last executing test programs: 7.33698203s ago: executing program 2 (id=1110): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_settime(0xfffffffc, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa64103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2480, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x24044010}, 0x4000000) r9 = signalfd4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r10, 0x0, 0x0, 0x40000040, 0x0, 0x0) accept4$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x60421858d64fb6d9) 6.817812501s ago: executing program 3 (id=1113): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) userfaultfd(0x80001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2ea2085d0401be00"]) clock_gettime(0xfffffffffffffff9, &(0x7f00000005c0)) socket(0x2, 0x800, 0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)={0x90c7, 0xfffffffffffffffb, 0x2, 0x4, 0x1, 0x0, [{0x1, 0x73, 0x1, '\x00', 0x1202}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f0000000a00)) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x86, &(0x7f00000001c0)}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) syz_clone(0x10110000, &(0x7f0000000040)="bc7bd974019ab1e27e44e4d959624dd18c99176f8d73d719fbdbad3f6bf4df264705e1a6f22237e99d3de3bba646e620af441c59674846617a6f607ed285897cddb948e105e444255a5d349e5039f88a9f9aa9e9b15610aea20dd5c833c3d922c97b87e2", 0x64, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="b61f7d8fb2ab2ec1d92ae7ceac0eda07c7cde45c3a005c59d73d7d604cd83e0b55a80344fe96a1538a983457ae9e9a03e115ddd0ba5390fd004cf7c0326be6c56f0e5a74936950d8d5509108fb6fdbc738cafefffbbff7ba2e9915adf2a33c46f72182ad42f162a19100d62ad8c4463ad0dc9a190b273718dc990bf856d3099e6679271093f02e9994bc0673b65d55383917") r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001d40)=""/96, 0x60}, {&(0x7f0000000380)=""/191, 0xbf}], 0x2}, 0x7}, {{&(0x7f0000000480)=@ax25={{0x3, @null}, [@netrom, @null, @default, @rose, @remote, @bcast, @netrom, @bcast]}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/251, 0xfb}, {&(0x7f0000001940)=""/12, 0xc}], 0x4}, 0x7}, {{&(0x7f00000019c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a40)=""/88, 0x58}, {&(0x7f0000001ac0)=""/75, 0x4b}, {&(0x7f0000001b40)=""/14, 0xe}, {&(0x7f0000001b80)=""/146, 0x92}, {&(0x7f0000001c40)=""/7, 0x7}, {&(0x7f0000001c80)=""/54, 0x36}], 0x6}, 0x40}, {{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f000000b580)=""/4106, 0x100a}, 0x401}, {{&(0x7f0000003500)=@tipc, 0x80, &(0x7f0000003780)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000003680)=""/245, 0xf5}], 0x2, &(0x7f00000037c0)=""/96, 0x60}, 0x803}, {{&(0x7f0000003840)=@nl=@proc, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000004b80)=""/240, 0xf0}, 0x9}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c80)=""/168, 0xa8}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/115, 0x73}, {&(0x7f0000004e00)=""/26, 0x1a}, {&(0x7f0000004e40)=""/140, 0x8c}], 0x5}, 0x83f5660}], 0x7, 0x42, &(0x7f0000005180)={0x0, 0x989680}) gettid() 6.677259574s ago: executing program 0 (id=1114): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x81, 0x14f5, &(0x7f0000002fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x2, 0x18c}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000180)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 5.737587965s ago: executing program 2 (id=1118): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x81, 0x14f5, &(0x7f0000002fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x2, 0x18c}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) fsmount(0xffffffffffffffff, 0x1, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000006c0)='\'*#!\x00', 0x0, 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) r10 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 5.697099496s ago: executing program 3 (id=1120): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 5.177244547s ago: executing program 1 (id=1122): r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FIBMAP(r0, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 4.324231065s ago: executing program 1 (id=1124): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_settime(0xfffffffc, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa64103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) 3.929348784s ago: executing program 4 (id=1126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.914520414s ago: executing program 4 (id=1127): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) userfaultfd(0x80001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2ea2085d0401be00"]) clock_gettime(0xfffffffffffffff9, &(0x7f00000005c0)) socket(0x2, 0x800, 0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)={0x90c7, 0xfffffffffffffffb, 0x2, 0x4, 0x1, 0x0, [{0x1, 0x73, 0x1, '\x00', 0x1202}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f0000000a00)) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x86, &(0x7f00000001c0)}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) syz_clone(0x10110000, &(0x7f0000000040)="bc7bd974019ab1e27e44e4d959624dd18c99176f8d73d719fbdbad3f6bf4df264705e1a6f22237e99d3de3bba646e620af441c59674846617a6f607ed285897cddb948e105e444255a5d349e5039f88a9f9aa9e9b15610aea20dd5c833c3d922c97b87e2", 0x64, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="b61f7d8fb2ab2ec1d92ae7ceac0eda07c7cde45c3a005c59d73d7d604cd83e0b55a80344fe96a1538a983457ae9e9a03e115ddd0ba5390fd004cf7c0326be6c56f0e5a74936950d8d5509108fb6fdbc738cafefffbbff7ba2e9915adf2a33c46f72182ad42f162a19100d62ad8c4463ad0dc9a190b273718dc990bf856d3099e6679271093f02e9994bc0673b65d55383917") r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001d40)=""/96, 0x60}, {&(0x7f0000000380)=""/191, 0xbf}], 0x2}, 0x7}, {{&(0x7f0000000480)=@ax25={{0x3, @null}, [@netrom, @null, @default, @rose, @remote, @bcast, @netrom, @bcast]}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/251, 0xfb}, {&(0x7f0000001940)=""/12, 0xc}], 0x4}, 0x7}, {{&(0x7f00000019c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a40)=""/88, 0x58}, {&(0x7f0000001ac0)=""/75, 0x4b}, {&(0x7f0000001b40)=""/14, 0xe}, {&(0x7f0000001b80)=""/146, 0x92}, {&(0x7f0000001c40)=""/7, 0x7}, {&(0x7f0000001c80)=""/54, 0x36}], 0x6}, 0x40}, {{&(0x7f0000000600)=@in6, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000002500)=""/210, 0xd2}], 0x1, &(0x7f0000001f00)=""/106, 0x6a}, 0x8}, {{&(0x7f0000003500)=@tipc, 0x80, &(0x7f0000003780)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000003680)=""/245, 0xf5}], 0x2, &(0x7f00000037c0)=""/96, 0x60}, 0x803}, {{&(0x7f0000003840)=@nl=@proc, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000004b80)=""/240, 0xf0}, 0x9}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c80)=""/168, 0xa8}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/115, 0x73}, {&(0x7f0000004e00)=""/26, 0x1a}, {&(0x7f0000004e40)=""/140, 0x8c}], 0x5}, 0x83f5660}], 0x7, 0x42, &(0x7f0000005180)={0x0, 0x989680}) gettid() 3.895688905s ago: executing program 0 (id=1128): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_settime(0xfffffffc, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa64103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000340)) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2480, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 3.597025041s ago: executing program 2 (id=1129): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x81, 0x14f5, &(0x7f0000002fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x2, 0x18c}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000006c0)='\'*#!\x00', 0x0, 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) r10 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 3.464611324s ago: executing program 1 (id=1130): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) userfaultfd(0x80001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2ea2085d0401be00"]) clock_gettime(0xfffffffffffffff9, &(0x7f00000005c0)) socket(0x2, 0x800, 0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)={0x90c7, 0xfffffffffffffffb, 0x2, 0x4, 0x1, 0x0, [{0x1, 0x73, 0x1, '\x00', 0x1202}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f0000000a00)) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x86, &(0x7f00000001c0)}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) syz_clone(0x10110000, &(0x7f0000000040)="bc7bd974019ab1e27e44e4d959624dd18c99176f8d73d719fbdbad3f6bf4df264705e1a6f22237e99d3de3bba646e620af441c59674846617a6f607ed285897cddb948e105e444255a5d349e5039f88a9f9aa9e9b15610aea20dd5c833c3d922c97b87e2", 0x64, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="b61f7d8fb2ab2ec1d92ae7ceac0eda07c7cde45c3a005c59d73d7d604cd83e0b55a80344fe96a1538a983457ae9e9a03e115ddd0ba5390fd004cf7c0326be6c56f0e5a74936950d8d5509108fb6fdbc738cafefffbbff7ba2e9915adf2a33c46f72182ad42f162a19100d62ad8c4463ad0dc9a190b273718dc990bf856d3099e6679271093f02e9994bc0673b65d55383917") r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001d40)=""/96, 0x60}, {&(0x7f0000000380)=""/191, 0xbf}], 0x2}, 0x7}, {{&(0x7f0000000480)=@ax25={{0x3, @null}, [@netrom, @null, @default, @rose, @remote, @bcast, @netrom, @bcast]}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/251, 0xfb}, {&(0x7f0000001940)=""/12, 0xc}], 0x4}, 0x7}, {{&(0x7f00000019c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a40)=""/88, 0x58}, {&(0x7f0000001ac0)=""/75, 0x4b}, {&(0x7f0000001b40)=""/14, 0xe}, {&(0x7f0000001b80)=""/146, 0x92}, {&(0x7f0000001c40)=""/7, 0x7}, {&(0x7f0000001c80)=""/54, 0x36}], 0x6}, 0x40}, {{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f000000b580)=""/4106, 0x100a}, 0x401}, {{&(0x7f0000003500)=@tipc, 0x80, &(0x7f0000003780)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000003680)=""/245, 0xf5}], 0x2, &(0x7f00000037c0)=""/96, 0x60}, 0x803}, {{&(0x7f0000003840)=@nl=@proc, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000004b80)=""/240, 0xf0}, 0x9}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c80)=""/168, 0xa8}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/115, 0x73}, {&(0x7f0000004e00)=""/26, 0x1a}, {&(0x7f0000004e40)=""/140, 0x8c}], 0x5}, 0x83f5660}], 0x7, 0x42, &(0x7f0000005180)={0x0, 0x989680}) gettid() 3.006287664s ago: executing program 0 (id=1131): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x803, 0xffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x4, @loopback, 0x4e23, 0x1, 'none\x00', 0x21, 0x1, 0x6b}, {@broadcast, 0x4e24, 0x2000, 0x2, 0xe, 0x4}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdc01, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000040)={0x5, 0xfe, 0x8, 0x8, 0x6}) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000300)) 2.968446015s ago: executing program 4 (id=1132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.810423738s ago: executing program 1 (id=1133): r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FIBMAP(r0, 0x1, 0x0) 2.76052843s ago: executing program 4 (id=1134): r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FIBMAP(r0, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.417836997s ago: executing program 3 (id=1135): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x25d, &(0x7f0000000d80)="$eJzs2k9rXFUYB+D3JmkSE9OJ+I8WxIMu1M2lydpFg7QgBhRthCpIb82NDrnOhMwQGBGblW79CK7FpTtBunSTjZ/AhbtssuxCvJJOqpkyKYQ4GbXPs5mXOfO755y5M4fD5ey//s1nmxudfKPoxkSWxcTV2I17WSzGRDywG6+9cvPnF967+cFbK6ur195N6frKjaXllNLFF3/68IvvX7rbnX//h4s/zsTe4kf7B8u/7T23d2n/jxufNjup2UmtdjcV6Xa73S1uV2Vab3Y285TeqcqiU6Zmq1NuD7RvVO2trV4qWusLc1vb5WxEtHpps+ylbjt1t3up+KRotlKe52lhLjiLte/u1XUc1BduRV3XT3wb83dj4ddoRPZUyp6+mj17K3t+N7t0UNeNcQ+VkXD/H2/HFvXZiOrrnbWdtf5rv31lI5pRRRlXohG/x+HP5Ei/vv7m6rUr6b7F+Kq6c5S/s7M2OZhfikYsDs8v9fNpMD8TcxEXIo7yy9GIZ4bnl4fmZ+PVl4/1n0cjfvk42lHFehxm/85/uZTSG2+vPpS/fP9zAAD/N3n6y9D9W56f1N7Pn2J/+ND+aiouT4137kR0ep9vFlVVbo+mmH50Fw+eMZ14nSfPPozD649ugseK2cF3ph41r9MW9eSIB3/qYvro1o2n95k4VSqL2D0c7L/iq5s+n7/eGYv5sSxHnLPBdRIAAAAAAAAAAID/in/88ODk8BO4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/kzAAD//yVGvz0=") openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0xb) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) gettid() timer_create(0x9, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400000000ff0f000000000000", @ANYRES32=0x0, @ANYBLOB="00a5020000000000280012800b00010062726964676500001800028005002c00020000000c002e000100000001000000"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.916996438s ago: executing program 4 (id=1136): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e2300050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c617465000000000000c215e28f9cf1912100"/233], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x1, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(r9, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 1.82919132s ago: executing program 1 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.80437098s ago: executing program 1 (id=1138): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x81, 0x14f5, &(0x7f0000002fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x2, 0x18c}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000180)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 1.788140511s ago: executing program 4 (id=1139): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x81, 0x14f5, &(0x7f0000002fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x800, 0x2, 0x18c}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) fsmount(0xffffffffffffffff, 0x1, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000006c0)='\'*#!\x00', 0x0, 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) r10 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 1.558992726s ago: executing program 3 (id=1140): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.507933367s ago: executing program 3 (id=1141): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_settime(0xfffffffc, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa64103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) 1.36901266s ago: executing program 2 (id=1142): bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.35545754s ago: executing program 2 (id=1143): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) userfaultfd(0x80001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2ea2085d0401be00"]) clock_gettime(0xfffffffffffffff9, &(0x7f00000005c0)) socket(0x2, 0x800, 0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)={0x90c7, 0xfffffffffffffffb, 0x2, 0x4, 0x1, 0x0, [{0x1, 0x73, 0x1, '\x00', 0x1202}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f0000000a00)) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x86, &(0x7f00000001c0)}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) syz_clone(0x10110000, &(0x7f0000000040)="bc7bd974019ab1e27e44e4d959624dd18c99176f8d73d719fbdbad3f6bf4df264705e1a6f22237e99d3de3bba646e620af441c59674846617a6f607ed285897cddb948e105e444255a5d349e5039f88a9f9aa9e9b15610aea20dd5c833c3d922c97b87e2", 0x64, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="b61f7d8fb2ab2ec1d92ae7ceac0eda07c7cde45c3a005c59d73d7d604cd83e0b55a80344fe96a1538a983457ae9e9a03e115ddd0ba5390fd004cf7c0326be6c56f0e5a74936950d8d5509108fb6fdbc738cafefffbbff7ba2e9915adf2a33c46f72182ad42f162a19100d62ad8c4463ad0dc9a190b273718dc990bf856d3099e6679271093f02e9994bc0673b65d55383917") r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001d40)=""/96, 0x60}, {&(0x7f0000000380)=""/191, 0xbf}], 0x2}, 0x7}, {{&(0x7f0000000480)=@ax25={{0x3, @null}, [@netrom, @null, @default, @rose, @remote, @bcast, @netrom, @bcast]}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/251, 0xfb}, {&(0x7f0000001940)=""/12, 0xc}], 0x4}, 0x7}, {{&(0x7f00000019c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a40)=""/88, 0x58}, {&(0x7f0000001ac0)=""/75, 0x4b}, {&(0x7f0000001b40)=""/14, 0xe}, {&(0x7f0000001b80)=""/146, 0x92}, {&(0x7f0000001c40)=""/7, 0x7}, {&(0x7f0000001c80)=""/54, 0x36}], 0x6}, 0x40}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000002500)=""/210, 0xd2}], 0x1, &(0x7f0000001f00)=""/106, 0x6a}, 0x8}, {{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f000000b580)=""/4106, 0x100a}, 0x401}, {{&(0x7f0000003500)=@tipc, 0x80, &(0x7f0000003780)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000003680)=""/245, 0xf5}], 0x2, &(0x7f00000037c0)=""/96, 0x60}, 0x803}, {{&(0x7f0000003840)=@nl=@proc, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000004b80)=""/240, 0xf0}, 0x9}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c80)=""/168, 0xa8}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/115, 0x73}, {&(0x7f0000004e00)=""/26, 