 113.746999][ T312] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 113.827023][ T19] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7e:64:ab:df:34:b0 [ 113.838838][ T19] rtl8150 2-1:0.176: eth1: rtl8150 is detected [ 113.882457][ T4049] loop0: detected capacity change from 0 to 40427 [ 113.892216][ T4049] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 113.900081][ T4049] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.910987][ T4049] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.948800][ T4049] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.955750][ T4049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.972947][ T4049] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.982511][ T4049] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 113.991249][ T19] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 113.998874][ T140] net eth1: rx_urb submit failed: -8 [ 114.117015][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.127034][ T312] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 114.201624][ T805] usb 2-1: USB disconnect, device number 30 [ 114.207358][ T312] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.216290][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.224229][ T312] usb 4-1: SerialNumber: syz [ 114.317035][ T60] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 114.336985][ T2505] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 114.367041][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.377840][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.387391][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 114.396208][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.404743][ T19] usb 3-1: config 0 descriptor?? [ 114.557000][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 114.697025][ T2505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.707935][ T2505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.719985][ T2505] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 114.729600][ T312] usb 4-1: USB disconnect, device number 28 [ 114.739417][ T2505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.752683][ T2505] usb 1-1: config 0 descriptor?? [ 114.867069][ T60] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 114.876208][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.884278][ T60] usb 5-1: Product: syz [ 114.888066][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.888428][ T60] usb 5-1: Manufacturer: syz [ 114.895838][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.900583][ T60] usb 5-1: SerialNumber: syz [ 114.906548][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.911395][ T60] usb 5-1: config 0 descriptor?? [ 114.917811][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.929064][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.935748][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.942624][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.949526][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.956317][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.963102][ T19] lg-g15 0003:046D:C222.005B: unknown main item tag 0x0 [ 114.967512][ T60] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 114.971244][ T19] lg-g15 0003:046D:C222.005B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 114.979418][ T60] usb 5-1: Detected FT232H [ 115.114942][ T19] usb 3-1: USB disconnect, device number 31 [ 115.120727][ T312] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 115.197977][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 115.225854][ T4102] loop3: detected capacity change from 0 to 1024 [ 115.234779][ T4102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.237935][ T2505] itetech 0003:258A:6A88.005C: unknown main item tag 0x0 [ 115.251561][ T2505] itetech 0003:258A:6A88.005C: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 115.263569][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 115.276045][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 115.276058][ T28] audit: type=1400 audit(1724693946.495:621): avc: denied { bind } for pid=4105 comm="syz.3.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.437022][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 115.451423][ T24] usb 1-1: USB disconnect, device number 31 [ 115.467034][ T60] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 115.473750][ T60] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.485102][ T60] usb 5-1: USB disconnect, device number 32 [ 115.487046][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.491523][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.507106][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.510876][ T60] ftdi_sio 5-1:0.0: device disconnected [ 115.520638][ T312] usb 2-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 115.534648][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.555680][ T312] usb 2-1: config 0 descriptor?? [ 115.567001][ T2505] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 115.927020][ T2505] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 115.937711][ T2505] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.010566][ T28] audit: type=1400 audit(1724693947.235:622): avc: denied { mount } for pid=4132 comm="syz.4.1520" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 116.033497][ T312] wacom 0003:056A:00D1.005D: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 116.042870][ T2505] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.052150][ T2505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.061262][ T312] wacom 0003:056A:00D1.005D: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.1-1/input0 [ 116.072151][ T2505] usb 