program: r0 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280)=0xe, 0x4) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$UHID_INPUT(r2, &(0x7f0000005600)={0x8, {"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", 0x1000}}, 0x1006) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, r1, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xffffff99, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r5) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) [ 93.254102][ T5288] Bluetooth: hci0: command tx timeout [ 93.279251][ T10] cfg80211: failed to load regulatory.db [ 94.101395][ T5328] loop0: detected capacity change from 0 to 40427 [ 94.170463][ T5328] F2FS-fs (loop0): build fault injection rate: 174 [ 94.183352][ T5328] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 94.205299][ T5328] F2FS-fs (loop0): invalid crc value [ 94.376360][ T5328] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 94.395787][ T5328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.434229][ T5328] syz.0.0: attempt to access beyond end of device [ 94.434229][ T5328] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 94.467639][ T5328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.0'. [ 94.474142][ T5328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.0'. [ 94.657379][ T5328] ------------[ cut here ]------------ [ 94.659884][ C0] ================================================================== [ 94.659896][ C0] BUG: KASAN: slab-use-after-free in free_iova+0xab/0x200 [ 94.660007][ C0] Read of size 8 at addr ffff888000b8dd60 by task syz.0.0/5328 [ 94.660016][ C0] [ 94.660023][ C0] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.660034][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.660040][ C0] Call Trace: [ 94.660044][ C0] [ 94.660049][ C0] dump_stack_lvl+0xe8/0x150 [ 94.660065][ C0] print_address_description+0x55/0x1e0 [ 94.660081][ C0] ? free_iova+0xab/0x200 [ 94.660092][ C0] print_report+0x58/0x70 [ 94.660105][ C0] kasan_report+0x117/0x150 [ 94.660118][ C0] ? free_iova+0xab/0x200 [ 94.660127][ C0] free_iova+0xab/0x200 [ 94.660135][ C0] fq_ring_free_locked+0x1ab/0x310 [ 94.660144][ C0] fq_flush_timeout+0x234/0x2d0 [ 94.660152][ C0] call_timer_fn+0x192/0x5e0 [ 94.660168][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.660178][ C0] ? call_timer_fn+0xd4/0x5e0 [ 94.660186][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 94.660197][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.660244][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.660255][ C0] __run_timer_base+0x652/0x8b0 [ 94.660268][ C0] ? ktime_get+0x45/0x220 [ 94.660283][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 94.660297][ C0] ? ktime_get+0x1f5/0x220 [ 94.660308][ C0] ? lapic_next_event+0x11/0x20 [ 94.660320][ C0] run_timer_softirq+0xb7/0x170 [ 94.660334][ C0] handle_softirqs+0x225/0x840 [ 94.660347][ C0] ? __irq_exit_rcu+0xca/0x220 [ 94.660359][ C0] __irq_exit_rcu+0xca/0x220 [ 94.660370][ C0] irq_exit_rcu+0x9/0x30 [ 94.660380][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 94.660419][ C0] [ 94.660424][ C0] [ 94.660427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.660440][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 94.660454][ C0] Code: ff ff e8 e1 3f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 