0x1a}, {&(0x7f0000004e40)=""/140, 0x8c}], 0x5}, 0x83f5660}], 0x8, 0x42, &(0x7f0000005180)={0x0, 0x989680}) gettid() 924.59879ms ago: executing program 0 (id=1144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 866.473871ms ago: executing program 2 (id=1145): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x50000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 804.347552ms ago: executing program 0 (id=1146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c324804", 0x23}, {&(0x7f0000000080)}], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 689.753275ms ago: executing program 3 (id=1147): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_settime(0xfffffffc, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa64103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2480, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 0s ago: executing program 0 (id=1148): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_settime(0xfffffffc, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa64103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2480, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r8 = signalfd4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r9, 0x0, 0x0, 0x40000040, 0x0, 0x0) accept4$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x60421858d64fb6d9) kernel console output (not intermixed with test programs): : USB disconnect, device number 20 [ 224.480040][ T315] usb 3-1: USB disconnect, device number 16 [ 224.502680][ T3032] loop3: detected capacity change from 0 to 4096 [ 224.509646][ T28] audit: type=1326 audit(1784357697.292:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.736" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 224.534563][ T28] audit: type=1326 audit(1784357697.292:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.736" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 224.559525][ T28] audit: type=1326 audit(1784357697.292:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.736" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 224.560527][ T3032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.613799][ T28] audit: type=1326 audit(1784357697.302:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.736" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 224.648187][ T3032] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.739: corrupted inode contents [ 224.663325][ T3032] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.739: mark_inode_dirty error [ 224.679266][ T3032] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.739: corrupted inode contents [ 224.694016][ T3032] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.739: mark_inode_dirty error [ 224.699652][ T3033] fuse: Bad value for 'fd' [ 224.717474][ T3032] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.739: corrupted inode contents [ 224.729580][ T3032] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.739: mark_inode_dirty error [ 224.741946][ T3032] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.739: corrupted inode contents [ 224.754793][ T3032] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.739: mark_inode_dirty error [ 224.796658][ T3032] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 225.050627][ T3044] loop1: detected capacity change from 0 to 512 [ 225.061509][ T3044] ext4: Unknown parameter 'pcr' [ 225.061771][ T287] EXT4-fs (loop3): unmounting filesystem. [ 225.079489][ T3044] loop1: detected capacity change from 0 to 512 [ 225.086022][ T3044] EXT4-fs: Ignoring removed oldalloc option [ 225.095350][ T3046] loop3: detected capacity change from 0 to 128 [ 225.112113][ T3044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.153231][ T3044] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.162834][ T3044] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.474461][ T3054] device bridge7 entered promiscuous mode [ 225.847761][ T3056] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.743: iget: bad i_size value: 2533274857506816 [ 226.194160][ T3055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3055 comm=syz.2.745 [ 226.734347][ T288] EXT4-fs (loop1): unmounting filesystem. [ 226.769670][ T3067] loop1: detected capacity change from 0 to 128 [ 226.891482][ T3062] loop0: detected capacity change from 0 to 4096 [ 226.902718][ T3062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.979881][ T3072] device bridge7 entered promiscuous mode [ 227.027535][ T3062] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.746: corrupted inode contents [ 227.040269][ T3062] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #15: comm syz.0.746: mark_inode_dirty error [ 227.052226][ T3062] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.746: corrupted inode contents [ 227.064576][ T3062] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.746: mark_inode_dirty error [ 227.076579][ T3068] fuse: Bad value for 'fd' [ 227.088768][ T3062] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.746: corrupted inode contents [ 227.105387][ T3062] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.746: mark_inode_dirty error [ 227.116757][ T3062] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.746: corrupted inode contents [ 227.129787][ T3062] EXT4-fs error (device loop0): ext4_truncate:4327: inode #15: comm syz.0.746: mark_inode_dirty error [ 227.145489][ T3062] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem [ 227.169899][ T289] EXT4-fs (loop0): unmounting filesystem. [ 228.146968][ T3090] loop3: detected capacity change from 0 to 256 [ 228.171102][ T3090] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 228.214473][ T3090] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 228.312355][ T3090] exFAT-fs (loop3): Filesystem has been set read-only [ 228.367261][ T400] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 228.404223][ T3090] exFAT-fs (loop3): failed to initialize root inode [ 228.567175][ T400] usb 2-1: Using ep0 maxpacket: 32 [ 228.575847][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.587238][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.598610][ T400] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.608954][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.623995][ T400] usb 2-1: config 0 descriptor?? [ 228.635362][ T400] hub 2-1:0.0: USB hub found [ 228.835794][ T400] hub 2-1:0.0: 1 port detected [ 228.867244][ T6] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 228.979551][ T3105] loop2: detected capacity change from 0 to 512 [ 228.986164][ T3105] ext4: Unknown parameter 'pcr' [ 229.077187][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 229.091811][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.102754][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.112621][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.121754][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.140148][ T6] usb 4-1: config 0 descriptor?? [ 229.167696][ T6] hub 4-1:0.0: USB hub found [ 229.387109][ T6] hub 4-1:0.0: 1 port detected [ 229.627624][ T400] hub 2-1:0.0: activate --> -90 [ 230.628179][ T6] usb 2-1: USB disconnect, device number 21 [ 230.634602][ T400] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 230.643737][ T3124] loop0: detected capacity change from 0 to 128 [ 230.691422][ T309] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 230.698348][ T1634] usb 4-1: USB disconnect, device number 24 [ 230.734756][ T3128] loop2: detected capacity change from 0 to 256 [ 230.814807][ T3128] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 230.839119][ T3129] device bridge6 entered promiscuous mode [ 230.958241][ T3128] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 230.983975][ T3128] exFAT-fs (loop2): Filesystem has been set read-only [ 230.990809][ T3128] exFAT-fs (loop2): failed to initialize root inode [ 231.219795][ T3136] loop3: detected capacity change from 0 to 128 [ 231.347241][ T400] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 231.431754][ T3140] device bridge8 entered promiscuous mode [ 231.727214][ T400] usb 3-1: Using ep0 maxpacket: 32 [ 231.733463][ T400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.745305][ T400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.755150][ T400] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.764442][ T400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.794245][ T400] usb 3-1: config 0 descriptor?? [ 231.806522][ T400] hub 3-1:0.0: USB hub found [ 231.811785][ T3144] netlink: 64 bytes leftover after parsing attributes in process `syz.0.770'. [ 232.001998][ T400] hub 3-1:0.0: 1 port detected [ 232.011297][ T3148] loop4: detected capacity change from 0 to 256 [ 232.035262][ T3148] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 232.047927][ T3148] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 232.059525][ T3148] exFAT-fs (loop4): Filesystem has been set read-only [ 232.066349][ T3148] exFAT-fs (loop4): failed to initialize root inode [ 232.408604][ T400] usb 3-1: USB disconnect, device number 17 [ 232.437230][ T315] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 232.582783][ T3160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3160 comm=syz.3.775 [ 232.757523][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 232.770221][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.788664][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.799772][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.809089][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.817933][ T315] usb 5-1: config 0 descriptor?? [ 232.823727][ T315] hub 5-1:0.0: USB hub found [ 233.636510][ T315] hub 5-1:0.0: 1 port detected [ 233.780619][ T3177] loop2: detected capacity change from 0 to 256 [ 233.790839][ T3181] loop0: detected capacity change from 0 to 128 [ 233.877728][ T3177] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 233.896423][ T3172] loop3: detected capacity change from 0 to 4096 [ 233.907098][ T3177] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 233.917963][ T3177] exFAT-fs (loop2): Filesystem has been set read-only [ 233.924759][ T3177] exFAT-fs (loop2): failed to initialize root inode [ 233.965084][ T3172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.027522][ T3186] device bridge7 entered promiscuous mode [ 234.196048][ T3172] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.778: corrupted inode contents [ 234.208093][ T3172] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.778: mark_inode_dirty error [ 234.219600][ T3172] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.778: corrupted inode contents [ 234.231653][ T3172] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.778: mark_inode_dirty error [ 234.243113][ T3172] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.778: corrupted inode contents [ 234.245336][ T3176] fuse: Bad value for 'fd' [ 234.256048][ T3172] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.778: mark_inode_dirty error [ 234.272561][ T3172] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.778: corrupted inode contents [ 234.284644][ T3172] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.778: mark_inode_dirty error [ 234.296281][ T3172] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 234.297258][ T6] usb 5-1: USB disconnect, device number 20 [ 234.328702][ T287] EXT4-fs (loop3): unmounting filesystem. [ 234.497177][ T1634] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 234.677239][ T1634] usb 3-1: Using ep0 maxpacket: 32 [ 234.688612][ T1634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.699877][ T1634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.710213][ T1634] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.723210][ T1634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.738107][ T1634] usb 3-1: config 0 descriptor?? [ 234.750554][ T1634] hub 3-1:0.0: USB hub found [ 234.900464][ T3207] netlink: 64 bytes leftover after parsing attributes in process `syz.0.786'. [ 235.382049][ T1634] hub 3-1:0.0: 1 port detected [ 235.416353][ T3200] loop1: detected capacity change from 0 to 4096 [ 235.438360][ T3200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.526107][ T3203] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.788: corrupted inode contents [ 235.538251][ T3203] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #15: comm syz.1.788: mark_inode_dirty error [ 235.551000][ T3203] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.788: corrupted inode contents [ 235.563221][ T3203] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.788: mark_inode_dirty error [ 235.581214][ T3203] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.788: corrupted inode contents [ 235.594204][ T3203] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.788: mark_inode_dirty error [ 235.606191][ T3203] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.788: corrupted inode contents [ 235.648074][ T3203] EXT4-fs error (device loop1): ext4_truncate:4327: inode #15: comm syz.1.788: mark_inode_dirty error [ 235.659704][ T3203] EXT4-fs error (device loop1) in ext4_setattr:5697: Corrupt filesystem [ 235.678727][ T288] EXT4-fs (loop1): unmounting filesystem. [ 235.992826][ T3221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3221 comm=syz.1.792 [ 236.297669][ T1024] usb 3-1: USB disconnect, device number 18 [ 236.298905][ T3228] loop4: detected capacity change from 0 to 128 [ 236.495666][ T3230] device bridge9 entered promiscuous mode [ 240.841030][ T3252] loop3: detected capacity change from 0 to 262144 [ 240.881650][ T3253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3253 comm=syz.0.802 [ 240.974780][ T3252] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9) [ 240.983011][ T3252] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 241.022973][ T3259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3259 comm=syz.2.805 [ 241.036364][ T3252] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.088617][ T3252] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 241.095695][ T3252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.235353][ T3276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3276 comm=syz.0.806 [ 242.008124][ T3288] loop4: detected capacity change from 0 to 128 [ 242.057549][ T3290] loop0: detected capacity change from 0 to 256 [ 242.079304][ T3290] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 242.096809][ T3290] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 242.107388][ T3290] exFAT-fs (loop0): Filesystem has been set read-only [ 242.114206][ T3290] exFAT-fs (loop0): failed to initialize root inode [ 242.190291][ T3297] device bridge10 entered promiscuous mode [ 242.433473][ T3301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3301 comm=syz.1.817 [ 242.573672][ T3292] loop2: detected capacity change from 0 to 4096 [ 242.609518][ T3292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.640580][ T3292] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.816: corrupted inode contents [ 242.652968][ T3292] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #15: comm syz.2.816: mark_inode_dirty error [ 242.664601][ T3292] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.816: corrupted inode contents [ 242.676947][ T3292] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.816: mark_inode_dirty error [ 242.688428][ T3292] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.816: corrupted inode contents [ 242.707380][ T3292] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.816: mark_inode_dirty error [ 242.707702][ T3302] fuse: Bad value for 'fd' [ 242.727184][ T6] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 242.736868][ T3292] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.816: corrupted inode contents [ 242.749142][ T3292] EXT4-fs error (device loop2): ext4_truncate:4327: inode #15: comm syz.2.816: mark_inode_dirty error [ 242.765462][ T3292] EXT4-fs error (device loop2) in ext4_setattr:5697: Corrupt filesystem [ 242.889679][ T292] EXT4-fs (loop2): unmounting filesystem. [ 242.927240][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 242.935930][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.947222][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.972381][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.982628][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.460894][ T3323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3323 comm=syz.3.825 [ 245.932833][ T3324] loop2: detected capacity change