4-1: SerialNumber: syz [ 116.077771][ T312] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D1.005D/input/input32 [ 116.097214][ T4108] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.227013][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 116.247680][ T302] usb 2-1: USB disconnect, device number 31 [ 116.318114][ T4108] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.386997][ T312] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 116.477007][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 116.617041][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.627037][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 116.628002][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.715533][ T4151] loop2: detected capacity change from 0 to 256 [ 116.721806][ T4151] exfat: Deprecated parameter 'namecase' [ 116.727504][ T4151] exfat: Deprecated parameter 'utf8' [ 116.735859][ T4151] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 116.748727][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.767092][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 116.768512][ T2505] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 116.781275][ T24] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 116.791793][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.805804][ T24] usb 1-1: Product: syz [ 116.813884][ T24] usb 1-1: Manufacturer: syz [ 116.827875][ T24] usb 1-1: config 0 descriptor?? [ 116.838340][ T312] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 116.858176][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.874347][ T312] usb 5-1: config 0 descriptor?? [ 117.047982][ T543] usb 4-1: USB disconnect, device number 29 [ 117.053972][ T543] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 117.256992][ T302] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 117.267117][ T60] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 117.337621][ T24] kovaplus 0003:1E7D:2D50.005E: unknown main item tag 0xd [ 117.345018][ T24] kovaplus 0003:1E7D:2D50.005E: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 117.368308][ T312] hid-multitouch 0003:1FD2:6007.005F: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 117.517000][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 117.587740][ T37] usb 5-1: USB disconnect, device number 33 [ 117.617044][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.627896][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.637475][ T302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.647045][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.650403][ T302] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 117.661324][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.669895][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.679401][ T60] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 117.688039][ T302] usb 3-1: config 0 descriptor?? [ 117.703278][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.720362][ T60] usb 2-1: config 0 descriptor?? [ 117.977005][ T24] kovaplus 0003:1E7D:2D50.005E: couldn't init struct kovaplus_device [ 117.984897][ T24] kovaplus 0003:1E7D:2D50.005E: couldn't install mouse [ 117.992205][ T24] kovaplus: probe of 0003:1E7D:2D50.005E failed with error -71 [ 118.001121][ T24] usb 1-1: USB disconnect, device number 32 [ 118.016975][ T314] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 118.177569][ T302] acrux 0003:1A34:0802.0060: item fetching failed at offset 3/5 [ 118.185845][ T302] acrux 0003:1A34:0802.0060: parse failed [ 118.192479][ T302] acrux: probe of 0003:1A34:0802.0060 failed with error -22 [ 118.206259][ T60] hid-multitouch 0003:1FD2:6007.0061: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 118.402189][ T543] usb 3-1: USB disconnect, device number 32 [ 118.417005][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.426022][ T302] usb 2-1: USB disconnect, device number 32 [ 118.427795][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.443100][ T314] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 118.451893][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.460137][ T314] usb 4-1: config 0 descriptor?? [ 118.757011][ T312] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 118.806979][ T2505] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 118.918226][ T314] hid-steam 0003:28DE:1142.0062: unknown main item tag 0x0 [ 118.931406][ T314] hid-steam 0003:28DE:1142.0062: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 118.950176][ T4254] loop1: detected capacity change from 0 to 256 [ 118.956347][ T314] hid-steam 0003:28DE:1142.0063: unknown main item tag 0x0 [ 118.956506][ T4254] FAT-fs (loop1): Unrecognized mount option "shortname}lower" or missing value [ 118.973318][ T314] hid-steam 0003:28DE:1142.0063: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 118.996981][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 119.004396][ T4258] loop1: detected capacity change from 0 to 512 [ 119.010972][ T4258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.021890][ T4258] EXT4-fs (loop1): 1 truncate cleaned up [ 119.027952][ T4258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.043927][ T2367] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 119.056969][ T314] hid-steam 0003:28DE:1142.0062: Steam wireless receiver connected [ 119.098770][ T2367] EXT4-fs (loop1): unmounting filesystem. [ 119.127053][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.142711][ T312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.143477][ T314] usb 4-1: USB disconnect, device number 30 [ 119.159605][ T312] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.170606][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.181795][ T312] usb 1-1: config 0 descriptor?? [ 119.182159][ T314] hid-steam 0003:28DE:1142.0062: Steam wireless receiver disconnected [ 119.197074][ T2505] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 119.206977][ T2505] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 119.255670][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.262774][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.270470][ T4264] device bridge_slave_0 entered promiscuous mode [ 119.278985][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.285932][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.293121][ T4264] device bridge_slave_1 entered promiscuous mode [ 119.327001][ T302] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 119.339197][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.346047][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.353141][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.359927][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.377938][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.385275][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.392389][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.399433][ T2505] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 119.409150][ T2505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.412473][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.416962][ T2505] usb 5-1: Product: syz [ 119.416996][ T2505] usb 5-1: Manufacturer: syz [ 119.427449][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.428897][ T2505] usb 5-1: SerialNumber: syz [ 119.433168][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.440659][ T2505] usb 5-1: config 0 descriptor?? [ 119.454766][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.464466][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.471432][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.478556][ T4249] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 119.485505][ T4249] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 119.498153][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.506513][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.519236][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.529738][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.538205][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.545340][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.553996][ T4264] device veth0_vlan entered promiscuous mode [ 119.563570][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.572220][ T4264] device veth1_macvtap entered promiscuous mode [ 119.580864][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.591900][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.667899][ T312] microsoft 0003:045E:07DA.0064: ignoring exceeding usage max [ 119.680971][ T312] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0064/input/input35 [ 119.707069][ T2505] dm9601: probe of 5-1:0.0 failed with error -71 [ 119.713572][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.727241][ T2505] usb 5-1: USB disconnect, device number 34 [ 119.732970][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.743520][ T302] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 119.752566][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.761219][ T312] microsoft 0003:045E:07DA.0064: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 119.774016][ T697] device bridge_slave_1 left promiscuous mode [ 119.780067][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.787239][ T302] usb 3-1: config 0 descriptor?? [ 119.792159][ T697] device bridge_slave_0 left promiscuous mode [ 119.807886][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.815706][ T697] device veth1_macvtap left promiscuous mode [ 119.821599][ T697] device veth0_vlan left promiscuous mode [ 119.884455][ T314] usb 1-1: USB disconnect, device number 33 [ 119.946997][ T19] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 120.257668][ T302] holtek 0003:1241:5015.0065: item fetching failed at offset 1/5 [ 120.265352][ T302] holtek 0003:1241:5015.0065: parse failed [ 120.271010][ T302] holtek: probe of 0003:1241:5015.0065 failed with error -22 [ 120.327022][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.338135][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.347744][ T19] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 120.356530][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.365623][ T19] usb 2-1: config 0 descriptor?? [ 120.407007][ T312] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 120.459953][ T302] usb 3-1: USB disconnect, device number 33 [ 120.495562][ T4286] loop0: detected capacity change from 0 to 512 [ 120.502151][ T4286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.513231][ T4286] EXT4-fs (loop0): 1 truncate cleaned up [ 120.518837][ T4286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.519340][ T543] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 120.536765][ T2884] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 120.659668][ T3233] EXT4-fs (loop0): unmounting filesystem. [ 120.754503][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.761572][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.768873][ T4289] device bridge_slave_0 entered promiscuous mode [ 120.778756][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.785656][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.792904][ T4289] device bridge_slave_1 entered promiscuous mode [ 120.799109][ T312] usb 4-1: unable to get BOS descriptor set [ 120.804782][ T543] usb 5-1: Using ep0 maxpacket: 16 [ 120.838339][ T19] wacom 0003:056A:00D0.0066: item fetching failed at offset 1/5 [ 120.845995][ T19] wacom 0003:056A:00D0.0066: parse failed [ 120.851728][ T19] wacom: probe of 0003:056A:00D0.0066 failed with error -22 [ 120.859206][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.866068][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.873197][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.879943][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.897145][ T312] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 120.899490][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.912441][ T312] usb 4-1: config 0 has no interface number 0 [ 120.918459][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.925565][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.937045][ T543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.948069][ T543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.957737][ T543] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 120.966712][ T543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.974928][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.983708][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.990583][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.994296][ T543] usb 5-1: config 0 descriptor?? [ 120.999317][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.011354][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.018230][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.026787][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.034773][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.053489][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.061647][ T314] usb 2-1: USB disconnect, device number 33 [ 121.080726][ T4289] device veth0_vlan entered promiscuous mode [ 121.088551][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.096188][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.103352][ T312] usb 4-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=22.e3 [ 121.112829][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.119882][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.127866][ T312] usb 4-1: Product: syz [ 121.131835][ T312] usb 4-1: Manufacturer: syz [ 121.136265][ T312] usb 4-1: SerialNumber: syz [ 121.141417][ T312] usb 4-1: config 0 descriptor?? [ 121.146252][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.154366][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.162666][ T4289] device veth1_macvtap entered promiscuous mode [ 121.176017][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.183509][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.187352][ T312] usb-storage 4-1:0.235: USB Mass Storage device detected [ 121.191903][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.206748][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.207414][ T312] usb-storage 4-1:0.235: Quirks match for vid 0421 pid 0492: 400 [ 121.215601][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.403212][ T312] usb 4-1: USB disconnect, device number 31 [ 121.427776][ T697] device bridge_slave_1 left promiscuous mode [ 121.433707][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.441043][ T697] device bridge_slave_0 left promiscuous mode [ 121.447057][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.454692][ T697] device veth1_macvtap left promiscuous mode [ 121.460777][ T697] device veth0_vlan left promiscuous mode [ 121.488338][ T543] hid-multitouch 0003:1FD2:6007.0067: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 121.536988][ T302] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 121.646710][ T4315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1581'. [ 121.682276][ T28] audit: type=1400 audit(1724693952.905:623): avc: denied { setopt } for pid=4321 comm="syz.1.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.722677][ T543] usb 5-1: USB disconnect, device number 35 [ 121.922625][ T28] audit: type=1400 audit(1724693953.145:624): avc: denied { view } for pid=4331 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 121.941407][ T302] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.950574][ T302] usb 1-1: config 1 has no interface number 0 [ 121.956477][ T302] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.958238][ T4338] loop3: detected capacity change from 0 to 512 [ 121.967416][ T302] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 121.982505][ T302] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 121.982890][ T4338] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.992173][ T302] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 10007, setting to 1024 [ 122.000714][ T4338] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.1592: casefold flag without casefold feature [ 122.010325][ T302] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 122.022130][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 122.033358][ T4338] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 122.049049][ T4338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.088685][ T3391] EXT4-fs (loop3): unmounting filesystem. [ 122.187048][ T302] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.196065][ T302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.199563][ T4344] loop3: detected capacity change from 0 to 40427 [ 122.204041][ T302] usb 1-1: Product: syz [ 122.210284][ T314] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 122.214356][ T302] usb 1-1: Manufacturer: syz [ 122.226082][ T302] usb 1-1: SerialNumber: syz [ 122.232424][ T4344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.254378][ T4349] loop4: detected capacity change from 0 to 256 [ 122.268987][ T4344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.281235][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 