last executing test programs: 26.1675313s ago: executing program 3 (id=15): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 26.058448524s ago: executing program 3 (id=16): io_setup(0x9, &(0x7f0000000340)=0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 25.902815764s ago: executing program 3 (id=21): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000000780)={[{@abort}, {@block_validity}, {@init_itable}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@grpquota}, {@oldalloc}, {@grpjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x566, &(0x7f0000000080)="$eJzs3U9vHGcZAPBn1t7UblycAodSqSXQoqSCrOOathaHJhGIExWgcA+WvbEsr73Bu25jK6occeCIhBCNxIkTFyQ+ABLKR0CVKtE7AgSqIIEDB2DQzI6dZDO212TXG61/P2m87/x7n+fdtWff+eOZAE6ssxFxOSLGIuK1iJgupleKIXY6Q7bc/Xu3FrMhm3P1b0kkxbSIvLjndLHaROelVGtre3Wh0ahvFOMz7bUbM62t7QsrawvL9eX6+tzc7Jvzb82/MX/xwPy/cCfNHdbOrF1vf+PPP/vxL7/59m+/8t4frv31/PtZ0l8v5hft6M3tnpeMj/Of1ey92DMeERu9V/FUGyvaUx12IgAA9CTr4386Ir6Y9/+nYyzvzeW6u3QTx58dAAAA0A/ppan4dxKRpru79ykAAAAwYi5FxFQklVpxLcBUVCq1Wuca3s/Gs5VGs9X+8vXm5vpSNi+/0rNyfaVRv1hcU3smqkk2PpuXH4y/3jU+FxHPR8RPpyfz8dpis7E05GMfAAAAcFKc7tr//+dOZ/8fAAAAGDFnhp0AAAAAMHDF/v9Y9/RkCLkAAAAAg+H8PwAAAIy077zzTjaku8+/Xnp3a3O1+e6FpXprtba2uVhbbG7cqC03m8v5PfvWDquv0Wze+Gqsb96caddb7ZnW1va1tebmevvaiucHAgAAwLA8//m7HycRsfO1yXzInIqyfwYouFYARkblKAv/aXB5AMdvv695YPSNDzsBYHh2jr7K2UHkAQzNI7f6KOkUPHzxziPHDH43uJwAAID+Ove58vP/+ZP+h50cMFBHOv8PjBTn/+HkOuL5/w8HlQdw/Kp6AHCi/eDS4Y/6KL15x+Q+5/9PlS2cpt11PXOUJAEAgCc2lQ9JpVacC5yKSqVWi3gu/1f/anJ9pVG/GBGfiojfT1efycZn8zUTjwcEAAAAAAAAAAAAAAAAAAAAAAAAgB6laRIpAAAAMNIiKn9JovP8r3PTr051Hx84lfxrOopHer3386sf3JyeaG/MZtP/vje9fefqBzcX2u2N14dxBAMAAADotrufnr/ODjsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEbN/Xu3FneH44z7yZX4dpwpiz8eE/nrRFQj4tl/JDH+0HpJRIz1If7O7Yh4oRP/8iPxkyytOFNk0RX/7rciYrLP8e/fu1V9MGcv/ktpmj7W/kpEnO5DfDjJ7l6JiMtl259KnM1fS//+8/J4H+J/ciX/Iy+Nv7v9G9tn+/dcjzFe/OjXM/vGvx3x4nhZ/GQvfrJP/FfKKix5U77/ve3txyZ2Ko/0FxHnSr9/kkdizbTXbsy0trYvrKwtLNeX6+tzc7Nvzr81/8b8xZnrK4168bO0jT956Tf/7Zr0n7Qjb388Hv9H0flYDmz/q1nhoS12pN1himAf3bz3mU6x2lVFHv/8K+Wf/wsHxM9+J75UfA9k88/tlnc65Ye9/KsPXy5NrIi/tM/7f9jnf36/Sru89t0f/rHHRQGAY9Da2l5daDTqGz0VJo+y8Nb2appG7E65k6bpEVdXOMbCbu9uYCEmnpaW/t+FrPfenwqzvvXQm7N/oR9HtgAAgKfNg05/z6u8P9CEAAAAAAAAAAAAAAAAAAAA4ARqbUXl4PuBpWnEk91OrDvmznCaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwoP8FAAD///Zq2Us=") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="74836a608a879c0f4933e2980e3c27227b44c5f674d374f685a7252ac48df7cbdb6cb4b24ef98291b83a501c8237790fe9dd1ab86749497a19e5823d8a30793254456ddc653c653fa808d834a5eb7d4d59ffb92952f1066a00bce07815b7b6d48a1722932d00dbdee09c36353b3109cdf5e573402fe43eed02728bedac7695eecc6592553d856ef5c81f3ac1aae42258794c093e644c10232030162346daaed7eb5035eeedc50977abe7153d2a693ed4a3808361052bbbd83cdd05d314de0d22a343bc438fb7d6cf3e96986d06662f1005a21a1a92a75cc0b9e59032f9cdeccd2d0ce9961ac063991b8adade53529e42a66e71cfe2898c62fea7a35048348ed3c1558f7dccf1d57ec1e04dce785f2b7d53a725bee3285c34c39c4bcfc7e78de0e2056ee113473335dff60475785116916d1f140a093a98912ab97185763da02e09aff786dabac1ecb508f44c729831afccd8127a432236ca799e232e24d6a432401121373560729431c07d280d5ddca29f8b090ba9fb342c0472dd41254696804d890335594dc908892b5b4141817d074e3d18f60fcc88a09d01167ebc34abe1fa88ad479b255fed991086555f6715611b75281c919e08295d7dce5a94354de0d3f9ab6a0ca20a76060b23caf7c18bf50d5cc1035f292394bf1be8640588918f692827dfdc1e4095c2b468a80b722b69e350e66c88c222bf1c357b3867d162e5e1d90777223b7dac6b9bd8fca2ee2019dbe35f7eb9f4562dd0d761adf16f1c2659aea0fe284602a4c188fae98d28f6bbe8c9928ecaa3ab282e4eb4480f8d26b1e38df368d808dc037350d13fd898638c1ffb13005709a6340fa4dec43307c7a53236399d02e03280fe5b37326b4bf920770607950aa957f73b56eb42b50428b80f533d57042b8cec67548f60789e557f5e68426b7ea3c7e2ed0c68e571bbb4d14dbb1a7e32750c30a97535bc6a398204e0b4b20038a2905fa97a899c0c153b9f783e08561d6d7ce9c593b20a8c9d0342c64639db4e4a900de891f9cf418caf585a9fb1fe88cd1febb3fadc934827e10adc73668c2bec4161c6d9d8af83b94916ba183fd4319139cea73173a5a2a5a50665643a0ca3de14b989706eecdbb010c45c9826ef368fc494c468446813208021c973c933a58507bc8a51baf3b77af624c8d15fad4e2d3cc7b2092c089baed0cd1f545cd6f1646bdaab17a11a74666c24e2af78dff22c8767155c7257235e851a4d57f51cc65e14f51c4a2afe1af92cdc25e5e71bdd3dde36ed40cb6393cc9696d7235e47929dbdb6a5d9d9059e19cd5e2e55ee1c25408f7deae259db7da26b81aa60365da1694085cfcda459930e6cc31501ece761aa36c12027a297f9e8b7da2b8149b251519a805ba3d5d850221e50ccc97b93281753193943d23b50be93fe957395c0ca116ebcedca7998c7f408dc938aba02b18ad9da724c2e3716981a658ce235d1723aba974c768c07dbef8678ff11cf46afae541ac5ac3a65ae67a51d201d9c8619592484afadcd4af0a4b0ea4af052a551e61bca70f2fac665e2e4d974ae3ee76f71ed58fc2e4194d9fd94b1a627cc7e116f11d67683144308947f4707422d31d4485a573e760963c74085dec9ed551d63c802d57e1633b82711b514a5b873b2be89660d84a188dbf1b97d7a23cb8b364f6ea031077718b19d01a6ed5942564525cb749e21c9a68ce245489db7e4fd383ed3e93ee006ff10a58c2fe3c91d97f790b8a271180c69589c21a0c72e68d84eddde3e01d5eb034e77a5a27cb80e34fa36f0fa4125a22944f60590e1b9b0f1c836d64217322286e3d24af8e991458af3a542ea8354fbe83a4d513893a39539523eef23802bff8019a5de324cbf39ec1e913fbb3cacbf7c7cf15ebfffbdd11c24543845d87e8b401671d2ae8d5db07d7e929248e1a348a17d80aff99ef1b3836f79a93f958a70d4e33a7f04fa15e1336f5c26289b46e470eff41958dce02e3163c199dd1ec083df1c8447624e529320fba36b848d27390aeb331d357de60465c2e0fb501916b1aa238ac1869dce80a17d9bba484c48a8928c170925889cd2224872ad328afb9321c9eb676096f5ad01c39652c906880b04190ad16855c9b03875356fef8fb2e470fc2432b878ea8daf6beb9b94e4dbaef0a1674403d1d2a72b593ac56de5237e7da7e662863b41f00e9332775c11e4d67c19f23e0d0eea7d2cec9ddb030baaf793e223052c6315ed478aa4d8707f2400d7d03bc32fff163acc1536e459f4807efacd3a855c55725392e635c3f432a2f724080a7aae411718b32f096c6dba2ed280b8169b1486812685f6aa34418b0b1777afd3c0f8030be528e31db140ee48814a1f56993678f97cb54abde61d8dcc8ecdcfc13531ac3fa53972e2be36f47f22ff6fce17f6a92c24ecd533ce544d47584683211e732dc49bffb3ecac90becf5dec9a2197512dcaca04f791cc04710105f7e80a704629834bca658c9928471cbcc32b2abfe50e0d3d63f7fe9b7c74313abf62b6a2addb4476c3ffd98ccc9c5bf3608da20d315d1428ed5025af648eafc90b5fec2fff3e1f3e284c661bb53c17e3e722a62122d62b8274bda4404d1b17144f2f04c3cc5bccee3b2568e2da456a284e4f76de40e70d4a34020530257e96a9c2f1d2ca661605641bc9bd78da275529dbf65203633f86a20b5971f3efc1b5160dcd0a4f2eb81bba79c3e6ceb46c8b8b301d8e050cb73df803b922d9edecadc4fd3c7d1598f44a16a0098202be9c180ca53fa26fc28f5dbd23cb052a9fda3d219f7f1fc8b5e85db094657f7263dfbe1b3c80022518890ff80b5bd91547d7a3404ce0b37974315cfc2dc6906eebc5f5e0227c2f6cbf98bda4466dd11026508026a8f7485f3ccb1273ff43f24fb49325db5e4a243d3f7c5ce6f35eb922d81544ed807897c896ce2f36705ffd58396022d093f6c74cc5f5eb2102bf9f2f213e471cfdf1f30f76ec8764f7a92d94cf00ff88107462bc3cb6e87c5926c0fdc6b5f45bcab6937ab0128f39a46fc8721548fd1451a9535905a70613f74d401989bffed243cd3560114ebcb38ea93474fe9ab948f930d236b244a562451d9c564dd86d635c6ce0bd0522f10a0d399e7bcd6e6ba89138c2da6b0b47dcfdd6cc773561943d15afb950b1d9a710ec2c3772e4ceacbddab61a344e360ee2a63e99c0fe6ef635cb0f40fa29246e37db290c1a038f59ee5fa379eaf26ead1146eaacaefbb753c3b0e3b16118ff3df617292c0705a6727f96770e3f0869effe493311469dfceb6c5f7f68976a04175b99df0b4ae0a8723188a210e9f66098332e022b02ca3a651ab99d660d764940b6868e59c7773efb0b4827b0d91d8429ea5bf545aa08013abfeac6160f97802cab7b32b38d9922a954e96cc4c5d7c43a7c89ca1e2d00c51208733dd8539724e62f5f5e69f556a1a3e5f4e9ee57363dd0317132e9829015ae0878fdf49e917f32e088ad00779cb801bcb2d34b21a5126d260c126ac3fa64182e9a640228f1707063a5bb4ea79f8b8b703367b31d8f387cb2695d1f27349ae5ba8ae40649ec6af188a68c0c4e2c8af927535a154db2661c71f0fd02fa07b154572addb912df3c844e1bc9ed6b4b14c4f802525374f075bc61c11c53cce143c812ffb53fc32766198464c8a574255b1727ec61a5812079fc23b773f4532284e9bf113c1b841b525dc6f9be7017c7bf1b8896e90925a633ee8724579f7f18f765a4029186eda52ff8292e4d44fa3d2edc99090e03568bf466200a35548ca3de102acd80355a9407fbabdb8722588d2396a5ff3b899e488346e9eeff8e8b349dbea0d6e8f86543bea1c8db9ec7b882909ebf7cdab930547afb8b0748abc72c9013cb72464dfb33354b1295d584800cf87869d7edbd07d0f88468b1e6d5d8679d5dce3d68c7c46b4cec0a5b9ed21ec1ede3deeb5c1bb98d92cd36a643e35a279aed569334181a70a37029ab8e79d0697359e58fecb7241e26188125e84123cde051d9a8bca2044e9786a88ef88e379a8e00a2c91ae98efa3649c0c2fe88a4e31c91e3372d5ccea58eb1d74cc48ef8e37b7248628b270df2c864a4b1a66d6ccf1b83cb6c484a2224e42905b0505fa5268a77fb1b10d08f57952e415c3f94e2f6299a3b1972a66e5aa34f000016803534160f99ccdd6a2cbb2c3b29ad078aec93f33d4f436549ffe88939cc7747c605c930a906c787c115ea6da9fcbd2148cfbabd4f88", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xa, 0x7, 0x209, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 25.656478475s ago: executing program 3 (id=24): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f646f74732c646f74732c646f74732c646f74732c646f74732c0074ef593ad421c22b1e6226bb3bf866c2ad3593549c08466297986b151bd2070c6f89525a9b96516d40a9fa1a9ded587b49733a082aa99ff04a3925ec0e0f2d7df644329805e2b3f2539db6c7156d"], 0x1, 0x254, &(0x7f0000000580)="$eJzs3TFrE2EYB/DHNm1jFzuLw4GLU1An1yAVxIAQyaCTgerSinBdTqf7GH4DwY/kx+jU7cTekbQ1Otjm3iT3+0G4B/4ked4heTM8b+79g0/HR59PP1Y/v0W/n0UvoqyqiIPYiu2o3WmuWxf1blxWzqrvAQCsh/F4OkzdA8uV58PpTkTs/ZFMfiRpCAAAAAAAAAAAgBtbNP8f5/8z/w8ArAvz/5svz4fT/eb321Xm/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB0zqvqXvWPR+r+AIDbZ/8HgO6x/wNA99j/AaB73rx992o4Gh2Os6wfcVYWk2JSX+v8xcvR4ePswsH8WWdFMdme5U/qPLua78R+kz9dmO/Go4d1/jt7/np0Ld+Lo+UvHwAAAAAAAAAAAAAAAAAAAFbCIJtZeL5/MPhbXleX/h/g2vn9XtzvtbYMAAAAAAAAAAAAAAAAAAAAWGunX74eT09OPuQtFr0Ub9qhIp6tRBttFxEr0Ubbxd3mk3zbr5z4iwkAAAAAAAAAAAAAAAAAADpofug3dScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkM78/v/LKyKirGqplwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABssF8BAAD//59Dl5Q=") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') 25.573803726s ago: executing program 3 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="f1", 0x1}], 0x1}, 0x70040000}], 0x2, 0x4048841) 25.489960537s ago: executing program 3 (id=28): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, 0x0, 0x0, 0x2}, 0x94) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') 25.489863237s ago: executing program 32 (id=28): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, 0x0, 0x0, 0x2}, 0x94) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') 15.78215353s ago: executing program 5 (id=237): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0139040010000000000000000004000000290600000410fdffcf"], 0x28) 15.772844161s ago: executing program 5 (id=238): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 15.657806015s ago: executing program 5 (id=241): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x800, &(0x7f0000000c00)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, &(0x7f00000003c0)="001900de8b3164039efde3f4be2ce2732c44", 0x12, 0x3000000000000000}]) 15.609874322s ago: executing program 0 (id=243): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x4, 0x5593, &(0x7f00000061c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbaTFBAhoEgEoSJ1gIWmbmnpihAoYuBPQIpSpwRcCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytYhQ5CYGILufJeeY5dEBc6m+f2kd+/z+Xrve+dTlc/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2HkrviniJN1Mp5uJqOf77u6uLaX99oE+tbVxby5taVyrOvHx93L5xcnZ0SUCAADA8ZEU9X1E3G9uLqR9fTqr/5vFMWnN/90zvbio5w/W/du7a5P5W3NF/f/rLw9e2B9oOsnGSU+6vNLtnBlMpfEfTXHsPXvoEY3symffvSTZB1J/b/35nWZ2PWtf37nzTisLJ6rIFgB4HKeLPg+Kv4fSvj3KxAA4Nhqlwruo/5Pp0eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIWd9XiqiGsRMdd4GKe2d9eWhvVfbtyb28rbhdu3N8rnTE/RjIjllW7nTIVzGV/F1bz58WK327l2/UbVwcmIGPLWraP98yRP/5HHtCKib8+pF4ec54MjjHXgPANBfntGtddwKp3foQfX+vbUBi7423s9o7gBqgrq+eczLvkMBpOPvo0PCYp7799PrOL/jgAAeOI185ZWovebmwvpvtpMxN73/fX/q6U4+ur+vVu9Pb3XW6X6/8GHF+6WxyrX/+2K5vd/ML965dP56zduvr5yZfFy53LnkzfOtt9sn7t4/vzF+ey7kvnlqPvGBAAAgH+glbdy/V+fGVz/P1GK42/W/8v1/2fftr8oj5Wo/4d6uOg36kwAAACOo9Z+9Nwrf/xeG3JErdWKzxdXV6+1e9v912d720rTfUwTeSvX/8nMqLMCAAAAqrCzXutb/79UiuOI6/9P//DST+VzJhExFXE1Ijqnl652L1U3nbFWxc+bs4Fao54pAAAAozKVt/L6fzN7/r++/8hDPSJeOxXxZ/4b/jhi/Z+8+9WP5bHKz/+fq3SW46c+27seWT8b0ZgddUYAAAA8ySbzlhb7vzU3Fz76+cT7Lc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//VDwyJg==") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x33fe0, 0x0) 15.533837621s ago: executing program 5 (id=245): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x4c81, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 15.269900345s ago: executing program 5 (id=246): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x88, &(0x7f00000000c0)=ANY=[], 0x2, 0x14f1, &(0x7f0000006a80)="$eJzs3AuYT1XbMPB1r7X2GNOkf5Oc173uzT8NlkmSHJLkkCRJSM4JSZMkSRJDTklIQo6T5DAmJIfBpHE+H3JOmjySJMkpp7C+S0/P532eej/v+169n+975/5d17pm3bP3ff/Xnntm/nvv6/rvH7sNr9mkVrWGRCT+K9Q/JvD3LylCiFghxCAhxE1CiEAIUS6hXMKV7bkVpPyXXoT9N2mUdr1XwK4n7n/Oxv3P2bj/ORv3P2fj/uds3P+cjfufs3H/GcvR0gvezCPnjmvc/891rV8fvv///zN+/8/ZuP85G/c/Z+P+52zc/5yN+5+zcf9zNu7//2Dy2rtw/xnL0f4fuAfN4zoOxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPs/4Jz/iothPjH/HqvizHGGGOMMcYYY38dn+t6r4AxxhhjjDHGGGP//UBIoYQWgYgRuUSsyC3ixA0iXtwo8oibREQokSBuEXnFrSKfyC8KiIKikCgsiggjUFhBIhRFRTERFbeJ4uJ2kShKiJKilHCitEgSd4gy4k5RVtwlyom7RXlxj6ggKopKorK4V1QR94mq4n5RTTwgqosaoqaoJR4UtcVDoo54WNQVj4h64lFRXzwmGojHRUPRSDQWT4gm4knRVDQTzUUL0VK0Eq3/z/m5rxzhH/NfEz3F66KX6C1SRB/RV7wh+on+YoAYKAaJN8Vg8ZYYIt4WQ8UwMVy8I0aId8VI8Z4YJUaLMeJ9MVaME+PFBDFRTBKp4gMxWXwopoiPxFQxTUwXM0SamCnSxcdilpgt5ohPxFzxqZgn5osFYqHIEIvEYrFEZIrPxFLxucgSy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFV+IbWK72CF2il1it9gjvhR7xVdin/haZItv/pP5Z/8lvzsIECBBggYNMRADsRALcRAH8RAPeSAPRCACCZAAeSEv5IN8UAAKQCEoBEWgCCAgEBAUhaIQhSgUh+KQCIlQEkqCAwdJkARl4E4oC2WhHJSD8lAeKkBFqAiVoTJUgSpQFapCNagG1aE61ISa8CA8CA9BHagDdaEu1IN6UB/qQwNoAA2hITSGxtAEmkBTaArNoTm0hJbQGlpDG2gDbaEttIf20AE6QEfoCMmQDJ2gE3SGztAFukBX6ArdAgHd4VV4FV6D1+B1eB16Q3XZB/pCX+gH/WAADISB8CYMhrfgLXgbhsIwGA7vwDvwLoyEMzAKRsMYGANV5DgYDxOA5CRIhVSYDJNhCkyBqTANpsEMSIOZkA7pMAtmw2z4BObCp/ApzIf5sBAyIAMWwxLIhExYCmchC5bBclgBK2EVrIQ1sBbWwHrYAOthE2yCLbAFvoAvYDtsh52wE3bDbvgSvoSv4CsYCtmQDfthPxyAA3AQDsIhOASH4TAcgSNwFI7CMTgGx+EEnIQTcBpOwxk4C+fgHFyAC3ARLsJluHzlj19eoaWWMTJGxspYGSfjZLyMl3lkHhmREZkgE2RemVfmk/lkAVlAFpKFZBFZRKJESTKURWVRGZVRWVwWl4kyUZaUJaWTTibJJFlGlpFlZVlZTt4ty8t7ZAVZUbZzlWVlWUW2d1Xl/bKarCaryxqypqwla8nasrasI+vIurKurCfryfryMdlA9oEB0Ehe6UwTOQyayuHQXLaQLWUr+S48JdvIkdBWtpPt5TNyNIyCjrKNS5bPy05yPHSWL8oJ8JLsKidBN/mK7C5flT3ka7KnbOt6yd5yKvSRfeUM6Cf7ywFyoJwFNeSVjtWUb8uhcpgcLt+RC+FdOVK+J0fJ0XKMfF+OlePkeDlBTpSTZKr8QE6WH8op8iM5VU6T0+UMmSZnynT5sZwlZ8s58hM5V34q58n5coFcKDPkIrlYLpGZ8jO5VH4us+QyuVyukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlF3Kb3C53yJ1yl9wt98gv5V75ldwnv5bZ8hu5X/5NHpDfyoPyO3lIfi8Pyx/kEfmjPCp/ksfkz/K4PCFPylPytPxFnpFn5Tl5Xl6Qv8qL8pK8LL0UCpRUSmkVqBiVS8Wq3CpO3aDi1Y0qj7pJRdTNKkHdovKqW1U+lV8VUAVVIVVYFVFGobKKVKiKqmIqqm5TxdXtKlGVUCVVKeVUaZWk7lBl1J2qrLpLlVN3q/LqHlVBVVSVVGV1r6qi7lNV1f2qmnpAVVc1VE1VSz2oaquHVB31sKqrHlH11KOqvnpMNVCPq4aqkWqsnlBN1JOqqWqmmqsWqqVqpVqrp1Qb9bRqq9qp9uoZ1UE9qzqq51Syel51Ui+ozupF1UW9pLqql1U39Yrqrl5VPdQldVl51Uv1Vimqj+qr3lD9VH81QA1Ug9SbarB6Sw1Rb6uhapgart5RI9S7aqR6T41So9UY9b4aq8ap8WqCmqgmqVT1gZqsPlRT1EdqqpqmpqsZKk3NVAN+rzTnP5D/4Z/kD/nt1beoreoLtU1tVzvUTrVL7VZ71B61V+1V+9Q+la2y1X61Xx1QB9RBdVAdUofUYXVYHVFH1FF1VB1Tx9RxdUKdV6fUafWLOqPOqrPqvLqgLqiLv/8MhAYttdJaBzpG59KxOreO0zfoeH2jzqNv0hF9s07Qt+i8+ladT+fXBXRBXUgX1kW00aitJh3qorqYjurbdHF9u07UJXRJXUo7XVon6Tv+E/kx4s/yr7W+1rq1bqPb6La6rW6v2+sOuoPuqDvqZJ2sO+lOurPurLvoLrqr7qq76W66u+6ue+geuqfuqXvpXjpFp+i++g3dT/fXA/RAPUi/qQfrwXqIHqKH6qF6uB6uR+gReqQeqUfpUXqMHqPH6rF6vB6vJ+qJOlWn6sl6sp6ip+ipeqqerqfrNJ2m03W6nqVn6Tl6jp6r5+p5ep5eoBfoDJ2hF+vFOlNn6qV6qc7Sy/QyvUKv0Kv0Kr1Gr9Hr9Dq9QW/Qm/QmnaW36q16m96md+gdepfepffoPXqv3qv36X06W2fr/Xq/PqAP6IP6oD6kD+nD+rA+oo/oo/qoPqaP6eP6uD6pT+rT+rQ+o8/oc/qcvqAv6Iv6or6sL1857QtkIAMd6CAmiAlig9ggLogL4oP4IE+QJ4gEkSAhSAjyBrcG+YL8QYGgYFAoKBwUCUyAgQ0oCIOiQbEgGtwWFA9uDxKDEkHJoFTggtJBUnBHUCa4Mygb3BWUC+4Oygf3BBWCikGloHJwb1AluC+oGtwfVAseCKoHNYKaQa3gwaB28FBQJ3g4qBs8EtQLHg3qB48FDYLHg4ZBo6Bx8ETQJHgyaBo0C5oHLYKWQaug9V9a3/sz+Z92vUxvk2L6mL7mDdPP9DcDzEAzyLxpBpu3zBDzthlqhpnh5h0zwrxrRpr3zCgz2owx75uxZpwZbyaYiWaSSTUfmMnmQzPFfGSmmmlmuplh0sxMk24+NrPMbDPHfGLmmk/NPDPfLDALTYZZZBabJSbTfGaWms9NlllmlpsVZqVZZVabNWatWWfWmw1mo9lkNpstZqv5wmwz280Os9PsMrvNHvOl2Wu+MvvM1ybbfGP2m7+ZA+Zbc9B8Zw6Z781h84M5Yn40R81P5pj52Rw3J8xJc8qcNr+YM+asOWfOmwvmV3PRXDKXjb9ycn/l7R01aozBGIzFWIzDOIzHeMyDeTCCEUzABMyLeTEf5sMCWAALYSEsgkXwCkLColgUoxjF4lgcEzERS2JJdOgwCZOwDJbBslgWy2E5LI/lsQJWwEpYCe/Fe/E+vA/vx/vxAXwAa2ANrIW1sDbWxjpYB+tiXayH9bA+1scG2AAbYkNsjI2xCTbBptgUm2PzQAiBrbE1tsE22BbbYntsjx2wA3bEjpiMydgJO2Fn7IxdsAt2xa7YDbthd+yOPbAH9sSe2At7YQqmYF/si/2wHw7AATgIB+FgHIxDcAgOxaE4HIfjCByBI3EkjsLROAbfx7E4DsfjBJyIkzAVU3EyTsYpOAWn4lScjtMxDdMwHdNxFs7COTgH5+JcnIfzcAEuwAzMwMW4GDMxE5fiUszCLFyOy3ElrsTVuBrX4lpcj+txI27EzbgZt+JW3IbbcAfuwF24C/fgHtyLe3Ef7sNszMb9uB8P4AE8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/iSTyNp/EMnsFzeA4v4K94ES/hZfQYa3PbOHuDjbc32jz2JvuvcQFb0BayhW0Ra2w+m/+fYrTWJtoStqQtZZ0tbZPsHX+IK9iKtpKtbO+1Vex9tuof4tr2IVvHPmzr2kdsLfvgP8X17KO2vn3SNrDNbEPbwja2rWwT+6RtapvZ5raFbWlb2Q72WdvRPmeT7fO2k33hD/Fiu8Sutevsegu/Xweft0fsj/aC/dX2sr3tIPumHWzfskPs23aoHfaHeIx934614+x4O8FOtJP+EE+3M2yanWnT7cd2lp39hzjDLrJzbaadZ+fbBXbhb/GVNWXaz+xS+7nNssvscrvCrrSr7Gq75ve1brAr7Ca72W6xe+yXdpvdbnfYnXaX3f1bvNd+ZffZr222/cYetj/YA/Zbe9AetYfs97/FV47vqP3JHrM/2+P2hD1pT9nT9hd7xp615+z53479lL1kL1tvBQFJUqQpoBjKRbGUm+LoBoqnGykP3UQRupkS6BbKS7dSPspPBaggFaLCVIQMIVkiCqkoFaMo3UbF6XZKpBJUkkqRo9KURHdQGbqTytJdVI7upvJ0D1WgilSJKtO9VIXuo6p0P1WjB6g61aCaVIsepNr0ENWhh6kuPUL16FGqT49RA3qcGlIjakxPUBN6kppSM2pOLagltaLW9BS1oaepLbWj9vQMdaBnqSM9R8n0PHWiF6gzvUhd6CXqSi9TN3qFutOr1INeo570OvWi3pRCfagvvUH9qD8NoIE0iN6kwfQWDaG3aSgNo+H0Do2gd2kkvUejaDSNofdpLI2j8TSBJtIkSqUPaDJ9SFPoI5pK02g6zaA0mknp9DHNotk0hz6hufQpzaP5tIAWUgYtosW0hDLpM1pKn1MWLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCt9QdtoO+2gnbSLdtMe+pL20le0j76mbPqG9tPf6AB9SwfpOzpE39Nh+oGO0I90lH6iY/QzHacTdJJO0Wn6hc7QWTpH5+kC/UoX6RJdJk8ihFCGKtRhEMaEucLYMHcYF94Qxoc3hnnCm8JIeHOYEN4S5g1vDfOF+cMCYcGwUFg4LBKaEEMbUhiGRcNiYTS8LSwe3h4mhiXCkmGp0IWlw6TwjrBMeGdYNrwrLBfeHZYP7wkrhBXDSmHl8N6wSnhfWDW8P6wWPhBWD2uENcNa4YNh7fChsE74cFg3fCQsGz4a1g8fCxuEj4cNw0Zh4/CJsEn4ZNg0bBY2D1uELcNWYevwqbBN+HTYNmwXtg+fCTuEz4Ydw+fC5PD5sFP4wjW3p4R9wr7hG+EbofcPqwXRhdGM6KLo4uiSaGb0s+jS6OfRrOiy6PLoiujK6Kro6uia6Nrouuj66Iboxuim6Obolqj3tXIJB0465bQLXIzL5WJdbhfnbnDx7kaXx93kIu5ml+BucXndrS6fy+8KuIKukCvsijjj0FlHLnRFXTEXdbe54u52l+hKuJKulHOutEtyrVxr19q1cU+7tq6da++ecc+4Z92z7jn3nHvedXIvuM7uRdfFveS6upfdy+4V19296nq411xP97rr5Xq7FJfi+rq+rp/r5wa4AW6QG+QGu8FuiBvihrqhbrgb7ka4EW6kG+lGuVFujBvjxrqxbrwb7ya6iS7VpbrJbrKb4qa4qW6qm+6muzSX5tJdupvlZrk5bo6b6+a6eW6eW+AWuAyX4Ra7xS7TZbqlbqnLclluuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbpvb5na4HW6X2+X2uD1ur9vr9rl9Lttlu/1uvzvgDriD7jt3yH3vDrsf3BH3ozvqfnLH3M/uuDvhTrpT7rT7xZ1xZ905d95dcL+6i+6Su+y8S418EJkc+TAyJfJRZGpkWmR6ZEYkLTIzkh75ODIrMjsyJ/JJZG7k08i8yPzIgsjCSEZkUWRxZEkkM/JZZGnk80hWZFlkeWRFZGVkVcT7wttCX9QX81F/my/ub/eJvoQv6Ut550v7JH+HL+Pv9GX9Xb6cv9uX9/f4Cr6ir+Sb+ea+hW/pW/nW/infxj/t2/p2vr1/xnfwz/qO/jmf7J/3nfwLvrN/0XfxL/mu/mXfzb/iu/tXfQ//mu/pX/e9fG+f4vv4vv4N38/39wP8QD/Iv+kH+7f8EP+2H+qH+eH+HT/Cv+tH+vf8KD/aj/Hv+7F+nB/vJ/iJfpJP9R/4yf5DP8V/5Kf6aX66n+HT/Eyf7j/2s/xsP8d/4uf6T/08P98v8At9hl/kF/slPtN/5pf6z32WX+aX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q//Cb/Pb/Q6/0+/yu/0e/6Xf67/y+/zXPtt/4/f7v/kD/lt/0H/nD/nv/WH/gz/if/RH/U/+mP/ZH/cn/El/yp/2v/gz/qw/58/7C/5Xf9Ff8pf5M2uMMcYYY/8h6hrb+/zJ9+Tv44q+Qogbtxc89K81N+b7+7y/3NspIoR4vne3Rv8YjRqlpKT8vm+WEkGx+UKIyNX8GHE1Xibai2dFsmgnyvzp+vrLSkDXqB+9W4i4f5MTK/4ex/5T/Tv/nfrNFl2z/nwhEotdzcktrsZX65f9d+rv7nCN+rm/TRWi7b/JiRdX46v1k8TT4gWR/E97MsYYY4wxxhhjf9dfXuh+revbK9fnhfTVnFzianyt63PGGGOMMcYYY4xdfy+92uO5p5KT23XhCU94wpP/Pbne/5kYY4wxxhhjf7WrJ/3XeyWMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxljO9WdP//rHtr/qcWLX9wgZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx6+9/BQAA//+N3F6H") syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x25, 