last executing test programs: 40.95691741s ago: executing program 32 (id=240): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x80, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf254, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x800004, 0x0, 0x800001ff, 0x8000, 0x3ff, 0x4, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x43, 0x0, 0x5, 0x75, 0x1, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x2, 0x981, 0x4, 0x100, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x1000000, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x100, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x400, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x8, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x956, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x0, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x83ab0f28, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x404, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x7, 0x80, 0x2, 0x5, 0x8800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x6, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x18) 36.445589786s ago: executing program 2 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xf542) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r2, 0x4}) 36.394328949s ago: executing program 2 (id=329): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000190c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 36.282064825s ago: executing program 2 (id=333): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000100), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 36.242021428s ago: executing program 2 (id=344): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000440)=[r0]}, 0x1) 36.137752244s ago: executing program 2 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 36.105161026s ago: executing program 2 (id=337): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000180), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 36.035168769s ago: executing program 33 (id=337): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000180), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 28.498158584s ago: executing program 6 (id=467): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.452742036s ago: executing program 6 (id=470): syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x200004, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@nobarrier}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') 28.218495429s ago: executing program 6 (id=472): madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000038b000/0x3000)=nil, 0x3000, 0x15) 27.973687004s ago: executing program 6 (id=478): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000001c0), 0x1, 0xbd6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 27.674812832s ago: executing program 6 (id=484): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) 26.553774507s ago: executing program 6 (id=502): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 26.488367902s ago: executing program 34 (id=502): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 25.953225823s ago: executing program 4 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 25.922022285s ago: executing program 4 (id=511): unshare(0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2a}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0x6, @mcast1, 0xbfd}}, {{0xa, 0x4625, 0x0, @remote, 0xfffffe01}}}, 0x108) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 25.901890576s ago: executing program 4 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$unix(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x30, 0x4008095}}], 0x1, 0x44044) 25.881592167s ago: executing program 4 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 25.859039519s ago: executing program 4 (id=514): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 25.710873017s ago: executing program 4 (id=517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 25.614892643s ago: executing program 35 (id=517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 25.084185684s ago: executing program 1 (id=523): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d5a6ef3912ffc9b77afbf73ee0572d3ff2d9a4f095765f46b73db181e33b6329f092aedeb0658090e3ba2548b5ed6255f818b1f64dec466a6320db81304d281dac7087f9db0000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="11"], 0x14) 25.042989486s ago: executing program 1 (id=524): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x9, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 24.961684501s ago: executing program 1 (id=526): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@abort}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x490, &(0x7f0000000f00)="$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") statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 24.656799769s ago: executing program 1 (id=537): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000001c0), 0x1, 0xbd6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 24.392770625s ago: executing program 1 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x5, 0x3, 0x65, 0x80000000, 0x8, 0x0, 0x8]}}) 23.573621083s ago: executing program 1 (id=546): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x420e, r0, 0x0, 0x1000000000000) 23.522753656s ago: executing program 36 (id=546): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x420e, r0, 0x0, 0x1000000000000) 9.764430995s ago: executing program 7 (id=877): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 9.746776616s ago: executing program 7 (id=878): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x13, 0x0, 0x0) 7.632390061s ago: executing program 7 (id=950): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$loop(0x0, 0x7, 0x180862) 7.631852281s ago: executing program 7 (id=951): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f0000000200)='./file0/file1\x00') 7.525983037s ago: executing program 7 (id=953): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000140021052bbd7000fbdbdf250a4000fe", @ANYRES32=r2, @ANYBLOB="08000a00040000000800080086060000140006000200000008000000010000000800000014000200ff"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44080) 