from 0 to 262144 [ 246.472194][ T3334] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3334 comm=syz.3.828 [ 246.502681][ T3335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3335 comm=syz.0.827 [ 246.529595][ T3324] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 246.537897][ T3324] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.576079][ T6] usb 1-1: config 0 descriptor?? [ 246.577579][ T6] usb 1-1: can't set config #0, error -71 [ 246.580044][ T6] usb 1-1: USB disconnect, device number 21 [ 246.590255][ T3324] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 246.692632][ T3347] loop4: detected capacity change from 0 to 128 [ 246.791151][ T3351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3351 comm=syz.0.832 [ 246.879756][ T3352] device bridge11 entered promiscuous mode [ 247.299914][ T3340] loop2: detected capacity change from 0 to 4096 [ 247.313684][ T3340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.325541][ T3368] loop1: detected capacity change from 0 to 256 [ 247.341573][ T3340] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.829: corrupted inode contents [ 247.371351][ T3368] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 247.390507][ T3354] fuse: Bad value for 'fd' [ 247.404315][ T3340] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #15: comm syz.2.829: mark_inode_dirty error [ 247.427619][ T3368] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 247.438454][ T3340] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.829: corrupted inode contents [ 247.470520][ T3340] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.829: mark_inode_dirty error [ 247.485961][ T3368] exFAT-fs (loop1): Filesystem has been set read-only [ 247.501525][ T3368] exFAT-fs (loop1): failed to initialize root inode [ 247.510402][ T3340] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.829: corrupted inode contents [ 247.557062][ T3340] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.829: mark_inode_dirty error [ 247.589639][ T3340] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.829: corrupted inode contents [ 247.610856][ T3340] EXT4-fs error (device loop2): ext4_truncate:4327: inode #15: comm syz.2.829: mark_inode_dirty error [ 247.669340][ T3340] EXT4-fs error (device loop2) in ext4_setattr:5697: Corrupt filesystem [ 247.686339][ T3379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3379 comm=syz.0.838 [ 247.724878][ T3380] loop4: detected capacity change from 0 to 256 [ 247.918719][ T3380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 247.931688][ T292] EXT4-fs (loop2): unmounting filesystem. [ 247.931731][ T3380] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 247.960584][ T3380] exFAT-fs (loop4): Filesystem has been set read-only [ 247.968982][ T3380] exFAT-fs (loop4): failed to initialize root inode [ 248.846406][ T3384] loop2: detected capacity change from 0 to 262144 [ 249.086159][ T3384] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 249.094684][ T3384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 249.279516][ T3384] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.333546][ T3384] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 249.340667][ T3384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.726412][ T1634] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 249.731995][ T3394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3394 comm=syz.2.842 [ 249.827229][ T1024] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.037206][ T1024] usb 5-1: Using ep0 maxpacket: 32 [ 250.043481][ T1024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.056779][ T1024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.066726][ T1024] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.075899][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.085884][ T3398] loop3: detected capacity change from 0 to 256 [ 250.093484][ T1024] usb 5-1: config 0 descriptor?? [ 250.105178][ T1024] hub 5-1:0.0: USB hub found [ 250.119131][ T3398] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 250.132124][ T3398] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 250.142756][ T3398] exFAT-fs (loop3): Filesystem has been set read-only [ 250.149713][ T1634] usb 2-1: Using ep0 maxpacket: 32 [ 250.155043][ T3398] exFAT-fs (loop3): failed to initialize root inode [ 250.162736][ T1634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.173808][ T1634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.183710][ T1634] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.192923][ T1634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.215342][ T1634] usb 2-1: config 0 descriptor?? [ 250.221683][ T1634] hub 2-1:0.0: USB hub found [ 250.282578][ T1634] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 250.291804][ T1634] usbhid 2-1:0.0: can't add hid device: -71 [ 250.297962][ T1634] usbhid: probe of 2-1:0.0 failed with error -71 [ 250.300763][ T1024] hub 5-1:0.0: 1 port detected [ 250.327494][ T1634] usb 2-1: USB disconnect, device number 22 [ 250.345268][ T3402] loop1: detected capacity change from 0 to 256 [ 250.361108][ T3402] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 250.373823][ T3402] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 250.384286][ T3402] exFAT-fs (loop1): Filesystem has been set read-only [ 250.391201][ T3402] exFAT-fs (loop1): failed to initialize root inode [ 250.505896][ T3406] loop2: detected capacity change from 0 to 512 [ 250.512322][ T848] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.513646][ T3406] ext4: Unknown parameter 'pcr' [ 250.536802][ T3406] loop2: detected capacity change from 0 to 512 [ 250.546153][ T3406] EXT4-fs: Ignoring removed oldalloc option [ 250.552765][ T3406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.569850][ T3406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 250.578961][ T3406] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.631522][ T3412] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 250.644550][ T3412] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 250.655129][ T3412] exFAT-fs (loop0): Filesystem has been set read-only [ 250.662606][ T3412] exFAT-fs (loop0): failed to initialize root inode [ 250.705295][ T1024] usb 5-1: USB disconnect, device number 21 [ 250.717234][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 250.723952][ T848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.735619][ T848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.750138][ T848] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.759641][ T848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.768824][ T848] usb 4-1: config 0 descriptor?? [ 250.774953][ T848] hub 4-1:0.0: USB hub found [ 250.785525][ T3414] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.846: iget: bad i_size value: 2533274857506816 [ 250.847223][ T1634] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 250.976373][ T848] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 250.987485][ T848] usbhid 4-1:0.0: can't add hid device: -71 [ 250.993463][ T848] usbhid: probe of 4-1:0.0 failed with error -71 [ 250.997181][ T315] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 251.037528][ T848] usb 4-1: USB disconnect, device number 25 [ 251.047298][ T1634] usb 2-1: Using ep0 maxpacket: 32 [ 251.055688][ T1634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.066824][ T1634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.076733][ T1634] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.093671][ T1634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.107267][ T1634] usb 2-1: config 0 descriptor?? [ 251.113547][ T1634] hub 2-1:0.0: USB hub found [ 251.187165][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 251.193321][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.221264][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.249248][ T315] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.272121][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.333409][ T1634] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 251.352742][ T1634] usbhid 2-1:0.0: can't add hid device: -71 [ 251.360911][ T1634] usbhid: probe of 2-1:0.0 failed with error -71 [ 251.407614][ T1634] usb 2-1: USB disconnect, device number 23 [ 251.419926][ T315] usb 1-1: config 0 descriptor?? [ 251.426332][ T315] hub 1-1:0.0: USB hub found [ 251.638952][ T3422] set_capacity_and_notify: 1 callbacks suppressed [ 251.638972][ T3422] loop3: detected capacity change from 0 to 4096 [ 251.657344][ T315] hub 1-1:0.0: 1 port detected [ 251.668304][ T3422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 251.702986][ T3422] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.850: corrupted inode contents [ 251.715090][ T3422] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.850: mark_inode_dirty error [ 251.728798][ T3422] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.850: corrupted inode contents [ 251.740822][ T3422] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.850: mark_inode_dirty error [ 251.752615][ T3422] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.850: corrupted inode contents [ 251.764680][ T3422] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.850: mark_inode_dirty error [ 251.776090][ T3422] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.850: corrupted inode contents [ 251.788101][ T3422] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.850: mark_inode_dirty error [ 251.799326][ T3422] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 251.825102][ T287] EXT4-fs (loop3): unmounting filesystem. [ 251.854801][ T292] EXT4-fs (loop2): unmounting filesystem. [ 252.799454][ T3443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3443 comm=syz.1.855 [ 252.997660][ T400] hub 1-1:0.0: activate --> -90 [ 253.007780][ T3446] loop3: detected capacity change from 0 to 256 [ 253.035992][ T3446] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 253.063117][ T3446] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 253.079147][ T3446] exFAT-fs (loop3): Filesystem has been set read-only [ 253.086031][ T3446] exFAT-fs (loop3): failed to initialize root inode [ 253.204954][ T400] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 253.212144][ T1024] usb 1-1: USB disconnect, device number 22 [ 253.427172][ T848] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 253.605498][ T3459] loop1: detected capacity change from 0 to 256 [ 253.617162][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 253.619306][ T3459] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 253.623357][ T848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.635103][ T3459] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 253.648541][ T848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.656081][ T3459] exFAT-fs (loop1): Filesystem has been set read-only [ 253.665706][ T848] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.673059][ T3459] exFAT-fs (loop1): failed to initialize root inode [ 253.681556][ T848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.699453][ T848] usb 4-1: config 0 descriptor?? [ 253.713301][ T848] hub 4-1:0.0: USB hub found [ 253.886139][ T3468] netlink: 64 bytes leftover after parsing attributes in process `syz.2.864'. [ 253.939654][ T848] hub 4-1:0.0: 1 port detected [ 254.327194][ T6] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 254.500727][ T3477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3477 comm=syz.4.866 [ 254.897208][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 254.927822][ T848] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 254.928159][ T400] usb 4-1: USB disconnect, device number 26 [ 254.937033][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.956380][ T3480] binder: BINDER_SET_CONTEXT_MGR already set [ 254.962543][ T3480] binder: 3479:3480 ioctl 4018620d 200000004a80 returned -16 [ 254.969975][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.980139][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.989244][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.001067][ T6] usb 2-1: config 0 descriptor?? [ 255.009690][ T6] hub 2-1:0.0: USB hub found [ 255.568110][ T6] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 255.668774][ T3489] loop4: detected capacity change from 0 to 4096 [ 255.679400][ T3489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.696901][ T3489] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.871: corrupted inode contents [ 255.708959][ T3489] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #15: comm syz.4.871: mark_inode_dirty error [ 255.720530][ T3489] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.871: corrupted inode contents [ 255.732686][ T3489] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.871: mark_inode_dirty error [ 255.744209][ T3489] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.871: corrupted inode contents [ 255.756213][ T3489] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.871: mark_inode_dirty error [ 255.767666][ T3489] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.871: corrupted inode contents [ 255.779717][ T3489] EXT4-fs error (device loop4): ext4_truncate:4327: inode #15: comm syz.4.871: mark_inode_dirty error [ 255.781816][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 255.791173][ T3489] EXT4-fs error (device loop4) in ext4_setattr:5697: Corrupt filesystem [ 255.797480][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 255.830677][ T290] EXT4-fs (loop4): unmounting filesystem. [ 255.839253][ T6] usb 2-1: USB disconnect, device number 24 [ 256.498681][ T3505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3505 comm=syz.4.873 [ 256.523458][ T3503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3503 comm=syz.2.874 [ 256.804519][ T3516] loop4: detected capacity change from 0 to 256 [ 256.813133][ T3516] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 256.825617][ T3516] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 256.828085][ T3518] loop2: detected capacity change from 0 to 256 [ 256.837381][ T3516] exFAT-fs (loop4): Filesystem has been set read-only [ 256.868013][ T3518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 256.882303][ T3518] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 256.893022][ T3518] exFAT-fs (loop2): Filesystem has been set read-only [ 256.906265][ T3516] exFAT-fs (loop4): failed to initialize root inode [ 256.948241][ T3518] exFAT-fs (loop2): failed to initialize root inode [ 256.960377][ T3522] 9pnet_fd: Insufficient options for proto=fd [ 257.091401][ T3524] 9pnet_fd: Insufficient options for proto=fd [ 257.137308][ T3522] loop1: detected capacity change from 0 to 40427 [ 257.149749][ T3522] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 257.156406][ T3522] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 257.173542][ T3522] F2FS-fs (loop1): invalid crc value [ 257.180206][ T3522] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 257.209932][ T3522] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 257.217055][ T3522] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.220181][ T3524] loop0: detected capacity change from 0 to 40427 [ 257.237177][ T3524] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 257.245120][ T3524] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 257.254172][ T3524] F2FS-fs (loop0): invalid crc value [ 257.260976][ T3524] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 257.293233][ T3524] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 257.300408][ T3524] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.327195][ T400] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 257.335212][ T1024] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 257.363996][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 257.364009][ T28] audit: type=1326 audit(1784357730.412:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.394935][ T28] audit: type=1326 audit(1784357730.442:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.419676][ T28] audit: type=1326 audit(1784357730.442:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.444579][ T28] audit: type=1326 audit(1784357730.442:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.470797][ T28] audit: type=1326 audit(1784357730.442:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.495584][ T28] audit: type=1326 audit(1784357730.442:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.520107][ T28] audit: type=1326 