last executing test programs: 7m15.638719221s ago: executing program 32 (id=983): r0 = memfd_create(&(0x7f00000002c0)='\xc7M\x99\x19,\x9d\xee\x04\x00\x00\x00=\x9b\x89+\x00\x00\b\x00\x00\x00\x00$}wK\xcde\xdcN/\x86\xb8\xafO\x7fB\xe4I8\x06\x00\x92\x16*\xa9\"Yk\x8ah\xdf\xdc T\xbd\x8b\xed\xe5\x05j\x02\xf4\ty\'\xf8\xbbi\xfb\xcdLM\xf6Eo\xde*\xbdD\x0f\a.\t\x00\x00\x00S\xc0\xb02m\xd8\x14\xa22\v\xa4\'\'\x1bQb\x977d\x0e\xab$Teh\xff*', 0x3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0x9) 6m29.556923848s ago: executing program 33 (id=2005): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10040, &(0x7f0000000300)={[], [{@appraise_type}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000001900010000000000000000001d0100000c000b000000000000000000080009"], 0x30}}, 0x0) 6m28.230629828s ago: executing program 34 (id=2037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 6m27.069257756s ago: executing program 35 (id=2063): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 6m17.743481796s ago: executing program 36 (id=2270): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) write$tcp_congestion(r0, &(0x7f0000000040)='bbr\x00', 0x4) 5m23.862709552s ago: executing program 5 (id=3585): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0x3) 5m23.809825902s ago: executing program 37 (id=3585): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0x3) 4m17.071985772s ago: executing program 38 (id=5351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000400000000000000000030003000000000000000000380000000000000000000000000020"], 0x158) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m45.015472754s ago: executing program 3 (id=7355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x437, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x10196, 0xa080}, [@IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x67, 0x210, 0x4}}]}, {0x4}]}]}, 0x44}}, 0x0) 2m44.960960055s ago: executing program 3 (id=7357): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) 2m44.935484206s ago: executing program 3 (id=7360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x3, 0x14, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) 2m44.845898967s ago: executing program 3 (id=7365): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@sb={'sb', 0x3d, 0x2b}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@sysvgroups}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) 2m44.703648009s ago: executing program 3 (id=7367): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x9, 0x6, 0xffffffffffffffff, 0x3, 0x3e, 0x0, 0x4, 0x40, 0x19a, 0x0, 0x0, 0x38, 0x3, 0x0, 0x1}, [{0x6474e551, 0x9, 0x1b21, 0xe, 0x8000000000000000, 0x5, 0x4bf, 0xffffffffffffffff}, {0x7, 0x3, 0x3ff, 0x3, 0x5, 0x5, 0x1000000000000000, 0x4}, {0x3, 0x4, 0xe5, 0x0, 0x6, 0x96d, 0x1ff, 0x10}]}, 0xe8) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m44.529399922s ago: executing program 3 (id=7370): r0 = timerfd_create(0x0, 0x0) r1 = eventfd2(0x4, 0x1) flock(r1, 0x5) flock(r0, 0x6) 2m44.529187002s ago: executing program 39 (id=7370): r0 = timerfd_create(0x0, 0x0) r1 = eventfd2(0x4, 0x1) flock(r1, 0x5) flock(r0, 0x6) 2m30.881966348s ago: executing program 6 (id=7788): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e2b, 0xd, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2m30.80688386s ago: executing program 6 (id=7795): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 2m30.7427387s ago: executing program 6 (id=7796): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0xffdd, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 2m30.74233299s ago: executing program 6 (id=7798): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000001300)={[{@nodiscard}, {@errors_continue}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@block_validity}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 2m30.669725701s ago: executing program 6 (id=7801): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @ramp={0x101, 0x3, {0x4, 0xcf58, 0x0, 0x7ac}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m30.500065394s ago: executing program 6 (id=7808): capset(&(0x7f0000003140)={0x19980330}, &(0x7f0000003180)) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r1) 2m30.466793814s ago: executing program 40 (id=7808): capset(&(0x7f0000003140)={0x19980330}, &(0x7f0000003180)) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r1) 1m20.763612569s ago: executing program 9 (id=9281): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x20, 0x0}) 1m20.602548471s ago: executing program 9 (id=9282): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 1m20.342694065s ago: executing program 9 (id=9283): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m20.262633556s ago: executing program 9 (id=9284): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000740)={[{@quota}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0xb}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0x1, 0x4e5, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pr25bi6K1IJtsZW0aHeTxrZBpFYQfSqo9T3GZBNCNtmQ3dQmFE3xVRBEVPDJJ18EP4Ag/QgiFPRdtCiirT74oB3Z3dm2SXeTlKRZ3fx+cDrnzJmZ/zmT7uzMzmEmgBPrQkTcjoihiLgSEcV8fpqnmWZhu73cs6cP5popiSy7+7ckknxeZ1vN8nBEvNdeJUYi4mtfjvhm8nrc+ubW8my1WlnPy+XGylq5vrl1dWlldrGyWFmdmpq8MX1z+vr0RJY7VD/PRsStLz750fd//qVbv/70t/4w85fL324263Mfbbc7IuYOFaCH9rYLrX3R0dxH628jWB90/uaFfjcEAIADaZ7jX4yIT7TO/4sx1DqbAwAAAAZJ9vnR+HcSkQEAAAADK42I0UjSUj4WYDTStFRqj+H9SJxOq7V641MLtY3V+WZdxFgU0oWlamUiHys8FoWkWZ5s5V+Wr+0qT0XEBxHxw+KpVrk0V6vO9/vHDwAAADgh3ju/8/r/n8W0lQcAAAAGzFjPAgAAADAoXPIDAADA4HP9DwAAAAPtK3fuNFPWeY/3/L3NjeXavavzlfpyaWVjrjRXW18rLdZqi61n9q302Mz3Oplqrbb2mVjduF9uVOqNcn1za2altrHamFna8QpsAAAA4Bh9cP7R75OI2P7sqVaK/DmAADv8qd8NAI7SUL8bAPTNcL8bAPRNYd8lht9gWeD/UbJPfc/BO785+rYAAABvx/jHXr///05e53ofBpuxPgBw8rj/DydXwQhAOPEutSfv9qo//P3/LHvjRgEAAEdqtJWStJTfCxyNNC2VIt5vvRagkCwsVSsTEfGhiPhdsfBuszzZWjPZd8wwAAAAAAAAAAAAAAAAAAAAAAAAANCWZUlkAAAAwECLSP+ctJ7mHzFevDS6+/eBd5J/FeNJXvjp3R/fn2001ieb8/9ebNVHROMn+fxrmVcCAAAAwP+A9nV6Pp3sd2sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDTPnj6Y66TjjPvXL0TEWLf4wzHSmo5EISJO/yOJ4VfWSyJi6Ajibz+MiDOvxs9eRHieZdlY3opu8U+9lfid/ifN3RK74o901kuPIDacdI+ax5/b3T5/aVxoTbt//ofzdFi9j3/pi+PfUI/jz/sHjHH28S/LPeM/jDg73P3404mf9Ih/8YDxv/H1ra1eddnPIsa7fv8kO2KVGytr5frm1tWlldnFymJldWpq8sb0zenr0xPlhaVqJf+3a4wffPxXz/fq/+ke8cf26f+lA/b/P4/vP/1wO1voFv/yxe7fv2d6xE/z775P5vlm/Xgnv93Ov+rcL357bq/+z/fo/35//8sH7P+Vr373jwdcFAA4BvXNreXZarWyvkdm5ADLyMgcJpN9p/3/8XDbOeTqr2Wyfu+WPmb6fWQCAACO2suT/n63BAAAAAAAAAAAAAAAAAAAAE6u43ic2O6Y2/3pKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAnv4bAAD//16J3vk=") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 1m19.956610531s ago: executing program 9 (id=9287): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@grpquota}, {@auto_da_alloc}, {@grpquota}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m19.798727913s ago: executing program 9 (id=9294): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000b, 0x6032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x20202000, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 1m19.798642614s ago: executing program 41 (id=9294): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000b, 0x6032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x20202000, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 34.817675844s ago: executing program 8 (id=10279): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r1, &(0x7f0000000300)={0xa, 0xffff, 0x5, @private1, 0x7f}, 0x1c) 34.686896315s ago: executing program 8 (id=10284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) 34.530542218s ago: executing program 8 (id=10288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 34.505140548s ago: executing program 8 (id=10290): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x5541, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000100)='./file1\x00') 33.930612167s ago: executing program 8 (id=10303): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040), 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x36, 0x0, 0x10}) 33.436384495s ago: executing program 8 (id=10314): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES32], 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) 19.610473804s ago: executing program 7 (id=10511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 19.610317134s ago: executing program 7 (id=10512): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 18.781178846s ago: executing program 7 (id=10518): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ed, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0x12fff, 0x4101, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 18.506228631s ago: executing program 7 (id=10520): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="5333c923ead7d62a1aa7e1ad6926618430329b0ea6e6e24d7310d2249d89707d2a2ee55d187812e2a0109f36ed3b24151208962f1353f76d5dc207c8b61a67695d2e4632e520"], 0x1, 0x182, &(0x7f0000000200)="$eJzslT1PwkAYx/93RV6Mn8DFQRJxsLRFjQuJLE4OJr4QBxOJVIIWMdBBSBz8BO5uDn4PXf0QBl10wUnnml6P9jSAxkSJ8fkNj796zx3Xh+QPCIL4tzzcv3a8l/xjEsAE0kjI/z9pUQ9X+u+Sz6c3qyvF852r20RHT/U70/O+/vkxANcFDW649/3utPy7AR76JjhmpRfBoEvfBceWdBsM29IPFK/7/bq+X3Vsfa/ulH0x/GL6xfJL7uP9umcMZeV+TFlvttqHJcexGz8on82vW+DIK/dTv6/ebAxlfiY4TOk5MKxLX0KiN5tgJMr7T8ai87Vffn8SEpK/JlE+eZcMM0o+BVFyIX5qsm7tONtsteeqtVLFrthHlpVbNOYNY8HKiiAK6pD8S4l8GlfOHxvQG2dxnJRct2EGNXy2gtovcbnIP47MdPDsZ398cByLdSb3MWEZbUg7QRDEyJgCE5kpcrkny3LRC7HWRnxPgiAIgiAIgiAIgiC+z1sAAAD//9Zjb/k=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x1802008, 0x0) 18.318475473s ago: executing program 42 (id=10314): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES32], 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) 18.310851783s ago: executing program 7 (id=10523): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff11000000ffe7ee000000deff0000000200000000", 0x58}], 0x1) 18.170759336s ago: executing program 7 (id=10525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 18.153979446s ago: executing program 43 (id=10525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 16.965681674s ago: executing program 5 (id=10522): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x9, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16.894674255s ago: executing program 5 (id=10551): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000001}) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) 16.869821885s ago: executing program 5 (id=10553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x400, 0x20000, {0x0, 0x0, 0x0, r2, {0xffee}, {0xffff, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8008044}, 0x4000000) 16.784891617s ago: executing program 5 (id=10558): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x20, 0x1, 0x14, "09cae18a3d43fde52ebeddd5f182ce6f92205f16"}, 0x0}) 16.486367151s ago: executing program 4 (id=10565): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup2(r1, r0) sendto$inet(r2, &(0x7f00000020c0)="050b0555566c7e9c37", 0x9, 0x24084010, 0x0, 0x0) 16.480545091s ago: executing program 4 (id=10567): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5f, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000140), 0x0}, 0x20) 16.024338148s ago: executing program 4 (id=10575): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x2a, 0x6, 0x0, {0x1, 0x4, 0x1, 0x0, '-'}}, 0x2a) 15.91074682s ago: executing program 2 (id=10577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)) 15.90665843s ago: executing program 2 (id=10578): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3810042, &(0x7f0000000180), 0xfc, 0x56f, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbHbb9IcmhVLUgwR6sFK7aRJ/VPBQj6LFgt7rkkxDyKZbspvSxILtwV68SBFELIjevXss/gP+FQUtFClBD14ik0ySbbObZNNNk3Y/H5j2vXlv897b2e/bNzuzbAA9ayj7pxDxakR8m0QMNJUVIy8cWqm3+OjGeLYlsbT02d9JJPm+1fpJ/v+RPPNKRPz+dcTpwsZ26/ML05VqNZ3N88ONmavD9fmFM1Mzlcl0Mr0yOjZ27p2x0fffe7drY33z4r8/fHrvo3PfnFz8/tcHx+4kcT6O5mXN43gKN5szQzGUPyelOP9ExZEuNLafJHvdAXakL4/zUmRzwED05VHf0tLAs+wasMu+ysIa6FGJ+IcetboOWD2379J58HPj4YcrJ0Abx19c+Wwk+pfPjQ4vJo+dGWXnu4NdaD9r47e/7t7Jtuje5xAAW7p5KyLOFosb578kn/861PRB4NltVH+yDfMfPDv3svXPW83rn8jjr7C2/okW658jLWJ3J7aO/8KDLjTTVrb++6Dl+nftotVgX557aXnNV0ouT1XTbG57OSJORelglt/kes4XhcX7S+0Km9d/2Za1v7oWzPvxoHjw8cdMVBqVpxp0k4e3Il5ruf5N1o5/0uL4Z8/HxW22cSK9+3q7sq3Hv7uWfo54o+XxX38jSza/Pjl8eao/r9n6He+f2yf+aNf+Xo8/O/6HNx//YNJ8vbbeeRs/9f+Xtivb6ev/QPL5cvpAvu96pdGYHYk4kHyycf/o+mOzfHF0vX42/lMnW8f/Zq//Q1lgb3P8t4/fbq7a39n4d1c2/omOjn/nifsff/lju/a3d/zfXk6dyvdsZ/7bbgef5rkDAAAAAACA/aYQEUcjKZTX0oVCubxyf8fxOFyo1uqN05drc1cmYvm7soNRKqze/zDQdD/ESH4/7Gp+9In8WEQci4jv+g4t58vjterEXg8eAAAAAAAAAAAAAAAAAAAA9okjEf2tvv+f+bNvr3sH7LpNfvIbeMG1j/+8pBu/9ATsS97/oXeJf+hd4h96l/iH3iX+oXeJf+hd4h96Vyfx/8uFXewIAAAAAAAAAAAAAAAAAAAAAAAAAAAAvBguXriQbUuLj26MZ/mJa/Nz07VrZybS+nR5Zm68PF6bvVqerNUmq2l5vDaz1d+r1mpXR0Zj7vpwI603huvzC5dmanNXGpemZiqT6aW0FBGlZzIyAAAAAAAAAAAAAAAAAAAAeH7U5xemK9VqOishsaNEcX90Q6LLib2emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg3f8BAAD//yHtN0Y=") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000280)={0xb}, 0xb) preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/189, 0xbd}], 0x1, 0x5, 0x4) 15.712292353s ago: executing program 2 (id=10581): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) getpriority(0x2, 0x80000000) 15.636560074s ago: executing program 2 (id=10584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0) 15.595591754s ago: executing program 4 (id=10586): capset(&(0x7f0000001fc0)={0x20080522}, &(0x7f0000002000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x4b68, 0x0) 15.565451505s ago: executing program 2 (id=10587): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) unshare(0x24060400) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x87d, 0x401, 0x0) 15.495728286s ago: executing program 4 (id=10588): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 15.495138056s ago: executing program 2 (id=10589): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x4082) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x4, 0x1c, "fee8a2ab78fc179fd1f8a0a1af1ea89de2b7fb646e00000000000000000300", "2809e8db4820a100005240f45f819e00000000eaffffffffffffff133100348100000000000000010000000000000000000000000000000000000000020900", "90be8b0000000000000000000003000000000000000000002afedb9f00", [0x4, 0x20000a]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) 14.606593609s ago: executing program 4 (id=10601): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) 14.55796965s ago: executing program 5 (id=10604): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09102c28", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.475050767s ago: executing program 1 (id=10684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) 11.430756718s ago: executing program 1 (id=10685): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) 10.676946629s ago: executing program 0 (id=10695): unshare(0x60400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) 10.62981791s ago: executing program 1 (id=10696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"O\x00\x00'], 0x0}, 0x0) 10.58511989s ago: executing program 0 (id=10697): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000a40), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='system.posix_acl_default\x00', &(0x7f0000000f80), 0x24, 0x0) rmdir(&(0x7f0000001040)='./file0\x00') 10.545555281s ago: executing program 0 (id=10698): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.753038288s ago: executing program 1 (id=10699): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.752334848s ago: executing program 0 (id=10709): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "827f9670"}]}}, 0x0}, 0x0) 52.962929ms ago: executing program 44 (id=10589): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x4082) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x4, 0x1c, "fee8a2ab78fc179fd1f8a0a1af1ea89de2b7fb646e00000000000000000300", "2809e8db4820a100005240f45f819e00000000eaffffffffffffff133100348100000000000000010000000000000000000000000000000000000000020900", "90be8b0000000000000000000003000000000000000000002afedb9f00", [0x4, 0x20000a]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) 51.09675ms ago: executing program 0 (id=10701): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000400, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000580)='.