7.189994337s ago: executing program 7 (id=957): socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 7.121605451s ago: executing program 37 (id=957): socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 6.275018101s ago: executing program 5 (id=968): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@discard}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001080)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.926095411s ago: executing program 5 (id=969): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffffc}) 3.89614595s ago: executing program 5 (id=1018): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.873348902s ago: executing program 5 (id=1019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f0000000040)) 3.857829993s ago: executing program 5 (id=1020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.093718046s ago: executing program 5 (id=1045): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xfffe, 0x1, 0x81, 0x8, 0x5071, 0x9, 0x40, 0x101, 0x401, 0x15, 0x7, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.119431104s ago: executing program 9 (id=1063): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x9, 0x400, 0xcad4, 0x50, 0x9, 0x4, 0x0, 0x0, 0x40, 0x5}}, 0x50) 1.048961678s ago: executing program 9 (id=1065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x404, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40850) 962.316963ms ago: executing program 9 (id=1076): r0 = eventfd2(0x200000d, 0x1) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xc0000000}) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 880.971248ms ago: executing program 0 (id=1069): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44890, &(0x7f0000000000)={0xa, 0x4e24, 0xe, @mcast2={0xff, 0x5}, 0xfffffff9}, 0x1c) 866.063109ms ago: executing program 9 (id=1070): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) 813.711621ms ago: executing program 0 (id=1071): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x4, @random="2000f040f10b"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xde46f1e64a0e3aa4}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @remote}, 0x10) 787.538493ms ago: executing program 0 (id=1072): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) lseek(r0, 0xfffffffffffff000, 0x2) 767.738784ms ago: executing program 9 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004040000f4"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 745.456936ms ago: executing program 9 (id=1074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003130000001b0316324ebaafc608651e00000000000000005f4010"], 0x0, 0x0, 0x0}, 0x0) 630.061652ms ago: executing program 8 (id=1075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 423.028585ms ago: executing program 8 (id=1079): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) 422.580424ms ago: executing program 8 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x38, r1, 0xddefeadf8d8ffc21, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0d4}, 0x4044014) 409.710335ms ago: executing program 8 (id=1081): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 374.981897ms ago: executing program 0 (id=1082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) 265.821234ms ago: executing program 8 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 254.384925ms ago: executing program 8 (id=1084): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2f, {0x2f, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b1461dd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) 113.485023ms ago: executing program 0 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 110.742623ms ago: executing program 3 (id=1088): unshare(0x62000000) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'nat\x00', 0x0, [0xb, 0x85, 0x71, 0x4, 0xfffffdfc]}, &(0x7f0000000000)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000004c0)={'security\x00', 0x0, [0x3, 0xffffffff, 0x9, 0x10000]}, &(0x7f0000000400)=0x54) 77.646895ms ago: executing program 0 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r0) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 25.591568ms ago: executing program 3 (id=1090): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x1, &(0x7f0000000040)=ANY=[], 0xfd, 0x1fe, &(0x7f0000000580)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x6306df43ce245367, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 25.278018ms ago: executing program 3 (id=1091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.293928ms ago: executing program 3 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 10.896079ms ago: executing program 3 (id=1093): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x60000000) 0s ago: executing program 3 (id=1094): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090d810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ing removed orlov option [ 48.571149][ T1456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.598107][ T1456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 48.651979][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.678141][ T1200] EXT4-fs (loop6): unmounting filesystem. [ 49.035588][ T812] Bluetooth: hci0: command 0x1003 tx timeout [ 49.035604][ T460] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.105415][ T1028] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 49.262743][ T1494] loop1: detected capacity change from 0 to 40427 [ 49.270981][ T1494] F2FS-fs (loop1): invalid crc value [ 49.277660][ T1494] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.285572][ T1028] usb 5-1: Using ep0 maxpacket: 32 [ 49.292900][ T1028] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.302087][ T1028] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.311078][ T1028] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.314098][ T1494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.320727][ T1028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.352299][ T1028] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.362827][ T1028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 