0x55a8, &(0x7f00000014c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x14a) getdents64(r0, &(0x7f0000001f80)=""/4108, 0x100c) 15.188446795s ago: executing program 5 (id=247): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) 15.102457777s ago: executing program 33 (id=247): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) 14.804807535s ago: executing program 0 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 14.513683522s ago: executing program 0 (id=259): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d2901"], 0xdd12}], 0x1}, 0x0) 14.454201249s ago: executing program 0 (id=260): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f646f74732c646f74732c646f74732c646f74732c646f74732c0074ef593ad421c22b1e6226bb3bf866c2ad3593549c08466297986b151bd2070c6f89525a9b96516d40a9fa1a9ded587b49733a082aa99ff04a3925ec0e0f2d7df644329805e2b3f2539db6c7156d"], 0x1, 0x254, &(0x7f0000000580)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)) 14.402306856s ago: executing program 0 (id=262): r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) select(0x40, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x1, 0x6b, 0x0, 0x8, 0xb}, 0x0, &(0x7f0000000140)={0x9, 0x7, 0x0, 0x1, 0x3, 0x6, 0xfffffffffffffffd, 0x4}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendto(r0, &(0x7f0000000000)='\x00', 0x1, 0x20005, 0x0, 0x0) 14.205845791s ago: executing program 0 (id=263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 14.160114988s ago: executing program 34 (id=263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 5.923520622s ago: executing program 2 (id=467): creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) 5.86117166s ago: executing program 2 (id=468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1040}, {r1, 0x2187}], 0x2, 0x3ff) 4.800964475s ago: executing program 2 (id=483): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x7f3e, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x1, 0x2102, 0x0) 4.580655264s ago: executing program 2 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 4.579349774s ago: executing program 4 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x40, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.547262738s ago: executing program 2 (id=490): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r0 = syz_io_uring_setup(0x1eae, &(0x7f0000000340)={0x0, 0xa1c4, 0x3800, 0x0, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1816, 0x2000, 0x1, 0x0, 0x0) 4.440659901s ago: executing program 2 (id=494): unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27c00000000, 0x25000, 0x0, r2, 0x4}) 4.404477276s ago: executing program 35 (id=494): unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27c00000000, 0x25000, 0x0, r2, 0x4}) 4.401065307s ago: executing program 4 (id=497): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x7b67, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 4.104311935s ago: executing program 4 (id=508): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) 1.966606748s ago: executing program 4 (id=536): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4) sendto$packet(r0, &(0x7f0000000300)="33033600d1fd36bcdc7fe45f46392478c14af3", 0x13, 0x40008c1, &(0x7f0000000040)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 1.946600021s ago: executing program 4 (id=538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x60, 0x14, 0x8}, 0x8, 0x7, 0x9, 0x0, 0x800, 0x1, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 1.828444836s ago: executing program 8 (id=543): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.808237118s ago: executing program 4 (id=544): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.709656221s ago: executing program 8 (id=546): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.683747195s ago: executing program 8 (id=547): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000080)) 1.644169319s ago: executing program 7 (id=548): prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setuid(0xee00) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) setuid(0x0) fchown(r0, 0x0, 0x0) 1.549942761s ago: executing program 1 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.549695041s ago: executing program 7 (id=550): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") symlink(&(0x7f0000000f00)='./bus\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.536078533s ago: executing program 1 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2, 0x4}}}], 0x18}}], 0x2, 0x404c851) 1.501386638s ago: executing program 1 (id=552): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) lseek(r1, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.438221996s ago: executing program 1 (id=553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x29c}]}) 1.156204992s ago: executing program 7 (id=555): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x1, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) 1.049959955s ago: executing program 1 (id=556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mremap(&(0x7f0000303000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 872.627488ms ago: executing program 7 (id=558): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2008410, &(0x7f00000067c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5540, &(0x7f0000001280)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUMaWsMccAwWkCUogLaQBaiC3lBBBhD1CcgRSJMZYQd8n2WZs+M0McHljyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXqu1vPH+z8Pl+bs9pfJMxsAAADglG21ntcvpk37Wzr/I536ldpFRJQRcap2H8SolTlIOdWZ91fvxvAUUScc+hin7WtE/E3b68+uvwUAAAC4XZvlatZU681u2veAuKZm0ab8/i9TXhER1fQlU1p52P3OFFb/v4dxlymtXsCaZAprltyGp6+NcnXSNmgd0kwmi/pHrFtlN/0CAAB9alcCZ6oQAAAAbsD/vgdAP4rj7nifcdwc0g3BL60WAAAA0Kfiqh8DAAAAPpG6/vf8PwAAALhtzfP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3PXFB3N2+8vkmxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhcksgA3UCHXaRCUCCGBTJfvkDqW0oQuhQsjUR/avd3LJjHkFJndI/79pNl5e17NvNk7WX6etQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0u478VJSxO3sMDOKy9du7W2sZP3OA33mxtbt+axlcetRE3379sEnP91erp6cmKucfFV/MgAAABwO7bK+j4g76fZS1iczef2fltdkNf8Pz4zisp5/sO7f2ds4Wnxpvqz/f//t7gvjiWZG82SDrq4N+osPp9L5j5Y49Z595BWd/M7nv3tp529I8v7m87tpfj9b3928+W43D4/UkS0A8DhOln0RlD8PZX2vycQAODQ6lcK7rP/bM83mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH3c14qoxbETHfuRdndvY2Vvbrb2zdni/b2evXt6pjZkOkEbG6NuinNa5l2l25eu2T5cGgf7n+4ERENDd7EXw4wTUR/35N8fGM5lbxz0FrOtJoNEiK92da8jnIoPzsHfzIDX1DAgDgiZUWLavr76TbS9lrrdmI4Y/31/+vldHXw+FwOFn9f/ejs7eqc1Xr/17N65xmC+sXP1u4cvXaG2sXly/0L/Q/ffNU763e6XNnzpxbyO7V4sJqJP3FptMEAADgf6xbtGr9n8w+vP9/vBLHhPv/n3/f+7I6V1v9v697m35NZwIAAHAYdcfRc6/89Wdrnyta3W58sby+frk3Oo7PT42Otab7mI4UrVr/t2ebzgoAAACow+5m6779//OVOCbc/3/6pxd/qY7ZjohjEZcion9y5dLgfH3LmWp1/KFyPlG36ZUCAADQlGNFq+7/p/nz/8n4kYckIl5/dRSX/+tqkvq//d43P1fnqj7/f7q+JU6lZG50P/J+LqIz13RGAAAAPMmOFi0r9v9It5c+/vX4B13P/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7e8AAAD//7eEOoA=") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x114) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x0, 0x8004, 0x8000c62) 828.153094ms ago: executing program 8 (id=559): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x2, 0x5567, &(0x7f000000c4c0)="$eJzs3M1rI+UfAPAnyb6//coPD952YBFa2IRN9wW9Vd3FF+xSfDl40jRJQ3aTTGnStPYk6FE8+J+IgifBi3+DB8/exIPiTVBmnulqrS5bk23a3c8HJt+ZZ5585/sMoeWbhATgqTWX/PpzKVwKZ0MIlRDChVLI90vFlluK4dkQwuUQQvkvW6kYfzBwKoRwLoRwKUsewjfDOCc79dnV8ZWbP73+y9ffnT5x/vOvvp/dqoFZey6E0F+P+1v9GNNOjPeK8ca4m8f+jXER44n+/eI4jXGrvZpn2Grszmvk8Xonzk/XN4dZXOs1mlnsdNfy8fVBvOBw3NnNkz/hXmMjP261V/PYHaZ57OzEurZ34t/LneEo5mkV+T7I04fRaDfG8fZ2O65n/X4em4NRMR7zpq32dhbHRSwuF5ppr5XXsTrJnT7a3ugONreTcXtj2E0Hyc1a/fla/Va1vpG22qP2jWqj37p1I5nv9LJp1VG70V/qpGmn16410/5CMt9pNqv1ejJ/u73abQySer12vXatenOh2LuavHL3naTXSuaz+FJ3sHmq2xsma+lGEp+xkCzWrr+wkFypJ28tryQrb965s7zy9nu337374vJrLxeT9pWVzC9eW1ys1q9VF+sLR2D92f/dR1z/aJL1f1wUfYD1lya7PfBwXmAAB7av/w/T7f8rQf8P7Hfc+/8wzf4/a6ke2v+f+e83+og7UP9bnrz/n6j/Par9/zFeP0xE/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NT64eQXr+Y7c/H4fDF+sRj6f3FcCiGUQwi//4NKOLUnZ6XIc/Jf5p/8Ww3flkKeIbvG6WI7F0JYKrbf/ve47wIAAAA8ub788PKnsVuPD3OzLojDFN+GKV94f0r5SlnOuR+nlK2cPTwzpWT56/tE2J5StvzOnZlSsviW24lpZXskld3w0cU/B/MFlWIoH2o5AADAoajsCYfbhQAAAHCYPpl1AcxGKTz4EHj3C/ynYyg+2jy75xwAAABwDJVmXQAAAADw2OX9v9//AwAAgCdb/P0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uVEbiOIA/GwwkH8KinJPK7lBGSkhxxyBAtIEJZAW0gA1kFvuuUSwwh4heRek1TJeC/R9km3GRr+ZAS5vLAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06U+1mf9afPkZi+ty9ofr5JoPAAAA8NSu2szrF9Om/S6d/5BOfUrtIiLKiDhXuw9i1MocpJzqwvurR2P4HVEnHPsYp+1tRHxN2/+PXX8KAAAAcL+2q/Wsqdab3bTvAfGamkWb8v23THlFRFTTv5nSyuPuc6aw+vc9jB+Z0uoFrEmmsGbJbXj+2ihXJ22D1iHNZLKsv8S6VXbTLwAA0Kd2JXChCgEAAOAOfO97APSjOO1O9xnHzSHdEHzTagEAAAA3qOh7AAAAAEDn6vr/Fp7/98/fEgAAAODFmuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVdtZlvV+vZpevLZ+bsD9fJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7Yn3sUAGEwBqCf4u8mvf9NHZSIjl2d3oNCSCilAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM/wnhq/8DRHVU1pE+bUraqWTAlrpoQtc8KeC63zyHn9+SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GN+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7Yt40qDAD457PPTQuIEFCGACoSAyw0cUtLRxhAEQN/AlKUOiXgUmgz0CoCZYEJZe6CYEQICRS2/g+dG6lL2TpkCBIz6M53ybV1qSnNnUt+P+n5fbYv733vfIry5V0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDaeSdeSoq4nT1MD+PytZu768tZv31Pn7m+eWsua1ncethE37z9+JOfbC9XnxyfrTz5qv5kAAAAOBzaZX0fEbfTrcWsT6bz+j8tj8lq/u+fGcZlPX9v3b+9uz5VvDVX1v+//Xrnhb2JpofzZIOurA76C/en0jmgJU68Zx96RCc/8/nvXtr5B5K8v/H8Tpqfz9a3N268283DI3VkCwA8ihNlnwVT+z8PZX2v4dwAOBw6lcK7rP/b083mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCHnY14qoxbETHX2Y8z27vry6P665u35sp25tq1zeqY2RBpRKysDvppjWuZdJevXP1kaTDoXxoZRDzwrf8eHI+Igxn5AUGMeOvDMb484p+PKS7PqGcV/y5oTUYajQZJ8fkUr3TrveoONiivvcc/ckPfkAAA+N9Ki5bV9bfTrcXstdZMxF8/3F3/v1aJY8z6/85HZ25W56rW/73aVjj55tcufDZ/+crVN1YvLJ3vn+9/+ubJ3lu9U2dPnz47n52rhfmVSPoLTacJAADAE6xbtGr9n8zcv/9/rBLHmPX/59/1vqzO1Vb/j7S/6dd0JgAAAIdRdy967pU//2iNOKLV7cYXS2trl3rDx73nJ4ePtab7iI4UrVr/t2eazgoAAACow85G6679/3OVOMbc/3/6xxd/ro7ZjoijERcjon9i+eLgXH3LmWh1/KFyPlG36ZUCAADQlKNFq+7/p/n9/8neLQ9JRLz+6jAu/9fVOPV/+72vf6rOVb3//1R9S5xIyezwfOT9bERntumMAAAAeBKNu9U7VbSs2P893Vr8+JdjH3Td/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt78DAAD//77oN4s=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0), 0x24, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 745.929064ms ago: executing program 1 (id=560): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x7, 0x7fc00002}]}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x0, 0x80000}) 570.894447ms ago: executing program 6 (id=561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x110018e, &(0x7f0000000200)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@i_version}, {@jqfmt_vfsold}, {@noload}, {@data_err_ignore}, {@init_itable}, {@usrjquota}]}, 0x1, 0x444, &(0x7f0000000780)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x0, 0x81}, {0xc0011022, 0x0, 0x100}]}) 429.034325ms ago: executing program 8 (id=562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x0, 0x4) 294.955682ms ago: executing program 7 (id=563): unshare(0x28000600) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 169.890638ms ago: executing program 6 (id=564): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) setuid(0xee01) write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 169.687428ms ago: executing program 6 (id=565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r2, 0x69bf964a871d3a31, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4810) 155.68508ms ago: executing program 8 (id=566): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2000, 0x0) 148.688131ms ago: executing program 6 (id=567): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f0000000340)={0x400, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x200480, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x0) 100.596967ms ago: executing program 6 (id=568): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@noload}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 5.962719ms ago: executing program 7 (id=569): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r1], 0x0) 0s ago: executing program 6 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xc200000000000000, 0xd000, 0xfffffffffffffffd}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xd200000000000000, 0x8000000, 0x3ff}) kernel console output (not intermixed with test programs): =system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.208244][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.233449][ T28] audit: type=1400 audit(1768859169.389:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.989768][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.996879][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.004307][ T283] device bridge_slave_0 entered promiscuous mode [ 22.012638][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.019743][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.027125][ T285] device bridge_slave_0 entered promiscuous mode [ 22.037625][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.044708][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.051967][ T285] device bridge_slave_1 entered promiscuous mode [ 22.058430][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.065489][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.072763][ T283] device bridge_slave_1 entered promiscuous mode [ 22.103698][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.110759][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.118161][ T287] device bridge_slave_0 entered promiscuous mode [ 22.134227][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.141417][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.148658][ T286] device bridge_slave_0 entered promiscuous mode [ 22.155340][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.162422][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.169640][ T287] device bridge_slave_1 entered promiscuous mode [ 22.176335][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.183381][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.190772][ T284] device bridge_slave_0 entered promiscuous mode [ 22.200189][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.207404][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.214726][ T284] device bridge_slave_1 entered promiscuous mode [ 22.231910][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.238934][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.246272][ T286] device bridge_slave_1 entered promiscuous mode [ 22.433225][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.440251][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.447524][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.454550][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.464332][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.471361][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.478567][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.485591][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.506758][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.513803][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.521031][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.528026][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.546429][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.553477][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.560746][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.567757][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.582880][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.589985][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.597288][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.604317][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.624571][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.631883][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.639057][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.646681][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.653988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.661616][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.668797][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.676033][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.683255][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.690393][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.697628][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.724583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.732720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.740082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.747819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.756100][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.763146][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.770757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.778856][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.785882][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.793191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.801344][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.808346][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.834864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.843154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.851504][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.858524][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.865991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.874833][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881862][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.889184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.897142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.904993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.913205][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.920212][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.927567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.935752][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.942767][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.965597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.973879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.982007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.989344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.996934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.005148][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.013226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.021799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.029850][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.036873][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.044288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.052703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.060963][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.067970][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.075368][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.083835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.092050][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.099049][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.122061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.130124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.138117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.146220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.154336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.162939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.170808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.178716][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.193668][ T283] device veth0_vlan entered promiscuous mode [ 23.200826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.208972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.216992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.225187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.233371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.241776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.249977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.257854][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.276106][ T284] device veth0_vlan entered promiscuous mode [ 23.284927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.292978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.300307][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.308645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.317249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.325733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.334224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.342561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.351052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.358848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.366932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.374422][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.385034][ T286] device veth0_vlan entered promiscuous mode [ 23.393670][ T285] device veth0_vlan entered promiscuous mode [ 23.401018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.408871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.416951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.424870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.433018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.440423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.447993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.455658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.470445][ T283] device veth1_macvtap entered promiscuous mode [ 23.483483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.492161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.500304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.508577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.517202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.526340][ T284] device veth1_macvtap entered promiscuous mode [ 23.537071][ T287] device veth0_vlan entered promiscuous mode [ 23.548380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.556792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.564277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.572341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.580498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.588806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.597164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.609066][ T285] device veth1_macvtap entered promiscuous mode [ 23.616321][ T286] device veth1_macvtap entered promiscuous mode [ 23.626843][ T287] device veth1_macvtap entered promiscuous mode [ 23.634142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.642500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.651032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.659098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.666718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.675094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.687550][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.695998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.707113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.715416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.734363][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 23.752229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.760490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.769192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.778420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.783575][ T338] loop0: detected capacity change from 0 to 256 [ 23.791253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.794333][ T338] exfat: Deprecated parameter 'utf8' [ 23.801689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.814597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.815673][ T338] exfat: Deprecated parameter 'namecase' [ 23.823234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.834997][ T338] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 23.868542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.883022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.925474][ T344] loop3: detected capacity change from 0 to 1024 [ 23.946498][ T344] ======================================================= [ 23.946498][ T344] WARNING: The mand mount option has been deprecated and [ 23.946498][ T344] and is ignored by this kernel. Remove the mand [ 23.946498][ T344] option from the mount to silence this warning. [ 23.946498][ T344] ======================================================= [ 23.974300][ T350] loop4: detected capacity change from 0 to 8192 [ 24.007907][ T353] loop2: detected capacity change from 0 to 1024 [ 24.017827][ T355] loop0: detected capacity change from 0 to 1024 [ 24.034796][ T353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 24.053020][ T353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.061174][ T344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 24.109161][ T353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 24.121311][ T355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.142180][ T353] System zones: 0-1, 3-36 [ 24.157522][ T355] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.166301][ T344] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.4: Allocating blocks 497-513 which overlap fs metadata [ 24.202406][ T353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 24.221333][ T355] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7: bg 0: block 112: padding at end of block bitmap is not set [ 24.242703][ T344] EXT4-fs (loop3): pa ffff8881161302a0: logic 256, phys. 385, len 8 [ 24.250840][ T344] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 24.260315][ T355] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 117 [ 24.274509][ T349] loop1: detected capacity change from 0 to 40427 [ 24.287025][ T286] EXT4-fs (loop2): unmounting filesystem. [ 24.293605][ T349] F2FS-fs (loop1): invalid crc value [ 24.299928][ T355] EXT4-fs (loop0): This should not happen!! Data will be lost [ 24.299928][ T355] [ 24.345874][ T349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.362947][ T355] syz.0.7 (355) used greatest stack depth: 21728 bytes left [ 24.391271][ T349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.409193][ T284] EXT4-fs (loop3): unmounting filesystem. [ 24.443497][ T378] loop3: detected capacity change from 0 to 512 [ 24.457735][ T285] syz-executor: attempt to access beyond end of device [ 24.457735][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.496329][ T283] EXT4-fs (loop0): unmounting filesystem. [ 24.529102][ T381] loop0: detected capacity change from 0 to 1024 [ 24.597934][ T386] loop3: detected capacity change from 0 to 16 [ 24.610715][ T381] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.628934][ T386] erofs: (device loop3): mounted with root inode @ nid 36. [ 24.661505][ T390] loop2: detected capacity change from 0 to 16 [ 24.677080][ T390] erofs: (device loop2): mounted with root inode @ nid 36. [ 24.685531][ T375] loop4: detected capacity change from 0 to 40427 [ 24.699244][ T375] F2FS-fs (loop4): fault_type options not supported [ 24.712668][ T375] F2FS-fs (loop4): Image doesn't support compression [ 24.719467][ T381] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 24.729263][ T375] F2FS-fs (loop4): invalid crc value [ 24.746291][ T375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.760987][ T283] EXT4-fs (loop0): unmounting filesystem. [ 24.777542][ T394] loop3: detected capacity change from 0 to 512 [ 24.805124][ T394] EXT4-fs: Ignoring removed oldalloc option [ 24.818593][ T394] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 24.829599][ T394] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 24.830877][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 24.839189][ T394] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102] [ 24.855476][ T394] System zones: 0-2, 18-18, 34-34 [ 24.859360][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 24.861799][ T394] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.21: iget: bad i_size value: 360287970189639680 [ 24.885312][ T394] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.21: couldn't read orphan inode 15 (err -117) [ 24.888388][ T375] F2FS-fs (loop4): Start checkpoint disabled! [ 24.897435][ T394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 24.921118][ T375] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 24.934973][ T375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 25.013895][ T284] EXT4-fs (loop3): unmounting filesystem. [ 25.019824][ T375] F2FS-fs (loop4): Corrupted max_depth of 3: 1793 [ 25.035467][ T410] loop3: detected capacity change from 0 to 512 [ 25.072087][ T410] incfs: ino conflict with backing FS 1 [ 25.241879][ T422] syz.4.32 (422) used greatest stack depth: 21376 bytes left [ 25.280440][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.287794][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.295410][ T425] device bridge_slave_0 entered promiscuous mode [ 25.305168][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.312302][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.319609][ T425] device bridge_slave_1 entered promiscuous mode [ 25.360605][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.367665][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.374970][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.381997][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.401803][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.409342][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.416477][ T334] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.424237][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.434748][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.442974][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.449992][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.459414][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.467870][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.474939][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.484931][ T438] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.513675][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.521779][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.535998][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.548757][ T425] device veth0_vlan entered promiscuous mode [ 25.557329][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.565570][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.573397][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.587267][ T425] device veth1_macvtap entered promiscuous mode [ 25.595887][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.608494][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.617901][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.627994][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.637873][ T334] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 25.659278][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.674605][ T334] usb 3-1: config 0 descriptor?? [ 25.702509][ T10] device bridge_slave_1 left promiscuous mode [ 25.713402][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.722215][ T10] device bridge_slave_0 left promiscuous mode [ 25.733514][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.785336][ T10] device veth1_macvtap left promiscuous mode [ 25.791470][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 25.791484][ T28] audit: type=1400 audit(1768859173.969:167): avc: denied { setopt } for pid=453 comm="syz.5.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.822224][ T10] device veth0_vlan left promiscuous mode [ 25.828781][ T458] loop1: detected capacity change from 0 to 256 [ 25.850684][ T458] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 25.977764][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.997409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.025929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.041088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.059416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.068439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.076904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.088353][ T334] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 26.099982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.108608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.148913][ T469] loop5: detected capacity change from 0 to 1024 [ 26.164614][ T469] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.182978][ T469] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 26.197031][ T469] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2749: inode #15: comm syz.5.45: corrupted in-inode xattr [ 26.209352][ T28] audit: type=1400 audit(1768859174.389:168): avc: denied { name_bind } for pid=472 comm="syz.4.46" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 26.209555][ T469] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.251810][ T28] audit: type=1400 audit(1768859174.429:169): avc: denied { setattr } for pid=468 comm="syz.5.45" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.274155][ T28] audit: type=1400 audit(1768859174.439:170): avc: denied { read } for pid=474 comm="syz.0.47" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.295173][ T425] EXT4-fs (loop5): unmounting filesystem. [ 26.317394][ T28] audit: type=1400 audit(1768859174.499:171): avc: denied { connect } for pid=479 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.370597][ T28] audit: type=1400 audit(1768859174.519:172): avc: denied { write } for pid=479 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.493644][ T478] loop4: detected capacity change from 0 to 40427 [ 26.533764][ T478] F2FS-fs (loop4): invalid crc value [ 26.555058][ T28] audit: type=1400 audit(1768859174.739:173): avc: denied { ioctl } for pid=493 comm="syz.1.55" path="socket:[17490]" dev="sockfs" ino=17490 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.567765][ T478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.595111][ T28] audit: type=1400 audit(1768859174.739:174): avc: denied { create } for pid=494 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.614697][ T496] Bluetooth: hci0: sending frame failed (-49) [ 26.615028][ T478] F2FS-fs (loop4): Start checkpoint disabled! [ 26.620829][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 26.627331][ T478] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 26.633222][ T28] audit: type=1400 audit(1768859174.769:175): avc: denied { connect } for pid=494 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.642147][ T478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 26.659760][ T28] audit: type=1400 audit(1768859174.769:176): avc: denied { write } for pid=494 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.695522][ T334] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 26.710671][ T334] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 26.719084][ T334] usb 3-1: USB disconnect, device number 2 [ 26.756779][ T478] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 26.786998][ T501] fido_id[501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 26.848624][ T340] kworker/u4:4: attempt to access beyond end of device [ 26.848624][ T340] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.124720][ T509] loop1: detected capacity change from 0 to 131072 [ 27.135095][ T509] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 27.143501][ T509] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.152506][ T509] F2FS-fs (loop1): invalid crc value [ 27.159368][ T509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.182643][ T509] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.189865][ T509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 27.281440][ T334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.353625][ T523] loop2: detected capacity change from 0 to 40427 [ 27.367644][ T523] F2FS-fs (loop2): invalid crc value [ 27.381302][ T523] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.404894][ T526] loop1: detected capacity change from 0 to 512 [ 27.440919][ T523] F2FS-fs (loop2): Start checkpoint disabled! [ 27.445812][ T526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.451839][ T523] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 27.456087][ T526] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.463959][ T523] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 27.476951][ T334] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 27.507235][ T334] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 27.517597][ T334] usb 5-1: config 1 interface 0 has no altsetting 0 [ 27.518201][ T285] EXT4-fs (loop1): unmounting filesystem. [ 27.531075][ T334] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 27.540454][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.548769][ T334] usb 5-1: Product: syz [ 27.553087][ T334] usb 5-1: Manufacturer: syz [ 27.557717][ T334] usb 5-1: SerialNumber: syz [ 27.571417][ T517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 27.578639][ T517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 27.586347][ T523] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 27.611104][ T540] loop1: detected capacity change from 0 to 256 [ 27.634453][ T540] exFAT-fs (loop1): failed to load upcase table (idx : 0x000103c2, chksum : 0xe64499b9, utbl_chksum : 0xe619d30d) [ 27.648894][ T43] kworker/u4:2: attempt to access beyond end of device [ 27.648894][ T43] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.740498][ T65] kernel write not supported for file bpf-prog (pid: 65 comm: kworker/0:2) [ 27.790051][ T558] syz.1.79 (558) used greatest stack depth: 21248 bytes left [ 27.823272][ T563] loop2: detected capacity change from 0 to 512 [ 27.836091][ T563] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.849599][ T563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 27.863055][ T563] EXT4-fs (loop2): 1 truncate cleaned up [ 27.868835][ T563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.883461][ T571] loop1: detected capacity change from 0 to 512 [ 27.890233][ T571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 27.892547][ T563] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.72: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 27.910319][ T571] EXT4-fs (loop1): 1 truncate cleaned up [ 27.921254][ T563] EXT4-fs (loop2): Remounting filesystem read-only [ 27.926198][ T571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.932954][ T563] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 27.950402][ T563] EXT4-fs (loop2): Remounting filesystem read-only [ 27.957320][ T563] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.72: Deleting old file: nlink 5, error=-117 [ 27.964578][ T571] EXT4-fs (loop1): shut down requested (0) [ 27.984890][ T285] EXT4-fs (loop1): unmounting filesystem. [ 28.003904][ T286] EXT4-fs (loop2): unmounting filesystem. [ 28.430786][ T595] loop2: detected capacity change from 0 to 131072 [ 28.442547][ T595] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.475384][ T595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.540583][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.611993][ T334] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:1a:83:54:ed:a9 [ 28.631540][ T334] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 28.646225][ T334] usb 5-1: USB disconnect, device number 2 [ 28.721052][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 28.727168][ T6] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 28.736473][ T6] usb 2-1: config 179 has no interface number 0 [ 28.742857][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 28.754186][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 28.765658][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 28.776897][ T6] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 28.788406][ T6] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 28.802111][ T6] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 28.811279][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.820447][ T599] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 29.146484][ T632] loop5: detected capacity change from 0 to 256 [ 29.164392][ T632] FAT-fs (loop5): Directory bread(block 64) failed [ 29.171517][ T632] FAT-fs (loop5): Directory bread(block 65) failed [ 29.178231][ T632] FAT-fs (loop5): Directory bread(block 66) failed [ 29.185188][ T632] FAT-fs (loop5): Directory bread(block 67) failed [ 29.191990][ T632] FAT-fs (loop5): Directory bread(block 68) failed [ 29.202520][ T632] FAT-fs (loop5): Directory bread(block 69) failed [ 29.209092][ T632] FAT-fs (loop5): Directory bread(block 70) failed [ 29.216874][ T632] FAT-fs (loop5): Directory bread(block 71) failed [ 29.227909][ T632] FAT-fs (loop5): Directory bread(block 72) failed [ 29.234605][ T632] FAT-fs (loop5): Directory bread(block 73) failed [ 29.403426][ T334] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 29.560594][ T334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.610627][ T335] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 29.632557][ T658] loop0: detected capacity change from 0 to 512 [ 29.640359][ T658] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.650441][ T658] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 29.693155][ T660] loop2: detected capacity change from 0 to 512 [ 29.703377][ T660] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.119: inode has both inline data and extents flags [ 29.716728][ T660] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.119: couldn't read orphan inode 15 (err -117) [ 29.728762][ T660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.741709][ T334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.759640][ T334] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.769894][ T334] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.779161][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.779740][ T286] EXT4-fs (loop2): unmounting filesystem. [ 29.787704][ T334] usb 5-1: SerialNumber: syz [ 29.797758][ T335] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.817472][ T335] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 29.828355][ T335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 29.835023][ T335] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 29.844310][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.853329][ T335] usb 6-1: config 0 descriptor?? [ 29.858570][ T648] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 30.011661][ T334] usb 5-1: 0:2 : does not exist [ 30.019717][ T334] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 30.030588][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.031594][ T334] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 30.049569][ T334] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 30.059309][ T334] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 30.069099][ T334] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 30.078893][ T334] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 30.088752][ T334] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 30.096044][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.110461][ T334] usb 5-1: USB disconnect, device number 3 [ 30.216526][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 30.223406][ T39] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.08 [ 30.232466][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.240555][ T39] usb 1-1: SerialNumber: syz [ 30.245826][ T39] usb 1-1: config 0 descriptor?? [ 30.251972][ T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 30.259781][ T39] usb 1-1: Detected SIO [ 30.264551][ T39] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.273536][ T335] logitech 0003:046D:C24F.0002: item fetching failed at offset 5/7 [ 30.282337][ T335] logitech 0003:046D:C24F.0002: parse failed [ 30.288339][ T335] logitech: probe of 0003:046D:C24F.0002 failed with error -22 [ 30.293077][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.306233][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.315124][ T65] usb 3-1: Product: syz [ 30.326823][ T65] usb 3-1: Manufacturer: syz [ 30.331502][ T65] usb 3-1: SerialNumber: syz [ 30.453302][ T334] usb 1-1: USB disconnect, device number 2 [ 30.460370][ T334] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.470346][ T334] ftdi_sio 1-1:0.0: device disconnected [ 30.483868][ T335] usb 6-1: USB disconnect, device number 2 [ 30.694404][ T668] loop4: detected capacity change from 0 to 40427 [ 30.701546][ T668] F2FS-fs (loop4): heap/no_heap options were deprecated [ 30.708550][ T668] F2FS-fs (loop4): Image doesn't support compression [ 30.715643][ T668] F2FS-fs (loop4): heap/no_heap options were deprecated [ 30.724800][ T668] F2FS-fs (loop4): invalid crc value [ 30.731966][ T668] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.760430][ T668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.798089][ T668] syz.4.122: attempt to access beyond end of device [ 30.798089][ T668] loop4: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 30.812008][ T668] syz.4.122: attempt to access beyond end of device [ 30.812008][ T668] loop4: rw=2049, sector=77840, nr_sectors = 32 limit=40427 [ 30.825920][ T668] syz.4.122: attempt to access beyond end of device [ 30.825920][ T668] loop4: rw=2049, sector=77896, nr_sectors = 8 limit=40427 [ 30.839740][ T668] syz.4.122: attempt to access beyond end of device [ 30.839740][ T668] loop4: rw=2049, sector=77912, nr_sectors = 8 limit=40427 [ 30.853802][ T668] syz.4.122: attempt to access beyond end of device [ 30.853802][ T668] loop4: rw=2049, sector=77936, nr_sectors = 8 limit=40427 [ 30.877854][ T287] syz-executor: attempt to access beyond end of device [ 30.877854][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.013491][ T681] loop5: detected capacity change from 0 to 1024 [ 31.022167][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 31.022179][ T28] audit: type=1400 audit(1768859179.209:238): avc: denied { setopt } for pid=679 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.062144][ T681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.079146][ T684] syz.4.128 (684) used greatest stack depth: 20224 bytes left [ 31.118926][ T681] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 31.146461][ T425] EXT4-fs (loop5): unmounting filesystem. [ 31.174717][ T28] audit: type=1400 audit(1768859179.359:239): avc: denied { mounton } for pid=699 comm="syz.5.133" path="/proc/34/task" dev="proc" ino=17907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 31.246824][ T28] audit: type=1400 audit(1768859179.429:240): avc: denied { read write } for pid=708 comm="syz.5.137" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.253477][ T6] usb 2-1: USB disconnect, device number 2 [ 31.269986][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 31.270019][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 31.274425][ T28] audit: type=1400 audit(1768859179.459:241): avc: denied { open } for pid=708 comm="syz.5.137" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.284078][ T6] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 31.298279][ T28] audit: type=1400 audit(1768859179.469:242): avc: denied { ioctl } for pid=708 comm="syz.5.137" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.342247][ T65] cdc_ncm 3-1:1.0: failed to get mac address [ 31.371226][ T65] cdc_ncm 3-1:1.0: bind() failure [ 31.377263][ T65] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 31.384288][ T65] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 31.392632][ T65] usb 3-1: USB disconnect, device number 3 [ 31.413675][ T28] audit: type=1400 audit(1768859179.599:243): avc: denied { mount } for pid=713 comm="syz.5.139" name="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 31.444390][ T28] audit: type=1400 audit(1768859179.599:244): avc: denied { read } for pid=713 comm="syz.5.139" name="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 31.467730][ T716] loop5: detected capacity change from 0 to 256 [ 31.481930][ T28] audit: type=1400 audit(1768859179.599:245): avc: denied { open } for pid=713 comm="syz.5.139" path="/19/file0" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 31.491838][ T711] loop1: detected capacity change from 0 to 40427 [ 31.511075][ T28] audit: type=1400 audit(1768859179.599:246): avc: denied { setattr } for pid=713 comm="syz.5.139" name="/" dev="configfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 31.533434][ T28] audit: type=1400 audit(1768859179.599:247): avc: denied { unmount } for pid=425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 31.537809][ T711] F2FS-fs (loop1): heap/no_heap options were deprecated [ 31.564359][ T711] F2FS-fs (loop1): Image doesn't support compression [ 31.571275][ T711] F2FS-fs (loop1): heap/no_heap options were deprecated [ 31.579152][ T711] F2FS-fs (loop1): invalid crc value [ 31.587549][ T711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.627595][ T711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.648250][ T721] loop5: detected capacity change from 0 to 512 [ 31.650707][ T711] syz.1.138: attempt to access beyond end of device [ 31.650707][ T711] loop1: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 31.660011][ T721] EXT4-fs: Ignoring removed bh option [ 31.668428][ T711] syz.1.138: attempt to access beyond end of device [ 31.668428][ T711] loop1: rw=2049, sector=77856, nr_sectors = 32 limit=40427 [ 31.687658][ T711] syz.1.138: attempt to access beyond end of device [ 31.687658][ T711] loop1: rw=2049, sector=77904, nr_sectors = 32 limit=40427 [ 31.696272][ T721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 31.703562][ T711] syz.1.138: attempt to access beyond end of device [ 31.703562][ T711] loop1: rw=2049, sector=77968, nr_sectors = 24 limit=40427 [ 31.710702][ T721] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.782932][ T425] EXT4-fs (loop5): unmounting filesystem. [ 31.813404][ T726] capability: warning: `syz.5.143' uses 32-bit capabilities (legacy support in use) [ 31.826847][ T726] Falling back ldisc for ttyS3. [ 31.832688][ T728] loop1: detected capacity change from 0 to 128 [ 31.872581][ T730] loop5: detected capacity change from 0 to 128 [ 31.886703][ T730] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 31.900162][ T730] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.931793][ T425] EXT4-fs (loop5): unmounting filesystem. [ 32.041463][ T748] tipc: Started in network mode [ 32.056505][ T748] tipc: Node identity 7f000001, cluster identity 4711 [ 32.096402][ T748] tipc: Enabled bearer , priority 10 [ 32.122175][ T756] loop0: detected capacity change from 0 to 128 [ 32.136098][ T756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.143063][ T756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.150103][ T756] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.169518][ T760] loop1: detected capacity change from 0 to 512 [ 32.184011][ T756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.194807][ T760] EXT4-fs (loop1): 1 orphan inode deleted [ 32.202615][ T760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.210974][ T756] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.213446][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6832: comm kworker/u4:1: Failed to release dquot type 1 [ 32.221988][ T760] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.278868][ T756] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.290603][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.344711][ T283] EXT4-fs (loop0): unmounting filesystem. [ 32.354577][ T285] EXT4-fs (loop1): unmounting filesystem. [ 32.486464][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.502018][ T6] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.519011][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.530061][ T6] usb 5-1: config 0 descriptor?? [ 32.547883][ T798] loop5: detected capacity change from 0 to 512 [ 32.585911][ T798] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 32.595041][ T798] EXT4-fs (loop5): invalid journal inode [ 32.603043][ T798] EXT4-fs (loop5): can't get journal size [ 32.606252][ T787] loop1: detected capacity change from 0 to 40427 [ 32.616488][ T798] EXT4-fs (loop5): 1 truncate cleaned up [ 32.622955][ T798] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 32.644712][ T787] F2FS-fs (loop1): fault_injection options not supported [ 32.652933][ T787] F2FS-fs (loop1): fault_type options not supported [ 32.668102][ T805] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 32.670772][ T787] F2FS-fs (loop1): invalid crc value [ 32.693493][ T809] loop0: detected capacity change from 0 to 512 [ 32.700739][ T798] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 32.711488][ T787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.725871][ T809] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.752706][ T425] EXT4-fs (loop5): unmounting filesystem. [ 32.757520][ T809] EXT4-fs (loop0): 1 truncate cleaned up [ 32.764139][ T787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.772844][ T809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.831706][ T815] loop7: detected capacity change from 0 to 1 [ 32.859190][ T809] EXT4-fs (loop0): shut down requested (0) [ 32.866388][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.875580][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 32.883969][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.893131][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 32.901002][ T336] loop7: unable to read partition table [ 32.909246][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.918396][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 32.926432][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.935603][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 32.943919][ T815] loop7: unable to read partition table [ 32.950249][ T6] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 32.959224][ T817] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 32.960661][ T815] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 32.971059][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input5 [ 32.981828][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.992916][ T817] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 33.001916][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 33.012478][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.027629][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 33.036556][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.038992][ T817] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 33.045698][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 33.046839][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.070712][ T817] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 33.071379][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 33.089005][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.090278][ T817] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 33.098128][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 33.125569][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.128060][ T6] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 33.134715][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 33.140640][ T817] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 33.222283][ T6] tipc: Node number set to 2130706433 [ 33.282112][ T283] EXT4-fs (loop0): unmounting filesystem. [ 33.358890][ T827] loop0: detected capacity change from 0 to 1024 [ 33.424165][ T827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.458311][ T283] EXT4-fs (loop0): unmounting filesystem. [ 33.477784][ T39] usb 5-1: USB disconnect, device number 4 [ 33.765396][ T864] loop1: detected capacity change from 0 to 128 [ 33.798765][ T864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.846756][ T864] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.904623][ T877] loop0: detected capacity change from 0 to 512 [ 33.912709][ T285] EXT4-fs (loop1): unmounting filesystem. [ 33.956227][ T877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.965798][ T877] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.988511][ T877] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.199: corrupted inode contents [ 34.011563][ T877] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #2: comm syz.0.199: mark_inode_dirty error [ 34.028463][ T877] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.199: corrupted inode contents [ 34.041292][ T877] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.199: mark_inode_dirty error [ 34.051833][ T899] loop2: detected capacity change from 0 to 256 [ 34.076428][ T283] EXT4-fs (loop0): unmounting filesystem. [ 34.100127][ T899] FAT-fs (loop2): Directory bread(block 64) failed [ 34.102562][ T907] loop5: detected capacity change from 0 to 1024 [ 34.114235][ T899] FAT-fs (loop2): Directory bread(block 65) failed [ 34.121292][ T899] FAT-fs (loop2): Directory bread(block 66) failed [ 34.128589][ T899] FAT-fs (loop2): Directory bread(block 67) failed [ 34.142899][ T899] FAT-fs (loop2): Directory bread(block 68) failed [ 34.149866][ T899] FAT-fs (loop2): Directory bread(block 69) failed [ 34.156899][ T907] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 34.161427][ T915] capability: warning: `syz.1.215' uses deprecated v2 capabilities in a way that may be insecure [ 34.168128][ T899] FAT-fs (loop2): Directory bread(block 70) failed [ 34.182772][ T899] FAT-fs (loop2): Directory bread(block 71) failed [ 34.189351][ T899] FAT-fs (loop2): Directory bread(block 72) failed [ 34.193446][ T907] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.213: Allocating blocks 497-513 which overlap fs metadata [ 34.196531][ T899] FAT-fs (loop2): Directory bread(block 73) failed [ 34.210482][ T916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.211'. [ 34.225343][ T907] EXT4-fs (loop5): pa ffff888116130738: logic 256, phys. 385, len 8 [ 34.233369][ T907] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 34.261242][ T916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.211'. [ 34.264291][ T915] loop1: detected capacity change from 0 to 256 [ 34.279249][ T915] exfat: Deprecated parameter 'namecase' [ 34.285069][ T915] exfat: Deprecated parameter 'namecase' [ 34.295099][ T915] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 34.313355][ T915] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 34.348566][ T425] EXT4-fs (loop5): unmounting filesystem. [ 34.380846][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 34.388380][ T335] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max [ 34.397240][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.404830][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.412395][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.419903][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.427631][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.435273][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.442925][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.450307][ T926] loop1: detected capacity change from 0 to 512 [ 34.456870][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.465859][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.473323][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.480725][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.488142][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.495789][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.503261][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.512052][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.524617][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.532265][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.539664][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.547213][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.554838][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.568667][ T335] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.579100][ T335] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 34.639602][ T941] fido_id[941]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.874597][ T966] loop4: detected capacity change from 0 to 512 [ 34.951122][ T335] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 34.959292][ T972] Zero length message leads to an empty skb [ 34.966608][ T972] loop4: detected capacity change from 0 to 16 [ 34.973647][ T972] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.982391][ T972] incfs: Can't find or create .index dir in ./file0 [ 34.995319][ T972] incfs: mount failed -30 [ 35.086288][ T982] loop4: detected capacity change from 0 to 256 [ 35.101674][ T982] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 35.141664][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.156054][ T984] loop5: detected capacity change from 0 to 512 [ 35.157309][ T335] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.167472][ T979] loop0: detected capacity change from 0 to 40427 [ 35.180042][ T335] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 35.191123][ T335] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 35.192430][ T984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.203014][ T335] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.211059][ T984] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.228459][ T979] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 35.241257][ T979] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 35.249604][ T984] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 35.253460][ T335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.261279][ T979] F2FS-fs (loop0): invalid crc value [ 35.275180][ T984] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.245: bad orphan inode 131083 [ 35.281914][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.285988][ T984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 35.304393][ T335] usb 2-1: Product: syz [ 35.312670][ T979] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.313010][ T335] usb 2-1: Manufacturer: syz [ 35.332439][ T984] overlayfs: upper fs needs to support d_type. [ 35.356586][ T335] usb 2-1: SerialNumber: syz [ 35.362516][ T425] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /49/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 35.388422][ T955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.404278][ T335] cdc_mbim 2-1:1.0: skipping garbage [ 35.417378][ T979] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 35.426306][ T979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.463478][ T425] EXT4-fs (loop5): unmounting filesystem. [ 35.610869][ T955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.737632][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.744866][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.752652][ T1000] device bridge_slave_0 entered promiscuous mode [ 35.764956][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.772191][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.779760][ T1000] device bridge_slave_1 entered promiscuous mode [ 35.800541][ T982] bio_check_eod: 29555 callbacks suppressed [ 35.800554][ T982] syz.4.244: attempt to access beyond end of device [ 35.800554][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.819609][ T982] syz.4.244: attempt to access beyond end of device [ 35.819609][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.832960][ T982] syz.4.244: attempt to access beyond end of device [ 35.832960][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.847514][ T982] syz.4.244: attempt to access beyond end of device [ 35.847514][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.860647][ T982] syz.4.244: attempt to access beyond end of device [ 35.860647][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.873772][ T982] syz.4.244: attempt to access beyond end of device [ 35.873772][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.887083][ T982] syz.4.244: attempt to access beyond end of device [ 35.887083][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.888719][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 35.900229][ T982] syz.4.244: attempt to access beyond end of device [ 35.900229][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.900269][ T982] syz.4.244: attempt to access beyond end of device [ 35.900269][ T982] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 35.926720][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 36.017015][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 36.026597][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 36.042650][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 36.051021][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 36.066335][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 36.074595][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 36.083690][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 36.131233][ T10] device bridge_slave_1 left promiscuous mode [ 36.137403][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.155939][ T10] device bridge_slave_0 left promiscuous mode [ 36.178383][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.197657][ T10] device veth1_macvtap left promiscuous mode [ 36.203792][ T10] device veth0_vlan left promiscuous mode [ 36.217426][ T1035] loop0: detected capacity change from 0 to 512 [ 36.230778][ T955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.252513][ T1035] incfs: ino conflict with backing FS 1 [ 36.334849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.342541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.352172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.360918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.369075][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.376107][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.383809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.392489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.401023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.425817][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.431456][ T335] cdc_mbim 2-1:1.0: bind() failure [ 36.432904][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.445324][ T335] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 36.454024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.462673][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.470678][ T335] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 36.470961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.490252][ T335] usb 2-1: USB disconnect, device number 3 [ 36.492170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.514567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.527725][ T1000] device veth0_vlan entered promiscuous mode [ 36.534686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.551476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.562403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.565506][ T1044] loop4: detected capacity change from 0 to 1024 [ 36.578139][ T1000] device veth1_macvtap entered promiscuous mode [ 36.585704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.594897][ T1044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.612255][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.621400][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.630124][ T1044] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 36.649056][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 36.649068][ T28] audit: type=1400 audit(1768859184.829:302): avc: denied { mounton } for pid=1000 comm="syz-executor" path="/root/syzkaller.dydm2V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.649305][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.657457][ T1044] System zones: [ 36.685344][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.701280][ T1044] 0-1, 3-36 [ 36.705384][ T10] tipc: Disabling bearer [ 36.711364][ T10] tipc: Left network mode [ 36.720348][ T1049] loop6: detected capacity change from 0 to 128 [ 36.727336][ T1044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.733721][ T1049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.772766][ T1049] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 36.781521][ T1049] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.795835][ T28] audit: type=1400 audit(1768859184.979:303): avc: denied { setattr } for pid=1043 comm="syz.4.265" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 36.821477][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.830329][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.830827][ T28] audit: type=1400 audit(1768859185.009:304): avc: denied { map } for pid=1048 comm="syz.6.248" path="/0/file0/cgroup.controllers" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.862124][ T1047] device bridge_slave_0 entered promiscuous mode [ 36.870247][ T287] EXT4-fs (loop4): unmounting filesystem. [ 36.871246][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 36.884827][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.896223][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.904567][ T1047] device bridge_slave_1 entered promiscuous mode [ 36.966738][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.974185][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.992163][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.006089][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.017994][ T625] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.025083][ T625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.026018][ T28] audit: type=1400 audit(1768859185.199:305): avc: denied { watch } for pid=1065 comm="syz.1.268" path="/51" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.033072][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.076520][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.084958][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.092109][ T625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.099602][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.107734][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.116050][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.133441][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.148387][ T1076] loop2: detected capacity change from 0 to 256 [ 37.156264][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.165029][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.172288][ T335] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 37.181108][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.203284][ T1076] FAT-fs (loop2): Directory bread(block 64) failed [ 37.209926][ T28] audit: type=1326 audit(1768859185.389:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 37.234689][ T1076] FAT-fs (loop2): Directory bread(block 65) failed [ 37.236262][ T1047] device veth0_vlan entered promiscuous mode [ 37.247336][ T1076] FAT-fs (loop2): Directory bread(block 66) failed [ 37.253933][ T28] audit: type=1326 audit(1768859185.389:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 37.286289][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.294266][ T1076] FAT-fs (loop2): Directory bread(block 67) failed [ 37.301022][ T1076] FAT-fs (loop2): Directory bread(block 68) failed [ 37.314149][ T1076] FAT-fs (loop2): Directory bread(block 69) failed [ 37.324584][ T28] audit: type=1326 audit(1768859185.389:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 37.332059][ T1047] device veth1_macvtap entered promiscuous mode [ 37.347921][ T1076] FAT-fs (loop2): Directory bread(block 70) failed [ 37.358905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.382629][ T1076] FAT-fs (loop2): Directory bread(block 71) failed [ 37.389210][ T28] audit: type=1326 audit(1768859185.389:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 37.392370][ T1090] loop6: detected capacity change from 0 to 2048 [ 37.412735][ T1076] FAT-fs (loop2): Directory bread(block 72) failed [ 37.425552][ T1076] FAT-fs (loop2): Directory bread(block 73) failed [ 37.433186][ T28] audit: type=1326 audit(1768859185.389:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 37.435285][ T335] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.457511][ T28] audit: type=1326 audit(1768859185.389:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 37.509909][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.528660][ T335] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 37.539419][ T1090] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 37.558935][ T335] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 37.570059][ T1090] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.586176][ T10] device bridge_slave_1 left promiscuous mode [ 37.593422][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.598854][ T335] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 37.604775][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 37.614957][ T1098] loop2: detected capacity change from 0 to 1024 [ 37.641936][ T335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.641971][ T10] device bridge_slave_0 left promiscuous mode [ 37.652922][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.664243][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.673580][ T10] device veth1_macvtap left promiscuous mode [ 37.679610][ T335] usb 5-1: Product: syz [ 37.679810][ T10] device veth0_vlan left promiscuous mode [ 37.684113][ T335] usb 5-1: Manufacturer: syz [ 37.695292][ T335] usb 5-1: SerialNumber: syz [ 37.705274][ T1055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 37.720347][ T335] cdc_mbim 5-1:1.0: skipping garbage [ 37.732613][ T1098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.768685][ T1098] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.280: Allocating blocks 497-513 which overlap fs metadata [ 37.785674][ T1098] EXT4-fs (loop2): pa ffff88813368b540: logic 131104, phys. 177, len 21 [ 37.794067][ T1098] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 37.834897][ T286] EXT4-fs (loop2): unmounting filesystem. [ 37.851242][ T1114] loop1: detected capacity change from 0 to 256 [ 37.890215][ T1114] FAT-fs (loop1): bogus number of FAT sectors [ 37.906410][ T1114] FAT-fs (loop1): Can't find a valid FAT filesystem [ 37.918220][ T1055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 37.964635][ T1055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 38.050207][ T1131] loop2: detected capacity change from 0 to 512 [ 38.079622][ T1131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.142193][ T1131] EXT4-fs (loop2): 1 truncate cleaned up [ 38.160206][ T1138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1138 comm=syz.7.297 [ 38.173136][ T1131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.306848][ T1141] loop7: detected capacity change from 0 to 256 [ 38.330734][ T286] EXT4-fs (loop2): unmounting filesystem. [ 38.375350][ T1141] FAT-fs (loop7): Directory bread(block 64) failed [ 38.391486][ T1141] FAT-fs (loop7): Directory bread(block 65) failed [ 38.406083][ T1141] FAT-fs (loop7): Directory bread(block 66) failed [ 38.421126][ T1141] FAT-fs (loop7): Directory bread(block 67) failed [ 38.456821][ T1141] FAT-fs (loop7): Directory bread(block 68) failed [ 38.476059][ T1141] FAT-fs (loop7): Directory bread(block 69) failed [ 38.486121][ T1141] FAT-fs (loop7): Directory bread(block 70) failed [ 38.506266][ T1141] FAT-fs (loop7): Directory bread(block 71) failed [ 38.509640][ T1160] loop1: detected capacity change from 0 to 256 [ 38.516404][ T1141] FAT-fs (loop7): Directory bread(block 72) failed [ 38.529835][ T1141] FAT-fs (loop7): Directory bread(block 73) failed [ 38.582516][ T1055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 38.589822][ T1055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 38.619959][ T335] cdc_mbim 5-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048 [ 38.629877][ T335] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 38.664668][ T8] kworker/u4:0: attempt to access beyond end of device [ 38.664668][ T8] loop7: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 38.723882][ T1185] loop2: detected capacity change from 0 to 128 [ 38.743243][ T1185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.758502][ T1185] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.805661][ T286] EXT4-fs (loop2): unmounting filesystem. [ 38.817408][ T1198] loop1: detected capacity change from 0 to 512 [ 38.825404][ T1198] EXT4-fs: Ignoring removed oldalloc option [ 38.831542][ T335] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 38.849706][ T335] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, ea:f9:02:1d:46:9d [ 38.853680][ T1198] EXT4-fs (loop1): 1 truncate cleaned up [ 38.865899][ T1198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.924210][ T285] EXT4-fs (loop1): unmounting filesystem. [ 38.941787][ T335] usb 5-1: USB disconnect, device number 5 [ 38.947957][ T335] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 39.050623][ T6] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 39.116722][ T1239] loop1: detected capacity change from 0 to 256 [ 39.251611][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.270849][ T6] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.292297][ T6] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.312688][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.329937][ T6] usb 8-1: SerialNumber: syz [ 39.350296][ T1267] loop6: detected capacity change from 0 to 256 [ 39.362912][ T1267] exfat: Deprecated parameter 'utf8' [ 39.368304][ T1267] exfat: Deprecated parameter 'namecase' [ 39.374396][ T1267] exfat: Deprecated parameter 'utf8' [ 39.391608][ T1267] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 39.444094][ T1275] loop1: detected capacity change from 0 to 512 [ 39.444555][ T1278] loop6: detected capacity change from 0 to 512 [ 39.463850][ T1278] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.466879][ T1275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.492422][ T1275] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.505351][ T1278] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 39.521356][ T1275] EXT4-fs (loop1): 1 truncate cleaned up [ 39.527024][ T1275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.555896][ T1278] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.348: bg 0: block 248: padding at end of block bitmap is not set [ 39.564751][ T6] usb 8-1: 0:2 : does not exist [ 39.582417][ T6] usb 8-1: USB disconnect, device number 2 [ 39.592829][ T285] EXT4-fs (loop1): unmounting filesystem. [ 39.599580][ T1278] EXT4-fs error (device loop6): ext4_acquire_dquot:6796: comm syz.6.348: Failed to acquire dquot type 1 [ 39.613756][ T1278] EXT4-fs (loop6): 1 truncate cleaned up [ 39.614546][ T614] udevd[614]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.619968][ T1278] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 39.721884][ T1278] EXT4-fs error (device loop6): ext4_acquire_dquot:6796: comm syz.6.348: Failed to acquire dquot type 1 [ 39.740599][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.749146][ T1290] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 39.764121][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 39.776590][ T10] EXT4-fs error (device loop6): ext4_release_dquot:6832: comm kworker/u4:1: Failed to release dquot type 1 [ 39.788740][ T1292] input: syz0 as /devices/virtual/input/input7 [ 39.826971][ T1295] loop6: detected capacity change from 0 to 1024 [ 39.839515][ T1295] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.865795][ T1301] loop2: detected capacity change from 0 to 2048 [ 39.878900][ T1295] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 39.881407][ T1305] loop1: detected capacity change from 0 to 512 [ 39.912060][ T1301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.921535][ T1305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.932254][ T1305] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.940573][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 39.949846][ T19] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 39.955411][ T1305] EXT4-fs (loop1): shut down requested (2) [ 39.958295][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 39.969986][ T19] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 39.970418][ T286] EXT4-fs (loop2): unmounting filesystem. [ 39.979531][ T19] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 39.993623][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.993889][ T285] EXT4-fs (loop1): unmounting filesystem. [ 40.003469][ T19] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.018749][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 40.030002][ T19] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 40.040044][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.053034][ T19] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.062091][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.070587][ T19] usb 5-1: config 0 descriptor?? [ 40.075881][ T1277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 40.207801][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.369'. [ 40.254464][ T1342] loop7: detected capacity change from 0 to 256 [ 40.295162][ T19] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.380571][ T335] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.382215][ T1348] loop6: detected capacity change from 0 to 512 [ 40.437451][ T1350] loop6: detected capacity change from 0 to 2048 [ 40.463125][ T1350] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 40.474163][ T1350] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 40.488857][ T1350] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 1 with error 28 [ 40.501352][ T1350] EXT4-fs (loop6): This should not happen!! Data will be lost [ 40.501352][ T1350] [ 40.511183][ T1350] EXT4-fs (loop6): Total free blocks count 0 [ 40.517338][ T1350] EXT4-fs (loop6): Free/Dirty block details [ 40.523488][ T1350] EXT4-fs (loop6): free_blocks=66060288 [ 40.528447][ C1] usblp0: nonzero read bulk status received: -71 [ 40.529557][ T1350] EXT4-fs (loop6): dirty_blocks=32 [ 40.537758][ T1045] usb 5-1: USB disconnect, device number 6 [ 40.540929][ T1350] EXT4-fs (loop6): Block reservation details [ 40.551368][ T1045] usblp0: removed [ 40.552518][ T1350] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 40.562381][ T1358] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 40.574819][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 40.581552][ T335] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 40.590277][ T335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.601606][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.624960][ T335] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 40.638819][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.646959][ T335] usb 3-1: Product: syz [ 40.651334][ T335] usb 3-1: Manufacturer: syz [ 40.655958][ T335] usb 3-1: SerialNumber: syz [ 40.665726][ T335] usb 3-1: config 0 descriptor?? [ 40.672593][ T335] rndis_host 3-1:0.0: skipping garbage [ 40.678103][ T335] usb 3-1: bad CDC descriptors [ 40.687352][ T335] cdc_acm 3-1:0.0: skipping garbage [ 40.692619][ T335] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 40.704894][ T335] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 40.713856][ T335] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 40.788681][ T1373] loop6: detected capacity change from 0 to 1024 [ 40.795431][ T1373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.812066][ T1373] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 40.830587][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 40.873506][ T1315] netlink: 27 bytes leftover after parsing attributes in process `syz.2.360'. [ 40.884167][ T39] usb 3-1: USB disconnect, device number 4 [ 41.074984][ T1389] loop7: detected capacity change from 0 to 512 [ 41.088396][ T1389] EXT4-fs (loop7): Test dummy encryption mode enabled [ 41.095552][ T1389] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 41.106875][ T1389] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.391: bad orphan inode 131083 [ 41.117846][ T1389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 41.144671][ T1047] EXT4-fs (loop7): unmounting filesystem. [ 41.159336][ T340] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.340568][ T1045] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 41.493471][ T1399] loop2: detected capacity change from 0 to 512 [ 41.512019][ T1399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.521114][ T1045] usb 5-1: Using ep0 maxpacket: 16 [ 41.527735][ T1399] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.540043][ T1045] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 41.553583][ T1045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.567073][ T1045] usb 5-1: Product: syz [ 41.571445][ T1045] usb 5-1: Manufacturer: syz [ 41.571691][ T286] EXT4-fs (loop2): unmounting filesystem. [ 41.576288][ T1045] usb 5-1: SerialNumber: syz [ 41.598436][ T1045] usb 5-1: config 0 descriptor?? [ 41.605672][ T1045] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 41.627894][ T1045] usb 5-1: Detected FT-X [ 41.806386][ T1045] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 42.079624][ T1430] loop1: detected capacity change from 0 to 256 [ 42.120257][ T1430] FAT-fs (loop1): Directory bread(block 64) failed [ 42.128140][ T1430] FAT-fs (loop1): Directory bread(block 65) failed [ 42.134947][ T1430] FAT-fs (loop1): Directory bread(block 66) failed [ 42.142165][ T1430] FAT-fs (loop1): Directory bread(block 67) failed [ 42.143542][ T1427] kvm [1426]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0x0 [ 42.148712][ T1430] FAT-fs (loop1): Directory bread(block 68) failed [ 42.163957][ T1430] FAT-fs (loop1): Directory bread(block 69) failed [ 42.170502][ T1430] FAT-fs (loop1): Directory bread(block 70) failed [ 42.177396][ T1430] FAT-fs (loop1): Directory bread(block 71) failed [ 42.184083][ T1430] FAT-fs (loop1): Directory bread(block 72) failed [ 42.186940][ T1427] kvm [1426]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x187) = 0x9131 [ 42.190896][ T1430] FAT-fs (loop1): Directory bread(block 73) failed [ 42.207844][ T1425] loop2: detected capacity change from 0 to 40427 [ 42.221125][ T1045] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 42.231307][ T1045] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 42.239388][ T1425] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 42.260610][ T1425] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.261815][ T1045] usb 5-1: USB disconnect, device number 7 [ 42.287553][ T1045] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 42.298746][ T1045] ftdi_sio 5-1:0.0: device disconnected [ 42.304420][ T1425] F2FS-fs (loop2): invalid crc value [ 42.315668][ T1425] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.329388][ T10] kworker/u4:1: attempt to access beyond end of device [ 42.329388][ T10] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 42.360764][ T1425] F2FS-fs (loop2): Start checkpoint disabled! [ 42.367386][ T1425] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 42.375503][ T1425] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.382982][ T1425] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 42.414243][ T1439] loop6: detected capacity change from 0 to 128 [ 42.417840][ T1425] syz.2.405: attempt to access beyond end of device [ 42.417840][ T1425] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 42.425090][ T1439] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 42.443420][ T1439] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.493194][ T10] kworker/u4:1: attempt to access beyond end of device [ 42.493194][ T10] loop2: rw=1, sector=53256, nr_sectors = 8 limit=40427 [ 42.507405][ T10] kworker/u4:1: attempt to access beyond end of device [ 42.507405][ T10] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 42.507751][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 42.553168][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 42.553182][ T28] audit: type=1400 audit(1768859190.739:347): avc: denied { watch } for pid=1442 comm="syz.6.412" path="/45/file1" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.620878][ T1445] loop2: detected capacity change from 0 to 512 [ 42.631306][ T1445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.640302][ T1445] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.668782][ T28] audit: type=1400 audit(1768859190.849:348): avc: denied { create } for pid=1444 comm="syz.2.411" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 42.678113][ T1450] loop6: detected capacity change from 0 to 1024 [ 42.725658][ T286] EXT4-fs (loop2): unmounting filesystem. [ 42.731708][ T1450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 42.761290][ T1000] EXT4-fs (loop6): unmounting filesystem. [ 42.807000][ T1465] device vlan2 entered promiscuous mode [ 42.813241][ T1465] device veth0 entered promiscuous mode [ 42.871254][ T28] audit: type=1400 audit(1768859191.059:349): avc: denied { mount } for pid=1473 comm="syz.2.425" name="/" dev="ramfs" ino=21392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.959817][ T28] audit: type=1400 audit(1768859191.139:350): avc: denied { write } for pid=1491 comm="syz.2.432" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.983443][ T1496] loop2: detected capacity change from 0 to 1024 [ 43.001407][ T1496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.017864][ T286] EXT4-fs (loop2): unmounting filesystem. [ 43.041532][ T28] audit: type=1400 audit(1768859191.229:351): avc: denied { ioctl } for pid=1501 comm="syz.2.436" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.045614][ T1502] binder: 1501:1502 ioctl c0306201 2000000003c0 returned -22 [ 43.071137][ T28] audit: type=1400 audit(1768859191.229:352): avc: denied { set_context_mgr } for pid=1501 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 43.108439][ T28] audit: type=1400 audit(1768859191.289:353): avc: denied { ioctl } for pid=1505 comm="syz.2.438" path="socket:[21629]" dev="sockfs" ino=21629 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.140305][ T1508] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 43.149911][ T1508] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 43.159485][ T1508] overlayfs: conflicting lowerdir path [ 43.195383][ T28] audit: type=1400 audit(1768859191.379:354): avc: denied { append } for pid=1515 comm="syz.1.443" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.218115][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 43.220585][ T498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.297375][ T1521] loop7: detected capacity change from 0 to 512 [ 43.322318][ T1512] loop2: detected capacity change from 0 to 40427 [ 43.326230][ T1521] EXT4-fs: Ignoring removed i_version option [ 43.335057][ T1521] EXT4-fs: Ignoring removed bh option [ 43.340603][ T1512] F2FS-fs (loop2): fault_injection options not supported [ 43.347717][ T1512] F2FS-fs (loop2): Image doesn't support compression [ 43.354646][ T1512] F2FS-fs (loop2): Image doesn't support compression [ 43.361524][ T1512] F2FS-fs (loop2): fault_type options not supported [ 43.362687][ T1521] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 43.378406][ T1521] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.378564][ T1512] F2FS-fs (loop2): invalid crc value [ 43.399761][ T1512] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.433249][ T1047] EXT4-fs (loop7): unmounting filesystem. [ 43.455723][ T1512] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.477594][ T286] syz-executor: attempt to access beyond end of device [ 43.477594][ T286] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 43.751745][ T28] audit: type=1400 audit(1768859191.939:355): avc: denied { sqpoll } for pid=1539 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.780722][ T65] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 43.831559][ T1533] loop4: detected capacity change from 0 to 40427 [ 43.845195][ T1533] F2FS-fs (loop4): invalid crc value [ 43.851881][ T1533] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.886950][ T1533] F2FS-fs (loop4): Start checkpoint disabled! [ 43.893596][ T1533] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 43.901386][ T1533] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 43.980548][ T65] usb 8-1: Using ep0 maxpacket: 16 [ 43.987250][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.998604][ T65] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 44.007845][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.017016][ T65] usb 8-1: config 0 descriptor?? [ 44.116957][ T1547] loop1: detected capacity change from 0 to 4096 [ 44.128184][ T1547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.148428][ T285] EXT4-fs (loop1): unmounting filesystem. [ 44.164601][ T1551] loop1: detected capacity change from 0 to 256 [ 44.184488][ T1551] FAT-fs (loop1): Directory bread(block 64) failed [ 44.191119][ T1551] FAT-fs (loop1): Directory bread(block 65) failed [ 44.197713][ T1551] FAT-fs (loop1): Directory bread(block 66) failed [ 44.205186][ T1551] FAT-fs (loop1): Directory bread(block 67) failed [ 44.211768][ T1551] FAT-fs (loop1): Directory bread(block 68) failed [ 44.218267][ T1551] FAT-fs (loop1): Directory bread(block 69) failed [ 44.224889][ T28] audit: type=1400 audit(1768859192.399:356): avc: denied { ioctl } for pid=1530 comm="syz.7.449" path="pid:[4026532288]" dev="nsfs" ino=4026532288 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.226953][ T65] usbhid 8-1:0.0: can't add hid device: -71 [ 44.250453][ T1551] FAT-fs (loop1): Directory bread(block 70) failed [ 44.256535][ T65] usbhid: probe of 8-1:0.0 failed with error -71 [ 44.262088][ T1551] FAT-fs (loop1): Directory bread(block 71) failed [ 44.262177][ T1551] FAT-fs (loop1): Directory bread(block 72) failed [ 44.277311][ T65] usb 8-1: USB disconnect, device number 3 [ 44.281564][ T1551] FAT-fs (loop1): Directory