d3 3f 21 00 e8 ce bf 2d 0a 48 85 db 74 c0 e8 c4 3f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 86 70 [ 94.660462][ C0] RSP: 0018:ffffc9000f02f0e0 EFLAGS: 00000287 [ 94.660473][ C0] RAX: ffffffff81a5e55c RBX: ffffc9000f02f240 RCX: 0000000000100000 [ 94.660480][ C0] RDX: ffffc90020001000 RSI: 000000000002a24d RDI: 000000000002a24e [ 94.660488][ C0] RBP: ffffc9000f02f1f0 R08: ffffffff9057be37 R09: 1ffffffff20af7c6 [ 94.660495][ C0] R10: dffffc0000000000 R11: fffffbfff20af7c7 R12: dffffc0000000000 [ 94.660502][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f471ca0 [ 94.660511][ C0] ? console_flush_all+0x7cc/0xaf0 [ 94.660525][ C0] ? console_flush_all+0x123/0xaf0 [ 94.660536][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 94.660548][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 94.660561][ C0] console_unlock+0xd1/0x1c0 [ 94.660572][ C0] ? __pfx_console_unlock+0x10/0x10 [ 94.660582][ C0] ? _printk+0xdd/0x130 [ 94.660594][ C0] vprintk_emit+0x485/0x560 [ 94.660604][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 94.660633][ C0] _printk+0xdd/0x130 [ 94.660646][ C0] ? kernel_text_address+0xa5/0xe0 [ 94.660656][ C0] ? __pfx__printk+0x10/0x10 [ 94.660669][ C0] ? debug_print_object+0xec/0x230 [ 94.660683][ C0] __report_bug+0x349/0x570 [ 94.660696][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 94.660708][ C0] ? debug_print_object+0xec/0x230 [ 94.660721][ C0] ? __pfx___report_bug+0x10/0x10 [ 94.660732][ C0] ? __lock_acquire+0x683/0x2cf0 [ 94.660745][ C0] ? iommu_bus_notifier+0x6d/0x2c0 [ 94.660754][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 94.660768][ C0] ? blocking_notifier_call_chain+0x6a/0x90 [ 94.660781][ C0] ? device_del+0x740/0x8f0 [ 94.660791][ C0] ? pci_remove_bus_device+0x12a/0x2a0 [ 94.660806][ C0] ? pci_stop_and_remove_bus_device_locked+0x7f/0xb0 [ 94.660821][ C0] report_bug_entry+0x19a/0x290 [ 94.660832][ C0] ? debug_print_object+0x18a/0x230 [ 94.660843][ C0] ? debug_print_object+0x18f/0x230 [ 94.660853][ C0] handle_bug+0xce/0x200 [ 94.660867][ C0] exc_invalid_op+0x1a/0x50 [ 94.660878][ C0] asm_exc_invalid_op+0x1a/0x20 [ 94.660888][ C0] RIP: 0010:debug_print_object+0x18a/0x230 [ 94.660900][ C0] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9d 95 55 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 c3 30 77 0b 48 83 c4 10 5b 41 5c [ 94.660914][ C0] RSP: 0018:ffffc9000f02f6f0 EFLAGS: 00010246 [ 94.660922][ C0] RAX: 1ffffffff17decd0 RBX: dffffc0000000000 RCX: 0000000000000000 [ 94.660929][ C0] RDX: ffffffff8c4bf940 RSI: ffffffff8c4bf3c0 RDI: ffffffff90631fc0 [ 94.660935][ C0] RBP: ffffffff8c4bf940 R08: ffff888000b978e0 R09: ffffffff8bef79e0 [ 94.660941][ C0] R10: dffffc0000000000 R11: ffffffff81b33bb0 R12: 0000000000000000 [ 94.660948][ C0] R13: ffffffff90631fc0 R14: ffff888000b978e0 R15: ffffffff8bef6680 [ 94.660957][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 94.660973][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.660984][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.660996][ C0] debug_check_no_obj_freed+0x2e3/0x450 [ 94.661009][ C0] kfree+0x13e/0x640 [ 94.661019][ C0] ? iommu_deinit_device+0x401/0x840 [ 94.661033][ C0] iommu_deinit_device+0x401/0x840 [ 94.661048][ C0] __iommu_group_remove_device+0x1dd/0x270 [ 94.661060][ C0] iommu_bus_notifier+0x6d/0x2c0 [ 94.661070][ C0] notifier_call_chain+0x1a5/0x3d0 [ 94.661085][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 94.661099][ C0] bus_notify+0x143/0x180 [ 94.661113][ C0] device_del+0x740/0x8f0 [ 94.661124][ C0] ? __pfx_device_del+0x10/0x10 [ 94.661135][ C0] pci_remove_bus_device+0x12a/0x2a0 [ 94.661149][ C0] pci_stop_and_remove_bus_device_locked+0x7f/0xb0 [ 94.661169][ C0] remove_store+0xe5/0x150 [ 94.661178][ C0] ? __pfx_remove_store+0x10/0x10 [ 94.661187][ C0] ? sysfs_file_kobj+0x1e4/0x230 [ 94.661199][ C0] ? sysfs_kf_write+0x166/0x260 [ 94.661211][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.661221][ C0] kernfs_fop_write_iter+0x3a4/0x540 [ 94.661238][ C0] vfs_write+0x612/0xba0 [ 94.661252][ C0] ? __pfx_vfs_write+0x10/0x10 [ 94.661265][ C0] ? __fget_files+0x2a/0x420 [ 94.661277][ C0] ksys_write+0x150/0x270 [ 94.661292][ C0] ? __pfx_ksys_write+0x10/0x10 [ 94.661307][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.661318][ C0] do_syscall_64+0x174/0x580 [ 94.661328][ C0] ? trace_irq_disable+0x3b/0x140 [ 94.661342][ C0] ? clear_bhb_loop+0x40/0x90 [ 94.661353][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.661363][ C0] RIP: 0033:0x7f0f24b9e019 [ 94.661373][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.661381][ C0] RSP: 002b:00007f0f25b03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.661391][ C0] RAX: ffffffffffffffda RBX: 00007f0f24e25fa0 RCX: 00007f0f24b9e019 [ 94.661397][ C0] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 94.661403][ C0] RBP: 00007f0f24c3500c R08: 0000000000000000 R09: 0000000000000000 [ 94.661409][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.661416][ C0] R13: 00007f0f24e26038 R14: 00007f0f24e25fa0 R15: 00007ffc0cdcbb28 [ 94.661427][ C0] [ 94.661430][ C0] [ 94.661434][ C0] Allocated by task 1: [ 94.661441][ C0] kasan_save_track+0x3e/0x80 [ 94.661453][ C0] __kasan_slab_alloc+0x6c/0x80 [ 94.661464][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 94.661474][ C0] reserve_iova+0x2b0/0x480 [ 94.661485][ C0] iommu_setup_dma_ops+0xa21/0x1820 [ 94.661496][ C0] bus_iommu_probe+0x296/0x470 [ 94.661505][ C0] iommu_device_register+0x1af/0x210 [ 94.661514][ C0] intel_iommu_init+0x6f0/0x8e0 [ 94.661612][ C0] pci_iommu_init+0x38/0x70 [ 94.661624][ C0] do_one_initcall+0x250/0x870 [ 94.661638][ C0] do_initcall_level+0x10a/0x1a0 [ 94.661649][ C0] do_initcalls+0x59/0xa0 [ 94.661659][ C0] kernel_init_freeable+0x29d/0x3e0 [ 94.661669][ C0] kernel_init+0x1d/0x1d0 [ 94.661682][ C0] ret_from_fork+0x514/0xb70 [ 94.661693][ C0] ret_from_fork_asm+0x1a/0x30 [ 94.661698][ C0] [ 94.661700][ C0] Freed by task 5328: [ 94.661704][ C0] kasan_save_track+0x3e/0x80 [ 94.661710][ C0] kasan_save_free_info+0x40/0x50 [ 94.661715][ C0] __kasan_slab_free+0x5c/0x80 [ 94.661722][ C0] kmem_cache_free+0x182/0x650 [ 94.661733][ C0] put_iova_domain+0xcc/0x100 [ 94.661743][ C0] iommu_put_dma_cookie+0x45c/0x560 [ 94.661751][ C0] iommu_deinit_device+0x401/0x840 [ 94.661763][ C0] __iommu_group_remove_device+0x1dd/0x270 [ 94.661773][ C0] iommu_bus_notifier+0x6d/0x2c0 [ 94.661782][ C0] notifier_call_chain+0x1a5/0x3d0 [ 94.661794][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 94.661806][ C0] bus_notify+0x143/0x180 [ 94.661819][ C0] device_del+0x740/0x8f0 [ 94.661827][ C0] pci_remove_bus_device+0x12a/0x2a0 [ 94.661840][ C0] pci_stop_and_remove_bus_device_locked+0x7f/0xb0 [ 94.661853][ C0] remove_store+0xe5/0x150 [ 94.661861][ C0] kernfs_fop_write_iter+0x3a4/0x540 [ 94.661875][ C0] vfs_write+0x612/0xba0 [ 94.661887][ C0] ksys_write+0x150/0x270 [ 94.661899][ C0] do_syscall_64+0x174/0x580 [ 94.661909][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.661917][ C0] [ 94.661921][ C0] The buggy address belongs to the object at ffff888000b8dd40 [ 94.661921][ C0] which belongs to the cache iommu_iova of size 40 [ 94.661929][ C0] The buggy address is located 32 bytes inside of [ 94.661929][ C0] freed 40-byte region [ffff888000b8dd40, ffff888000b8dd68) [ 94.661939][ C0] [ 94.661943][ C0] The buggy address belongs to the physical page: [ 94.661949][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb8d [ 94.661960][ C0] flags: 0x7ff00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 94.661970][ C0] page_type: f5(slab) [ 94.661980][ C0] raw: 007ff00000000000 ffff88801c78d640 dead000000000100 dead000000000122 [ 94.661989][ C0] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 94.661994][ C0] page dumped because: kasan: bad access detected [ 94.662832][ C0] page_owner tracks the page as allocated [ 94.662839][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8421419245, free_ts 0 [ 94.662858][ C0] post_alloc_hook+0x1f9/0x250 [ 94.662871][ C0] get_page_from_freelist+0x21fa/0x2270 [ 94.662883][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 94.662895][ C0] allocate_slab+0x79/0x5e0 [ 94.662908][ C0] refill_objects+0x2d5/0x350 [ 94.662921][ C0] __pcs_replace_empty_main+0x2bf/0x6b0 [ 94.662934][ C0] kmem_cache_alloc_noprof+0x382/0x5f0 [ 94.662940][ C0] reserve_iova+0x2b0/0x480 [ 94.662951][ C0] iommu_setup_dma_ops+0xa21/0x1820 [ 94.662961][ C0] bus_iommu_probe+0x296/0x470 [ 94.662969][ C0] iommu_device_register+0x1af/0x210 [ 94.662977][ C0] intel_iommu_init+0x6f0/0x8e0 [ 94.662991][ C0] pci_iommu_init+0x38/0x70 [ 94.663003][ C0] do_one_initcall+0x250/0x870 [ 94.663016][ C0] do_initcall_level+0x10a/0x1a0 [ 94.663027][ C0] do_initcalls+0x59/0xa0 [ 94.663036][ C0] page_owner free stack trace missing [ 94.663039][ C0] [ 94.663042][ C0] Memory state around the buggy address: [ 94.663047][ C0] ffff888000b8dc00: 00 00 00 00 00 fc fc fc 00 00 00 00 00 fc fc fc [ 94.663054][ C0] ffff888000b8dc80: fa fb fb fb fb fc fc fc fa fb fb fb fb fc fc fc [ 94.663060][ C0] >ffff888000b8dd00: fa fb fb fb fb fc fc fc fa fb fb fb fb fc fc fc [ 94.663065][ C0] ^ [ 94.663071][ C0] ffff888000b8dd80: fa fb fb fb fb fc fc fc 00 00 00 00 00 fc fc fc [ 94.663078][ C0] ffff888000b8de00: 00 00 00 00 00 fc fc fc 00 00 00 00 00 fc fc fc [ 94.663084][ C0] ================================================================== [ 94.663091][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.663099][ C0] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.663110][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.663116][ C0] Call Trace: [ 94.663121][ C0] [ 94.663125][ C0] vpanic+0x56c/0xa60 [ 94.663136][ C0] ? __pfx_vpanic+0x10/0x10 [ 94.663148][ C0] panic+0xc5/0xd0 [ 94.663168][ C0] ? __pfx_panic+0x10/0x10 [ 94.663182][ C0] ? free_iova+0xab/0x200 [ 94.663189][ C0] ? rcu_is_watching+0x15/0xb0 [ 94.663196][ C0] ? free_iova+0xab/0x200 [ 94.663204][ C0] ? free_iova+0xab/0x200 [ 94.663211][ C0] check_panic_on_warn+0x89/0xb0 [ 94.663223][ C0] ? free_iova+0xab/0x200 [ 94.663234][ C0] end_report+0x73/0x170 [ 94.663246][ C0] ? free_iova+0xab/0x200 [ 94.663257][ C0] kasan_report+0x128/0x150 [ 94.663271][ C0] ? free_iova+0xab/0x200 [ 94.663285][ C0] free_iova+0xab/0x200 [ 94.663298][ C0] fq_ring_free_locked+0x1ab/0x310 [ 94.663314][ C0] fq_flush_timeout+0x234/0x2d0 [ 94.663323][ C0] call_timer_fn+0x192/0x5e0 [ 94.663329][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.663339][ C0] ? call_timer_fn+0xd4/0x5e0 [ 94.663347][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 94.663357][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.663367][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.663379][ C0] __run_timer_base+0x652/0x8b0 [ 94.663391][ C0] ? ktime_get+0x45/0x220 [ 94.663406][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 94.663420][ C0] ? ktime_get+0x1f5/0x220 [ 94.663433][ C0] ? lapic_next_event+0x11/0x20 [ 94.663445][ C0] run_timer_softirq+0xb7/0x170 [ 94.663459][ C0] handle_softirqs+0x225/0x840 [ 94.663469][ C0] ? __irq_exit_rcu+0xca/0x220 [ 94.663477][ C0] __irq_exit_rcu+0xca/0x220 [ 94.663484][ C0] irq_exit_rcu+0x9/0x30 [ 94.663491][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 94.663498][ C0] [ 94.663502][ C0] [ 94.663506][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.663516][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 94.663528][ C0] Code: ff ff e8 e1 3f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 d3 3f 21 00 e8 ce bf 2d 0a 48 85 db 74 c0 e8 c4 3f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 86 70 [ 94.663537][ C0] RSP: 0018:ffffc9000f02f0e0 EFLAGS: 00000287 [ 94.663547][ C0] RAX: ffffffff81a5e55c RBX: ffffc9000f02f240 RCX: 0000000000100000 [ 94.663554][ C0] RDX: ffffc90020001000 RSI: 000000000002a24d RDI: 000000000002a24e [ 94.663562][ C0] RBP: ffffc9000f02f1f0 R08: ffffffff9057be37 R09: 1ffffffff20af7c6 [ 94.663569][ C0] R10: dffffc0000000000 R11: fffffbfff20af7c7 R12: dffffc0000000000 [ 94.663577][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f471ca0 [ 94.663584][ C0] ? console_flush_all+0x7cc/0xaf0 [ 94.663598][ C0] ? console_flush_all+0x123/0xaf0 [ 94.663610][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 94.663623][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 94.663637][ C0] console_unlock+0xd1/0x1c0 [ 94.663648][ C0] ? __pfx_console_unlock+0x10/0x10 [ 94.663658][ C0] ? _printk+0xdd/0x130 [ 94.663665][ C0] vprintk_emit+0x485/0x560 [ 94.663672][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 94.663679][ C0] _printk+0xdd/0x130 [ 94.663689][ C0] ? kernel_text_address+0xa5/0xe0 [ 94.663699][ C0] ? __pfx__printk+0x10/0x10 [ 94.663711][ C0] ? debug_print_object+0xec/0x230 [ 94.663724][ C0] __report_bug+0x349/0x570 [ 94.663735][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 94.663747][ C0] ? debug_print_object+0xec/0x230 [ 94.663758][ C0] ? __pfx___report_bug+0x10/0x10 [ 94.663769][ C0] ? __lock_acquire+0x683/0x2cf0 [ 94.663783][ C0] ? iommu_bus_notifier+0x6d/0x2c0 [ 94.663791][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 94.663806][ C0] ? blocking_notifier_call_chain+0x6a/0x90 [ 94.663819][ C0] ? device_del+0x740/0x8f0 [ 94.663828][ C0] ? pci_remove_bus_device+0x12a/0x2a0 [ 94.663844][ C0] ? pci_stop_and_remove_bus_device_locked+0x7f/0xb0 [ 94.663859][ C0] report_bug_entry+0x19a/0x290 [ 94.663871][ C0] ? debug_print_object+0x18a/0x230 [ 94.663883][ C0] ? debug_print_object+0x18f/0x230 [ 94.663894][ C0] handle_bug+0xce/0x200 [ 94.663908][ C0] exc_invalid_op+0x1a/0x50 [ 94.663922][ C0] asm_exc_invalid_op+0x1a/0x20 [ 94.663931][ C0] RIP: 0010:debug_print_object+0x18a/0x230 [ 94.663944][ C0] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9d 95 55 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 c3 30 77 0b 48 83 c4 10 5b 41 5c [ 94.663952][ C0] RSP: 0018:ffffc9000f02f6f0 EFLAGS: 00010246 [ 94.663960][ C0] RAX: 1ffffffff17decd0 RBX: dffffc0000000000 RCX: 0000000000000000 [ 94.663967][ C0] RDX: ffffffff8c4bf940 RSI: ffffffff8c4bf3c0 RDI: ffffffff90631fc0 [ 94.663975][ C0] RBP: ffffffff8c4bf940 R08: ffff888000b978e0 R09: ffffffff8bef79e0 [ 94.663982][ C0] R10: dffffc0000000000 R11: ffffffff81b33bb0 R12: 0000000000000000 [ 94.663989][ C0] R13: ffffffff90631fc0 R14: ffff888000b978e0 R15: ffffffff8bef6680 [ 94.663997][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 94.664013][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.664023][ C0] ? __pfx_fq_flush_timeout+0x10/0x10 [ 94.664033][ C0] debug_check_no_obj_freed+0x2e3/0x450 [ 94.664049][ C0] kfree+0x13e/0x640 [ 94.664059][ C0] ? iommu_deinit_device+0x401/0x840 [ 94.664073][ C0] iommu_deinit_device+0x401/0x840 [ 94.664088][ C0] __iommu_group_remove_device+0x1dd/0x270 [ 94.664099][ C0] iommu_bus_notifier+0x6d/0x2c0 [ 94.664109][ C0] notifier_call_chain+0x1a5/0x3d0 [ 94.664124][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 94.664139][ C0] bus_notify+0x143/0x180 [ 94.664160][ C0] device_del+0x740/0x8f0 [ 94.664171][ C0] ? __pfx_device_del+0x10/0x10 [ 94.664179][ C0] pci_remove_bus_device+0x12a/0x2a0 [ 94.664188][ C0] pci_stop_and_remove_bus_device_locked+0x7f/0xb0 [ 94.664197][ C0] remove_store+0xe5/0x150 [ 94.664203][ C0] ? __pfx_remove_store+0x10/0x10 [ 94.664209][ C0] ? sysfs_file_kobj+0x1e4/0x230 [ 94.664217][ C0] ? sysfs_kf_write+0x166/0x260 [ 94.664224][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.664230][ C0] kernfs_fop_write_iter+0x3a4/0x540 [ 94.664241][ C0] vfs_write+0x612/0xba0 [ 94.664251][ C0] ? __pfx_vfs_write+0x10/0x10 [ 94.664265][ C0] ? __fget_files+0x2a/0x420 [ 94.664277][ C0] ksys_write+0x150/0x270 [ 94.664290][ C0] ? __pfx_ksys_write+0x10/0x10 [ 94.664306][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.664316][ C0] do_syscall_64+0x174/0x580 [ 94.664327][ C0] ? trace_irq_disable+0x3b/0x140 [ 94.664339][ C0] ? clear_bhb_loop+0x40/0x90 [ 94.664349][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.664358][ C0] RIP: 0033:0x7f0f24b9e019 [ 94.664367][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.664375][ C0] RSP: 002b:00007f0f25b03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.664385][ C0] RAX: ffffffffffffffda RBX: 00007f0f24e25fa0 RCX: 00007f0f24b9e019 [ 94.664421][ C0] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 94.664428][ C0] RBP: 00007f0f24c3500c R08: 0000000000000000 R09: 0000000000000000 [ 94.664435][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.664441][ C0] R13: 00007f0f24e26038 R14: 00007f0f24e25fa0 R15: 00007ffc0cdcbb28 [ 94.664452][ C0] [ 94.664830][ C0] Kernel Offset: disabled