audit(1784357730.442:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.545134][ T28] audit: type=1326 audit(1784357730.442:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.570039][ T28] audit: type=1326 audit(1784357730.442:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.571126][ T400] usb 5-1: Using ep0 maxpacket: 32 [ 257.599805][ T1024] usb 3-1: Using ep0 maxpacket: 32 [ 257.605122][ T28] audit: type=1326 audit(1784357730.452:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 257.632216][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.643544][ T288] syz-executor: attempt to access beyond end of device [ 257.643544][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.657479][ T1024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.677669][ T1024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.687637][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.698082][ T1024] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.707234][ T400] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.716447][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.724794][ T1024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.737585][ T400] usb 5-1: config 0 descriptor?? [ 257.747876][ T400] hub 5-1:0.0: USB hub found [ 257.767413][ T1024] usb 3-1: config 0 descriptor?? [ 257.773963][ T1024] hub 3-1:0.0: USB hub found [ 257.787060][ T289] syz-executor: attempt to access beyond end of device [ 257.787060][ T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.812705][ T3543] loop1: detected capacity change from 0 to 256 [ 257.869250][ T3543] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 257.882040][ T3543] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 257.892815][ T3543] exFAT-fs (loop1): Filesystem has been set read-only [ 257.899658][ T3543] exFAT-fs (loop1): failed to initialize root inode [ 257.902176][ T3550] loop3: detected capacity change from 0 to 256 [ 257.916746][ T3550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 257.929294][ T3550] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 257.934694][ T3551] loop0: detected capacity change from 0 to 256 [ 257.943791][ T3550] exFAT-fs (loop3): Filesystem has been set read-only [ 257.951244][ T3551] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 257.954552][ T3550] exFAT-fs (loop3): failed to initialize root inode [ 257.975021][ T1024] hub 3-1:0.0: 1 port detected [ 257.980274][ T3551] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 257.990992][ T400] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 257.999658][ T3551] exFAT-fs (loop0): Filesystem has been set read-only [ 258.006504][ T3551] exFAT-fs (loop0): failed to initialize root inode [ 258.214785][ T400] usbhid 5-1:0.0: can't add hid device: -71 [ 258.220817][ T400] usbhid: probe of 5-1:0.0 failed with error -71 [ 258.258701][ T400] usb 5-1: USB disconnect, device number 22 [ 258.297175][ T315] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 258.317180][ T335] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 258.377172][ T1070] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 258.477184][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 258.483607][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.494572][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.504324][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 258.509569][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.518695][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.527404][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.538451][ T315] usb 2-1: config 0 descriptor?? [ 258.545234][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.555086][ T335] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.564555][ T315] hub 2-1:0.0: USB hub found [ 258.569181][ T1070] usb 4-1: Using ep0 maxpacket: 32 [ 258.574344][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.583275][ T1070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.594505][ T1070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.596792][ T6] usb 3-1: USB disconnect, device number 19 [ 258.604314][ T1070] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.619273][ T335] usb 1-1: config 0 descriptor?? [ 258.624250][ T1070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.633009][ T335] hub 1-1:0.0: USB hub found [ 258.638111][ T1070] usb 4-1: config 0 descriptor?? [ 258.643799][ T1070] hub 4-1:0.0: USB hub found [ 258.758685][ T315] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 258.768789][ T315] usbhid 2-1:0.0: can't add hid device: -71 [ 258.774713][ T315] usbhid: probe of 2-1:0.0 failed with error -71 [ 258.807709][ T315] usb 2-1: USB disconnect, device number 25 [ 258.835778][ T335] hub 1-1:0.0: 1 port detected [ 258.844353][ T1070] hub 4-1:0.0: 1 port detected [ 259.027177][ T1634] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 259.177177][ T1634] usb 5-1: device descriptor read/64, error -71 [ 259.391901][ T3561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3561 comm=syz.1.890 [ 259.451767][ T1070] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 259.459505][ T335] usb 1-1: USB disconnect, device number 23 [ 259.553044][ T1634] usb 5-1: device descriptor read/64, error -71 [ 259.768333][ T335] hub 4-1:0.0: activate --> -90 [ 259.827179][ T1634] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 259.969070][ T1070] usb 4-1: USB disconnect, device number 27 [ 259.977177][ T1634] usb 5-1: device descriptor read/64, error -71 [ 259.986129][ T335] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 260.008654][ T3567] 9pnet_fd: Insufficient options for proto=fd [ 260.148404][ T3567] loop2: detected capacity change from 0 to 40427 [ 260.157312][ T3567] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 260.163727][ T3567] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 260.173540][ T3567] F2FS-fs (loop2): invalid crc value [ 260.179941][ T3567] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 260.201723][ T3567] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 260.208799][ T3567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.247194][ T1634] usb 5-1: device descriptor read/64, error -71 [ 260.348775][ T292] syz-executor: attempt to access beyond end of device [ 260.348775][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.377236][ T1634] usb usb5-port1: attempt power cycle [ 260.492735][ T3581] binder: BINDER_SET_CONTEXT_MGR already set [ 260.498843][ T3581] binder: 3580:3581 ioctl 4018620d 200000004a80 returned -16 [ 260.704036][ T3591] loop0: detected capacity change from 0 to 256 [ 260.732465][ T3591] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 260.745033][ T3591] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 260.755579][ T3591] exFAT-fs (loop0): Filesystem has been set read-only [ 260.762411][ T3591] exFAT-fs (loop0): failed to initialize root inode [ 260.797180][ T1634] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 260.828434][ T1634] usb 5-1: device descriptor read/8, error -71 [ 263.877694][ T1634] usb 5-1: device descriptor read/8, error -71 [ 264.194149][ T3595] loop1: detected capacity change from 0 to 262144 [ 264.207641][ T3595] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 264.215826][ T3595] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.251833][ T3595] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.273550][ T3612] loop4: detected capacity change from 0 to 256 [ 264.285490][ T3595] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 264.292997][ T3595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.357057][ T3615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3615 comm=syz.2.905 [ 264.569486][ T3612] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 264.607380][ T3618] loop0: detected capacity change from 0 to 256 [ 264.614684][ T3620] binder: BINDER_SET_CONTEXT_MGR already set [ 264.621257][ T3620] binder: 3619:3620 ioctl 4018620d 200000004a80 returned -16 [ 264.637740][ T3612] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 264.642013][ T3618] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 264.655395][ T3612] exFAT-fs (loop4): Filesystem has been set read-only [ 264.672933][ T3612] exFAT-fs (loop4): failed to initialize root inode [ 264.681745][ T3618] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 264.693089][ T3618] exFAT-fs (loop0): Filesystem has been set read-only [ 264.699915][ T3618] exFAT-fs (loop0): failed to initialize root inode [ 265.047162][ T6] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 265.127189][ T1634] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 265.157528][ T1634] usb 5-1: Using ep0 maxpacket: 32 [ 265.158605][ T1634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.174039][ T1634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.174074][ T1634] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.174097][ T1634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.177117][ T1634] usb 5-1: config 0 descriptor?? [ 265.207506][ T1634] hub 5-1:0.0: USB hub found [ 265.237167][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 265.243373][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.243404][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.243452][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.243474][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.247250][ T6] usb 1-1: config 0 descriptor?? [ 265.288370][ T6] hub 1-1:0.0: USB hub found [ 265.406799][ T1634] hub 5-1:0.0: 1 port detected [ 265.516687][ T6] hub 1-1:0.0: 1 port detected [ 265.529654][ T3631] loop1: detected capacity change from 0 to 512 [ 265.536194][ T3631] ext4: Unknown parameter 'pcr' [ 265.552097][ T3631] loop1: detected capacity change from 0 to 512 [ 265.559028][ T3631] EXT4-fs: Ignoring removed oldalloc option [ 265.565403][ T3631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.607621][ T3631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 265.616577][ T3631] ext4 filesystem being mounted at /193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.835138][ T1634] usb 5-1: USB disconnect, device number 26 [ 265.881519][ T3638] loop3: detected capacity change from 0 to 4096 [ 265.905164][ T3638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 265.918476][ T3643] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.911: iget: bad i_size value: 2533274857506816 [ 265.957907][ T3638] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.913: corrupted inode contents [ 265.958066][ T3638] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.913: mark_inode_dirty error [ 265.958218][ T3638] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.913: corrupted inode contents [ 265.958356][ T3638] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.913: mark_inode_dirty error [ 265.958486][ T3638] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.913: corrupted inode contents [ 265.958619][ T3638] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.913: mark_inode_dirty error [ 265.959004][ T3638] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.913: corrupted inode contents [ 265.959255][ T3638] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.913: mark_inode_dirty error [ 265.959388][ T3638] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 265.960904][ T3638] fuse: Bad value for 'fd' [ 266.100943][ T287] EXT4-fs (loop3): unmounting filesystem. [ 266.152260][ T1634] usb 1-1: USB disconnect, device number 24 [ 267.583280][ T3664] 9pnet_fd: Insufficient options for proto=fd [ 267.608557][ T356] Bluetooth: hci0: Frame reassembly failed (-84) [ 268.021501][ T3664] loop0: detected capacity change from 0 to 40427 [ 268.044218][ T3664] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 268.071809][ T3664] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 268.101312][ T3664] F2FS-fs (loop0): invalid crc value [ 268.113198][ T3661] loop2: detected capacity change from 0 to 262144 [ 268.123008][ T3661] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 268.131225][ T3661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 268.142622][ T3664] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 268.160353][ T3661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.183047][ T3664] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 268.190187][ T3664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 268.208391][ T3661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 268.215454][ T3661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 268.309732][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 268.309747][ T28] audit: type=1326 audit(1784357741.362:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.355682][ T28] audit: type=1326 audit(1784357741.362:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.420577][ T28] audit: type=1326 audit(1784357741.362:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.445531][ T28] audit: type=1326 audit(1784357741.362:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.471841][ T28] audit: type=1326 audit(1784357741.362:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.497202][ T28] audit: type=1326 audit(1784357741.362:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.497563][ T288] EXT4-fs (loop1): unmounting filesystem. [ 268.527584][ T28] audit: type=1326 audit(1784357741.362:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.552339][ T28] audit: type=1326 audit(1784357741.362:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.620635][ T289] syz-executor: attempt to access beyond end of device [ 268.620635][ T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.621730][ T28] audit: type=1326 audit(1784357741.362:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.659647][ T28] audit: type=1326 audit(1784357741.392:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.0.921" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef12d9de99 code=0x7ffc0000 [ 268.753556][ T3682] loop1: detected capacity change from 0 to 256 [ 268.781399][ T3682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 268.790450][ T3685] loop0: detected capacity change from 0 to 512 [ 268.806788][ T3685] ext4: Unknown parameter 'pcr' [ 268.813001][ T3682] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 268.823778][ T3682] exFAT-fs (loop1): Filesystem has been set read-only [ 268.830702][ T3682] exFAT-fs (loop1): failed to initialize root inode [ 268.857109][ T3685] EXT4-fs: Ignoring removed oldalloc option [ 268.865641][ T3685] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.883306][ T3685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 268.909163][ T3685] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.167194][ T1070] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 269.175298][ T3697] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.925: iget: bad i_size value: 2533274857506816 [ 269.377275][ T1070] usb 2-1: Using ep0 maxpacket: 32 [ 269.384348][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.395804][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.406032][ T1070] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.415298][ T1070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.433398][ T3701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3701 comm=syz.4.929 [ 269.493473][ T1070] usb 2-1: config 0 descriptor?? [ 269.540388][ T1070] hub 2-1:0.0: USB hub found [ 269.687178][ T2516] Bluetooth: hci0: command 0x1003 tx timeout [ 269.693235][ T2788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.699469][ T3665] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 269.707281][ T3707] set_capacity_and_notify: 1 callbacks suppressed [ 269.707296][ T3707] loop2: detected capacity change from 0 to 256 [ 269.722430][ T3707] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 269.737645][ T3707] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 269.748164][ T3707] exFAT-fs (loop2): Filesystem has been set read-only [ 269.748236][ T1070] hub 2-1:0.0: 1 port detected [ 269.754990][ T3707] exFAT-fs (loop2): failed to initialize root inode [ 269.943184][ T289] EXT4-fs (loop0): unmounting filesystem. [ 270.161890][ T1070] usb 2-1: USB disconnect, device number 26 [ 271.282902][ T1793] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.495212][ T3721] 9pnet_fd: Insufficient options for proto=fd [ 271.495256][ T3720] 9pnet_fd: Insufficient options for proto=fd [ 271.724044][ T3715] loop4: detected capacity change