122.293319][ T3391] syz-executor: attempt to access beyond end of device [ 122.293319][ T3391] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.339363][ T4356] loop4: detected capacity change from 0 to 256 [ 122.345749][ T4356] exfat: Deprecated parameter 'utf8' [ 122.353037][ T4356] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 122.389417][ T4358] random: crng reseeded on system resumption [ 122.407016][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.426576][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.467006][ T314] usb 3-1: Using ep0 maxpacket: 8 [ 122.468733][ T4308] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.547723][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 122.556613][ T24] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 122.564779][ T24] usb 2-1: Product: syz [ 122.568765][ T24] usb 2-1: Manufacturer: syz [ 122.573847][ T24] usb 2-1: config 0 descriptor?? [ 122.587087][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.597817][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.607349][ T314] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 122.616142][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.625206][ T314] usb 3-1: config 0 descriptor?? [ 123.057644][ T24] kovaplus 0003:1E7D:2D50.0068: item fetching failed at offset 5/7 [ 123.065516][ T24] kovaplus 0003:1E7D:2D50.0068: parse failed [ 123.071373][ T24] kovaplus: probe of 0003:1E7D:2D50.0068 failed with error -22 [ 123.108156][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.115395][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.122665][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.129805][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.137010][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.137422][ T4308] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.144187][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.158440][ T314] playstation 0003:054C:0CE6.0069: unknown main item tag 0x0 [ 123.166139][ T314] playstation 0003:054C:0CE6.0069: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 123.187481][ T302] cdc_ncm 1-1:1.1: bind() failure [ 123.267634][ T302] usb 2-1: USB disconnect, device number 34 [ 123.327041][ T314] playstation 0003:054C:0CE6.0069: Invalid reportID received, expected 9 got 0 [ 123.336143][ T314] playstation 0003:054C:0CE6.0069: Failed to retrieve DualSense pairing info: -22 [ 123.345173][ T314] playstation 0003:054C:0CE6.0069: Failed to get MAC address from DualSense [ 123.353648][ T314] playstation 0003:054C:0CE6.0069: Failed to create dualsense. [ 123.361523][ T314] playstation: probe of 0003:054C:0CE6.0069 failed with error -22 [ 123.433233][ T323] usb 1-1: USB disconnect, device number 34 [ 123.538737][ T24] usb 3-1: USB disconnect, device number 34 [ 123.646966][ T312] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 123.696961][ T314] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 123.944953][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.007027][ T312] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 124.015938][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.024542][ T312] usb 4-1: config 0 descriptor?? [ 124.037029][ T323] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 124.067697][ T312] usb-storage 4-1:0.0: USB Mass Storage device detected [ 124.107006][ T314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 124.117679][ T314] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.227018][ T314] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.235880][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.243704][ T314] usb 5-1: SerialNumber: syz [ 124.267033][ T4370] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 124.272228][ T24] usb 4-1: USB disconnect, device number 32 [ 124.397015][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.407732][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.417290][ T323] usb 2-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 124.426090][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.434836][ T323] usb 2-1: config 0 descriptor?? [ 124.488299][ T4370] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 124.874883][ T4381] loop2: detected capacity change from 0 to 40427 [ 124.881753][ T4381] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.889481][ T4381] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.898283][ T323] wacom 0003:056A:0325.006A: unbalanced delimiter at end of report description [ 124.898723][ T4381] F2FS-fs (loop2): invalid crc value [ 124.908351][ T323] wacom 0003:056A:0325.006A: parse failed [ 124.913468][ T4381] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.918441][ T323] wacom: probe of 0003:056A:0325.006A failed with error -22 [ 124.938699][ T314] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 124.952689][ T4381] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.959756][ T4381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.999328][ T3540] syz-executor: attempt to access beyond end of device [ 124.999328][ T3540] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 125.087027][ T323] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 125.110033][ T543] usb 2-1: USB disconnect, device number 35 [ 125.147464][ T805] usb 5-1: USB disconnect, device number 36 [ 125.153362][ T805] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 125.347001][ T323] usb 4-1: Using ep0 maxpacket: 16 [ 125.367036][ T312] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 125.477007][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.487798][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.497249][ T323] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 125.506072][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.514651][ T323] usb 4-1: config 0 descriptor?? [ 125.617013][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 125.757185][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.769196][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.779212][ T312] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 125.788141][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.796623][ T312] usb 3-1: config 0 descriptor?? [ 125.826247][ T4442] loop1: detected capacity change from 0 to 512 [ 125.847035][ T4442] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.1611: casefold flag without casefold feature [ 125.859868][ T4442] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 125.870047][ T4442] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.887037][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 125.907971][ T4448] netlink: 'syz.4.1614': attribute type 29 has an invalid length. [ 125.987095][ T841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.989157][ T323] hid-multitouch 0003:1FD2:6007.006B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 126.016851][ T4459] SELinux: failed to load policy [ 126.042081][ T4460] netlink: 'syz.1.1620': attribute type 4 has an invalid length. [ 126.087526][ T4471] loop0: detected capacity change from 0 to 512 [ 126.096330][ T4471] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 126.105161][ T4471] EXT4-fs (loop0): invalid journal inode [ 126.111132][ T4471] EXT4-fs (loop0): can't get journal size [ 126.121227][ T4471] EXT4-fs (loop0): 1 truncate cleaned up [ 126.126692][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.150559][ T4289] EXT4-fs (loop0): unmounting filesystem. [ 126.195322][ T24] usb 4-1: USB disconnect, device number 33 [ 126.268353][ T312] wacom 0003:056A:0018.006C: unknown main item tag 0x0 [ 126.276174][ T312] wacom 0003:056A:0018.006C: item fetching failed at offset 5/7 [ 126.286050][ T312] wacom 0003:056A:0018.006C: parse failed [ 126.291674][ T312] wacom: probe of 0003:056A:0018.006C failed with error -22 [ 126.325079][ T4495] xt_hashlimit: size too large, truncated to 1048576 [ 126.416974][ T805] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 126.456965][ T312] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 126.472377][ T4500] ================================================================== [ 126.480259][ T4500] BUG: KASAN: use-after-free in cpu_map_generic_redirect+0x1c7/0x780 [ 126.488153][ T4500] Read of size 8 at addr ffff88811ea28618 by task syz.0.1639/4500 [ 126.495788][ T4500] [ 126.497963][ T4500] CPU: 1 PID: 4500 Comm: syz.0.1639 Not tainted 6.1.90-syzkaller-00030-g370ea8bc2e0b #0 [ 126.507507][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.517403][ T4500] Call Trace: [ 126.520527][ T4500] [ 126.523306][ T4500] dump_stack_lvl+0x151/0x1b7 [ 126.527818][ T4500] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 126.533109][ T4500] ? _printk+0xd1/0x111 [ 126.537104][ T4500] ? __virt_addr_valid+0x242/0x2f0 [ 126.542054][ T4500] print_report+0x158/0x4e0 [ 126.546389][ T4500] ? __virt_addr_valid+0x242/0x2f0 [ 126.551338][ T4500] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 126.557419][ T4500] ? cpu_map_generic_redirect+0x1c7/0x780 [ 126.562969][ T4500] kasan_report+0x13c/0x170 [ 126.567306][ T4500] ? cpu_map_generic_redirect+0x1c7/0x780 [ 126.572862][ T4500] ? kfree+0x7a/0xf0 [ 126.576594][ T4500] __asan_report_load8_noabort+0x14/0x20 [ 126.582064][ T4500] cpu_map_generic_redirect+0x1c7/0x780 [ 126.587445][ T4500] ? cpu_map_enqueue+0x370/0x370 [ 126.592224][ T4500] xdp_do_generic_redirect+0x3b5/0xad0 [ 126.597514][ T4500] do_xdp_generic+0x53e/0x800 [ 126.602025][ T4500] ? generic_xdp_tx+0x560/0x560 [ 126.606713][ T4500] ? tun_get_user+0x2340/0x3a90 [ 126.611398][ T4500] tun_get_user+0x238a/0x3a90 [ 126.616007][ T4500] ? release_firmware_map_entry+0x111/0x191 [ 126.621736][ T4500] ? futex_q_unlock+0x30/0x30 [ 126.626248][ T4500] ? tun_do_read+0x2000/0x2000 [ 126.630849][ T4500] ? ref_tracker_alloc+0x31d/0x450 [ 126.635796][ T4500] ? ref_tracker_dir_print+0x160/0x160 [ 126.641094][ T4500] ? futex_wait_setup+0x330/0x330 [ 126.645950][ T4500] ? avc_policy_seqno+0x1b/0x70 [ 126.650638][ T4500] ? tun_get+0xe9/0x120 [ 126.654632][ T4500] tun_chr_write_iter+0x129/0x210 [ 126.659490][ T4500] vfs_write+0x902/0xeb0 [ 126.663570][ T4500] ? file_end_write+0x1c0/0x1c0 [ 126.668254][ T4500] ? do_futex+0x55a/0x9a0 [ 126.672422][ T4500] ? __fget_files+0x2cb/0x330 [ 126.676938][ T4500] ? __fdget_pos+0x204/0x390 [ 126.681363][ T4500] ? ksys_write+0x77/0x2c0 [ 126.685615][ T4500] ksys_write+0x199/0x2c0 [ 126.689781][ T4500] ? save_fpregs_to_fpstate+0x220/0x220 [ 126.695163][ T4500] ? __ia32_sys_read+0x90/0x90 [ 126.699850][ T4500] ? fpregs_restore_userregs+0x130/0x290 [ 126.705319][ T4500] __x64_sys_write+0x7b/0x90 [ 126.709742][ T4500] x64_sys_call+0x2f/0x9a0 [ 126.713996][ T4500] do_syscall_64+0x3b/0xb0 [ 126.718252][ T4500] ? clear_bhb_loop+0x55/0xb0 [ 126.722762][ T4500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.728501][ T4500] RIP: 0033:0x7f3d75f7895f [ 126.732744][ T4500] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 126.752187][ T4500] RSP: 002b:00007f3d76e14000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.760438][ T4500] RAX: ffffffffffffffda RBX: 00007f3d76115f80 RCX: 00007f3d75f7895f [ 126.768330][ T4500] RDX: 0000000000000d86 RSI: 0000000020001580 RDI: 00000000000000c8 [ 126.776141][ T4500] RBP: 00007f3d75fe793e R08: 0000000000000000 R09: 0000000000000000 [ 126.783952][ T4500] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 126.791762][ T4500] R13: 