\x00', 0x1aca43c, &(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="5f99b66935805cdb53809913c86930c7f63c9320549392920f68795b3f0d6dc06c4a11e3845a8a8430b1237d2b8df45190b849c6ce0739b3f216add0443517756b074d9e2fdd15d3fdc0e8d927661fa266467fc6c41bfad64c2bbb6364878456c85d1747d94548b3ae46d36623fa8ddcf6af31feec2424669887bde12915cddda87a1669f6f6390000000000000000"], 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv2(r0, &(0x7f0000000840)=[{&(0x7f0000002340)=""/193, 0xc1}], 0x1, 0x401, 0x200000, 0x0) 50.419609ms ago: executing program 1 (id=10711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r0}, &(0x7f0000000f00), &(0x7f0000000f40)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 34.44812ms ago: executing program 0 (id=10702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 0s ago: executing program 1 (id=10703): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.703645][ T23] audit: type=1400 audit(2000000063.580:34565): avc: denied { map } for pid=25103 comm="syz.1.9741" path="socket:[204677]" dev="sockfs" ino=204677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.727229][ T23] audit: type=1400 audit(2000000063.580:34566): avc: denied { read } for pid=25103 comm="syz.1.9741" path="socket:[204677]" dev="sockfs" ino=204677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.754833][ T23] audit: type=1400 audit(2000000063.640:34567): avc: denied { name_bind } for pid=25109 comm="syz.1.9750" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 443.936707][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.947267][ T13] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 443.956275][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.964918][ T13] usb 3-1: config 0 descriptor?? [ 444.000663][T25117] tipc: Started in network mode [ 444.005399][T25117] tipc: Own node identity 5f0c5f0000000000002e, cluster identity 4711 [ 444.014241][ T13] usb 3-1: bad CDC descriptors [ 444.218365][ T405] usb 3-1: USB disconnect, device number 23 [ 444.227814][T25147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9760'. [ 444.257831][T25141] EXT4-fs (loop8): Ignoring removed bh option [ 444.268910][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:8' failed: Read-only file system [ 444.269075][T25141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 444.292669][T25141] EXT4-fs error (device loop8): ext4_map_blocks:617: inode #3: block 2: comm syz.8.9756: lblock 2 mapped to illegal pblock 2 (length 1) [ 444.315539][T25141] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 444.323668][T25141] EXT4-fs error (device loop8): ext4_map_blocks:617: inode #3: block 48: comm syz.8.9756: lblock 0 mapped to illegal pblock 48 (length 1) [ 444.338639][T25141] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 444.347313][T25141] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 444.364755][T25141] EXT4-fs warning (device loop8): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 444.375188][T25141] EXT4-fs (loop8): 1 orphan inode deleted [ 444.380915][T25141] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue [ 444.396902][ T380] EXT4-fs error (device loop8): ext4_map_blocks:617: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 444.411301][ T380] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 444.440926][T25141] EXT4-fs (loop8): re-mounted. Opts: [ 444.448134][T25141] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 444.459124][T25141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 444.467090][T25141] EXT4-fs error (device loop8): ext4_map_blocks:617: inode #3: block 48: comm syz.8.9756: lblock 0 mapped to illegal pblock 48 (length 1) [ 444.487172][T25141] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 444.499201][T25141] EXT4-fs (loop8): re-mounted. Opts: (null) [ 444.604946][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9771'. [ 444.853468][T25145] F2FS-fs (loop7): QUOTA feature is enabled, so ignore jquota_fmt [ 444.883492][T25145] F2FS-fs (loop7): invalid crc value [ 444.910179][T25181] F2FS-fs (loop8): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 444.925055][T25181] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 444.934458][T25181] F2FS-fs (loop8): fault_type options not supported [ 444.940932][T25145] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 444.962021][T25181] F2FS-fs (loop8): invalid crc value [ 444.994765][T25181] F2FS-fs (loop8): Found nat_bits in checkpoint [ 445.065874][T25181] F2FS-fs (loop8): Start checkpoint disabled! [ 445.072552][T25181] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 445.079640][T25181] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 445.088049][T25209] FAT-fs (loop2): Unrecognized mount option "e" or missing value [ 445.134242][ T23] audit: type=1400 audit(2000000065.020:34568): avc: denied { rename } for pid=25180 comm="syz.8.9775" name="file1" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 445.207655][ T380] attempt to access beyond end of device [ 445.207655][ T380] loop8: rw=2049, want=40984, limit=40427 [ 445.334201][T25224] EXT4-fs (loop2): 1 orphan inode deleted [ 445.339907][T25224] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,noauto_da_alloc,journal_dev=0x0000000000000003,barrier,delalloc,usrquota, [ 445.361172][T25224] ext4 filesystem being mounted at /477/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 445.445843][ T23] audit: type=1400 audit(2000000065.330:34569): avc: denied { read } for pid=25223 comm="syz.2.9791" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 445.640302][T25253] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 445.662127][T25253] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,barrier=0x0000000000000000,sb=0x000000000000102b,stripe=0x0000000000000001,minixdf,sysvgroups,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,bsddf,,errors=continue [ 445.700830][T25253] EXT4-fs error (device loop8): ext4_validate_block_bitmap:418: comm syz.8.9802: bg 0: block 234: padding at end of block bitmap is not set [ 445.716206][T25253] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 445.728625][T25253] EXT4-fs (loop8): This should not happen!! Data will be lost [ 445.728625][T25253] [ 445.748603][ T380] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 445.770333][ T380] EXT4-fs (loop8): This should not happen!! Data will be lost [ 445.770333][ T380] [ 445.780104][ T380] EXT4-fs (loop8): Total free blocks count 0 [ 445.785933][ T380] EXT4-fs (loop8): Free/Dirty block details [ 445.792027][ T380] EXT4-fs (loop8): free_blocks=0 [ 445.797288][ T380] EXT4-fs (loop8): dirty_blocks=16 [ 445.802222][ T380] EXT4-fs (loop8): Block reservation details [ 445.808342][ T380] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 446.113350][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 446.137411][T25277] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 446.147272][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:2' failed: Read-only file system [ 446.166817][T25277] ext4 filesystem being mounted at /484/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 446.192878][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 446.217510][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:2' failed: Read-only file system [ 446.442755][T25271] F2FS-fs (loop8): QUOTA feature is enabled, so ignore jquota_fmt [ 446.453935][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:8' failed: Read-only file system [ 446.480119][T25271] F2FS-fs (loop8): invalid crc value [ 446.544828][T25271] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 446.558255][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:8' failed: Read-only file system [ 446.617961][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9814'. [ 446.647491][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9814'. [ 447.069745][T25330] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9832'. [ 447.078748][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9832'. [ 447.087558][T25330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9832'. [ 447.096246][T25330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9832'. [ 448.400484][T25344] EXT4-fs (loop8): Ignoring removed orlov option [ 448.409011][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 448.416748][T25344] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 448.452890][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 448.458015][T25344] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue [ 448.501687][T21085] udevd[21085]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 448.873833][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 448.900199][T25370] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue [ 448.917112][T25370] ext4 filesystem being mounted at /95/bus supports timestamps until (%ptR?) (0x7fffffff) [ 448.964999][T25379] device bridge_slave_0 left promiscuous mode [ 448.977641][T25379] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.984998][T25379] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 449.436495][T25416] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue [ 449.550809][T25421] input: syz1 as /devices/virtual/input/input111 [ 449.642146][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 449.642157][ T23] audit: type=1400 audit(2000000325.532:34573): avc: denied { read } for pid=25424 comm="syz.2.9869" name="rtc0" dev="devtmpfs" ino=9550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 449.705425][ T23] audit: type=1400 audit(2000000325.562:34574): avc: denied { open } for pid=25424 comm="syz.2.9869" path="/dev/rtc0" dev="devtmpfs" ino=9550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 449.746313][T25427] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro, [ 449.765609][ T23] audit: type=1400 audit(2000000325.562:34575): avc: denied { ioctl } for pid=25424 comm="syz.2.9869" path="/dev/rtc0" dev="devtmpfs" ino=9550 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 449.796071][T25427] EXT4-fs error (device loop2): ext4_get_first_dir_block:3658: inode #11: comm syz.2.9870: directory missing '..' [ 449.821591][ T23] audit: type=1400 audit(2000000325.682:34576): avc: denied { reparent } for pid=25426 comm="syz.2.9870" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.844429][T25427] EXT4-fs (loop2): Remounting filesystem read-only [ 449.883737][T25436] PF_BRIDGE: br_mdb_parse() with invalid attr [ 449.887963][ T23] audit: type=1400 audit(2000000325.782:34577): avc: denied { mac_admin } for pid=25412 comm="syz.1.9865" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.907133][T25413] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 449.911072][ T23] audit: type=1400 audit(2000000325.802:34578): avc: denied { create } for pid=25412 comm="syz.1.9865" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 449.998983][ T23] audit: type=1400 audit(2000000325.802:34579): avc: denied { associate } for pid=25412 comm="syz.1.9865" name="file2" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 450.086293][ T23] audit: type=1400 audit(2000000325.812:34580): avc: denied { bind } for pid=25439 comm="syz.0.9874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 450.193271][ T23] audit: type=1400 audit(2000000325.832:34581): avc: denied { rmdir } for pid=20186 comm="syz-executor" name="file2" dev="tmpfs" ino=207901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 450.218173][T25381] F2FS-fs (loop7): Invalid log sectors per block(570425347) log sectorsize(9) [ 450.315635][T25381] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 450.329330][T25381] F2FS-fs (loop7): invalid crc value [ 450.365225][T25454] FAT-fs (loop8): error, clusters badly computed (0 != 128) [ 450.397102][T25454] FAT-fs (loop8): Filesystem has been set read-only [ 450.403835][T25454] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 450.425009][T25381] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 450.437289][T25381] F2FS-fs (loop7): Bad quota inode 2:50331648 [ 450.443168][T25381] F2FS-fs (loop7): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 450.475063][T25381] F2FS-fs (loop7): Cannot turn on quotas: error -22 [ 450.525404][T25381] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 450.532575][T25381] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 450.588610][T25474] EXT4-fs (loop8): Test dummy encryption mode enabled [ 450.613159][T25474] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 450.663665][T25486] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 450.683538][T25381] F2FS-fs (loop7): quota file may be corrupted, skip loading it [ 450.701146][T25486] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 450.727246][T25486] EXT4-fs (loop2): Remounting filesystem read-only [ 451.214965][T25542] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 451.228310][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 451.247410][T25542] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 451.262211][T25542] F2FS-fs (loop2): invalid crc value [ 451.364947][T25542] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 451.377803][T25542] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 451.404157][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 451.516481][T25551] F2FS-fs (loop7): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 451.532493][T19118] attempt to access beyond end of device [ 451.532493][T19118] loop2: rw=2049, want=40992, limit=40427 [ 451.533350][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 451.563729][T25551] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 451.577700][T25551] F2FS-fs (loop7): fault_type options not supported [ 451.593550][T25551] F2FS-fs (loop7): invalid crc value [ 451.602813][T25551] F2FS-fs (loop7): Found nat_bits in checkpoint [ 451.641374][T25551] F2FS-fs (loop7): Start checkpoint disabled! [ 451.648229][T25551] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 451.655053][T25551] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 451.670165][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 451.689652][T21085] udevd[21085]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 