bread(block 73) failed [ 44.367947][ T1555] input: syz1 as /devices/virtual/input/input8 [ 44.443170][ T1558] process 'syz.1.457' launched './file0' with NULL argv: empty string added [ 44.452100][ T1558] Invalid argument reading file caps for ./file0 [ 44.570417][ T1569] loop1: detected capacity change from 0 to 256 [ 44.583129][ T1569] FAT-fs (loop1): Directory bread(block 64) failed [ 44.589780][ T1569] FAT-fs (loop1): Directory bread(block 65) failed [ 44.596584][ T1569] FAT-fs (loop1): Directory bread(block 66) failed [ 44.603426][ T1569] FAT-fs (loop1): Directory bread(block 67) failed [ 44.609976][ T1569] FAT-fs (loop1): Directory bread(block 68) failed [ 44.616744][ T1569] FAT-fs (loop1): Directory bread(block 69) failed [ 44.623636][ T1569] FAT-fs (loop1): Directory bread(block 70) failed [ 44.630216][ T1569] FAT-fs (loop1): Directory bread(block 71) failed [ 44.630624][ T335] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 44.637068][ T1569] FAT-fs (loop1): Directory bread(block 72) failed [ 44.650879][ T1569] FAT-fs (loop1): Directory bread(block 73) failed [ 44.703844][ T625] kworker/u4:5: attempt to access beyond end of device [ 44.703844][ T625] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 44.821926][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.833981][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.844409][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.857779][ T335] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.867399][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.876410][ T335] usb 5-1: config 0 descriptor?? [ 44.890977][ T1595] mmap: syz.7.473 (1595) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.988176][ T1603] 8021q: VLANs not supported on gre0 [ 45.081957][ T1609] loop1: detected capacity change from 0 to 128 [ 45.104899][ T1609] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.169711][ T1611] loop1: detected capacity change from 0 to 1024 [ 45.220750][ T1611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.238585][ T1611] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 45.284981][ T335] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 45.290909][ T1611] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.306304][ T335] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 45.336216][ T1611] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.336216][ T1611] [ 45.358628][ T1611] EXT4-fs (loop1): Total free blocks count 0 [ 45.364778][ T1611] EXT4-fs (loop1): Free/Dirty block details [ 45.370705][ T1611] EXT4-fs (loop1): free_blocks=68451041280 [ 45.376596][ T1611] EXT4-fs (loop1): dirty_blocks=80 [ 45.381760][ T1611] EXT4-fs (loop1): Block reservation details [ 45.387815][ T1611] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 45.413073][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 45.541132][ T1605] loop7: detected capacity change from 0 to 131072 [ 45.548226][ T1605] F2FS-fs (loop7): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 45.556755][ T1605] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 45.567087][ T1605] F2FS-fs (loop7): Found nat_bits in checkpoint [ 45.571545][ T65] usb 5-1: USB disconnect, device number 8 [ 45.603513][ T1605] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 45.610693][ T1605] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 45.649533][ T1618] ------------[ cut here ]------------ [ 45.655085][ T1618] WARNING: CPU: 1 PID: 1618 at mm/page_alloc.c:5841 __alloc_pages+0x298/0x480 [ 45.664017][ T1618] Modules linked in: [ 45.667910][ T1618] CPU: 1 PID: 1618 Comm: syz.1.481 Not tainted syzkaller #0 [ 45.675216][ T1618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.685304][ T1618] RIP: 0010:__alloc_pages+0x298/0x480 [ 45.690727][ T1618] Code: 0c 25 28 00 00 00 48 3b 8c 24 c0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 5d ba bd 05 01 <0f> 0b eb 95 a9 00 00 08 00 48 8b 54 24 08 75 17 44 89 f6 81 e6 7f [ 45.710398][ T1618] RSP: 0018:ffffc90002f179c0 EFLAGS: 00010246 [ 45.716550][ T1618] RAX: ffffc90002f17a00 RBX: 0000000000000013 RCX: 0000000000000000 [ 45.724544][ T1618] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90002f17a48 [ 45.732565][ T1618] RBP: ffffc90002f17ad0 R08: ffffc90002f17a47 R09: ffffc90002f17a30 [ 45.740699][ T1618] R10: dffffc0000000000 R11: fffff520005e2f49 R12: dffffc0000000000 [ 45.748707][ T1618] R13: 0000000000000000 R14: 0000000000040cc0 R15: 1ffff920005e2f3c [ 45.756718][ T1618] FS: 00007f10e55986c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.765678][ T1618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.772341][ T1618] CR2: 00007f10e5596fd0 CR3: 000000013aba3000 CR4: 00000000003506a0 [ 45.780321][ T1618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.788341][ T1618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.796336][ T1618] Call Trace: [ 45.799617][ T1618] [ 45.802570][ T1618] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 45.808472][ T1618] ? __cfi___alloc_pages+0x10/0x10 [ 45.813623][ T1618] ? __asan_set_shadow_00+0xe/0x10 [ 45.818735][ T1618] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 45.823624][ T1618] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 45.829252][ T1618] __kmalloc_large_node+0xa1/0x1c0 [ 45.834387][ T1618] ? raw_ioctl+0x16e4/0x3090 [ 45.838972][ T1618] __kmalloc+0xe0/0x1e0 [ 45.843172][ T1618] ? __kasan_check_write+0x14/0x20 [ 45.848306][ T1618] raw_ioctl+0x16e4/0x3090 [ 45.852748][ T1618] ? ioctl_has_perm+0x1b8/0x4f0 [ 45.857608][ T1618] ? ioctl_has_perm+0x3a6/0x4f0 [ 45.862489][ T1618] ? __cfi_raw_ioctl+0x10/0x10 [ 45.867393][ T1618] ? has_cap_mac_admin+0x370/0x370 [ 45.872678][ T1618] ? handle_mm_fault+0x1841/0x26c0 [ 45.877827][ T1618] ? do_futex+0x2e2/0x430 [ 45.882209][ T1618] ? selinux_file_ioctl+0x3a0/0x4d0 [ 45.887415][ T1618] ? __cfi_do_futex+0x10/0x10 [ 45.892117][ T1618] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.897664][ T1618] ? __fget_files+0x2d5/0x330 [ 45.902376][ T1618] ? security_file_ioctl+0x95/0xc0 [ 45.907491][ T1618] ? __cfi_raw_ioctl+0x10/0x10 [ 45.912288][ T1618] __se_sys_ioctl+0x12f/0x1b0 [ 45.916963][ T1618] __x64_sys_ioctl+0x7b/0x90 [ 45.921616][ T1618] x64_sys_call+0x58b/0x9a0 [ 45.926124][ T1618] do_syscall_64+0x4c/0xa0 [ 45.930559][ T1618] ? clear_bhb_loop+0x30/0x80 [ 45.935241][ T1618] ? clear_bhb_loop+0x30/0x80 [ 45.939930][ T1618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.945863][ T1618] RIP: 0033:0x7f10e479acb9 [ 45.950279][ T1618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.970060][ T1618] RSP: 002b:00007f10e5598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.978541][ T1618] RAX: ffffffffffffffda RBX: 00007f10e4a15fa0 RCX: 00007f10e479acb9 [ 45.986679][ T1618] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 0000000000000004 [ 45.994805][ T1618] RBP: 00007f10e4808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 46.002830][ T1618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.010833][ T1618] R13: 00007f10e4a16038 R14: 00007f10e4a15fa0 R15: 00007ffc64b05348 [ 46.018811][ T1618] [ 46.021994][ T1618] ---[ end trace 0000000000000000 ]--- [ 46.025485][ T1631] loop6: detected capacity change from 0 to 256 [ 46.274892][ T1651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.496'. [ 46.346325][ T1655] loop7: detected capacity change from 0 to 512 [ 46.359486][ T1657] loop6: detected capacity change from 0 to 256 [ 46.382382][ T1657] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 46.399423][ T1657] exFAT-fs (loop6): error, invalid size(size(0) > aligned(9223372036854777344) [ 46.399423][ T1657] [ 46.410731][ T1657] exFAT-fs (loop6): Filesystem has been set read-only [ 46.424448][ T1655] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 46.471099][ T1047] EXT4-fs (loop7): unmounting filesystem. [ 46.555571][ T1658] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.571480][ T1658] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.579118][ T1658] device bridge_slave_0 entered promiscuous mode [ 46.591684][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.597635][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.615500][ T1682] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 46.616788][ T1658] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.627368][ T340] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 46.629638][ T1658] device bridge_slave_1 entered promiscuous mode [ 46.637067][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.644015][ T340] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 46.698380][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.705447][ T1658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.712735][ T1658] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.719754][ T1658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.753226][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.760997][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.768539][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.784445][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.792754][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.799774][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.807177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.816067][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.823120][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.846194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.855113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.868413][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.877314][ T625] device bridge_slave_1 left promiscuous mode [ 46.883568][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891404][ T625] device bridge_slave_0 left promiscuous mode [ 46.897557][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.905701][ T625] device veth1_macvtap left promiscuous mode [ 46.911806][ T625] device veth0_vlan left promiscuous mode [ 46.930598][ T335] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.975230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.983292][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.991056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.999589][ T1658] device veth0_vlan entered promiscuous mode [ 47.011164][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.019987][ T1658] device veth1_macvtap entered promiscuous mode [ 47.029349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.039207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.090807][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 47.132079][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.147494][ T335] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.156597][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.165306][ T335] usb 2-1: config 0 descriptor?? [ 47.300607][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 47.308228][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 47.317391][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.325447][ T24] usb 8-1: Product: syz [ 47.329663][ T24] usb 8-1: Manufacturer: syz [ 47.334308][ T24] usb 8-1: SerialNumber: syz [ 47.339465][ T24] r8152-cfgselector 8-1: config 0 descriptor?? [ 47.569885][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 47.576958][ T335] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 47.587303][ T335] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input10 [ 47.672930][ T335] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 47.771301][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 47.777744][ T24] r8152-cfgselector 8-1: bad CDC descriptors [ 47.784783][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 47.798660][ T24] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 48.055003][ T1726] loop8: detected capacity change from 0 to 128 [ 48.063166][ T1726] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 48.072001][ T1726] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.100279][ T6] usb 2-1: USB disconnect, device number 4 [ 48.107044][ T1658] EXT4-fs (loop8): unmounting filesystem. [ 48.387701][ T1743] loop7: detected capacity change from 0 to 2048 [ 48.450962][ T1743] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 48.485235][ T1047] EXT4-fs (loop7): unmounting filesystem. [ 48.487214][ T1748] loop8: detected capacity change from 0 to 512 [ 48.512142][ T614] blk_print_req_error: 5 callbacks suppressed [ 48.512156][ T614] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.543678][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 48.543693][ T28] audit: type=1400 audit(1768859196.729:371): avc: denied { setopt } for pid=1752 comm="syz.8.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.640578][ T1687] Bluetooth: hci1: command 0x1003 tx timeout [ 48.640996][ T498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.652336][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.652856][ T496] Bluetooth: hci0: command 0x1003 tx timeout [ 48.671864][ T1686] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 48.762705][ T28] audit: type=1400 audit(1768859196.949:372): avc: denied { load_policy } for pid=1767 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.778268][ T1769] SELinux: failed to load policy [ 48.812937][ T1771] loop7: detected capacity change from 0 to 2048 [ 48.871449][ T1771] loop7: p1 < > p3 [ 48.876464][ T1771] loop7: p3 size 134217728 extends beyond EOD, truncated [ 48.943175][ T1781] loop1: detected capacity change from 0 to 512 [ 48.962754][ T1774] loop6: detected capacity change from 0 to 40427 [ 48.973583][ T1781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.001945][ T1774] F2FS-fs (loop6): invalid crc value [ 49.010388][ T1781] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.545: inode has both inline data and extents flags [ 49.025740][ T1774] F2FS-fs (loop6): Found nat_bits in checkpoint [ 49.030765][ T1781] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.545: couldn't read orphan inode 15 (err -117) [ 49.048640][ T1781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.061209][ T1781] syz.1.545 (pid 1781) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 49.067539][ T1774] F2FS-fs (loop6): Start checkpoint disabled! [ 49.087115][ T1774] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 49.105951][ T1774] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 49.107546][ T1796] loop7: detected capacity change from 0 to 512 [ 49.136321][ T1796] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 49.146464][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 49.155790][ T1796] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.550: bad orphan inode 131083 [ 49.181397][ T28] audit: type=1400 audit(1768859197.369:373): avc: denied { read } for pid=1795 comm="syz.7.550" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 49.227869][ T1774] syz.6.541: attempt to access beyond end of device [ 49.227869][ T1774] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 49.234016][ T1796] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.7.550: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 49.250390][ T28] audit: type=1326 audit(1768859197.369:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.263100][ T1796] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 49.285617][ T28] audit: type=1326 audit(1768859197.369:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.295390][ T1796] EXT4-fs warning (device loop7): ext4_rename_delete:3778: inode #2: comm syz.7.550: Deleting old file: nlink 4, error=-117 [ 49.318229][ T28] audit: type=1326 audit(1768859197.369:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.354176][ T28] audit: type=1326 audit(1768859197.369:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.378313][ T28] audit: type=1326 audit(1768859197.369:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.392990][ T8] kworker/u4:0: attempt to access beyond end of device [ 49.392990][ T8] loop6: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 49.415622][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 49.420993][ T28] audit: type=1326 audit(1768859197.369:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.421305][ T8] kworker/u4:0: attempt to access beyond end of device [ 49.421305][ T8] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 49.459377][ T19] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 49.470556][ T19] usb 5-1: config 0 has no interface number 0 [ 49.476727][ T19] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 49.486734][ T28] audit: type=1326 audit(1768859197.369:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e479acb9 code=0x7ffc0000 [ 49.511203][ T19] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.521340][ T19] usb 5-1: config 0 interface 41 has no altsetting 0 [ 49.541614][ T19] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 49.550802][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.558886][ T19] usb 5-1: Product: syz [ 49.560422][ T1808] loop7: detected capacity change from 0 to 4096 [ 49.579899][ T19] usb 5-1: Manufacturer: syz [ 49.590975][ T1808] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #15: comm syz.7.555: corrupted inode contents [ 49.610580][ T19] usb 5-1: SerialNumber: syz [ 49.615851][ T19] usb 5-1: config 0 descriptor?? [ 49.622683][ T1779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.639656][ T1779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.647126][ T1808] EXT4-fs error (device loop7): ext4_dirty_inode:6135: inode #15: comm syz.7.555: mark_inode_dirty error [ 49.670142][ T1808] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #15: comm syz.7.555: corrupted inode contents [ 49.683873][ T1808] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.555: mark_inode_dirty error [ 49.695388][ T1808] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #15: comm syz.7.555: corrupted inode contents [ 49.707504][ T1808] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.555: mark_inode_dirty error [ 49.719411][ T1808] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #15: comm syz.7.555: corrupted inode contents [ 49.731890][ T1808] EXT4-fs error (device loop7): ext4_truncate:4320: inode #15: comm syz.7.555: mark_inode_dirty error [ 49.751659][ T1808] EXT4-fs error (device loop7) in ext4_setattr:5674: Corrupt filesystem [ 49.766711][ T1816] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #15: comm syz.7.555: corrupted inode contents [ 49.804889][ T1815] loop6: detected capacity change from 0 to 40427 [ 49.817823][ T1815] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(3584) blocks(83968) [ 49.852151][ T1779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.859365][ T1779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.871170][ T1815] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 49.892135][ T1815] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 49.911344][ T1815] F2FS-fs (loop6): invalid crc value [ 49.927675][ T1815] F2FS-fs (loop6): Found nat_bits