from 0 to 262144 [ 271.733825][ T3715] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 271.742049][ T3715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 271.778378][ T3715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.811319][ T3715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 271.818418][ T3715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.831325][ T3721] loop0: detected capacity change from 0 to 40427 [ 271.843703][ T3721] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 271.850084][ T3721] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 271.860806][ T3721] F2FS-fs (loop0): invalid crc value [ 271.890607][ T3721] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 271.896141][ T3720] loop2: detected capacity change from 0 to 40427 [ 271.914190][ T3720] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 271.926982][ T3720] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 271.941499][ T3720] F2FS-fs (loop2): invalid crc value [ 271.953401][ T3721] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 271.960571][ T3721] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.988878][ T3720] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 272.019106][ T3720] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 272.026217][ T3720] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 272.364258][ T3749] device bridge8 entered promiscuous mode [ 272.581188][ T292] syz-executor: attempt to access beyond end of device [ 272.581188][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.648114][ T289] syz-executor: attempt to access beyond end of device [ 272.648114][ T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.758927][ T3757] loop2: detected capacity change from 0 to 256 [ 272.768047][ T3757] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 272.780529][ T3757] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 272.791031][ T3757] exFAT-fs (loop2): Filesystem has been set read-only [ 272.798808][ T3757] exFAT-fs (loop2): failed to initialize root inode [ 272.850291][ T3759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3759 comm=syz.0.943 [ 273.190913][ T3763] loop1: detected capacity change from 0 to 256 [ 273.201185][ T3763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 273.213700][ T3763] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 273.224208][ T3763] exFAT-fs (loop1): Filesystem has been set read-only [ 273.231108][ T3763] exFAT-fs (loop1): failed to initialize root inode [ 273.297167][ T2516] Bluetooth: hci0: command 0x1003 tx timeout [ 273.298469][ T2788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.309418][ T3717] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 273.594319][ T1070] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 273.666800][ T3771] loop0: detected capacity change from 0 to 256 [ 273.678111][ T3771] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 273.690504][ T3771] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 273.700907][ T3771] exFAT-fs (loop0): Filesystem has been set read-only [ 273.707796][ T3771] exFAT-fs (loop0): failed to initialize root inode [ 273.787231][ T1070] usb 3-1: Using ep0 maxpacket: 32 [ 273.793748][ T1070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.804765][ T1070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.814531][ T1070] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.823592][ T1070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.832341][ T1070] usb 3-1: config 0 descriptor?? [ 273.839349][ T1070] hub 3-1:0.0: USB hub found [ 274.018463][ T848] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 274.020367][ T3783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3783 comm=syz.1.951 [ 274.189197][ T1070] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 274.321127][ T3791] loop4: detected capacity change from 0 to 256 [ 274.331111][ T3791] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 274.343613][ T3791] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 274.354179][ T3791] exFAT-fs (loop4): Filesystem has been set read-only [ 274.361119][ T3791] exFAT-fs (loop4): failed to initialize root inode [ 274.377225][ T1634] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.417094][ T1070] usbhid 3-1:0.0: can't add hid device: -71 [ 274.417485][ T848] usb 1-1: Using ep0 maxpacket: 32 [ 274.424995][ T1070] usbhid: probe of 3-1:0.0 failed with error -71 [ 274.438830][ T848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.449965][ T848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.459837][ T848] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.467929][ T1070] usb 3-1: USB disconnect, device number 20 [ 274.469207][ T848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.483547][ T848] usb 1-1: config 0 descriptor?? [ 274.489484][ T848] hub 1-1:0.0: USB hub found [ 274.567169][ T1634] usb 4-1: Using ep0 maxpacket: 32 [ 274.573289][ T1634] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.583452][ T1634] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.592453][ T1634] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.601599][ T1634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.610161][ T1634] usb 4-1: config 0 descriptor?? [ 274.687177][ T309] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 274.694819][ T848] hub 1-1:0.0: 1 port detected [ 274.838408][ T3795] loop1: detected capacity change from 0 to 256 [ 274.847277][ T3795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 274.859740][ T3795] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 274.870194][ T3795] exFAT-fs (loop1): Filesystem has been set read-only [ 274.877065][ T3795] exFAT-fs (loop1): failed to initialize root inode [ 274.883767][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 274.890988][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.902040][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.911809][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.921020][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.949792][ T309] usb 5-1: config 0 descriptor?? [ 274.956286][ T309] hub 5-1:0.0: USB hub found [ 275.054878][ T3799] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3799 comm=syz.2.957 [ 275.250302][ T309] hub 5-1:0.0: 1 port detected [ 275.256153][ T848] usb 1-1: USB disconnect, device number 25 [ 275.270284][ T1070] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 275.457187][ T1070] usb 2-1: Using ep0 maxpacket: 32 [ 275.463430][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.474372][ T1070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.484145][ T1070] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.493393][ T1070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.502845][ T1070] usb 2-1: config 0 descriptor?? [ 275.508657][ T1070] hub 2-1:0.0: USB hub found [ 275.668165][ T309] usb 5-1: USB disconnect, device number 27 [ 275.709737][ T1070] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 275.789639][ T3805] loop0: detected capacity change from 0 to 256 [ 275.812651][ T3805] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 275.827472][ T3805] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 275.827510][ T3805] exFAT-fs (loop0): Filesystem has been set read-only [ 275.827519][ T3805] exFAT-fs (loop0): failed to initialize root inode [ 275.921306][ T1070] usbhid 2-1:0.0: can't add hid device: -71 [ 275.927295][ T1070] usbhid: probe of 2-1:0.0 failed with error -71 [ 275.957522][ T1070] usb 2-1: USB disconnect, device number 27 [ 276.704803][ T3101] Bluetooth: hci0: Frame reassembly failed (-84) [ 277.246138][ T335] usb 4-1: USB disconnect, device number 28 [ 277.285024][ T3841] loop4: detected capacity change from 0 to 256 [ 277.300251][ T3841] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 277.300643][ T3841] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 277.322833][ T3841] exFAT-fs (loop4): Filesystem has been set read-only [ 277.322846][ T3841] exFAT-fs (loop4): failed to initialize root inode [ 277.415622][ T3844] loop0: detected capacity change from 0 to 128 [ 277.620341][ T3848] device bridge8 entered promiscuous mode [ 277.675622][ T1070] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 277.947215][ T1070] usb 5-1: Using ep0 maxpacket: 32 [ 277.954040][ T1070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.976057][ T1070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.986604][ T1070] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.996447][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.017871][ T3860] loop1: detected capacity change from 0 to 256 [ 278.042181][ T1070] usb 5-1: config 0 descriptor?? [ 278.062073][ T1070] hub 5-1:0.0: USB hub found [ 278.116234][ T3860] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 278.128695][ T3860] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 278.139099][ T3860] exFAT-fs (loop1): Filesystem has been set read-only [ 278.145901][ T3860] exFAT-fs (loop1): failed to initialize root inode [ 278.287943][ T1070] hub 5-1:0.0: 1 port detected [ 278.457166][ T848] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 278.637161][ T848] usb 2-1: Using ep0 maxpacket: 32 [ 278.643409][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.654349][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.664126][ T848] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.673224][ T848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.681963][ T848] usb 2-1: config 0 descriptor?? [ 278.687754][ T848] hub 2-1:0.0: USB hub found [ 278.701771][ T1070] usb 5-1: USB disconnect, device number 28 [ 278.727191][ T2788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.887786][ T848] hub 2-1:0.0: 1 port detected [ 279.008316][ T3869] 9pnet_fd: Insufficient options for proto=fd [ 279.088040][ T3869] loop3: detected capacity change from 0 to 40427 [ 279.097407][ T3869] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 279.103832][ T3869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 279.112772][ T3869] F2FS-fs (loop3): invalid crc value [ 279.119367][ T3869] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 279.145178][ T3869] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 279.153143][ T3869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 279.222485][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 279.222500][ T28] audit: type=1326 audit(1784357752.272:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.253251][ T28] audit: type=1326 audit(1784357752.272:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.278127][ T28] audit: type=1326 audit(1784357752.272:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.303027][ T28] audit: type=1326 audit(1784357752.272:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.349399][ T28] audit: type=1326 audit(1784357752.272:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.380710][ T28] audit: type=1326 audit(1784357752.272:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.407006][ T28] audit: type=1326 audit(1784357752.272:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.431772][ T28] audit: type=1326 audit(1784357752.272:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.447176][ T309] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 279.456619][ T28] audit: type=1326 audit(1784357752.332:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.488896][ T28] audit: type=1326 audit(1784357752.332:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.979" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55339de99 code=0x7ffc0000 [ 279.525431][ T287] syz-executor: attempt to access beyond end of device [ 279.525431][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.609184][ T1070] usb 2-1: USB disconnect, device number 28 [ 279.667181][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 279.673324][ T309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.683595][ T309] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.696510][ T309] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.705574][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.713759][ T3831] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 279.714553][ T309] usb 1-1: config 0 descriptor?? [ 279.726368][ T309] hub 1-1:0.0: bad descriptor, ignoring hub [ 279.732333][ T309] hub: probe of 1-1:0.0 failed with error -5 [ 279.738540][ T309] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 280.182847][ T3895] loop1: detected capacity change from 0 to 512 [ 280.183122][ T3895] ext4: Unknown parameter 'pcr' [ 280.199734][ T3552] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.220737][ T3895] loop1: detected capacity change from 0 to 512 [ 280.220941][ T3895] EXT4-fs: Ignoring removed oldalloc option [ 280.227981][ T3895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 280.335276][ T3895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 280.344267][ T3895] ext4 filesystem being mounted at /211/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.037455][ T3905] device bridge12 entered promiscuous mode [ 281.141562][ T3914] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.987: iget: bad i_size value: 2533274857506816 [ 281.783565][ T3923] 9pnet_fd: Insufficient options for proto=fd [ 281.931389][ T3925] 9pnet_fd: Insufficient options for proto=fd [ 281.951799][ T288] EXT4-fs (loop1): unmounting filesystem. [ 282.102291][ T3923] loop4: detected capacity change from 0 to 40427 [ 282.117592][ T3923] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 282.132354][ T3923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 282.141879][ T3923] F2FS-fs (loop4): invalid crc value [ 282.186995][ T3925] loop2: detected capacity change from 0 to 40427 [ 282.202424][ T3923] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 282.218582][ T3925] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 282.224971][ T3925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 282.248396][ T3925] F2FS-fs (loop2): invalid crc value [ 282.277950][ T3925] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 282.290907][ T3923] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 282.298821][ T3923] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 282.357961][ T3925] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 282.374737][ T3925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.645132][ T290] syz-executor: attempt to access beyond end of device [ 282.645132][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.727423][ T292] syz-executor: attempt to access beyond end of device [ 282.727423][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.227419][ T309] usb 1-1: USB disconnect, device number 26 [ 283.838092][ T3985] 9pnet_fd: Insufficient options for proto=fd [ 283.991797][ T3985] loop2: detected capacity change from 0 to 40427 [ 284.008930][ T3985] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 284.017183][ T3985] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 284.026073][ T3985] F2FS-fs (loop2): invalid crc value [ 284.054813][ T3985] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 284.122520][ T3989] loop3: detected capacity change from 0 to 4096 [ 284.145565][ T3985] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 284.154876][ T3985] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 284.174205][ T3989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 284.248683][ T3989] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1011: corrupted inode contents [ 284.277365][ T3989] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.1011: mark_inode_dirty error [ 284.288271][ T3991] fuse: Bad value for 'fd' [ 284.301173][ T3989] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1011: corrupted inode contents [ 284.317173][ T3989] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1011: mark_inode_dirty error [ 284.329212][ T3989] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1011: corrupted inode contents [ 284.341845][ T3989] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1011: mark_inode_dirty error [ 284.353732][ T3989] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1011: corrupted inode contents [ 284.507442][ T1070] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 284.515991][ T3989] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.1011: mark_inode_dirty error [ 284.537205][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 284.537315][ T28] audit: type=1326 