451.753317][ T380] attempt to access beyond end of device [ 451.753317][ T380] loop7: rw=2049, want=40984, limit=40427 [ 451.890686][T25592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9932'. [ 452.344633][T25625] F2FS-fs (loop2): invalid crc value [ 452.353961][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 452.382268][T25625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 452.438375][T25625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 452.458887][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 452.487952][T19118] attempt to access beyond end of device [ 452.487952][T19118] loop2: rw=2049, want=45104, limit=40427 [ 453.226690][ T423] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 453.513102][ T23] audit: type=1400 audit(2000000329.402:34582): avc: denied { ioctl } for pid=25706 comm="syz.1.9983" path="/dev/usbmon1" dev="devtmpfs" ino=9447 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 453.596709][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 453.607355][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 453.617051][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 453.628493][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 453.660186][T25716] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9986'. [ 453.670282][T25716] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9986'. [ 453.717230][T25725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.806801][ T423] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 453.815656][ T423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.824218][ T423] usb 3-1: Product: syz [ 453.828728][ T423] usb 3-1: Manufacturer: syz [ 453.833133][ T423] usb 3-1: SerialNumber: syz [ 453.841808][ T423] usb 3-1: config 0 descriptor?? [ 453.892947][ T423] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 453.907529][ T423] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input112 [ 454.078541][T25767] option changes via remount are deprecated (pid=25766 comm=syz.8.10010) [ 454.092272][ T423] usb 3-1: USB disconnect, device number 24 [ 454.098444][ T423] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 454.266640][ T4773] Bluetooth: hci0: command 0x1003 tx timeout [ 454.272920][ T96] Bluetooth: hci0: sending frame failed (-49) [ 454.299370][T25769] F2FS-fs (loop8): invalid crc value [ 454.304483][T25769] F2FS-fs (loop8): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 454.317100][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 454.334064][T25769] F2FS-fs (loop8): Found nat_bits in checkpoint [ 454.371600][T25769] F2FS-fs (loop8): recover fsync data on readonly fs [ 454.378234][T25769] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 454.384533][T25769] F2FS-fs (loop8): Cannot turn on quotas: -2 on 1 [ 454.391079][T25769] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 454.404127][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 454.798968][T25783] EXT4-fs (loop8): Test dummy encryption mode enabled [ 454.807787][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 454.830086][T25783] EXT4-fs (loop8): 1 orphan inode deleted [ 454.835628][T25783] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,test_dummy_encryption=v1,noquota,errors=remount-ro,inlinecrypt,barrier,noquota,minixdf, [ 454.854391][T25783] ext4 filesystem being mounted at /139/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 454.881407][T25783] EXT4-fs error (device loop8): ext4_lookup:1821: inode #2: comm syz.8.10016: deleted inode referenced: 16 [ 454.893103][T25783] EXT4-fs (loop8): Remounting filesystem read-only [ 454.905897][ T380] EXT4-fs (loop8): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 454.908562][T25788] overlayfs: failed to resolve './file0': -2 [ 454.916305][ T380] __quota_error: 2 callbacks suppressed [ 454.916315][ T380] Quota error (device loop8): write_blk: dquota write failed [ 454.922273][ T423] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 454.927472][ T380] Quota error (device loop8): remove_free_dqentry: Can't write block (8) with free entries [ 454.952015][ T380] EXT4-fs (loop8): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 454.962343][ T380] Quota error (device loop8): write_blk: dquota write failed [ 454.969531][ T380] Quota error (device loop8): free_dqentry: Can't move quota data block (8) to free list [ 454.979200][ T380] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 454.989137][ T23] audit: type=1400 audit(2000000330.872:34585): avc: denied { write } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=10837 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.010880][ T380] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 455.019502][ T23] audit: type=1400 audit(2000000330.872:34586): avc: denied { remove_name } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=186898 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.042897][ T23] audit: type=1400 audit(2000000330.872:34587): avc: denied { rename } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=186898 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.065443][ T23] audit: type=1400 audit(2000000330.872:34588): avc: denied { add_name } for pid=146 comm="syslogd" name="messages.0" dev="tmpfs" ino=156393 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.088137][ T23] audit: type=1400 audit(2000000330.872:34589): avc: denied { unlink } for pid=146 comm="syslogd" name="messages.0" dev="tmpfs" ino=156393 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.155168][T25796] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 455.174397][T25796] erofs: (device loop7): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 455.183855][ T423] usb 3-1: Using ep0 maxpacket: 16 [ 455.193281][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3917 @ nid 36 [ 455.204244][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3916 @ nid 36 [ 455.215059][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3915 @ nid 36 [ 455.226317][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3914 @ nid 36 [ 455.243569][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3913 @ nid 36 [ 455.263914][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3912 @ nid 36 [ 455.275873][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3911 @ nid 36 [ 455.287485][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3910 @ nid 36 [ 455.308669][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3909 @ nid 36 [ 455.320222][T25801] syz.1.10023[25801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.320274][T25801] syz.1.10023[25801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.326702][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3908 @ nid 36 [ 455.353431][ T423] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.361213][ T423] usb 3-1: config 0 has no interface number 0 [ 455.367693][ T423] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.382783][ T423] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.391189][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3907 @ nid 36 [ 455.401234][ T423] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 455.407085][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3906 @ nid 36 [ 455.422191][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3905 @ nid 36 [ 455.424029][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.432695][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3904 @ nid 36 [ 455.432710][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3903 @ nid 36 [ 455.447458][ T423] usb 3-1: config 0 descriptor?? [ 455.461958][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3902 @ nid 36 [ 455.476921][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3901 @ nid 36 [ 455.487443][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3900 @ nid 36 [ 455.499706][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3899 @ nid 36 [ 455.510589][T25794] F2FS-fs (loop8): invalid crc value [ 455.510617][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3898 @ nid 36 [ 455.526328][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3897 @ nid 36 [ 455.536984][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3896 @ nid 36 [ 455.547590][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3895 @ nid 36 [ 455.558296][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3894 @ nid 36 [ 455.560436][T25794] F2FS-fs (loop8): Found nat_bits in checkpoint [ 455.568809][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3893 @ nid 36 [ 455.568819][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3892 @ nid 36 [ 455.568828][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3891 @ nid 36 [ 455.568837][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3890 @ nid 36 [ 455.568846][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3889 @ nid 36 [ 455.568855][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3888 @ nid 36 [ 455.568864][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3887 @ nid 36 [ 455.568872][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3886 @ nid 36 [ 455.568881][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3885 @ nid 36 [ 455.568894][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3884 @ nid 36 [ 455.686719][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3883 @ nid 36 [ 455.702236][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3882 @ nid 36 [ 455.713633][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3881 @ nid 36 [ 455.724844][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3880 @ nid 36 [ 455.736587][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3879 @ nid 36 [ 455.747482][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3878 @ nid 36 [ 455.751475][T25794] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 455.759065][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3877 @ nid 36 [ 455.780477][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3876 @ nid 36 [ 455.791739][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3875 @ nid 36 [ 455.794145][T23951] attempt to access beyond end of device [ 455.794145][T23951] loop8: rw=2049, want=45104, limit=40427 [ 455.804613][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3874 @ nid 36 [ 455.825004][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3873 @ nid 36 [ 455.835602][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3872 @ nid 36 [ 455.846412][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3871 @ nid 36 [ 455.857353][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3870 @ nid 36 [ 455.868252][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3869 @ nid 36 [ 455.878831][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3868 @ nid 36 [ 455.889358][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3867 @ nid 36 [ 455.899849][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3866 @ nid 36 [ 455.910386][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3865 @ nid 36 [ 455.921132][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3864 @ nid 36 [ 455.931776][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3863 @ nid 36 [ 455.942340][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3862 @ nid 36 [ 455.952964][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3861 @ nid 36 [ 455.965503][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3860 @ nid 36 [ 455.976240][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3859 @ nid 36 [ 455.996674][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3858 @ nid 36 [ 456.009428][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3857 @ nid 36 [ 456.021971][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3856 @ nid 36 [ 456.032555][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3855 @ nid 36 [ 456.042996][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3854 @ nid 36 [ 456.069047][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3853 @ nid 36 [ 456.086749][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3852 @ nid 36 [ 456.106666][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3851 @ nid 36 [ 456.126664][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3850 @ nid 36 [ 456.142727][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3849 @ nid 36 [ 456.157313][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3848 @ nid 36 [ 456.169237][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3847 @ nid 36 [ 456.180434][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3846 @ nid 36 [ 456.186727][ T423] uclogic 0003:28BD:0071.0094: failed retrieving string descriptor #100: -71 [ 456.198744][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3845 @ nid 36 [ 456.205586][ T423] uclogic 0003:28BD:0071.0094: failed retrieving pen parameters: -71 [ 456.214558][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3844 @ nid 36 [ 456.220383][ T423] uclogic 0003:28BD:0071.0094: pen probing failed: -71 [ 456.230088][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3843 @ nid 36 [ 456.246365][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3842 @ nid 36 [ 456.247290][ T423] uclogic 0003:28BD:0071.0094: failed probing parameters: -71 [ 456.257423][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3841 @ nid 36 [ 456.274642][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3840 @ nid 36 [ 456.284460][ T423] uclogic: probe of 0003:28BD:0071.0094 failed with error -71 [ 456.285879][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3839 @ nid 36 [ 456.303187][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3838 @ nid 36 [ 456.306757][ T423] usb 3-1: USB disconnect, device number 25 [ 456.313807][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3837 @ nid 36 [ 456.330006][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3836 @ nid 36 [ 456.340498][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3835 @ nid 36 [ 456.351429][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3834 @ nid 36 [ 456.356636][ T4773] Bluetooth: hci0: command 0x1001 tx timeout [ 456.361969][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3833 @ nid 36 [ 456.374671][ T96] Bluetooth: hci0: sending frame failed (-49) [ 456.384742][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3832 @ nid 36 [ 456.395605][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3831 @ nid 36 [ 456.406649][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3830 @ nid 36 [ 456.417369][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3829 @ nid 36 [ 456.428075][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3828 @ nid 36 [ 456.442786][T25853] netlink: 'syz.1.10044': attribute type 26 has an invalid length. [ 456.444477][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3827 @ nid 36 [ 456.461293][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3826 @ nid 36 [ 456.464200][T25853] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 456.472120][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3825 @ nid 36 [ 456.490960][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3824 @ nid 36 [ 456.501630][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3823 @ nid 36 [ 456.512506][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3822 @ nid 36 [ 456.523138][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3821 @ nid 36 [ 456.535512][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3820 @ nid 36 [ 456.549734][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3819 @ nid 36 [ 456.560281][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3818 @ nid 36 [ 456.571022][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3817 @ nid 36 [ 456.589343][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3816 @ nid 36 [ 456.601628][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3815 @ nid 36 [ 456.612676][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3814 @ nid 36 [ 456.623740][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3813 @ nid 36 [ 456.634270][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3812 @ nid 36 [ 456.644729][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3811 @ nid 36 [ 456.655243][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3810 @ nid 36 [ 456.665763][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3809 @ nid 36 [ 456.676382][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3808 @ nid 36 [ 456.686960][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3807 @ nid 36 [ 456.697956][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3806 @ nid 36 [ 456.708476][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3805 @ nid 36 [ 456.719059][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3804 @ nid 36 [ 456.734764][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3803 @ nid 36 [ 456.751706][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3802 @ nid 36 [ 456.762757][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3801 @ nid 36 [ 456.779465][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3800 @ nid 36 [ 456.790080][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3799 @ nid 36 [ 456.814878][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3798 @ nid 36 [ 456.826752][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3797 @ nid 36 [ 456.847670][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3796 @ nid 36 [ 456.858492][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3795 @ nid 36 [ 456.886711][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3794 @ nid 36 [ 456.903837][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3793 @ nid 36 [ 456.926710][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3792 @ nid 36 [ 456.946653][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3791 @ nid 36 [ 456.969978][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3790 @ nid 36 [ 456.983053][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3789 @ nid 36 [ 456.993797][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3788 @ nid 36 [ 457.004970][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3787 @ nid 36 [ 457.018150][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 457.031306][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3786 @ nid 36 [ 457.041822][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3785 @ nid 36 [ 457.052430][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3784 @ nid 36 [ 457.062939][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3783 @ nid 36 [ 457.073772][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3782 @ nid 36 [ 457.084339][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3781 @ nid 36 [ 457.088428][T25886] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 457.094778][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3780 @ nid 36 [ 457.114165][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3779 @ nid 36 [ 457.123763][T25886] ext4 filesystem being mounted at /150/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 457.124871][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3778 @ nid 36 [ 457.145323][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3777 @ nid 36 [ 457.147276][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 457.157435][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3776 @ nid 36 [ 457.182719][T25886] EXT4-fs error (device loop8): ext4_validate_block_bitmap:418: comm syz.8.10059: bg 0: block 393: padding at end of block bitmap is not set [ 457.193445][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3775 @ nid 36 [ 457.204497][T25886] EXT4-fs error (device loop8) in ext4_free_blocks:5016: Corrupt filesystem [ 457.207717][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3774 @ nid 36 [ 457.227293][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3773 @ nid 36 [ 457.237877][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3772 @ nid 36 [ 457.248299][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3771 @ nid 36 [ 457.258818][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3770 @ nid 36 [ 457.269301][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3769 @ nid 36 [ 457.279806][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3768 @ nid 36 [ 457.290294][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3767 @ nid 36 [ 457.301005][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3766 @ nid 36 [ 457.311507][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3765 @ nid 36 [ 457.322035][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3764 @ nid 36 [ 457.332521][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3763 @ nid 36 [ 457.343013][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3762 @ nid 36 [ 457.353514][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3761 @ nid 36 [ 457.364009][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3760 @ nid 36 [ 457.374519][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3759 @ nid 36 [ 457.385199][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3758 @ nid 36 [ 457.395721][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3757 @ nid 36 [ 457.406199][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3756 @ nid 36 [ 457.416713][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3755 @ nid 36 [ 457.427191][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3754 @ nid 36 [ 457.437875][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3753 @ nid 36 [ 457.450159][ T13] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 457.461274][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3752 @ nid 36 [ 457.472459][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3751 @ nid 36 [ 457.483512][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3750 @ nid 36 [ 457.503301][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3749 @ nid 36 [ 457.514117][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3748 @ nid 36 [ 457.524821][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3747 @ nid 36 [ 457.535567][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3746 @ nid 36 [ 457.546117][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3745 @ nid 36 [ 457.557144][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3744 @ nid 36 [ 457.567767][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3743 @ nid 36 [ 457.578550][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3742 @ nid 36 [ 457.589192][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3741 @ nid 36 [ 457.599698][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3740 @ nid 36 [ 457.610319][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3739 @ nid 36 [ 457.622308][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3738 @ nid 36 [ 457.633372][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3737 @ nid 36 [ 457.644244][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3736 @ nid 36 [ 457.644847][T25902] input: syz0 as /devices/virtual/input/input113 [ 457.654883][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3735 @ nid 36 [ 457.671485][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3734 @ nid 36 [ 457.682332][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3733 @ nid 36 [ 457.698740][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3732 @ nid 36 [ 457.709415][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3731 @ nid 36 [ 457.722176][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3730 @ nid 36 [ 457.732956][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3729 @ nid 36 [ 457.751126][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3728 @ nid 36 [ 457.763294][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3727 @ nid 36 [ 457.773979][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3726 @ nid 36 [ 457.784694][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3725 @ nid 36 [ 457.795442][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3724 @ nid 36 [ 457.806131][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3723 @ nid 36 [ 457.816859][ T13] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 457.817971][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 457.826053][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.826982][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3722 @ nid 36 [ 457.848011][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 457.856201][ T13] usb 3-1: config 0 descriptor?? [ 457.867091][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.874938][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10071'. [ 457.881987][T25910] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 457.896527][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3721 @ nid 36 [ 457.903553][T25910] ext4 filesystem being mounted at /155/bus supports timestamps until (%ptR?) (0x7fffffff) [ 457.913772][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3720 @ nid 36 [ 457.928416][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 457.935528][ T13] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 457.954480][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3719 @ nid 36 [ 457.966063][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3718 @ nid 36 [ 457.978231][T25910] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 457.987016][T25910] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 457.995681][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3717 @ nid 36 [ 458.008854][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3716 @ nid 36 [ 458.019696][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3715 @ nid 36 [ 458.030685][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3714 @ nid 36 [ 458.041711][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3713 @ nid 36 [ 458.052375][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3712 @ nid 36 [ 458.062997][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3711 @ nid 36 [ 458.073510][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3710 @ nid 36 [ 458.084015][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3709 @ nid 36 [ 458.094539][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3708 @ nid 36 [ 458.106257][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3707 @ nid 36 [ 458.119121][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3706 @ nid 36 [ 458.132127][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3705 @ nid 36 [ 458.142712][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3704 @ nid 36 [ 458.157676][ T5] usb 3-1: USB disconnect, device number 26 [ 458.169187][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3703 @ nid 36 [ 458.180313][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3702 @ nid 36 [ 458.191833][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3701 @ nid 36 [ 458.203040][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3700 @ nid 36 [ 458.205130][T25933] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10078'. [ 458.213906][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3699 @ nid 36 [ 458.233012][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3698 @ nid 36 [ 458.243685][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3697 @ nid 36 [ 458.254397][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3696 @ nid 36 [ 458.264959][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3695 @ nid 36 [ 458.275812][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3694 @ nid 36 [ 458.286566][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3693 @ nid 36 [ 458.297527][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3692 @ nid 36 [ 458.308183][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3691 @ nid 36 [ 458.318724][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3690 @ nid 36 [ 458.329209][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3689 @ nid 36 [ 458.339725][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3688 @ nid 36 [ 458.350210][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3687 @ nid 36 [ 458.360893][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3686 @ nid 36 [ 458.371470][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3685 @ nid 36 [ 458.382134][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3684 @ nid 36 [ 458.392731][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3683 @ nid 36 [ 458.403217][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3682 @ nid 36 [ 458.413921][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3681 @ nid 36 [ 458.424572][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3680 @ nid 36 [ 458.435100][ T4773] Bluetooth: hci0: command 0x1009 tx timeout [ 458.440913][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3679 @ nid 36 [ 458.451435][ T423] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 458.458701][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3678 @ nid 36 [ 458.469277][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3677 @ nid 36 [ 458.479810][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3676 @ nid 36 [ 458.490452][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3675 @ nid 36 [ 458.500971][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3674 @ nid 36 [ 458.511712][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3673 @ nid 36 [ 458.522253][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3672 @ nid 36 [ 458.532730][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3671 @ nid 36 [ 458.543328][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3670 @ nid 36 [ 458.553861][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3669 @ nid 36 [ 458.564575][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3668 @ nid 36 [ 458.568031][T25944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.575276][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3667 @ nid 36 [ 458.600812][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3666 @ nid 36 [ 458.611573][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3665 @ nid 36 [ 458.622357][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3664 @ nid 36 [ 458.632984][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3663 @ nid 36 [ 458.643503][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3662 @ nid 36 [ 458.654079][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3661 @ nid 36 [ 