0000000000000000 R14: 00007f3d76115f80 R15: 00007ffe48f950b8 [ 126.799578][ T4500] [ 126.802439][ T4500] [ 126.804608][ T4500] Allocated by task 319: [ 126.808783][ T4500] kasan_set_track+0x4b/0x70 [ 126.813205][ T4500] kasan_save_alloc_info+0x1f/0x30 [ 126.818152][ T4500] __kasan_kmalloc+0x9c/0xb0 [ 126.822581][ T4500] kmalloc_trace+0x44/0xa0 [ 126.826831][ T4500] kernfs_fop_open+0x350/0xb10 [ 126.831434][ T4500] do_dentry_open+0x891/0x1250 [ 126.836059][ T4500] vfs_open+0x73/0x80 [ 126.839858][ T4500] path_openat+0x2532/0x2d60 [ 126.844278][ T4500] do_filp_open+0x230/0x480 [ 126.848618][ T4500] do_sys_openat2+0x151/0x890 [ 126.853133][ T4500] __x64_sys_openat+0x243/0x290 [ 126.857821][ T4500] x64_sys_call+0x6bf/0x9a0 [ 126.862160][ T4500] do_syscall_64+0x3b/0xb0 [ 126.866414][ T4500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.872155][ T4500] [ 126.874310][ T4500] Last potentially related work creation: [ 126.879864][ T4500] kasan_save_stack+0x3b/0x60 [ 126.884378][ T4500] __kasan_record_aux_stack+0xb4/0xc0 [ 126.889588][ T4500] kasan_record_aux_stack_noalloc+0xb/0x10 [ 126.895229][ T4500] insert_work+0x56/0x310 [ 126.899393][ T4500] __queue_work+0x9b6/0xd70 [ 126.903742][ T4500] queue_work_on+0x105/0x170 [ 126.908165][ T4500] cpu_map_free+0x1e7/0x2c0 [ 126.912503][ T4500] bpf_map_free_deferred+0xf7/0x1b0 [ 126.917532][ T4500] process_one_work+0x73d/0xcb0 [ 126.922226][ T4500] worker_thread+0xa60/0x1260 [ 126.926733][ T4500] kthread+0x26d/0x300 [ 126.930637][ T4500] ret_from_fork+0x1f/0x30 [ 126.934893][ T4500] [ 126.937061][ T4500] Second to last potentially related work creation: [ 126.943484][ T4500] kasan_save_stack+0x3b/0x60 [ 126.947996][ T4500] __kasan_record_aux_stack+0xb4/0xc0 [ 126.953291][ T4500] kasan_record_aux_stack_noalloc+0xb/0x10 [ 126.958932][ T4500] call_rcu+0xee/0x1340 [ 126.962933][ T4500] cpu_map_free+0x109/0x2c0 [ 126.967271][ T4500] bpf_map_free_deferred+0xf7/0x1b0 [ 126.972306][ T4500] process_one_work+0x73d/0xcb0 [ 126.976990][ T4500] worker_thread+0xa60/0x1260 [ 126.981502][ T4500] kthread+0x26d/0x300 [ 126.985496][ T4500] ret_from_fork+0x1f/0x30 [ 126.989753][ T4500] [ 126.991919][ T4500] The buggy address belongs to the object at ffff88811ea28600 [ 126.991919][ T4500] which belongs to the cache kmalloc-192 of size 192 [ 127.005802][ T4500] The buggy address is located 24 bytes inside of [ 127.005802][ T4500] 192-byte region [ffff88811ea28600, ffff88811ea286c0) [ 127.018822][ T4500] [ 127.020990][ T4500] The buggy address belongs to the physical page: [ 127.027247][ T4500] page:ffffea00047a8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811ea28100 pfn:0x11ea28 [ 127.038610][ T4500] flags: 0x4000000000000200(slab|zone=1) [ 127.044088][ T4500] raw: 4000000000000200 ffffea0004250048 ffffea0004355308 ffff888100042c00 [ 127.052507][ T4500] raw: ffff88811ea28100 000000000010000b 00000001ffffffff 0000000000000000 [ 127.061002][ T4500] page dumped because: kasan: bad access detected [ 127.067265][ T4500] page_owner tracks the page as allocated [ 127.072808][ T4500] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 281, tgid 281 (syz-executor), ts 19987622410, free_ts 19982104739 [ 127.090773][ T4500] post_alloc_hook+0x213/0x220 [ 127.095374][ T4500] prep_new_page+0x1b/0x110 [ 127.099712][ T4500] get_page_from_freelist+0x27ea/0x2870 [ 127.105093][ T4500] __alloc_pages+0x3a1/0x780 [ 127.109522][ T4500] alloc_slab_page+0x6c/0xf0 [ 127.113948][ T4500] new_slab+0x90/0x3e0 [ 127.117852][ T4500] ___slab_alloc+0x6f9/0xb80 [ 127.122281][ T4500] __slab_alloc+0x5d/0xa0 [ 127.126443][ T4500] __kmem_cache_alloc_node+0x1af/0x250 [ 127.131738][ T4500] kmalloc_trace+0x2a/0xa0 [ 127.135990][ T4500] alloc_fs_context+0x65/0x830 [ 127.140592][ T4500] fs_context_for_mount+0x24/0x30 [ 127.145451][ T4500] do_new_mount+0x15c/0xb30 [ 127.149793][ T4500] path_mount+0x671/0x1070 [ 127.154047][ T4500] __se_sys_mount+0x2c4/0x3b0 [ 127.158559][ T4500] __x64_sys_mount+0xbf/0xd0 [ 127.162986][ T4500] page last free stack trace: [ 127.167497][ T4500] free_unref_page_prepare+0x83d/0x850 [ 127.172790][ T4500] free_unref_page+0xb2/0x5c0 [ 127.177305][ T4500] __free_pages+0x61/0xf0 [ 127.181478][ T4500] free_pages+0x7c/0x90 [ 127.185462][ T4500] pgd_free+0x17d/0x190 [ 127.189454][ T4500] __mmdrop+0xb0/0x3e0 [ 127.193361][ T4500] finish_task_switch+0x2cd/0x7b0 [ 127.198222][ T4500] __schedule+0xcaf/0x1550 [ 127.202475][ T4500] schedule+0xc3/0x180 [ 127.206380][ T4500] syslog_print+0x256/0x600 [ 127.210728][ T4500] do_syslog+0x732/0x7f0 [ 127.214804][ T4500] __x64_sys_syslog+0x7c/0x90 [ 127.219313][ T4500] x64_sys_call+0x2f9/0x9a0 [ 127.223651][ T4500] do_syscall_64+0x3b/0xb0 [ 127.227904][ T4500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.233634][ T4500] [ 127.235801][ T4500] Memory state around the buggy address: [ 127.241276][ T4500] ffff88811ea28500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.249174][ T4500] ffff88811ea28580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.257072][ T4500] >ffff88811ea28600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.264985][ T4500] ^ [ 127.269661][ T4500] ffff88811ea28680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.277554][ T4500] ffff88811ea28700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.285454][ T4500] ================================================================== [ 127.293410][ T4500] Disabling lock debugging due to kernel taint [ 127.299383][ T4500] BUG: kernel NULL pointer dereference, address: 0000000000000004 [ 127.306977][ T4500] #PF: supervisor write access in kernel mode [ 127.312876][ T4500] #PF: error_code(0x0002) - not-present page [ 127.318694][ T4500] PGD 1260c9067 P4D 