audit(1784357757.582:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.573210][ T3989] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 284.579713][ T28] audit: type=1326 audit(1784357757.582:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.606533][ T28] audit: type=1326 audit(1784357757.622:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.631430][ T28] audit: type=1326 audit(1784357757.622:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.656536][ T28] audit: type=1326 audit(1784357757.622:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.658726][ T287] EXT4-fs (loop3): unmounting filesystem. [ 284.681588][ T28] audit: type=1326 audit(1784357757.622:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.711856][ T28] audit: type=1326 audit(1784357757.622:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.737933][ T28] audit: type=1326 audit(1784357757.622:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.762858][ T1070] usb 5-1: Using ep0 maxpacket: 32 [ 284.765694][ T28] audit: type=1326 audit(1784357757.622:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.793204][ T28] audit: type=1326 audit(1784357757.622:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.2.1008" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7b19de99 code=0x7ffc0000 [ 284.793748][ T1070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.828867][ T1070] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.842128][ T292] syz-executor: attempt to access beyond end of device [ 284.842128][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.842215][ T1070] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.866881][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.882171][ T1070] usb 5-1: config 0 descriptor?? [ 284.892397][ T1070] hub 5-1:0.0: bad descriptor, ignoring hub [ 284.898765][ T1070] hub: probe of 5-1:0.0 failed with error -5 [ 284.905063][ T1070] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 284.997465][ T4020] loop2: detected capacity change from 0 to 4096 [ 285.012070][ T4020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.030180][ T4020] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1018: corrupted inode contents [ 285.042296][ T4020] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #15: comm syz.2.1018: mark_inode_dirty error [ 285.042432][ T4020] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1018: corrupted inode contents [ 285.065726][ T4020] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1018: mark_inode_dirty error [ 285.078744][ T4020] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1018: corrupted inode contents [ 285.078865][ T4020] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1018: mark_inode_dirty error [ 285.112791][ T4020] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1018: corrupted inode contents [ 285.112904][ T4020] EXT4-fs error (device loop2): ext4_truncate:4327: inode #15: comm syz.2.1018: mark_inode_dirty error [ 285.152215][ T4020] EXT4-fs error (device loop2) in ext4_setattr:5697: Corrupt filesystem [ 285.179974][ T292] EXT4-fs (loop2): unmounting filesystem. [ 285.206584][ T4031] loop0: detected capacity change from 0 to 128 [ 285.395399][ T4039] device bridge9 entered promiscuous mode [ 285.474715][ T4042] loop2: detected capacity change from 0 to 128 [ 285.698723][ T4044] device bridge6 entered promiscuous mode [ 285.948999][ T4049] 9pnet_fd: Insufficient options for proto=fd [ 286.071487][ T4049] loop1: detected capacity change from 0 to 40427 [ 286.085169][ T4049] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 286.101849][ T4049] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 286.118484][ T4049] F2FS-fs (loop1): invalid crc value [ 286.135764][ T4049] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 286.172710][ T4049] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 286.180281][ T4049] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 286.368880][ T288] syz-executor: attempt to access beyond end of device [ 286.368880][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 286.728535][ T4069] loop0: detected capacity change from 0 to 4096 [ 286.739506][ T4069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.821267][ T4076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4076 comm=syz.1.1032 [ 286.980725][ T4069] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1033: corrupted inode contents [ 287.029799][ T4069] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #15: comm syz.0.1033: mark_inode_dirty error [ 287.041429][ T4069] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1033: corrupted inode contents [ 287.053719][ T4069] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1033: mark_inode_dirty error [ 287.065189][ T4069] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1033: corrupted inode contents [ 287.077332][ T4069] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1033: mark_inode_dirty error [ 287.080279][ T4071] fuse: Bad value for 'fd' [ 287.088825][ T4069] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1033: corrupted inode contents [ 287.105020][ T4069] EXT4-fs error (device loop0): ext4_truncate:4327: inode #15: comm syz.0.1033: mark_inode_dirty error [ 287.116424][ T4069] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem [ 287.153608][ T289] EXT4-fs (loop0): unmounting filesystem. [ 287.387538][ T4088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4088 comm=syz.0.1037 [ 287.638032][ T4094] loop1: detected capacity change from 0 to 128 [ 287.757256][ T1070] usb 5-1: USB disconnect, device number 29 [ 287.761758][ T4101] loop4: detected capacity change from 0 to 256 [ 287.773088][ T4101] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 287.785516][ T4101] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 287.795958][ T4101] exFAT-fs (loop4): Filesystem has been set read-only [ 287.802964][ T4101] exFAT-fs (loop4): failed to initialize root inode [ 287.855341][ T4102] device bridge9 entered promiscuous mode [ 287.931594][ T4104] 9pnet_fd: Insufficient options for proto=fd [ 288.013564][ T4104] loop3: detected capacity change from 0 to 40427 [ 288.023103][ T4104] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 288.029589][ T4104] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 288.038356][ T4104] F2FS-fs (loop3): invalid crc value [ 288.044977][ T4104] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 288.067924][ T4104] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 288.075029][ T4104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.189622][ T287] syz-executor: attempt to access beyond end of device [ 288.189622][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 288.217217][ T1070] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 288.467192][ T1070] usb 5-1: Using ep0 maxpacket: 32 [ 288.550576][ T1070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.587170][ T1070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.606227][ T1070] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.616157][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.627069][ T1070] usb 5-1: config 0 descriptor?? [ 288.636726][ T1070] hub 5-1:0.0: USB hub found [ 288.839164][ T1070] hub 5-1:0.0: 1 port detected [ 288.904250][ T4118] loop2: detected capacity change from 0 to 4096 [ 288.922929][ T4118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 288.944365][ T4118] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1045: corrupted inode contents [ 288.956717][ T4118] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #15: comm syz.2.1045: mark_inode_dirty error [ 288.968437][ T4118] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1045: corrupted inode contents [ 288.990200][ T4118] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1045: mark_inode_dirty error [ 288.993793][ T4121] fuse: Bad value for 'fd' [ 289.001657][ T4118] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1045: corrupted inode contents [ 289.021841][ T4118] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1045: mark_inode_dirty error [ 289.035301][ T4118] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.1045: corrupted inode contents [ 289.048002][ T4118] EXT4-fs error (device loop2): ext4_truncate:4327: inode #15: comm syz.2.1045: mark_inode_dirty error [ 289.059474][ T4118] EXT4-fs error (device loop2) in ext4_setattr:5697: Corrupt filesystem [ 289.086347][ T292] EXT4-fs (loop2): unmounting filesystem. [ 289.166853][ T4135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4135 comm=syz.1.1049 [ 289.463133][ T1634] usb 5-1: USB disconnect, device number 30 [ 289.515605][ T4144] loop0: detected capacity change from 0 to 256 [ 289.543724][ T4144] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 289.555306][ T335] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 289.564329][ T4144] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 289.574790][ T4144] exFAT-fs (loop0): Filesystem has been set read-only [ 289.581597][ T4144] exFAT-fs (loop0): failed to initialize root inode [ 289.757225][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 289.763417][ T335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.773569][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.786492][ T335] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.795677][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.804561][ T335] usb 3-1: config 0 descriptor?? [ 289.810476][ T335] hub 3-1:0.0: bad descriptor, ignoring hub [ 289.816396][ T335] hub: probe of 3-1:0.0 failed with error -5 [ 289.822610][ T335] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 289.885962][ T4147] 9pnet_fd: Insufficient options for proto=fd [ 289.927208][ T309] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 289.964870][ T4147] loop1: detected capacity change from 0 to 40427 [ 289.985206][ T4147] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 289.991658][ T4147] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 290.003568][ T4147] F2FS-fs (loop1): invalid crc value [ 290.010467][ T4147] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 290.032702][ T4147] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 290.039789][ T4147] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 290.142884][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 290.142899][ T28] audit: type=1326 audit(1784357763.182:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.173620][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 290.179101][ T28] audit: type=1326 audit(1784357763.182:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.203970][ T28] audit: type=1326 audit(1784357763.182:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.229095][ T28] audit: type=1326 audit(1784357763.182:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.231916][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.254407][ T28] audit: type=1326 audit(1784357763.182:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.273792][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.299553][ T309] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.300009][ T28] audit: type=1326 audit(1784357763.182:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.333310][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.345731][ T309] usb 1-1: config 0 descriptor?? [ 290.350904][ T28] audit: type=1326 audit(1784357763.182:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.375953][ T28] audit: type=1326 audit(1784357763.182:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.376617][ T309] hub 1-1:0.0: USB hub found [ 290.401086][ T28] audit: type=1326 audit(1784357763.182:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.406669][ T288] syz-executor: attempt to access beyond end of device [ 290.406669][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 290.430397][ T28] audit: type=1326 audit(1784357763.182:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.1054" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f623099de99 code=0x7ffc0000 [ 290.504783][ T4162] loop1: detected capacity change from 0 to 128 [ 290.606523][ T309] hub 1-1:0.0: 1 port detected [ 290.667293][ T4167] device bridge10 entered promiscuous mode [ 290.845799][ T4171] loop3: detected capacity change from 0 to 4096 [ 290.856448][ T4171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.871432][ T4171] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1060: corrupted inode contents [ 290.883576][ T4171] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.1060: mark_inode_dirty error [ 290.896456][ T4171] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1060: corrupted inode contents [ 290.908561][ T4171] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1060: mark_inode_dirty error [ 290.920069][ T4171] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1060: corrupted inode contents [ 290.921286][ T4172] fuse: Bad value for 'fd' [ 290.932206][ T4171] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1060: mark_inode_dirty error [ 290.948025][ T4171] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1060: corrupted inode contents [ 290.960237][ T4171] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.1060: mark_inode_dirty error [ 290.971661][ T4171] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 291.003811][ T287] EXT4-fs (loop3): unmounting filesystem. [ 291.270635][ T309] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 291.270644][ T315] usb 1-1: USB disconnect, device number 27 [ 291.283735][ T4184] loop3: detected capacity change from 0 to 4096 [ 291.294719][ T4184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.311375][ T4184] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1064: corrupted inode contents [ 291.323616][ T4184] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.1064: mark_inode_dirty error [ 291.335238][ T4184] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1064: corrupted inode contents [ 291.347370][ T4184] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1064: mark_inode_dirty error [ 291.359097][ T4184] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1064: corrupted inode contents [ 291.371933][ T4184] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1064: mark_inode_dirty error [ 291.377379][ T4185] fuse: Bad value for 'fd' [ 291.383877][ T4184] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1064: corrupted inode contents [ 291.404506][ T4184] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.1064: mark_inode_dirty error [ 291.416143][ T4184] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 291.443624][ T287] EXT4-fs (loop3): unmounting filesystem. [ 291.827434][ T4194] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4194 comm=syz.1.1065 [ 291.916416][ T4196] 9pnet_fd: Insufficient options for proto=fd [ 291.992798][ T4196] loop4: detected capacity change from 0 to 40427 [ 292.002463][ T4196] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 292.009038][ T4196] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 292.017921][ T4196] F2FS-fs (loop4): invalid crc value [ 292.024487][ T4196] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 292.045948][ T4196] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 292.054410][ T4196] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 292.200238][ T290] syz-executor: attempt to access beyond end of device [ 292.200238][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 292.500705][ T4223] loop2: detected capacity change from 0 to 128 [ 292.516489][ T4212] loop3: detected capacity change from 0 to 4096 [ 292.601940][ T315] usb 3-1: USB disconnect, device number 21 [ 292.684152][ T4212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 292.688645][ T4230] device bridge7 entered promiscuous mode [ 293.152854][ T4212] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1072: corrupted inode contents [ 293.168895][ T4212] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.1072: mark_inode_dirty error [ 293.187651][ T4212] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1072: corrupted inode contents [ 293.199958][ T4212] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1072: mark_inode_dirty error [ 293.211749][ T4218] fuse: Bad value for 'fd' [ 293.216632][ T4212] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1072: corrupted inode contents [ 293.228825][ T4212] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1072: mark_inode_dirty error [ 293.240418][ T4212] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1072: corrupted inode contents [ 293.252573][ T4212] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.1072: mark_inode_dirty error [ 293.263969][ T4212] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 293.318524][ T287] EXT4-fs (loop3): unmounting filesystem. [ 293.415815][ T4237] 9pnet_fd: Insufficient options for proto=fd [ 293.635961][ T4237] loop3: detected capacity change from 0 to 40427 [ 293.647003][ T4237] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 293.655198][ T4237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 293.678318][ T4237] F2FS-fs (loop3): invalid crc value [ 293.707634][ T4237] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 293.756485][ T4237] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 293.764112][ T4237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.009654][ T287] syz-executor: attempt to access beyond end of device [ 294.009654][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.137182][ T309] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 294.234647][ T4271] loop3: detected capacity change from 0 to 4096 [ 294.245900][ T4271] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.256961][ T4278] loop0: detected capacity change from 0 to 256 [ 294.269923][ T4278] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 294.272623][ T4271] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1090: corrupted inode contents [ 294.283574][ T4278] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 294.294405][ T4271] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.1090: mark_inode_dirty error [ 294.304519][ T4278] exFAT-fs (loop0): Filesystem has been set read-only [ 294.316569][ T4271] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1090: corrupted inode contents [ 294.323555][ T4278] exFAT-fs (loop0): failed to initialize root inode [ 294.335892][ T4274] fuse: Bad value for 'fd' [ 294.345885][ T4271] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1090: mark_inode_dirty error [ 294.357176][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 294.357386][ T4271] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1090: corrupted inode contents [ 294.363405][ T309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.374621][ T4271] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1090: mark_inode_dirty error [ 294.388253][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.395948][ T4271] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.1090: corrupted inode contents [ 294.408885][ T309] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.431389][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.438273][ T4271] EXT4-fs error (device loop3): ext4_truncate:4327: inode #15: comm syz.3.1090: mark_inode_dirty error [ 294.446844][ T309] usb 3-1: config 0 descriptor?? [ 294.451337][ T4271] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 294.456665][ T309] hub 3-1:0.0: bad descriptor, ignoring hub [ 294.469799][ T309] hub: probe of 3-1:0.0 failed with error -5 [ 294.476007][ T309] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 294.495404][ T4280] loop1: detected capacity change from 0 to 128 [ 294.496526][ T287] EXT4-fs (loop3): unmounting filesystem. [ 294.672024][ T4287] device bridge11 entered promiscuous mode [ 294.717219][ T309] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 295.202543][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 295.210226][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.221413][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.221495][ T309] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.221542][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.228904][ T309] usb 1-1: config 0 descriptor?? [ 295.994915][ T4293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1095'. [ 296.016355][ T309] hub 1-1:0.0: USB hub found [ 296.162756][ T4298] 9pnet_fd: Insufficient options for proto=fd [ 296.216716][ T309] hub 1-1:0.0: 1 port detected [ 296.285013][ T4298] loop4: detected capacity change from 0 to 40427 [ 296.301334][ T4298] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 296.307812][ T4298] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 296.316723][ T4298] F2FS-fs (loop4): invalid crc value [ 296.344248][ T4298] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 296.378058][ T4298] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 296.385241][ T4298] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 296.485283][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 296.485298][ T28] audit: type=1326 audit(1784357769.532:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.516861][ T28] audit: type=1326 audit(1784357769.532:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.543390][ T28] audit: type=1326 audit(1784357769.532:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.568785][ T28] audit: type=1326 audit(1784357769.532:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.601402][ T4320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4320 comm=syz.3.1102 [ 296.623754][ T28] audit: type=1326 audit(1784357769.532:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.664629][ T28] audit: type=1326 audit(1784357769.532:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.721739][ T28] audit: type=1326 audit(1784357769.572:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.748528][ T28] audit: type=1326 audit(1784357769.572:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.773694][ T28] audit: type=1326 audit(1784357769.572:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.798773][ T28] audit: type=1326 audit(1784357769.572:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.4.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 296.859510][ T290] syz-executor: attempt to access beyond end of device [ 296.859510][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.895029][ T309] usb 1-1: USB disconnect, device number 28 [ 297.335878][ T4334] loop3: detected capacity change from 0 to 128 [ 297.486308][ T4338] device bridge9 entered promiscuous mode [ 298.439625][ T4342] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1109'. [ 298.644318][ T309] usb 3-1: USB disconnect, device number 22 [ 298.670917][ T4351] 9pnet_fd: Insufficient options for proto=fd [ 299.086247][ T4361] loop0: detected capacity change from 0 to 256 [ 299.220226][ T4361] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 299.250998][ T4361] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 299.261575][ T4361] exFAT-fs (loop0): Filesystem has been set read-only [ 299.268631][ T4361] exFAT-fs (loop0): failed to initialize root inode [ 299.306502][ T4351] loop3: detected capacity change from 0 to 40427 [ 299.318210][ T4351] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 299.324564][ T4351] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 299.334232][ T4351] F2FS-fs (loop3): invalid crc value [ 299.340794][ T4351] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 299.359458][ T4351] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 299.359482][ T4351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 299.598985][ T287] syz-executor: attempt to access beyond end of device [ 299.598985][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.618347][ T1634] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 299.620409][ T4377] loop2: detected capacity change from 0 to 256 [ 299.654743][ T4377] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 299.655091][ T4377] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 299.655111][ T4377] exFAT-fs (loop2): Filesystem has been set read-only [ 299.655120][ T4377] exFAT-fs (loop2): failed to initialize root inode [ 299.807229][ T1634] usb 1-1: Using ep0 maxpacket: 32 [ 299.808370][ T1634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.823788][ T1634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.823853][ T1634] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.823919][ T1634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.824570][ T1634] usb 1-1: config 0 descriptor?? [ 299.856895][ T1634] hub 1-1:0.0: USB hub found [ 299.927162][ T309] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 299.997167][ T848] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 300.056988][ T1634] hub 1-1:0.0: 1 port detected [ 300.107251][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 300.122485][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.133433][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.143239][ T309] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.152492][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.161625][ T309] usb 3-1: config 0 descriptor?? [ 300.167401][ T309] hub 3-1:0.0: USB hub found [ 300.187151][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 300.193220][ T848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.203776][ T848] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.216774][ T848] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.225904][ T848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.234639][ T848] usb 4-1: config 0 descriptor?? [ 300.240880][ T848] hub 4-1:0.0: bad descriptor, ignoring hub [ 300.246811][ T848] hub: probe of 4-1:0.0 failed with error -5 [ 300.253038][ T848] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 300.370222][ T309] hub 3-1:0.0: 1 port detected [ 300.410563][ T4387] loop4: detected capacity change from 0 to 128 [ 300.580091][ T4389] device bridge13 entered promiscuous mode [ 300.690156][ T1634] hub 1-1:0.0: activate --> -90 [ 300.891104][ T1634] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 300.898052][ T1634] usb 1-1: USB disconnect, device number 29 [ 300.976518][ T335] usb 3-1: USB disconnect, device number 23 [ 301.323050][ T4398] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1125'. [ 301.386573][ T4402] 9pnet_fd: Insufficient options for proto=fd [ 301.513979][ T4407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4407 comm=syz.0.1128 [ 301.600968][ T4402] loop4: detected capacity change from 0 to 40427 [ 301.674543][ T4402] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 301.730364][ T4402] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 301.760382][ T4402] F2FS-fs (loop4): invalid crc value [ 301.767026][ T4402] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 301.788952][ T4402] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 301.796034][ T4402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 301.807377][ T4415] loop2: detected capacity change from 0 to 256 [ 301.836295][ T4415] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 301.853851][ T4415] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 301.865508][ T4418] 9pnet_fd: Insufficient options for proto=fd [ 301.881386][ T4415] exFAT-fs (loop2): Filesystem has been set read-only [ 301.896832][ T4415] exFAT-fs (loop2): failed to initialize root inode [ 301.942388][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 301.942402][ T28] audit: type=1326 audit(1784357774.992:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 301.992838][ T28] audit: type=1326 audit(1784357775.032:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.017454][ T4418] loop1: detected capacity change from 0 to 40427 [ 302.019352][ T28] audit: type=1326 audit(1784357775.032:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.034194][ T4418] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 302.052668][ T28] audit: type=1326 audit(1784357775.032:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.057019][ T4418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 302.090401][ T4418] F2FS-fs (loop1): invalid crc value [ 302.092723][ T28] audit: type=1326 audit(1784357775.032:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.107258][ T4418] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 302.121676][ T28] audit: type=1326 audit(1784357775.032:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.151041][ T4418] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 302.156145][ T28] audit: type=1326 audit(1784357775.032:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.163298][ T4418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 302.188384][ T28] audit: type=1326 audit(1784357775.032:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.222069][ T28] audit: type=1326 audit(1784357775.032:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.248307][ T28] audit: type=1326 audit(1784357775.032:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.4.1127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e48b9de99 code=0x7ffc0000 [ 302.287170][ T309] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 302.299186][ T1536] Bluetooth: hci0: Frame reassembly failed (-84) [ 302.321438][ T290] syz-executor: attempt to access beyond end of device [ 302.321438][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 302.486345][ T288] syz-executor: attempt to access beyond end of device [ 302.486345][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 302.507264][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 302.513456][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.540741][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.550802][ T309] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.560128][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.571575][ T309] usb 3-1: config 0 descriptor?? [ 302.580268][ T309] hub 3-1:0.0: USB hub found [ 302.779629][ T309] hub 3-1:0.0: 1 port detected [ 302.884204][ T4437] loop3: detected capacity change from 0 to 128 [ 302.987227][ T1634] usb 4-1: USB disconnect, device number 29 [ 303.054052][ T4439] device bridge10 entered promiscuous mode [ 303.383467][ T309] usb 3-1: USB disconnect, device number 24 [ 303.441948][ T4442] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1136'. [ 303.549836][ T4451] loop1: detected capacity change from 0 to 256 [ 303.561131][ T4451] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 303.573803][ T4451] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 303.575366][ T4452] loop4: detected capacity change from 0 to 256 [ 303.584330][ T4451] exFAT-fs (loop1): Filesystem has been set read-only [ 303.584343][ T4451] exFAT-fs (loop1): failed to initialize root inode [ 303.605099][ T4452] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 303.617475][ T4452] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 303.628166][ T4452] exFAT-fs (loop4): Filesystem has been set read-only [ 303.635055][ T4452] exFAT-fs (loop4): failed to initialize root inode [ 303.897204][ T335] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 303.955165][ T4462] 9pnet_fd: Insufficient options for proto=fd [ 303.961773][ T309] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 304.091232][ T4462] loop2: detected capacity change from 0 to 40427 [ 304.107152][ T335] usb 2-1: Using ep0 maxpacket: 32 [ 304.107639][ T4462] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 304.113409][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.124470][ T4462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 304.138396][ T4462] F2FS-fs (loop2): invalid crc value [ 304.143971][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.147271][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 304.153971][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.170622][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.173150][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.180481][ T335] usb 2-1: config 0 descriptor?? [ 304.194544][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.194912][ T4462] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 304.205017][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.216818][ T335] hub 2-1:0.0: USB hub found [ 304.224477][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.238141][ T309] usb 5-1: config 0 descriptor?? [ 304.248009][ T309] hub 5-1:0.0: USB hub found [ 304.252246][ T4462] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 304.259733][ T4462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 304.337156][ T2516] Bluetooth: hci0: command 0x1003 tx timeout [ 304.343236][ T2788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 304.351253][ T4425] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 304.421666][ T335] hub 2-1:0.0: 1 port detected [ 304.429350][ T292] syz-executor: attempt to access beyond end of device [ 