in checkpoint [ 49.992035][ T1815] F2FS-fs (loop6): Start checkpoint disabled! [ 50.001856][ T1815] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 50.019759][ T1815] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 50.029586][ T1815] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 50.046967][ T1821] loop8: detected capacity change from 0 to 40427 [ 50.060724][ T1821] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 50.068654][ T1821] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 50.085012][ T1821] F2FS-fs (loop8): invalid crc value [ 50.086404][ T1819] loop7: detected capacity change from 0 to 40427 [ 50.095458][ T1821] F2FS-fs (loop8): Found nat_bits in checkpoint [ 50.115108][ T1819] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 50.129787][ T1819] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 50.138960][ T1821] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 50.139903][ T625] kworker/u4:5: attempt to access beyond end of device [ 50.139903][ T625] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.146641][ T1821] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 50.194671][ T1819] F2FS-fs (loop7): Found nat_bits in checkpoint [ 50.229771][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.229792][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.238220][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.246152][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.254024][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.261837][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.270859][ T1658] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 50.274754][ T1836] loop6: detected capacity change from 0 to 512 [ 50.278925][ T1819] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 50.299627][ T1819] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 50.307418][ T19] Error reading MAC address [ 50.321020][ T1779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 50.330371][ T1779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 50.349533][ T1819] syz.7.558: attempt to access beyond end of device [ 50.349533][ T1819] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.372942][ T1047] syz-executor: attempt to access beyond end of device [ 50.372942][ T1047] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 50.543206][ T19] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 50.559781][ T19] usb 5-1: USB disconnect, device number 9 [ 50.601583][ T1852] loop6: detected capacity change from 0 to 4096 [ 50.613919][ T1852] EXT4-fs (loop6): Test dummy encryption mode enabled [ 50.640350][ T1852] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0103] [ 50.650589][ T1852] System zones: 0-5 [ 50.720543][ C1] ================================================================== [ 50.728641][ C1] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 50.735683][ C1] Write of size 8 at addr ffff88811e80ca00 by task syz.8.566/1849 [ 50.743480][ C1] [ 50.745785][ C1] CPU: 1 PID: 1849 Comm: syz.8.566 Tainted: G W syzkaller #0 [ 50.754517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.764549][ C1] Call Trace: [ 50.767805][ C1] [ 50.770626][ C1] __dump_stack+0x21/0x24 [ 50.774934][ C1] dump_stack_lvl+0x110/0x170 [ 50.779584][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.784602][ C1] ? update_rq_clock+0x1c1/0x5c0 [ 50.789517][ C1] ? __run_timers+0x340/0x9f0 [ 50.794172][ C1] print_address_description+0x71/0x200 [ 50.799689][ C1] print_report+0x4a/0x60 [ 50.803991][ C1] kasan_report+0x122/0x150 [ 50.808474][ C1] ? __run_timers+0x340/0x9f0 [ 50.813126][ C1] __asan_report_store8_noabort+0x17/0x20 [ 50.818816][ C1] __run_timers+0x340/0x9f0 [ 50.823295][ C1] ? sched_clock+0x9/0x10 [ 50.827599][ C1] ? sched_clock_cpu+0x6e/0x260 [ 50.832425][ C1] ? calc_index+0x200/0x200 [ 50.836930][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 50.842108][ C1] run_timer_softirq+0x6a/0xf0 [ 50.846846][ C1] handle_softirqs+0x1d7/0x600 [ 50.851589][ C1] __irq_exit_rcu+0x52/0xf0 [ 50.856065][ C1] irq_exit_rcu+0x9/0x10 [ 50.860279][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 50.865889][ C1] [ 50.868794][ C1] [ 50.871699][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 50.877654][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x17/0xe0 [ 50.884151][ C1] Code: 20 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 00 1e 12 56 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 08 0f 92 c0 b2 8b d2 ea <20> c2 80 fa 01 0f 85 b7 00 00 00 48 8b 06 48 85 c0 0f 84 ab 00 00 [ 50.903729][ C1] RSP: 0018:ffffc900011d7a60 EFLAGS: 00000a06 [ 50.909770][ C1] RAX: ffffffff82692301 RBX: ffffc900011d7d20 RCX: 0000000000000003 [ 50.917723][ C1] RDX: ffffc900036a2011 RSI: ffffffff871bc4f0 RDI: 0000000000000014 [ 50.925669][ C1] RBP: ffffc900011d7bd0 R08: ffffc900011d7c2f R09: 1ffff9200023af85 [ 50.933612][ C1] R10: dffffc0000000000 R11: fffff5200023af86 R12: ffffc900011d7bf0 [ 50.941557][ C1] R13: dffffc0000000000 R14: 0000000000000014 R15: 0000000000000014 [ 50.949504][ C1] ? chacha_block_generic+0xd11/0xd20 [ 50.954889][ C1] ? chacha_permute+0x2f/0xe20 [ 50.959626][ C1] ? copyout+0x51/0xa0 [ 50.963669][ C1] ? copy_user_enhanced_fast_string+0xa/0x40 [ 50.969623][ C1] ? copyout+0x82/0xa0 [ 50.973664][ C1] ? _copy_to_iter+0x47e/0xea0 [ 50.978401][ C1] ? chacha_block_generic+0x50/0xd20 [ 50.983661][ C1] ? memcpy+0x56/0x70 [ 50.987615][ C1] chacha_block_generic+0x5b/0xd20 [ 50.992704][ C1] get_random_bytes_user+0x19a/0x3b0 [ 50.997973][ C1] ? mix_interrupt_randomness+0x270/0x270 [ 51.003667][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 51.009533][ C1] ? __set_current_blocked+0x204/0x230 [ 51.014990][ C1] ? import_single_range+0xce/0x280 [ 51.020176][ C1] __x64_sys_getrandom+0x1a2/0x2a0 [ 51.025277][ C1] ? __cfi___x64_sys_getrandom+0x10/0x10 [ 51.030896][ C1] ? __kasan_check_write+0x14/0x20 [ 51.036013][ C1] ? fput+0x154/0x1a0 [ 51.040016][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.046064][ C1] x64_sys_call+0x25f/0x9a0 [ 51.050545][ C1] do_syscall_64+0x4c/0xa0 [ 51.054938][ C1] ? clear_bhb_loop+0x30/0x80 [ 51.059595][ C1] ? clear_bhb_loop+0x30/0x80 [ 51.064250][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.070120][ C1] RIP: 0033:0x7fddf5d9acb9 [ 51.074510][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.094086][ C1] RSP: 002b:00007fddf6be0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 51.102470][ C1] RAX: ffffffffffffffda RBX: 00007fddf6015fa0 RCX: 00007fddf5d9acb9 [ 51.110415][ C1] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 51.118361][ C1] RBP: 00007fddf5e08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 51.126307][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.134248][ C1] R13: 00007fddf6016038 R14: 00007fddf6015fa0 R15: 00007ffe6cdc39c8 [ 51.142195][ C1] [ 51.145186][ C1] [ 51.147481][ C1] Allocated by task 1682: [ 51.151777][ C1] kasan_set_track+0x4b/0x70 [ 51.156342][ C1] kasan_save_alloc_info+0x25/0x30 [ 51.161435][ C1] __kasan_kmalloc+0x95/0xb0 [ 51.166026][ C1] __kmalloc+0xb1/0x1e0 [ 51.170163][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 51.175168][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 51.180171][ C1] tty_ioctl+0x8ef/0xc60 [ 51.184392][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 51.189043][ C1] __x64_sys_ioctl+0x7b/0x90 [ 51.193608][ C1] x64_sys_call+0x58b/0x9a0 [ 51.198090][ C1] do_syscall_64+0x4c/0xa0 [ 51.202485][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.208356][ C1] [ 51.210655][ C1] Freed by task 1676: [ 51.214604][ C1] kasan_set_track+0x4b/0x70 [ 51.219165][ C1] kasan_save_free_info+0x31/0x50 [ 51.224164][ C1] ____kasan_slab_free+0x132/0x180 [ 51.229249][ C1] __kasan_slab_free+0x11/0x20 [ 51.233984][ C1] slab_free_freelist_hook+0xc2/0x190 [ 51.239331][ C1] __kmem_cache_free+0xb7/0x1b0 [ 51.244156][ C1] kfree+0x6f/0xf0 [ 51.247850][ C1] hci_release_dev+0x12a3/0x13b0 [ 51.252764][ C1] bt_host_release+0x82/0x90 [ 51.257341][ C1] device_release+0xa4/0x1d0 [ 51.261904][ C1] kobject_put+0x19d/0x280 [ 51.266294][ C1] put_device+0x1f/0x30 [ 51.270424][ C1] hci_free_dev+0x1c/0x20 [ 51.274727][ C1] hci_uart_tty_close+0x1a3/0x230 [ 51.279724][ C1] tty_ldisc_kill+0x10f/0x1f0 [ 51.284375][ C1] tty_ldisc_release+0x1a5/0x200 [ 51.289282][ C1] tty_release_struct+0x29/0xe0 [ 51.294107][ C1] tty_release+0xbfd/0x1210 [ 51.298579][ C1] __fput+0x1fc/0x8f0 [ 51.302536][ C1] ____fput+0x15/0x20 [ 51.306489][ C1] task_work_run+0x1e1/0x250 [ 51.311051][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 51.316221][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 51.321647][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 51.327074][ C1] do_syscall_64+0x58/0xa0 [ 51.331464][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.337334][ C1] [ 51.339630][ C1] Last potentially related work creation: [ 51.345313][ C1] kasan_save_stack+0x3a/0x60 [ 51.349974][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 51.355328][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 51.361108][ C1] insert_work+0x51/0x300 [ 51.365408][ C1] __queue_work+0x9b1/0xd30 [ 51.369884][ C1] queue_work_on+0xde/0x150 [ 51.374359][ C1] __hci_cmd_sync_sk+0xa7f/0xd30 [ 51.379271][ C1] hci_cmd_sync_status+0x53/0x120 [ 51.384272][ C1] hci_dev_cmd+0x648/0x740 [ 51.388662][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 51.393311][ C1] sock_do_ioctl+0x114/0x330 [ 51.398053][ C1] sock_ioctl+0x4ca/0x720 [ 51.402375][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 51.407030][ C1] __x64_sys_ioctl+0x7b/0x90 [ 51.411603][ C1] x64_sys_call+0x58b/0x9a0 [ 51.416081][ C1] do_syscall_64+0x4c/0xa0 [ 51.420474][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.426350][ C1] [ 51.428658][ C1] Second to last potentially related work creation: [ 51.435301][ C1] kasan_save_stack+0x3a/0x60 [ 51.439959][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 51.445318][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 51.451100][ C1] insert_work+0x51/0x300 [ 51.455401][ C1] __queue_work+0x9b1/0xd30 [ 51.459878][ C1] queue_work_on+0xde/0x150 [ 51.464357][ C1] hci_cmd_timeout+0x191/0x200 [ 51.469092][ C1] process_one_work+0x71f/0xc40 [ 51.473921][ C1] worker_thread+0xa29/0x11e0 [ 51.478569][ C1] kthread+0x281/0x320 [ 51.482610][ C1] ret_from_fork+0x1f/0x30 [ 51.487002][ C1] [ 51.489302][ C1] The buggy address belongs to the object at ffff88811e80c000 [ 51.489302][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 51.503325][ C1] The buggy address is located 2560 bytes inside of [ 51.503325][ C1] 8192-byte region [ffff88811e80c000, ffff88811e80e000) [ 51.516741][ C1] [ 51.519059][ C1] The buggy address belongs to the physical page: [ 51.525456][ C1] page:ffffea00047a0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e808 [ 51.535662][ C1] head:ffffea00047a0200 order:3 compound_mapcount:0 compound_pincount:0 [ 51.543956][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 51.550009][ C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 51.558571][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 51.567120][ C1] page dumped because: kasan: bad access detected [ 51.573502][ C1] page_owner tracks the page as allocated [ 51.579214][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 148, tgid 148 (mkdir), ts 5383763630, free_ts 0 [ 51.596732][ C1] post_alloc_hook+0x1f5/0x210 [ 51.601495][ C1] prep_new_page+0x1c/0x110 [ 51.605976][ C1] get_page_from_freelist+0x2d12/0x2d80 [ 51.611504][ C1] __alloc_pages+0x1d9/0x480 [ 51.616084][ C1] alloc_slab_page+0x6e/0xf0 [ 51.620651][ C1] new_slab+0x98/0x3d0 [ 51.624699][ C1] ___slab_alloc+0x6bd/0xb20 [ 51.629266][ C1] __slab_alloc+0x5e/0xa0 [ 51.633569][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 51.638999][ C1] kmalloc_trace+0x29/0xb0 [ 51.643392][ C1] audit_log_d_path+0xc6/0x240 [ 51.648134][ C1] common_lsm_audit+0x1de/0x1730 [ 51.653049][ C1] slow_avc_audit+0x1c4/0x240 [ 51.657699][ C1] avc_has_perm+0x1fb/0x250 [ 51.662174][ C1] selinux_inode_getattr+0x2c3/0x3d0 [ 51.667432][ C1] security_inode_getattr+0xe7/0x140 [ 51.672696][ C1] page_owner free stack trace missing [ 51.678033][ C1] [ 51.680331][ C1] Memory state around the buggy address: [ 51.685934][ C1] ffff88811e80c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.693964][ C1] ffff88811e80c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.701997][ C1] >ffff88811e80ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.710023][ C1] ^ [ 51.714058][ C1] ffff88811e80ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.722085][ C1] ffff88811e80cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.730115][ C1] ================================================================== [ 51.738163][ C1] Disabling lock debugging due to kernel taint [ 51.744373][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 51.756086][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 51.764552][ C1] CPU: 1 PID: 1849 Comm: syz.8.566 Tainted: G B W syzkaller #0 [ 51.773321][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.783376][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 51.788676][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 3c 71 6e 00 49 8b 7d 00 e8 33 7c [ 51.808261][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 51.814313][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810e7d3cc0 [ 51.822261][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 51.830211][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 51.838159][ C1] R10: dffffc0000000000 R11: ffffed1023d01939 R12: dffffc0000000000 [ 51.846105][ C1] R13: 0000000000000000 R14: ffff88811e80c9c8 R15: 0000000000000008 [ 51.854062][ C1] FS: 00007fddf6be06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.862970][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.869530][ C1] CR2: 000020000060e000 CR3: 000000011e140000 CR4: 00000000003526a0 [ 51.877480][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.885438][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.893388][ C1] Call Trace: [ 51.896645][ C1] [ 51.899480][ C1] delayed_work_timer_fn+0x61/0x80 [ 51.904675][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 51.910475][ C1] call_timer_fn+0x46/0x2a0 [ 51.914957][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 51.920758][ C1] __run_timers+0x689/0x9f0 [ 51.925247][ C1] ? calc_index+0x200/0x200 [ 51.929733][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 51.934918][ C1] run_timer_softirq+0x6a/0xf0 [ 51.939672][ C1] handle_softirqs+0x1d7/0x600 [ 51.944413][ C1] __irq_exit_rcu+0x52/0xf0 [ 51.948900][ C1] irq_exit_rcu+0x9/0x10 [ 51.953132][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 51.958747][ C1] [ 51.961655][ C1] [ 51.964564][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 51.970525][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x17/0xe0 [ 51.977022][ C1] Code: 20 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 00 1e 12 56 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 08 0f 92 c0 b2 8b d2 ea <20> c2 80 fa 01 0f 85 b7 00 00 00 48 8b 06 48 85 c0 0f 84 ab 00 00 [ 51.996601][ C1] RSP: 0018:ffffc900011d7a60 EFLAGS: 00000a06 [ 52.002650][ C1] RAX: ffffffff82692301 RBX: ffffc900011d7d20 RCX: 0000000000000003 [ 52.010595][ C1] RDX: ffffc900036a2011 RSI: ffffffff871bc4f0 RDI: 0000000000000014 [ 52.018542][ C1] RBP: ffffc900011d7bd0 R08: ffffc900011d7c2f R09: 1ffff9200023af85 [ 52.026495][ C1] R10: dffffc0000000000 R11: fffff5200023af86 R12: ffffc900011d7bf0 [ 52.034447][ C1] R13: dffffc0000000000 R14: 0000000000000014 R15: 0000000000000014 [ 52.042398][ C1] ? chacha_block_generic+0xd11/0xd20 [ 52.047754][ C1] ? chacha_permute+0x2f/0xe20 [ 52.052499][ C1] ? copyout+0x51/0xa0 [ 52.056595][ C1] ? copy_user_enhanced_fast_string+0xa/0x40 [ 52.062579][ C1] ? copyout+0x82/0xa0 [ 52.066650][ C1] ? _copy_to_iter+0x47e/0xea0 [ 52.071420][ C1] ? chacha_block_generic+0x50/0xd20 [ 52.076690][ C1] ? memcpy+0x56/0x70 [ 52.080653][ C1] chacha_block_generic+0x5b/0xd20 [ 52.085744][ C1] get_random_bytes_user+0x19a/0x3b0 [ 52.091007][ C1] ? mix_interrupt_randomness+0x270/0x270 [ 52.096706][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 52.102580][ C1] ? __set_current_blocked+0x204/0x230 [ 52.108019][ C1] ? import_single_range+0xce/0x280 [ 52.113193][ C1] __x64_sys_getrandom+0x1a2/0x2a0 [ 52.118280][ C1] ? __cfi___x64_sys_getrandom+0x10/0x10 [ 52.120662][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.123889][ C1] ? __kasan_check_write+0x14/0x20 [ 52.136400][ C1] ? fput+0x154/0x1a0 [ 52.140361][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 52.146408][ C1] x64_sys_call+0x25f/0x9a0 [ 52.150911][ C1] do_syscall_64+0x4c/0xa0 [ 52.155305][ C1] ? clear_bhb_loop+0x30/0x80 [ 52.159959][ C1] ? clear_bhb_loop+0x30/0x80 [ 52.164611][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.170485][ C1] RIP: 0033:0x7fddf5d9acb9 [ 52.174877][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.194458][ C1] RSP: 002b:00007fddf6be0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 52.202849][ C1] RAX: ffffffffffffffda RBX: 00007fddf6015fa0 RCX: 00007fddf5d9acb9 [ 52.210797][ C1] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 52.218744][ C1] RBP: 00007fddf5e08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 52.226688][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.234637][ C1] R13: 00007fddf6016038 R14: 00007fddf6015fa0 R15: 00007ffe6cdc39c8 [ 52.242589][ C1] [ 52.245585][ C1] Modules linked in: [ 52.249455][ C1] ---[ end trace 0000000000000000 ]--- [ 52.254880][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 52.260148][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 3c 71 6e 00 49 8b 7d 00 e8 33 7c [ 52.279736][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 52.285781][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810e7d3cc0 [ 52.293728][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 52.301676][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 52.309627][ C1] R10: dffffc0000000000 R11: ffffed1023d01939 R12: dffffc0000000000 [ 52.317583][ C1] R13: 0000000000000000 R14: ffff88811e80c9c8 R15: 0000000000000008 [ 52.325540][ C1] FS: 00007fddf6be06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.334449][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.341184][ C1] CR2: 000020000060e000 CR3: 000000011e140000 CR4: 00000000003526a0 [ 52.349132][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.357076][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.365024][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 52.370565][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 52.371678][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.371703][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.371728][ T6] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 52.371749][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.375161][ T6] usb 2-1: config 0 descriptor?? [ 52.420045][ C1] Kernel Offset: disabled [ 52.424358][ C1] Rebooting in 86400 seconds..