1260c9067 PUD 141544067 PMD 0 [ 127.325029][ T4500] Oops: 0002 [#1] PREEMPT SMP KASAN [ 127.330063][ T4500] CPU: 1 PID: 4500 Comm: syz.0.1639 Tainted: G B 6.1.90-syzkaller-00030-g370ea8bc2e0b #0 [ 127.341088][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 127.350980][ T4500] RIP: 0010:_raw_spin_lock+0xba/0x1b0 [ 127.356204][ T4500] Code: 00 00 e8 59 5f 9d fc 4c 89 ff be 04 00 00 00 e8 4c 5f 9d fc 43 0f b6 04 26 84 c0 0f 85 a9 00 00 00 8b 44 24 20 b9 01 00 00 00 41 0f b1 4d 00 75 33 48 c7 04 24 0e 36 e0 45 49 c7 04 1c 00 00 [ 127.375629][ T4500] RSP: 0018:ffffc90000e27680 EFLAGS: 00010297 [ 127.381623][ T4500] RAX: 0000000000000000 RBX: 1ffff920001c4ed0 RCX: 0000000000000001 [ 127.389435][ T4500] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000e276a0 [ 127.397247][ T4500] RBP: ffffc90000e27710 R08: dffffc0000000000 R09: 0000000000000003 [ 127.405059][ T4500] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 127.412868][ T4500] R13: 0000000000000004 R14: 1ffff920001c4ed4 R15: ffffc90000e276a0 [ 127.420683][ T4500] FS: 00007f3d76e146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 127.429445][ T4500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.435870][ T4500] CR2: 0000000000000004 CR3: 0000000128836000 CR4: 00000000003506a0 [ 127.443683][ T4500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.451490][ T4500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.459302][ T4500] Call Trace: [ 127.462427][ T4500] [ 127.465212][ T4500] ? __die_body+0x62/0xb0 [ 127.469371][ T4500] ? __die+0x7e/0x90 [ 127.473104][ T4500] ? page_fault_oops+0x7f9/0xa90 [ 127.477878][ T4500] ? kernelmode_fixup_or_oops+0x270/0x270 [ 127.483433][ T4500] ? vprintk_default+0x26/0x30 [ 127.488034][ T4500] ? _printk+0xd1/0x111 [ 127.492028][ T4500] ? exc_page_fault+0x537/0x700 [ 127.496713][ T4500] ? asm_exc_page_fault+0x27/0x30 [ 127.501575][ T4500] ? _raw_spin_lock+0xba/0x1b0 [ 127.506173][ T4500] ? _raw_spin_trylock_bh+0x190/0x190 [ 127.511382][ T4500] cpu_map_generic_redirect+0x1f4/0x780 [ 127.516763][ T4500] ? cpu_map_enqueue+0x370/0x370 [ 127.521537][ T4500] xdp_do_generic_redirect+0x3b5/0xad0 [ 127.526830][ T4500] do_xdp_generic+0x53e/0x800 [ 127.531346][ T4500] ? generic_xdp_tx+0x560/0x560 [ 127.536032][ T4500] ? tun_get_user+0x2340/0x3a90 [ 127.540716][ T4500] tun_get_user+0x238a/0x3a90 [ 127.545230][ T4500] ? release_firmware_map_entry+0x111/0x191 [ 127.550958][ T4500] ? futex_q_unlock+0x30/0x30 [ 127.555473][ T4500] ? tun_do_read+0x2000/0x2000 [ 127.560071][ T4500] ? ref_tracker_alloc+0x31d/0x450 [ 127.565019][ T4500] ? ref_tracker_dir_print+0x160/0x160 [ 127.570315][ T4500] ? futex_wait_setup+0x330/0x330 [ 127.575179][ T4500] ? avc_policy_seqno+0x1b/0x70 [ 127.579862][ T4500] ? tun_get+0xe9/0x120 [ 127.583852][ T4500] tun_chr_write_iter+0x129/0x210 [ 127.588712][ T4500] vfs_write+0x902/0xeb0 [ 127.592801][ T4500] ? file_end_write+0x1c0/0x1c0 [ 127.597479][ T4500] ? do_futex+0x55a/0x9a0 [ 127.601647][ T4500] ? __fget_files+0x2cb/0x330 [ 127.606160][ T4500] ? __fdget_pos+0x204/0x390 [ 127.610587][ T4500] ? ksys_write+0x77/0x2c0 [ 127.614838][ T4500] ksys_write+0x199/0x2c0 [ 127.619004][ T4500] ? save_fpregs_to_fpstate+0x220/0x220 [ 127.624385][ T4500] ? __ia32_sys_read+0x90/0x90 [ 127.629081][ T4500] ? fpregs_restore_userregs+0x130/0x290 [ 127.634544][ T4500] __x64_sys_write+0x7b/0x90 [ 127.638966][ T4500] x64_sys_call+0x2f/0x9a0 [ 127.643218][ T4500] do_syscall_64+0x3b/0xb0 [ 127.647470][ T4500] ? clear_bhb_loop+0x55/0xb0 [ 127.651985][ T4500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.657714][ T4500] RIP: 0033:0x7f3d75f7895f [ 127.661969][ T4500] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 127.681407][ T4500] RSP: 002b:00007f3d76e14000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 127.689652][ T4500] RAX: ffffffffffffffda RBX: 00007f3d76115f80 RCX: 00007f3d75f7895f [ 127.697467][ T4500] RDX: 0000000000000d86 RSI: 0000000020001580 RDI: 00000000000000c8 [ 127.705277][ T4500] RBP: 00007f3d75fe793e R08: 0000000000000000 R09: 0000000000000000 [ 127.713088][ T4500] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 127.720902][ T4500] R13: 0000000000000000 R14: 00007f3d76115f80 R15: 00007ffe48f950b8 [ 127.728719][ T4500] [ 127.731588][ T4500] Modules linked in: [ 127.735313][ T4500] CR2: 0000000000000004 [ 127.739305][ T4500] ---[ end trace 0000000000000000 ]--- [ 127.744680][ T4500] RIP: 0010:_raw_spin_lock+0xba/0x1b0 [ 127.749888][ T4500] Code: 00 00 e8 59 5f 9d fc 4c 89 ff be 04 00 00 00 e8 4c 5f 9d fc 43 0f b6 04 26 84 c0 0f 85 a9 00 00 00 8b 44 24 20 b9 01 00 00 00 41 0f b1 4d 00 75 33 48 c7 04 24 0e 36 e0 45 49 c7 04 1c 00 00 [ 127.769333][ T4500] RSP: 0018:ffffc90000e27680 EFLAGS: 00010297 [ 127.775229][ T4500] RAX: 0000000000000000 RBX: 1ffff920001c4ed0 RCX: 0000000000000001 [ 127.783043][ T4500] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000e276a0 [ 127.790855][ T4500] RBP: ffffc90000e27710 R08: dffffc0000000000 R09: 0000000000000003 [ 127.798678][ T4500] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 127.806481][ T4500] R13: 0000000000000004 R14: 1ffff920001c4ed4 R15: ffffc90000e276a0 [ 127.814324][ T4500] FS: 00007f3d76e146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 127.823144][ T4500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.829569][ T4500] CR2: 0000000000000004 CR3: 0000000128836000 CR4: 00000000003506a0 [ 127.837378][ T4500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.845187][ T4500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.853013][ T4500] Kernel panic - not syncing: Fatal exception in interrupt [ 127.860440][ T4500] Kernel Offset: disabled [ 127.864559][ T4500] Rebooting in 86400 seconds..