304.429350][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.444245][ T309] hub 5-1:0.0: 1 port detected [ 304.744979][ T4477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4477 comm=syz.3.1147 [ 304.987177][ T848] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.038624][ T315] hub 2-1:0.0: activate --> -90 [ 305.055353][ T1070] usb 5-1: USB disconnect, device number 31 [ 305.167150][ T848] usb 3-1: Using ep0 maxpacket: 32 [ 305.173405][ T848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.183558][ T848] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.196444][ T848] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.205510][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.214468][ T848] usb 3-1: config 0 descriptor?? [ 305.220456][ T848] hub 3-1:0.0: bad descriptor, ignoring hub [ 305.226365][ T848] hub: probe of 3-1:0.0 failed with error -5 [ 305.232610][ T848] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 305.242390][ T335] usb 2-1: USB disconnect, device number 29 [ 305.248471][ T315] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 305.347224][ T335] ================================================================== [ 305.355305][ T335] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 305.362327][ T335] Write of size 8 at addr ffff888115534a00 by task kworker/1:4/335 [ 305.370204][ T335] [ 305.372519][ T335] CPU: 1 PID: 335 Comm: kworker/1:4 Not tainted syzkaller #0 [ 305.379866][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.389932][ T335] Workqueue: usb_hub_wq hub_event [ 305.394957][ T335] Call Trace: [ 305.398223][ T335] [ 305.401140][ T335] __dump_stack+0x21/0x24 [ 305.405460][ T335] dump_stack_lvl+0x110/0x170 [ 305.410129][ T335] ? __cfi_dump_stack_lvl+0x8/0x8 [ 305.415139][ T335] ? enqueue_timer+0xae/0x480 [ 305.419802][ T335] print_address_description+0x71/0x200 [ 305.425331][ T335] print_report+0x4a/0x60 [ 305.429642][ T335] kasan_report+0x122/0x150 [ 305.434131][ T335] ? enqueue_timer+0xae/0x480 [ 305.438793][ T335] __asan_report_store8_noabort+0x17/0x20 [ 305.444518][ T335] enqueue_timer+0xae/0x480 [ 305.449011][ T335] ? detach_if_pending+0xf5/0x300 [ 305.454024][ T335] __mod_timer+0x859/0xc00 [ 305.455951][ T4482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4482 comm=syz.0.1148 [ 305.458445][ T335] ? ttwu_do_activate+0x179/0x2a0 [ 305.458475][ T335] schedule_timeout+0x154/0x340 [ 305.480979][ T335] ? __cfi_schedule_timeout+0x10/0x10 [ 305.486366][ T335] ? __cfi_process_timeout+0x10/0x10 [ 305.491670][ T335] ? __cfi__raw_spin_lock+0x10/0x10 [ 305.496879][ T335] ? _raw_spin_lock+0x94/0xf0 [ 305.501565][ T335] wait_for_common+0x364/0x640 [ 305.506343][ T335] ? __tasklet_schedule+0x15/0x20 [ 305.511374][ T335] ? wait_for_completion+0x20/0x20 [ 305.516473][ T335] ? usb_submit_urb+0x1091/0x1740 [ 305.521481][ T335] wait_for_completion_timeout+0xe/0x10 [ 305.527012][ T335] usb_start_wait_urb+0x1c8/0x380 [ 305.532018][ T335] ? usb_api_blocking_completion+0xb0/0xb0 [ 305.537820][ T335] ? kasan_save_alloc_info+0x1f/0x30 [ 305.543091][ T335] ? __kasan_check_write+0x14/0x20 [ 305.548198][ T335] usb_control_msg+0x243/0x3f0 [ 305.552948][ T335] hub_ext_port_status+0xf2/0x6a0 [ 305.557965][ T335] hub_port_debounce+0x1c6/0x250 [ 305.562884][ T335] hub_event+0x1af7/0x4310 [ 305.567283][ T335] ? __switch_to+0x56f/0x1070 [ 305.571961][ T335] ? __cfi_hub_event+0x10/0x10 [ 305.576708][ T335] ? __schedule+0xbea/0x14b0 [ 305.581283][ T335] process_one_work+0x717/0xc30 [ 305.586116][ T335] worker_thread+0xa4d/0x11d0 [ 305.590778][ T335] kthread+0x281/0x320 [ 305.594840][ T335] ? __cfi_worker_thread+0x10/0x10 [ 305.599956][ T335] ? __cfi_kthread+0x10/0x10 [ 305.604538][ T335] ret_from_fork+0x1f/0x30 [ 305.608939][ T335] [ 305.611948][ T335] [ 305.614253][ T335] Allocated by task 4425: [ 305.618553][ T335] kasan_set_track+0x4b/0x70 [ 305.623125][ T335] kasan_save_alloc_info+0x1f/0x30 [ 305.628214][ T335] __kasan_kmalloc+0x95/0xb0 [ 305.632785][ T335] __kmalloc+0xb4/0x1e0 [ 305.636916][ T335] hci_alloc_dev_priv+0x27/0x1bd0 [ 305.641920][ T335] hci_uart_tty_ioctl+0x3c4/0xa40 [ 305.646937][ T335] tty_ioctl+0x8ef/0xc60 [ 305.651167][ T335] __se_sys_ioctl+0x12f/0x1b0 [ 305.655826][ T335] __x64_sys_ioctl+0x7b/0x90 [ 305.660394][ T335] x64_sys_call+0x58b/0x9a0 [ 305.664880][ T335] do_syscall_64+0x4c/0xa0 [ 305.669325][ T335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.675207][ T335] [ 305.677514][ T335] Freed by task 4425: [ 305.681473][ T335] kasan_set_track+0x4b/0x70 [ 305.686050][ T335] kasan_save_free_info+0x2b/0x40 [ 305.691053][ T335] ____kasan_slab_free+0x132/0x180 [ 305.696186][ T335] __kasan_slab_free+0x11/0x20 [ 305.700940][ T335] slab_free_freelist_hook+0xc2/0x190 [ 305.706297][ T335] __kmem_cache_free+0xb7/0x1b0 [ 305.711134][ T335] kfree+0x6f/0xf0 [ 305.714833][ T335] hci_release_dev+0x12a3/0x13b0 [ 305.719754][ T335] bt_host_release+0x82/0x90 [ 305.724324][ T335] device_release+0xa4/0x1d0 [ 305.728897][ T335] kobject_put+0x19d/0x280 [ 305.733407][ T335] put_device+0x1f/0x30 [ 305.737544][ T335] hci_dev_cmd+0x279/0x740 [ 305.741946][ T335] hci_sock_ioctl+0x41e/0x7f0 [ 305.746618][ T335] sock_do_ioctl+0x114/0x330 [ 305.751220][ T335] sock_ioctl+0x475/0x700 [ 305.755557][ T335] __se_sys_ioctl+0x12f/0x1b0 [ 305.760236][ T335] __x64_sys_ioctl+0x7b/0x90 [ 305.764804][ T335] x64_sys_call+0x58b/0x9a0 [ 305.769305][ T335] do_syscall_64+0x4c/0xa0 [ 305.773698][ T335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.779582][ T335] [ 305.781922][ T335] Last potentially related work creation: [ 305.787611][ T335] kasan_save_stack+0x3a/0x60 [ 305.792270][ T335] __kasan_record_aux_stack+0xb6/0xc0 [ 305.797615][ T335] kasan_record_aux_stack_noalloc+0xb/0x10 [ 305.803399][ T335] insert_work+0x51/0x300 [ 305.807703][ T335] __queue_work+0x9d0/0xd50 [ 305.812185][ T335] queue_work_on+0xde/0x150 [ 305.816698][ T335] __hci_cmd_sync_sk+0xaa8/0xd80 [ 305.821615][ T335] hci_cmd_sync_status+0x53/0x120 [ 305.826615][ T335] hci_dev_cmd+0x642/0x740 [ 305.831005][ T335] hci_sock_ioctl+0x41e/0x7f0 [ 305.835663][ T335] sock_do_ioctl+0x114/0x330 [ 305.840231][ T335] sock_ioctl+0x475/0x700 [ 305.844542][ T335] __se_sys_ioctl+0x12f/0x1b0 [ 305.849193][ T335] __x64_sys_ioctl+0x7b/0x90 [ 305.853767][ T335] x64_sys_call+0x58b/0x9a0 [ 305.858245][ T335] do_syscall_64+0x4c/0xa0 [ 305.862638][ T335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.868509][ T335] [ 305.870810][ T335] Second to last potentially related work creation: [ 305.877367][ T335] kasan_save_stack+0x3a/0x60 [ 305.882023][ T335] __kasan_record_aux_stack+0xb6/0xc0 [ 305.887367][ T335] kasan_record_aux_stack_noalloc+0xb/0x10 [ 305.893144][ T335] insert_work+0x51/0x300 [ 305.897460][ T335] __queue_work+0x9d0/0xd50 [ 305.901936][ T335] queue_work_on+0xde/0x150 [ 305.906412][ T335] hci_cmd_timeout+0x191/0x200 [ 305.911151][ T335] process_one_work+0x717/0xc30 [ 305.915972][ T335] worker_thread+0xa4d/0x11d0 [ 305.920620][ T335] kthread+0x281/0x320 [ 305.924663][ T335] ret_from_fork+0x1f/0x30 [ 305.929051][ T335] [ 305.931349][ T335] The buggy address belongs to the object at ffff888115534000 [ 305.931349][ T335] which belongs to the cache kmalloc-8k of size 8192 [ 305.945373][ T335] The buggy address is located 2560 bytes inside of [ 305.945373][ T335] 8192-byte region [ffff888115534000, ffff888115536000) [ 305.958787][ T335] [ 305.961089][ T335] The buggy address belongs to the physical page: [ 305.967485][ T335] page:ffffea0004554c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115530 [ 305.977715][ T335] head:ffffea0004554c00 order:3 compound_mapcount:0 compound_pincount:0 [ 305.986007][ T335] flags: 0x4000000000010200(slab|head|zone=1) [ 305.992061][ T335] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 306.000616][ T335] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 306.009168][ T335] page dumped because: kasan: bad access detected [ 306.015576][ T335] page_owner tracks the page as allocated [ 306.021266][ T335] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4425, tgid 4424 (syz.0.1131), ts 302296837741, free_ts 302196684567 [ 306.043982][ T335] post_alloc_hook+0x1f5/0x210 [ 306.048729][ T335] prep_new_page+0x1c/0x110 [ 306.053206][ T335] get_page_from_freelist+0x2ca9/0x2d20 [ 306.058728][ T335] __alloc_pages+0x1fa/0x610 [ 306.063292][ T335] alloc_slab_page+0x6e/0xf0 [ 306.067853][ T335] new_slab+0x98/0x3e0 [ 306.071892][ T335] ___slab_alloc+0x70f/0xb70 [ 306.076456][ T335] __slab_alloc+0x5e/0xa0 [ 306.080761][ T335] __kmem_cache_alloc_node+0x204/0x2d0 [ 306.086192][ T335] __kmalloc+0xa4/0x1e0 [ 306.090320][ T335] hci_alloc_dev_priv+0x27/0x1bd0 [ 306.095318][ T335] hci_uart_tty_ioctl+0x3c4/0xa40 [ 306.100318][ T335] tty_ioctl+0x8ef/0xc60 [ 306.104535][ T335] __se_sys_ioctl+0x12f/0x1b0 [ 306.109187][ T335] __x64_sys_ioctl+0x7b/0x90 [ 306.113751][ T335] x64_sys_call+0x58b/0x9a0 [ 306.118229][ T335] page last free stack trace: [ 306.122873][ T335] free_unref_page_prepare+0x80c/0x820 [ 306.128308][ T335] free_unref_page+0x93/0x530 [ 306.132959][ T335] __free_pages+0x67/0x100 [ 306.137350][ T335] __free_slab+0xc7/0x1a0 [ 306.141650][ T335] __unfreeze_partials+0x15a/0x190 [ 306.146733][ T335] put_cpu_partial+0xa9/0x100 [ 306.151386][ T335] __slab_free+0x1c4/0x280 [ 306.155780][ T335] ___cache_free+0xbf/0xd0 [ 306.160168][ T335] qlist_free_all+0xc6/0x140 [ 306.164732][ T335] kasan_quarantine_reduce+0x14a/0x170 [ 306.170163][ T335] __kasan_slab_alloc+0x24/0x80 [ 306.174988][ T335] slab_post_alloc_hook+0x4f/0x2d0 [ 306.180073][ T335] kmem_cache_alloc+0x166/0x320 [ 306.184901][ T335] getname_flags+0xba/0x510 [ 306.189379][ T335] getname+0x19/0x20 [ 306.193246][ T335] do_sys_openat2+0xeb/0x820 [ 306.197813][ T335] [ 306.200109][ T335] Memory state around the buggy address: [ 306.205710][ T335] ffff888115534900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.213745][ T335] ffff888115534980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.221795][ T335] >ffff888115534a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.229831][ T335] ^ [ 306.233868][ T335] ffff888115534a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.241901][ T335] ffff888115534b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.249932][ T335] ================================================================== [ 306.257963][ T335] Disabling lock debugging due to kernel taint [ 306.282374][ T4484] loop3: detected capacity change from 0 to 128 [ 306.407185][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 306.418942][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 306.427356][ C1] CPU: 1 PID: 4484 Comm: syz.3.1150 Tainted: G B syzkaller #0 [ 306.436203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.446263][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 306.451562][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 dd e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 78 e1 b8 03 [ 306.471256][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 306.477326][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811f9dbcc0 [ 306.485302][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 306.493280][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 306.501255][ C1] R10: dffffc0000000000 R11: ffffed1022aa6939 R12: ffff8881155349c8 [ 306.509229][ C1] R13: ffff888112327800 R14: 0000000000000000 R15: 000000007fffffff [ 306.517200][ C1] FS: 00007fc5541e46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 306.526065][ T4488] device bridge11 entered promiscuous mode [ 306.526129][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.538479][ C1] CR2: 00007fc5541c2ff8 CR3: 000000011ee48000 CR4: 00000000003506a0 [ 306.546442][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.554392][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.562344][ C1] Call Trace: [ 306.565601][ C1] [ 306.568439][ C1] delayed_work_timer_fn+0x61/0x80 [ 306.573535][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 306.579319][ C1] call_timer_fn+0x46/0x2a0 [ 306.583806][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 306.589591][ C1] __run_timers+0x672/0x9b0 [ 306.594077][ C1] ? calc_index+0x200/0x200 [ 306.598559][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 306.603828][ C1] run_timer_softirq+0x6a/0xf0 [ 306.608573][ C1] handle_softirqs+0x1d7/0x600 [ 306.613315][ C1] __irq_exit_rcu+0x52/0xf0 [ 306.617794][ C1] irq_exit_rcu+0x9/0x10 [ 306.622020][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 306.627658][ C1] [ 306.630573][ C1] [ 306.633485][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 306.639450][ C1] RIP: 0010:_raw_spin_lock+0x4/0xf0 [ 306.644629][ C1] Code: 57 ff ff ff e8 fd 4c f9 ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 fa da 91 aa 55 48 89 e5 <41> 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 48 89 fb 65 48 8b 04 [ 306.664214][ C1] RSP: 0018:ffffc90012557710 EFLAGS: 00000246 [ 306.670266][ C1] RAX: ffffffff84574b9d RBX: ffff88811681b5f0 RCX: 0000000000000002 [ 306.678214][ C1] RDX: ffff88811f9dbcc0 RSI: 0000000000000000 RDI: ffff88811681b5f0 [ 306.686164][ C1] RBP: ffffc90012557710 R08: ffff88811f9dbcc0 R09: 0000000000000002 [ 306.694113][ C1] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000 [ 306.702152][ C1] R13: ffff888116819e00 R14: ffff88811681b200 R15: 1ffff920024aaf00 [ 306.710108][ C1] ? unix_dgram_sendmsg+0x93d/0x1710 [ 306.715380][ C1] unix_dgram_sendmsg+0x954/0x1710 [ 306.720484][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 306.726015][ C1] ? __kasan_check_write+0x14/0x20 [ 306.731105][ C1] ? __switch_to+0x56f/0x1070 [ 306.735768][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 306.741207][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 306.746738][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 306.751484][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 306.756495][ C1] ? import_iovec+0x7c/0xb0 [ 306.760986][ C1] ___sys_sendmsg+0x2a2/0x360 [ 306.765653][ C1] ? release_firmware_map_entry+0x190/0x190 [ 306.771537][ C1] ? __sys_sendmsg+0x290/0x290 [ 306.776289][ C1] ? __cfi_futex_wait+0x10/0x10 [ 306.781122][ C1] ? __fdget+0x19c/0x220 [ 306.785347][ C1] __sys_sendmmsg+0x2cc/0x4e0 [ 306.790009][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 306.795192][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 306.800804][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 306.805644][ C1] x64_sys_call+0x3f5/0x9a0 [ 306.810133][ C1] do_syscall_64+0x4c/0xa0 [ 306.814538][ C1] ? clear_bhb_loop+0x30/0x80 [ 306.819194][ C1] ? clear_bhb_loop+0x30/0x80 [ 306.823855][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.829743][ C1] RIP: 0033:0x7fc55339de99 [ 306.834153][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.853740][ C1] RSP: 002b:00007fc5541e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 306.862136][ C1] RAX: ffffffffffffffda RBX: 00007fc553625fa0 RCX: 00007fc55339de99 [ 306.870088][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 306.878041][ C1] RBP: 00007fc553433eaf R08: 0000000000000000 R09: 0000000000000000 [ 306.885992][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.893944][ C1] R13: 00007fc553626038 R14: 00007fc553625fa0 R15: 00007ffeb1fca938 [ 306.901901][ C1] [ 306.904912][ C1] Modules linked in: [ 306.908790][ C1] ---[ end trace 0000000000000000 ]--- [ 306.914222][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 306.919495][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 dd e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 78 e1 b8 03 [ 306.939081][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 306.945128][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811f9dbcc0 [ 306.953079][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 306.961028][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 306.968981][ C1] R10: dffffc0000000000 R11: ffffed1022aa6939 R12: ffff8881155349c8 [ 306.976938][ C1] R13: ffff888112327800 R14: 0000000000000000 R15: 000000007fffffff [ 306.984892][ C1] FS: 00007fc5541e46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 306.993810][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.000397][ C1] CR2: 00007fc5541c2ff8 CR3: 000000011ee48000 CR4: 00000000003506a0 [ 307.008351][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 307.016303][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 307.024269][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 307.031644][ C1] Kernel Offset: disabled [ 307.035946][ C1] Rebooting in 86400 seconds..