458.664583][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3660 @ nid 36 [ 458.675218][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3659 @ nid 36 [ 458.685721][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3658 @ nid 36 [ 458.696275][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3657 @ nid 36 [ 458.707183][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3656 @ nid 36 [ 458.717735][ T423] usb 9-1: Using ep0 maxpacket: 16 [ 458.723822][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3655 @ nid 36 [ 458.737287][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3654 @ nid 36 [ 458.748317][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3653 @ nid 36 [ 458.759304][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3652 @ nid 36 [ 458.769811][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3651 @ nid 36 [ 458.780497][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3650 @ nid 36 [ 458.791515][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3649 @ nid 36 [ 458.802165][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3648 @ nid 36 [ 458.812724][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3647 @ nid 36 [ 458.823757][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3646 @ nid 36 [ 458.834196][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3645 @ nid 36 [ 458.844520][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 458.856188][ T423] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 458.864205][ T423] usb 9-1: config 0 has no interface number 0 [ 458.870114][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3644 @ nid 36 [ 458.877799][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 458.891883][ T423] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 458.901609][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3643 @ nid 36 [ 458.912116][ T423] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 458.921906][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3642 @ nid 36 [ 458.932520][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3641 @ nid 36 [ 458.933691][T25952] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 458.943036][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3640 @ nid 36 [ 458.943045][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3639 @ nid 36 [ 458.943054][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3638 @ nid 36 [ 458.943063][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3637 @ nid 36 [ 458.943083][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3636 @ nid 36 [ 458.943092][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3635 @ nid 36 [ 458.943100][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3634 @ nid 36 [ 458.943114][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3633 @ nid 36 [ 458.998385][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 459.009405][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3632 @ nid 36 [ 459.062619][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3631 @ nid 36 [ 459.076423][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3630 @ nid 36 [ 459.088309][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3629 @ nid 36 [ 459.099046][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3628 @ nid 36 [ 459.110152][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3627 @ nid 36 [ 459.122132][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3626 @ nid 36 [ 459.134435][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3625 @ nid 36 [ 459.146476][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3624 @ nid 36 [ 459.146980][ T423] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 459.158158][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3623 @ nid 36 [ 459.165947][ T423] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.176777][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3622 @ nid 36 [ 459.184251][ T423] usb 9-1: Product: syz [ 459.194916][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3621 @ nid 36 [ 459.198629][ T423] usb 9-1: Manufacturer: syz [ 459.209409][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3620 @ nid 36 [ 459.213541][ T423] usb 9-1: SerialNumber: syz [ 459.224331][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3619 @ nid 36 [ 459.229328][ T423] usb 9-1: config 0 descriptor?? [ 459.239297][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3618 @ nid 36 [ 459.254486][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3617 @ nid 36 [ 459.266482][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3616 @ nid 36 [ 459.277164][T25931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.277317][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3615 @ nid 36 [ 459.283959][T25931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.294672][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3614 @ nid 36 [ 459.311888][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3613 @ nid 36 [ 459.322888][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3612 @ nid 36 [ 459.323517][T25966] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 459.339625][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 459.347730][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3611 @ nid 36 [ 459.364590][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3610 @ nid 36 [ 459.376006][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3609 @ nid 36 [ 459.377733][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 459.396657][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3608 @ nid 36 [ 459.408751][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3607 @ nid 36 [ 459.419505][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3606 @ nid 36 [ 459.430190][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3605 @ nid 36 [ 459.440754][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3604 @ nid 36 [ 459.451644][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3603 @ nid 36 [ 459.462409][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3602 @ nid 36 [ 459.472975][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3601 @ nid 36 [ 459.483609][T25796] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3600 @ nid 36 [ 459.494452][T25796] attempt to access beyond end of device [ 459.494452][T25796] loop7: rw=0, want=24, limit=16 [ 459.531566][T25931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.538438][T25931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.581435][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10096'. [ 459.591889][T25984] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 459.774092][T26018] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10115'. [ 459.794233][T26012] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,,errors=continue [ 459.809434][T26012] ext4 filesystem being mounted at /547/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 459.857445][T26025] PF_BRIDGE: br_mdb_parse() with invalid entry [ 459.962239][T26028] EXT4-fs (loop2): 1 orphan inode deleted [ 459.967896][T26028] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 459.976757][ T423] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 459.987396][T26028] ext4 filesystem being mounted at /549/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 459.996757][ T423] asix: probe of 9-1:0.251 failed with error -524 [ 460.024139][T26028] EXT4-fs (loop2): shut down requested (0) [ 460.147853][T26037] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 460.156816][T26037] ext4 filesystem being mounted at /551/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 460.173346][T26037] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.10122: bg 0: block 393: padding at end of block bitmap is not set [ 460.188020][T26037] EXT4-fs error (device loop2) in ext4_free_blocks:5016: Corrupt filesystem [ 460.216663][ T13] usb 9-1: USB disconnect, device number 7 [ 460.429278][T26051] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 460.654003][T26068] syz.2.10135[26068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.654056][T26068] syz.2.10135[26068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.738713][T26079] input: syz0 as /devices/virtual/input/input114 [ 460.789845][T26082] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 460.801809][T26082] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 460.819268][ T103] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 461.117511][T26073] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 461.125862][T26073] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 461.136166][T26073] F2FS-fs (loop2): invalid crc value [ 461.142875][T26073] F2FS-fs (loop2): Found nat_bits in checkpoint [ 461.172684][T26073] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 461.179705][T26073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 461.202255][T26073] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 462.462772][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 462.462783][ T23] audit: type=1326 audit(2000000338.352:34593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26128 comm="syz.0.10160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a819ba169 code=0x0 [ 462.532416][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 462.548929][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 462.561356][T26122] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 462.579510][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 462.636676][T26149] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10165'. [ 462.645464][T26149] device lo entered promiscuous mode [ 462.732046][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 462.748481][T26155] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 462.758685][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 462.876642][ T13] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 463.096656][ T423] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 463.246718][ T13] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 463.266645][ T13] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.279554][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 463.343953][T26184] SELinux: policydb table sizes (-1123177151,1006851136) do not match mine (6,7) [ 463.353473][T26184] SELinux: failed to load policy [ 463.412864][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 463.428494][T26180] F2FS-fs (loop2): Found nat_bits in checkpoint [ 463.431782][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 463.456732][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.465736][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.466712][ T423] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.473536][ T13] usb 2-1: Product: syz [ 463.486744][ T423] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.487618][ T13] usb 2-1: Manufacturer: syz [ 463.500364][T26180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 463.500556][ T13] usb 2-1: SerialNumber: syz [ 463.513798][T23253] udevd[23253]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 463.546840][T26147] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 463.553789][T19118] attempt to access beyond end of device [ 463.553789][T19118] loop2: rw=2049, want=45104, limit=40427 [ 463.676715][ T423] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.685595][ T423] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.693455][ T423] usb 9-1: Product: syz [ 463.697671][ T423] usb 9-1: Manufacturer: syz [ 463.702067][ T423] usb 9-1: SerialNumber: syz [ 463.826739][ T13] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 463.835265][ T13] usb 2-1: USB disconnect, device number 33 [ 463.861061][T21100] udevd[21100]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 463.876081][T26200] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 463.888892][T21085] udevd[21085]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 464.186801][ T423] usb 9-1: 0:2 : does not exist [ 464.608905][ T13] usb 9-1: USB disconnect, device number 8 [ 464.719351][T26219] xt_hashlimit: size too large, truncated to 1048576 [ 465.197972][T26225] EXT4-fs (loop7): 1 orphan inode deleted [ 465.203605][T26225] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 465.243882][T26225] ext4 filesystem being mounted at /621/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 465.296368][T26225] EXT4-fs (loop7): shut down requested (0) [ 465.598144][T26234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 465.625751][T26234] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 465.647220][T26237] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 465.647946][T26224] F2FS-fs (loop8): Found nat_bits in checkpoint [ 465.657357][T26234] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 5 with error 28 [ 465.666976][T26237] ext4 filesystem being mounted at /623/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 465.675718][T26234] EXT4-fs (loop2): This should not happen!! Data will be lost [ 465.675718][T26234] [ 465.695025][T26234] EXT4-fs (loop2): Total free blocks count 0 [ 465.701164][T26234] EXT4-fs (loop2): Free/Dirty block details [ 465.707302][T26234] EXT4-fs (loop2): free_blocks=2415919104 [ 465.719509][T26234] EXT4-fs (loop2): dirty_blocks=32 [ 465.724485][T26234] EXT4-fs (loop2): Block reservation details [ 465.730642][T26234] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 465.730870][T26224] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 465.739053][T26237] EXT4-fs error (device loop7): ext4_empty_dir:3042: inode #12: comm syz.7.10202: Directory hole found for htree leaf block 0 [ 465.743729][ T23] audit: type=1400 audit(2000000341.622:34594): avc: denied { rename } for pid=26236 comm="syz.7.10202" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 465.757203][T26258] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 465.822684][T26258] EXT4-fs (loop2): This should not happen!! Data will be lost [ 465.822684][T26258] [ 465.833837][T23951] attempt to access beyond end of device [ 465.833837][T23951] loop8: rw=2049, want=45104, limit=40427 [ 465.856839][ T23] audit: type=1400 audit(2000000341.752:34595): avc: denied { read } for pid=26261 comm="syz.7.10208" name="file0" dev="tmpfs" ino=213395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 465.886806][ T5] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 465.907284][ T23] audit: type=1400 audit(2000000341.802:34596): avc: denied { mounton } for pid=26261 comm="syz.7.10208" path="/624/file0" dev="tmpfs" ino=213395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 465.991836][T26262] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 466.242730][T26275] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 466.256818][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.268952][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.285033][T26275] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue [ 466.313786][T26275] fscrypt (loop7, inode 18): Direct key flag not allowed with different contents and filenames modes [ 466.331488][T26291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10219'. [ 466.356779][ T5] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.365614][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.373783][ T5] usb 2-1: SerialNumber: syz [ 466.518005][T26314] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 466.657688][ T5] usb 2-1: 0:2 : does not exist [ 466.667981][ T5] usb 2-1: USB disconnect, device number 34 [ 466.699290][T26345] kvm [26343]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 466.902837][T26355] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 466.921040][T26355] ext4 filesystem being mounted at /631/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 466.958382][T26368] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 467.108015][T26379] netlink: 'syz.7.10255': attribute type 1 has an invalid length. [ 467.234419][T26385] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 467.281108][T26404] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 467.294053][T26385] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 467.309358][T26385] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 5 with error 28 [ 467.322126][T26404] ext4 filesystem being mounted at /592/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 467.332440][T26385] EXT4-fs (loop8): This should not happen!! Data will be lost [ 467.332440][T26385] [ 467.342467][T26385] EXT4-fs (loop8): Total free blocks count 0 [ 467.371521][T26409] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 467.372999][T26385] EXT4-fs (loop8): Free/Dirty block details [ 467.389979][T26385] EXT4-fs (loop8): free_blocks=2415919104 [ 467.396537][T26409] ext4 filesystem being mounted at /637/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 467.398388][T26385] EXT4-fs (loop8): dirty_blocks=32 [ 467.411689][T26385] EXT4-fs (loop8): Block reservation details [ 467.426205][T26385] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 467.432949][T26413] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 467.445347][T26413] EXT4-fs (loop8): This should not happen!! Data will be lost [ 467.445347][T26413] [ 467.587479][ T23] audit: type=1400 audit(2000000343.482:34597): avc: denied { map } for pid=26439 comm="syz.0.10280" path="socket:[215166]" dev="sockfs" ino=215166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.672981][ T23] audit: type=1400 audit(2000000343.512:34598): avc: denied { accept } for pid=26439 comm="syz.0.10280" path="socket:[215166]" dev="sockfs" ino=215166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.701642][ T23] audit: type=1400 audit(2000000343.522:34599): avc: denied { create } for pid=26441 comm="syz.8.10279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 467.730710][ T23] audit: type=1400 audit(2000000343.522:34600): avc: denied { connect } for pid=26441 comm="syz.8.10279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 467.752859][ T23] audit: type=1400 audit(2000000343.522:34601): avc: denied { name_connect } for pid=26441 comm="syz.8.10279" dest=65535 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 467.786578][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 467.818894][T26446] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 467.842012][T26446] ext4 filesystem being mounted at /640/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 467.866981][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 467.888148][ T23] audit: type=1400 audit(2000000343.782:34602): avc: denied { rename } for pid=26444 comm="syz.7.10282" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 468.112567][T26487] bridge0: port 3(syz_tun) entered blocking state [ 468.137340][T26487] bridge0: port 3(syz_tun) entered disabled state [ 468.155037][T26487] device syz_tun entered promiscuous mode [ 468.266145][T26469] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 468.279979][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 468.293715][T26469] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 468.306845][T26469] F2FS-fs (loop8): invalid crc value [ 468.313565][T26469] F2FS-fs (loop8): Found nat_bits in checkpoint [ 468.358488][T26469] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 468.365544][T26469] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 468.367913][T26474] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 468.384423][T21085] udevd[21085]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 468.404418][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 468.410965][T26474] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 468.432264][T26474] F2FS-fs (loop7): invalid crc value [ 468.448642][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 468.476781][ T13] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 468.496104][T26474] F2FS-fs (loop7): Found nat_bits in checkpoint [ 468.606870][T26474] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 468.613721][T26474] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 468.644681][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 468.701091][ T404] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 468.712713][T23253] udevd[23253]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 468.720071][ T404] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 468.836707][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 468.843140][ T13] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 468.865480][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.876290][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 468.885987][ T13] usb 2-1: config 0 descriptor?? [ 468.898880][T26516] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 468.907822][T26516] ext4 filesystem being mounted at /184/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 468.924999][T23253] udevd[23253]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 468.949899][T23951] EXT4-fs error (device loop8): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /184/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 468.970798][ T423] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 469.067691][T26532] netlink: 148 bytes leftover after parsing attributes in process `syz.7.10307'. [ 469.156682][ T13] usb 2-1: string descriptor 0 read error: -71 [ 469.162951][ T13] usb-storage 2-1:0.0: USB Mass Storage device detected [ 469.170747][ T13] usb-storage 2-1:0.0: This device (090a,1200,2487 S 01 P 11) has an unneeded SubClass entry in unusual_devs.h (kernel 5.4.290-syzkaller-00002-g41adfeb3d639) [ 469.170747][ T13] Please send a copy of this message to and [ 469.236667][ T423] usb 3-1: Using ep0 maxpacket: 16 [ 469.248608][ T13] usb 2-1: USB disconnect, device number 35 [ 469.307371][T26548] incfs: iterate_incfs_dir / -22 [ 469.356694][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.367407][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.377711][ T423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.390780][ T423] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.412321][T26550] EXT4-fs error (device loop7): __ext4_iget:5217: inode #2: block 1: comm syz.7.10321: invalid block [ 469.423080][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.431167][T26550] EXT4-fs (loop7): get root inode failed [ 469.440705][ T423] usb 3-1: config 0 descriptor?? [ 469.445571][T26550] EXT4-fs (loop7): mount failed [ 469.673885][T26558] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 469.838938][T26566] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 469.928115][ T423] microsoft 0003:045E:07DA.0095: ignoring exceeding usage max [ 469.956955][ T423] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0095/input/input115 [ 470.037898][T26593] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 470.045003][T26593] EXT4-fs (loop7): can't mount with dioread_nolock if block size != PAGE_SIZE [ 470.056887][ T423] microsoft 0003:045E:07DA.0095: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 470.146645][ T5] usb 3-1: USB disconnect, device number 27 [ 470.286736][ T13] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 470.526654][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 470.646699][ T13] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 470.654747][ T13] usb 2-1: config 0 has no interface number 0 [ 470.668115][ T13] usb 2-1: config 0 interface 184 has no altsetting 0 [ 470.752329][T26612] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,grpjquota=,nodelalloc,,errors=continue [ 470.764134][T26612] ext4 filesystem being mounted at /598/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 470.836700][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 470.845543][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.853407][ T13] usb 2-1: Product: syz [ 470.857444][ T13] usb 2-1: Manufacturer: syz [ 470.861855][ T13] usb 2-1: SerialNumber: syz [ 470.875275][ T13] usb 2-1: config 0 descriptor?? [ 470.917469][ T13] smsc75xx v1.0.0 [ 470.949745][T26620] EXT4-fs (loop2): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 470.962876][ T23] audit: type=1400 audit(2000000346.852:34603): avc: denied { mount } for pid=26619 comm="syz.2.10343" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 470.992530][ T23] audit: type=1400 audit(2000000346.882:34604): avc: denied { unmount } for pid=19118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 471.263633][T26633] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 471.273209][T26633] EXT4-fs error (device loop7): ext4_get_journal_inode:4880: comm syz.7.10348: inode #1: comm syz.7.10348: iget: illegal inode # [ 471.294872][T26633] EXT4-fs (loop7): no journal found [ 471.300170][T26633] EXT4-fs (loop7): can't get journal size [ 471.307932][T26633] EXT4-fs (loop7): failed to initialize system zone (-22) [ 471.314856][T26633] EXT4-fs (loop7): mount failed [ 471.718697][T26651] x_tables: ip_tables: udp match: only valid for protocol 17 [ 471.796717][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 471.811261][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.846787][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 471.866912][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 471.876369][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 471.899934][T26668] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10372'. [ 471.906674][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 471.928118][T26665] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 471.936751][ T13] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 471.945605][ T13] usb 2-1: USB disconnect, device number 36 [ 471.967417][T26665] ext4 filesystem being mounted at /611/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 472.247167][ T23] audit: type=1326 audit(2000000348.132:34605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.2.10377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb7225169 code=0x7ffc0000 [ 472.271082][ T23] audit: type=1326 audit(2000000348.162:34606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.2.10377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb7225169 code=0x7ffc0000 [ 472.337813][T26702] EXT4-fs (loop7): error: could not find journal device path: error -2 [ 472.747272][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10395'. [ 472.790857][T26741] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 472.809140][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 472.842485][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 472.927592][T23252] udevd[23252]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 472.978966][ T5] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 472.996468][ T5] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.046086][T23252] udevd[23252]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 473.060371][T26745] F2FS-fs (loop7): fault_injection options not supported [ 473.076689][T26745] F2FS-fs (loop7): fault_type options not supported [ 473.097098][T26745] F2FS-fs (loop7): invalid crc value [ 473.117861][T26745] F2FS-fs (loop7): Found nat_bits in checkpoint [ 473.187861][T26745] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 473.228962][T23252] udevd[23252]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 473.273575][T26745] attempt to access beyond end of device [ 473.273575][T26745] loop7: rw=2049, want=45104, limit=40427 [ 473.531659][ T404] Bluetooth: hci0: Frame reassembly failed (-84) [ 473.546683][T26782] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 473.982470][T26758] F2FS-fs (loop2): Test dummy encryption mode enabled [ 474.003875][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system [ 474.019335][T26758] F2FS-fs (loop2): invalid crc value [ 474.032598][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system [ 474.049068][T26758] F2FS-fs (loop2): Found nat_bits in checkpoint [ 474.090933][T26758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 474.104430][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:2' failed: Read-only file system [ 474.654256][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 474.666041][T26808] EXT4-fs (loop2): Ignoring removed bh option [ 474.688875][T26808] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,quota,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro, [ 474.747083][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 475.132142][T26817] F2FS-fs (loop7): Found nat_bits in checkpoint [ 475.226531][T26817] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 475.314737][T26828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 475.356884][T16475] attempt to access beyond end of device [ 475.356884][T16475] loop7: rw=2049, want=45104, limit=40427 [ 475.466706][T26828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 475.489395][T26828] attempt to access beyond end of device [ 475.489395][T26828] loop2: rw=2049, want=45104, limit=40427 [ 475.516813][T26837] attempt to access beyond end of device [ 475.516813][T26837] loop2: rw=2049, want=45112, limit=40427 [ 475.546630][ T423] Bluetooth: hci0: command 0x1003 tx timeout [ 475.552453][ T96] Bluetooth: hci0: sending frame failed (-49) [ 475.983504][T26852] SELinux: failed to load policy [ 476.021127][T26857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26857 comm=syz.7.10437 [ 476.064446][ T23] kauditd_printk_skb: 10 callbacks suppressed [ 476.064456][ T23] audit: type=1400 audit(2000000351.952:34617): avc: denied { read } for pid=26855 comm="syz.7.10437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 476.407819][T26858] F2FS-fs (loop2): invalid crc value [ 476.434630][T26858] F2FS-fs (loop2): Found nat_bits in checkpoint [ 476.527715][T26858] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 476.549603][T26858] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 477.030322][T26862] F2FS-fs (loop7): Test dummy encryption mode enabled [ 477.058847][T26862] F2FS-fs (loop7): invalid crc value [ 477.101455][T26862] F2FS-fs (loop7): Found nat_bits in checkpoint [ 477.157790][T26875] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 477.176758][T26862] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 477.599933][T26886] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 477.626639][T26886] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 477.626913][ T423] Bluetooth: hci0: command 0x1001 tx timeout [ 477.644743][T26886] F2FS-fs (loop2): invalid crc value [ 477.660896][ T96] Bluetooth: hci0: sending frame failed (-49) [ 477.692539][T26886] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 477.802177][T26886] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 477.816689][T26886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 477.829999][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 478.193344][T23252] udevd[23252]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 478.220130][ T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 478.249988][T26900] F2FS-fs (loop7): Found nat_bits in checkpoint [ 478.322568][T26900] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 478.353656][T26915] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 478.362923][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 478.362937][T21353] udevd[21353]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 478.391650][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 478.403981][T16475] attempt to access beyond end of device [ 478.403981][T16475] loop7: rw=2049, want=45104, limit=40427 [ 478.416953][T26915] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 478.443012][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 478.528280][T23252] udevd[23252]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 478.616742][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.649308][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.679587][ T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 478.706740][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.735567][ T5] usb 2-1: config 0 descriptor?? [ 478.790596][T21353] udevd[21353]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 478.837887][T26923] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 478.866751][T26923] ext4 filesystem being mounted at /696/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 478.895253][T21353] udevd[21353]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 478.999694][T21353] udevd[21353]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 479.208449][ T5] hid-generic 0003:05AC:4262.0097: unbalanced delimiter at end of report description [ 479.218124][ T5] hid-generic: probe of 0003:05AC:4262.0097 failed with error -22 [ 479.233115][T26921] F2FS-fs (loop2): Invalid segment/section count (33048 != 24 * 1) [ 479.252689][T26921] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 479.263174][T26921] F2FS-fs (loop2): invalid crc value [ 479.270055][T26940] FAT-fs (loop7): codepage cp86 not found [ 479.315928][T26921] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 479.322814][T26921] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 479.425113][ T5] usb 2-1: USB disconnect, device number 37 [ 479.706911][ T405] Bluetooth: hci0: command 0x1009 tx timeout [ 480.007608][T26963] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 480.022027][T26963] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 480.033695][T26963] F2FS-fs (loop7): invalid crc value [ 480.040638][T26963] F2FS-fs (loop7): Found nat_bits in checkpoint [ 480.084211][T26963] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 480.096172][T26963] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 480.159295][ T380] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 480.174137][ T380] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 480.250721][T26979] SELinux: failed to load policy [ 480.694621][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.714666][T27023] FAT-fs (loop7): Filesystem has been set read-only [ 480.724776][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.746784][T27022] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.776662][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.796698][T27022] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.816694][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.837014][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.856694][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.886667][T27025] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.907609][T27023] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 480.986110][T27021] F2FS-fs (loop2): invalid crc value [ 481.035090][T27021] F2FS-fs (loop2): Found nat_bits in checkpoint [ 481.115036][T27021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 481.206904][T19118] attempt to access beyond end of device [ 481.206904][T19118] loop2: rw=2049, want=45104, limit=40427 [ 481.296638][ T405] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 481.666755][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.686723][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.696265][ T405] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.736650][ T405] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.750428][ T405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.767472][ T405] usb 2-1: config 0 descriptor?? [ 481.817685][T27046] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 481.868014][T27048] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,noload,debug_want_extra_isize=0x0000000000000008,inlinecrypt,grpjquota=,noauto_da_alloc,journal_dev=0x0000000000000002,acl,resgid=0x000000000000ee01,,errors=continue [ 482.040251][ T23] audit: type=1400 audit(2000000357.932:34618): avc: denied { listen } for pid=27063 comm="syz.2.10509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.076657][ T23] audit: type=1400 audit(2000000357.952:34619): avc: denied { accept } for pid=27063 comm="syz.2.10509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.201155][T27055] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 482.218705][T27055] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 482.231000][T27055] F2FS-fs (loop7): invalid crc value [ 482.237944][T27055] F2FS-fs (loop7): Found nat_bits in checkpoint [ 482.258097][ T405] plantronics 0003:047F:FFFF.0098: unbalanced collection at end of report description [ 482.273409][ T405] plantronics 0003:047F:FFFF.0098: parse failed [ 482.287374][ T405] plantronics: probe of 0003:047F:FFFF.0098 failed with error -22 [ 482.315119][T27055] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 482.322155][T27055] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 482.459951][ T405] usb 2-1: USB disconnect, device number 38 [ 482.988723][T27080] overlayfs: './file0' not a directory [ 483.446795][T27077] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 483.464756][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:2' failed: Read-only file system [ 483.478510][T27077] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 483.490098][T27077] F2FS-fs (loop2): invalid crc value [ 483.502017][T27077] F2FS-fs (loop2): Found nat_bits in checkpoint [ 483.543697][T27077] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 483.550875][T27077] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 483.565225][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:2' failed: Read-only file system [ 483.625444][T27094] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 483.634912][T23252] udevd[23252]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system [ 483.638124][T27094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.679754][T27094] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 23 @ nid 36 [ 483.707027][T27094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.731143][T27094] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 22 @ nid 36 [ 483.741893][T27096] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.753526][T27096] erofs: (device loop7): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 483.763448][T27094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.775461][T27094] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 21 @ nid 36 [ 483.786144][T27094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.797974][T27094] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 20 @ nid 36 [ 483.808325][T27094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.820218][T27094] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 19 @ nid 36 [ 483.834376][T27094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 483.846253][T27094] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 18 @ nid 36 [ 483.941739][ T23] audit: type=1400 audit(2000000359.832:34620): avc: denied { read } for pid=27100 comm="syz.1.10521" name="msr" dev="devtmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 483.981451][T27098] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 483.991007][T23252] udevd[23252]: symlink '../../loop7' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:7' failed: Read-only file system [ 484.021235][T23252] udevd[23252]: symlink '../../loop7' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:7' failed: Read-only file system [ 484.027298][ T23] audit: type=1400 audit(2000000359.832:34621): avc: denied { open } for pid=27100 comm="syz.1.10521" path="/dev/cpu/0/msr" dev="devtmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 484.160147][ T103] tipc: Left network mode [ 484.417637][T27110] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.424480][T27110] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.432385][T27110] device bridge_slave_0 entered promiscuous mode [ 484.440007][T27110] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.456636][T27110] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.464166][T27110] device bridge_slave_1 entered promiscuous mode [ 484.624481][T27110] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.631336][T27110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.638489][T27110] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.645317][T27110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.681880][T27120] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.691016][T27120] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.706911][ T23] audit: type=1400 audit(2000000360.602:34622): avc: denied { write } for pid=27132 comm="syz.2.10533" name="rtc0" dev="devtmpfs" ino=9550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 484.731204][T27120] device bridge_slave_0 entered promiscuous mode [ 484.750808][T27120] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.757745][T27120] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.767431][T27120] device bridge_slave_1 entered promiscuous mode [ 484.788016][T27135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10534'. [ 484.829329][ T103] device bridge_slave_1 left promiscuous mode [ 484.836919][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.845115][ T103] device bridge_slave_0 left promiscuous mode [ 484.867137][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.955319][T27141] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 484.969596][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.980528][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.988112][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.004736][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.012873][T27141] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.019486][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.029975][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.062325][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.070516][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.077373][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.095643][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.103732][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.137649][ T23] audit: type=1400 audit(2000000361.032:34623): avc: denied { mount } for pid=27151 comm="syz.2.10542" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 485.201130][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.211639][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.250203][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.263965][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.287154][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.295264][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.304220][T27167] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 485.333617][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.343783][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.353423][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.361896][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.407155][T27169] tipc: Started in network mode [ 485.421996][T27169] tipc: Own node identity ac14140f, cluster identity 4711 [ 485.437556][T27169] tipc: New replicast peer: 255.255.255.255 [ 485.456952][T27169] tipc: Enabled bearer , priority 10 [ 485.468714][ T103] tipc: Left network mode [ 485.480264][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.496291][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.505243][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.514567][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.522871][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.529716][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.537229][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.545433][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.553841][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.560695][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.584209][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.599540][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.614738][T27157] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 485.629512][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 485.631693][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.644287][T27157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 485.652934][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.665881][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 485.678966][T27157] F2FS-fs (loop2): invalid crc value [ 485.694483][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.702449][T27157] F2FS-fs (loop2): Found nat_bits in checkpoint [ 485.713392][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.732600][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.745479][T27157] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 485.749751][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.752843][T27157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 485.761528][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.778311][T23252] udevd[23252]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 485.806508][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.816011][ T404] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 485.821828][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.829569][ T404] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 485.906898][ T5] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 485.990257][T27219] tipc: Enabling of bearer rejected, already enabled [ 486.106930][ T103] device bridge_slave_1 left promiscuous mode [ 486.113073][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.120767][ T103] device bridge_slave_0 left promiscuous mode [ 486.126899][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.142193][T27212] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 486.149917][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 486.161968][T23252] udevd[23252]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 486.176792][T27212] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 486.200453][T23252] udevd[23252]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 486.223046][T27212] F2FS-fs (loop4): invalid crc value [ 486.256474][T27212] F2FS-fs (loop4): Found nat_bits in checkpoint [ 486.276760][ T5] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 486.296838][ T5] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.313932][T27212] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 486.317277][ T5] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.320851][T27212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 486.358300][ T5] usb 6-1: config 0 interface 0 has no altsetting 0 [ 486.364921][ T5] usb 6-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 486.374182][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.401284][ T5] usb 6-1: config 0 descriptor?? [ 486.576709][ T422] tipc: 32-bit node address hash set to f1414ac [ 486.602619][T27242] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 486.893578][ T5] playstation 0003:054C:0CE6.0099: unknown main item tag 0x0 [ 486.913311][ T5] playstation 0003:054C:0CE6.0099: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.5-1/input0 [ 487.326912][ T5] playstation 0003:054C:0CE6.0099: Failed to retrieve feature with reportID 32: -71 [ 487.340699][ T5] playstation 0003:054C:0CE6.0099: Failed to retrieve DualSense firmware info: -71 [ 487.359419][ T5] playstation 0003:054C:0CE6.0099: Failed to get firmware info from DualSense [ 487.380842][ T5] playstation 0003:054C:0CE6.0099: Failed to create dualsense. [ 487.401499][ T5] playstation: probe of 0003:054C:0CE6.0099 failed with error -71 [ 487.414601][ T5] usb 6-1: USB disconnect, device number 25 [ 488.166638][ T4773] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 488.350333][T27317] input: syz0 as /devices/virtual/input/input117 [ 488.526711][ T4773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.536940][ T4773] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 488.549995][ T4773] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 488.558860][ T4773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.567740][ T4773] usb 2-1: config 0 descriptor?? [ 489.050365][ T4773] waltop 0003:172F:0502.009A: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.1-1/input0 [ 489.238003][T27378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10638'. [ 489.250732][ T5] usb 2-1: USB disconnect, device number 39 [ 490.068780][T27419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10656'. [ 490.177605][T27431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10661'. [ 490.186399][T27431] device lo left promiscuous mode [ 491.130006][T27475] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 491.339612][T27481] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 491.349240][T27481] SELinux: failed to load policy [ 491.375210][T27485] veth1_to_hsr: mtu greater than device maximum [ 491.528762][T27502] xt_hashlimit: size too large, truncated to 1048576 [ 492.026843][ T423] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 492.386765][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.397459][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.407016][ T423] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.419671][ T423] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.428744][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.437600][ T423] usb 2-1: config 0 descriptor?? [ 492.917687][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.924866][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.932132][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.939292][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.946478][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.953831][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.961015][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.968226][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.975406][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.982643][ T423] plantronics 0003:047F:FFFF.009B: unknown main item tag 0x0 [ 492.989824][ T423] plantronics 0003:047F:FFFF.009B: report_id 0 is invalid [ 492.996792][ T423] plantronics 0003:047F:FFFF.009B: item 0 1 1 8 parsing failed [ 493.004326][ T423] plantronics 0003:047F:FFFF.009B: parse failed [ 493.010429][ T423] plantronics: probe of 0003:047F:FFFF.009B failed with error -22 [ 493.120839][ T423] usb 2-1: USB disconnect, device number 40 [ 502.354770][ T23] audit: type=1400 audit(2000000378.242:34624): avc: denied { read } for pid=27534 comm="syz.0.10702" name="loop-control" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 502.355271][T27535] ================================================================== [ 502.387135][T27535] BUG: KASAN: use-after-free in __mutex_lock+0xcd7/0x1060 [ 502.394064][T27535] Read of size 4 at addr ffff8881e0902f78 by task syz.0.10702/27535 [ 502.401867][T27535] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.404048][T27535] CPU: 0 PID: 27535 Comm: syz.0.10702 Tainted: G W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 502.415239][T27535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.417381][ T23] audit: type=1400 audit(2000000378.242:34625): avc: denied { open } for pid=27534 comm="syz.0.10702" path="/dev/loop-control" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 502.425126][T27535] Call Trace: [ 502.425143][T27535] dump_stack+0x1d8/0x241 [ 502.425155][T27535] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 502.425163][T27535] ? printk+0xd1/0x111 [ 502.425173][T27535] ? __mutex_lock+0xcd7/0x1060 [ 502.425183][T27535] print_address_description+0x8c/0x600 [ 502.425196][T27535] ? slow_avc_audit+0x26c/0x3c0 [ 502.425207][T27535] ? __mutex_lock+0xcd7/0x1060 [ 502.425216][T27535] __kasan_report+0xf3/0x120 [ 502.425226][T27535] ? __mutex_lock+0xcd7/0x1060 [ 502.425236][T27535] kasan_report+0x30/0x60 [ 502.425246][T27535] __mutex_lock+0xcd7/0x1060 [ 502.425264][T27535] ? avc_has_extended_perms+0xafc/0x1120 [ 502.509161][T27535] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 502.511331][ T23] audit: type=1400 audit(2000000378.242:34626): avc: denied { ioctl } for pid=27534 comm="syz.0.10702" path="/dev/loop-control" dev="devtmpfs" ino=9409 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 502.515758][T27535] ? avc_flush+0x1f0/0x1f0 [ 502.546310][T27535] mutex_lock_killable+0xd8/0x110 [ 502.551164][T27535] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 502.557498][T27535] ? do_futex+0x13fe/0x19f0 [ 502.561835][T27535] loop_control_ioctl+0x95/0x620 [ 502.566610][T27535] ? loop_remove+0xa0/0xa0 [ 502.570870][T27535] ? loop_remove+0xa0/0xa0 [ 502.572685][ T23] audit: type=1400 audit(2000000378.302:34627): avc: denied { write } for pid=344 comm="syz-executor" path="pipe:[11415]" dev="pipefs" ino=11415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 502.575119][T27535] do_vfs_ioctl+0x742/0x1720 [ 502.602639][T27535] ? ioctl_preallocate+0x250/0x250 [ 502.607589][T27535] ? __fget+0x407/0x490 [ 502.611573][T27535] ? fget_many+0x20/0x20 [ 502.615648][T27535] ? switch_fpu_return+0x1d4/0x410 [ 502.620598][T27535] ? security_file_ioctl+0x7d/0xa0 [ 502.625541][T27535] __x64_sys_ioctl+0xd4/0x110 [ 502.630055][T27535] do_syscall_64+0xca/0x1c0 [ 502.634400][T27535] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 502.640123][T27535] RIP: 0033:0x7f1a819ba169 [ 502.644376][T27535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.663820][T27535] RSP: 002b:00007f1a80024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.672062][T27535] RAX: ffffffffffffffda RBX: 00007f1a81bd2fa0 RCX: 00007f1a819ba169 [ 502.679875][T27535] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000003 [ 502.687684][T27535] RBP: 00007f1a81a3b2a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.695490][T27535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.703399][T27535] R13: 0000000000000000 R14: 00007f1a81bd2fa0 R15: 00007fff1e5053a8 [ 502.711212][T27535] [ 502.713378][T27535] Allocated by task 27270: [ 502.717642][T27535] __kasan_kmalloc+0x171/0x210 [ 502.722240][T27535] kmem_cache_alloc+0xd9/0x250 [ 502.726843][T27535] dup_task_struct+0x4f/0x600 [ 502.731353][T27535] copy_process+0x56d/0x3230 [ 502.735779][T27535] _do_fork+0x197/0x900 [ 502.739771][T27535] __x64_sys_clone3+0x2da/0x300 [ 502.744454][T27535] do_syscall_64+0xca/0x1c0 [ 502.748794][T27535] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 502.754516][T27535] [ 502.756694][T27535] Freed by task 10: [ 502.760345][T27535] __kasan_slab_free+0x1b5/0x270 [ 502.765121][T27535] kmem_cache_free+0x10b/0x2c0 [ 502.769720][T27535] rcu_do_batch+0x492/0xa00 [ 502.774051][T27535] rcu_core+0x4c8/0xcb0 [ 502.778051][T27535] __do_softirq+0x23b/0x6b7 [ 502.782376][T27535] [ 502.784550][T27535] The buggy address belongs to the object at ffff8881e0902f40 [ 502.784550][T27535] which belongs to the cache task_struct of size 3904 [ 502.798528][T27535] The buggy address is located 56 bytes inside of [ 502.798528][T27535] 3904-byte region [ffff8881e0902f40, ffff8881e0903e80) [ 502.811630][T27535] The buggy address belongs to the page: [ 502.817121][T27535] page:ffffea0007824000 refcount:1 mapcount:0 mapping:ffff8881f5cf0c80 index:0x0 compound_mapcount: 0 [ 502.827987][T27535] flags: 0x8000000000010200(slab|head) [ 502.831304][T27537] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.833266][T27535] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5cf0c80 [ 502.848532][T27535] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 502.856943][T27535] page dumped because: kasan: bad access detected [ 502.863199][T27535] page_owner tracks the page as allocated [ 502.868752][T27535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 502.883597][T27535] prep_new_page+0x18f/0x370 [ 502.888019][T27535] get_page_from_freelist+0x2d13/0x2d90 [ 502.893397][T27535] __alloc_pages_nodemask+0x393/0x840 [ 502.898607][T27535] alloc_slab_page+0x39/0x3c0 [ 502.903120][T27535] new_slab+0x97/0x440 [ 502.907026][T27535] ___slab_alloc+0x2fe/0x490 [ 502.911448][T27535] __slab_alloc+0x62/0xa0 [ 502.915616][T27535] kmem_cache_alloc+0x109/0x250 [ 502.920305][T27535] dup_task_struct+0x4f/0x600 [ 502.924817][T27535] copy_process+0x56d/0x3230 [ 502.929244][T27535] _do_fork+0x197/0x900 [ 502.933236][T27535] __x64_sys_clone3+0x2da/0x300 [ 502.937924][T27535] do_syscall_64+0xca/0x1c0 [ 502.942261][T27535] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 502.947985][T27535] page last free stack trace: [ 502.952503][T27535] __free_pages_ok+0x847/0x950 [ 502.957103][T27535] __free_pages+0x91/0x140 [ 502.961359][T27535] put_task_stack+0x212/0x260 [ 502.965879][T27535] finish_task_switch+0x24a/0x590 [ 502.970732][T27535] __schedule+0xb0d/0x1320 [ 502.974983][T27535] schedule_idle+0x50/0x80 [ 502.979237][T27535] do_idle+0x609/0x660 [ 502.983140][T27535] cpu_startup_entry+0x14/0x20 [ 502.987742][T27535] start_kernel+0x6d9/0x81d [ 502.992079][T27535] secondary_startup_64+0xa4/0xb0 [ 502.996938][T27535] [ 502.999107][T27535] Memory state around the buggy address: [ 503.004579][T27535] ffff8881e0902e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.012476][T27535] ffff8881e0902e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 503.020375][T27535] >ffff8881e0902f00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 503.028278][T27535] ^ [ 503.036087][T27535] ffff8881e0902f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.043981][T27535] ffff8881e0903000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.051878][T27535] ================================================================== [ 503.059774][T27535] Disabling lock debugging due to kernel taint [ 503.065838][T27537] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.081900][T27537] device bridge_slave_0 entered promiscuous mode [ 503.097547][T27537] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.104389][T27537] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.127609][T27537] device bridge_slave_1 entered promiscuous mode [ 503.163442][T27535] device syz_tun left promiscuous mode [ 503.168743][T27535] bridge0: port 3(syz_tun) entered disabled state [ 503.199392][ T404] tipc: Disabling bearer [ 503.204523][ T404] tipc: Left network mode [ 503.240264][T27537] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.247139][T27537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.254280][T27537] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.261088][T27537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.302811][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.310718][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.318046][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 503.325235][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.358086][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.366423][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.373269][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.381184][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.390084][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.396928][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.410186][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.419819][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.438217][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.450109][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.465438][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.479116][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.489751][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.907064][ T404] device bridge_slave_1 left promiscuous mode [ 503.913088][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.547764][ T404] tipc: Disabling bearer [ 504.552961][ T404] tipc: Left network mode [ 505.847462][ T404] device bridge_slave_1 left promiscuous mode [ 505.853533][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.860845][ T404] device bridge_slave_0 left promiscuous mode [ 505.866851][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.874090][ T404] device bridge_slave_1 left promiscuous mode [ 505.880042][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.887203][ T404] device bridge_slave_0 left promiscuous mode [ 505.893095][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.900462][ T404] device bridge_slave_1 left promiscuous mode [ 505.906378][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.913576][ T404] device bridge_slave_0 left promiscuous mode [ 505.919585][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.927148][ T404] device bridge_slave_1 left promiscuous mode [ 505.933044][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.940429][ T404] device bridge_slave_0 left promiscuous mode [ 505.946351][ T404] bridge0: port 1(bridge_slave_0) entered disabled state