49.375175][ T1028] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 49.387511][ T1028] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.401310][ T1028] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.410910][ T1028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.422909][ T1028] usb 5-1: config 0 descriptor?? [ 49.434013][ T1478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.467141][ T1494] bio_check_eod: 1 callbacks suppressed [ 49.467159][ T1494] syz.1.450: attempt to access beyond end of device [ 49.467159][ T1494] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 49.488045][ T1494] syz.1.450: attempt to access beyond end of device [ 49.488045][ T1494] loop1: rw=2049, sector=126976, nr_sectors = 8 limit=40427 [ 49.509020][ T1494] syz.1.450: attempt to access beyond end of device [ 49.509020][ T1494] loop1: rw=2049, sector=127016, nr_sectors = 4056 limit=40427 [ 49.533244][ T1494] syz.1.450: attempt to access beyond end of device [ 49.533244][ T1494] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 49.572383][ T1494] syz.1.450: attempt to access beyond end of device [ 49.572383][ T1494] loop1: rw=2049, sector=57344, nr_sectors = 8792 limit=40427 [ 49.647510][ T1028] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 49.676082][ T284] syz-executor: attempt to access beyond end of device [ 49.676082][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.693086][ T1503] loop5: detected capacity change from 0 to 40427 [ 49.703059][ T1503] F2FS-fs (loop5): heap/no_heap options were deprecated [ 49.726893][ T1503] F2FS-fs (loop5): fault_injection options not supported [ 49.749907][ T1503] F2FS-fs (loop5): invalid crc value [ 49.753655][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 49.753668][ T28] audit: type=1400 audit(1768951097.155:351): avc: denied { getopt } for pid=1509 comm="syz.6.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.791864][ T1503] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.841171][ T1503] F2FS-fs (loop5): Start checkpoint disabled! [ 49.875872][ T1503] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 49.882880][ C1] usblp0: nonzero read bulk status received: -71 [ 49.883551][ T28] audit: type=1400 audit(1768951097.285:352): avc: denied { read write } for pid=1477 comm="syz.4.444" name="lp0" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 49.897386][ T39] usb 5-1: USB disconnect, device number 6 [ 49.930428][ T1503] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 49.961419][ T39] usblp0: removed [ 49.977254][ T1526] loop0: detected capacity change from 0 to 1024 [ 49.981276][ T28] audit: type=1400 audit(1768951097.285:353): avc: denied { open } for pid=1477 comm="syz.4.444" path="/dev/usb/lp0" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 50.014754][ T1526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.022687][ T1526] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.046339][ T1503] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=10, npages=2 [ 50.053370][ T1526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.056491][ T1503] syz.5.452: attempt to access beyond end of device [ 50.056491][ T1503] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 50.079070][ T286] EXT4-fs (loop0): unmounting filesystem. [ 50.123441][ T28] audit: type=1400 audit(1768951097.525:354): avc: denied { write } for pid=1539 comm="syz.0.465" name="ptype" dev="proc" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.175993][ T1545] loop0: detected capacity change from 0 to 512 [ 50.179498][ T1547] loop6: detected capacity change from 0 to 512 [ 50.191054][ T1547] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 50.194263][ T339] kworker/u4:4: attempt to access beyond end of device [ 50.194263][ T339] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.212236][ T1545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.225752][ T1545] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.229713][ T1547] EXT4-fs (loop6): 1 truncate cleaned up [ 50.282522][ T1547] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 50.297065][ T28] audit: type=1400 audit(1768951097.705:355): avc: denied { append } for pid=1544 comm="syz.0.469" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.305973][ T1552] capability: warning: `syz.1.471' uses 32-bit capabilities (legacy support in use) [ 50.343129][ T1545] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.359074][ T1545] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 50.371647][ T1545] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.371647][ T1545] [ 50.388992][ T1545] EXT4-fs (loop0): Total free blocks count 0 [ 50.395866][ T1545] EXT4-fs (loop0): Free/Dirty block details [ 50.399701][ T1552] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 50.404685][ T1545] EXT4-fs (loop0): free_blocks=65280 [ 50.418157][ T1545] EXT4-fs (loop0): dirty_blocks=2 [ 50.418442][ T1200] EXT4-fs (loop6): unmounting filesystem. [ 50.423289][ T1545] EXT4-fs (loop0): Block reservation details [ 50.431715][ T1554] loop5: detected capacity change from 0 to 2048 [ 50.436421][ T1545] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 50.442621][ T1552] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 50.476364][ T1552] overlayfs: conflicting lowerdir path [ 50.482375][ T1554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 50.519601][ T933] EXT4-fs (loop5): unmounting filesystem. [ 50.528727][ T28] audit: type=1400 audit(1768951097.935:356): avc: denied { mount } for pid=1559 comm="syz.4.473" name="/" dev="ramfs" ino=21510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.563907][ T1562] loop4: detected capacity change from 0 to 1024 [ 50.579721][ T286] EXT4-fs (loop0): unmounting filesystem. [ 50.587901][ T28] audit: type=1400 audit(1768951097.935:357): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.610375][ T1562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.618966][ T1562] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.646232][ T339] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 50.663145][ T339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 50.665261][ T1573] loop0: detected capacity change from 0 to 1024 [ 50.675891][ T339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.675891][ T339] [ 50.687418][ T1572] loop6: detected capacity change from 0 to 4096 [ 50.700830][ T339] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 50.730785][ T339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 50.744325][ T339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.744325][ T339] [ 50.756433][ T39] kernel write not supported for file bpf-map (pid: 39 comm: kworker/1:1) [ 50.758227][ T287] EXT4-fs (loop4): unmounting filesystem. [ 50.777550][ T1573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.807620][ T1572] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 50.835428][ T338] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.902290][ T1589] loop1: detected capacity change from 0 to 128 [ 50.936775][ T286] EXT4-fs (loop0): unmounting filesystem. [ 50.945910][ T1589] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.956344][ T1200] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 50.965715][ T1589] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.020666][ T28] audit: type=1400 audit(1768951098.425:358): avc: denied { create } for pid=1588 comm="syz.1.482" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.066187][ T338] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.098637][ T284] EXT4-fs (loop1): unmounting filesystem. [ 51.114760][ T338] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.120383][ T1595] loop0: detected capacity change from 0 to 1024 [ 51.125615][ T1200] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.190787][ T1595] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.486: inode #778331508: comm syz.0.486: iget: illegal inode # [ 51.217647][ T1599] loop1: detected capacity change from 0 to 256 [ 51.225417][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.233762][ T338] usb 6-1: SerialNumber: syz [ 51.276753][ T1595] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.486: error while reading EA inode 778331508 err=-117 [ 51.319150][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.355793][ T1600] EXT4-fs error (device loop0): ext4_xattr_block_find:1838: inode #15: comm syz.0.486: corrupted xattr block 113 [ 51.359654][ T1200] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.390858][ T1200] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.413065][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.447849][ T1200] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.470374][ T1606] loop1: detected capacity change from 0 to 128 [ 51.483205][ T1200] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.505417][ T1606] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.539450][ T1606] EXT4-fs (loop1): shut down requested (0) [ 51.555669][ T28] audit: type=1400 audit(1768951098.955:359): avc: denied { setattr } for pid=1610 comm="syz.0.492" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.556936][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.606569][ T1200] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.628586][ T28] audit: type=1400 audit(1768951099.005:360): avc: denied { write } for pid=1614 comm="syz.1.494" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.629710][ T1200] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.675792][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.688014][ T1200] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.710172][ T1200] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 51.742838][ T1619] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S [ 51.749196][ T1621] loop4: detected capacity change from 0 to 1024 [ 51.755617][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.772577][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.785821][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.800473][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.806357][ T1625] loop0: detected capacity change from 0 to 128 [ 51.812798][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.831525][ T1200] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 51.866349][ T1625] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.889734][ T338] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 52.309792][ T338] usb 6-1: USB disconnect, device number 3 [ 52.320139][ T338] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 52.422491][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.445431][ T1660] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.476326][ T1660] device bridge_slave_0 entered promiscuous mode [ 52.511187][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.546447][ T1660] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.555790][ T1660] device bridge_slave_1 entered promiscuous mode [ 52.609669][ T10] device bridge_slave_1 left promiscuous mode [ 52.634645][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.653573][ T10] device bridge_slave_0 left promiscuous mode [ 52.675930][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.703245][ T10] device veth1_macvtap left promiscuous mode [ 52.713326][ T10] device veth0_vlan left promiscuous mode [ 52.850406][ T1698] loop5: detected capacity change from 0 to 512 [ 53.013231][ T1708] loop5: detected capacity change from 0 to 256 [ 53.064801][ T1708] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 53.085033][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.092330][ T1660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.099687][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.106856][ T1660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.152709][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.162838][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.242087][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.263797][ T1722] loop1: detected capacity change from 0 to 128 [ 53.264191][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.287966][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.288172][ T1722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.313688][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.317680][ T1696] loop0: detected capacity change from 0 to 40427 [ 53.328954][ T1722] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.334503][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.343008][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.364585][ T1696] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 53.376450][ T1722] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.387803][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.395845][ T1696] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 53.405925][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.412570][ T1696] F2FS-fs (loop0): invalid crc value [ 53.414450][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.426902][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.435070][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.442922][ T1696] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.443700][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.474833][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.497940][ T1718] loop5: detected capacity change from 0 to 40427 [ 53.504484][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.508707][ T1696] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 53.521189][ T1696] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.528955][ T1718] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 53.537371][ T1718] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 53.566723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.595141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.607380][ T1718] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.647603][ T1742] loop1: detected capacity change from 0 to 512 [ 53.659268][ T1742] EXT4-fs: Ignoring removed orlov option [ 53.659995][ T1660] device veth0_vlan entered promiscuous mode [ 53.679704][ T1718] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 53.686677][ T1742] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.526: corrupted in-inode xattr [ 53.687415][ T1718] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 53.711408][ T1742] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.526: couldn't read orphan inode 15 (err -117) [ 53.726227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.741111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.760772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.784677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.809683][ T1660] device veth1_macvtap entered promiscuous mode [ 53.817320][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.826895][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.835698][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.845537][ T1714] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.852753][ T1714] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.860839][ T1714] device bridge_slave_0 entered promiscuous mode [ 53.875425][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.885595][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.894147][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.902699][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.911824][ T1714] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.923915][ T1714] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.931991][ T1714] device bridge_slave_1 entered promiscuous mode [ 53.990787][ T1751] loop1: detected capacity change from 0 to 4096 [ 54.037915][ T1757] loop5: detected capacity change from 0 to 256 [ 54.046382][ T284] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.088343][ T1757] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.100106][ T284] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.112348][ T1757] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 54.125137][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.136815][ T1757] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 54.145008][ T284] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.181868][ T284] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.204428][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.255607][ T284] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.279793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.289501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.289707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.289867][ T1773] loop0: detected capacity change from 0 to 256 [ 54.289902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.290043][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.290056][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.290191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.290433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.290611][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.290623][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.290746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.293995][ T10] device bridge_slave_1 left promiscuous mode [ 54.294073][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.294701][ T10] device bridge_slave_0 left promiscuous mode [ 54.302840][ T284] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.325474][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.363773][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.376454][ T1773] FAT-fs (loop0): Directory bread(block 64) failed [ 54.385844][ T284] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.393215][ T1773] FAT-fs (loop0): Directory bread(block 65) failed [ 54.455690][ T284] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.467736][ T1773] FAT-fs (loop0): Directory bread(block 66) failed [ 54.505684][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.526617][ T284] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.535433][ T1773] FAT-fs (loop0): Directory bread(block 67) failed [ 54.555763][ T10] device veth1_macvtap left promiscuous mode [ 54.562422][ T1773] FAT-fs (loop0): Directory bread(block 68) failed [ 54.564569][ T10] device veth0_vlan left promiscuous mode [ 54.569565][ T1773] FAT-fs (loop0): Directory bread(block 69) failed [ 54.575846][ T1776] cgroup: noprefix used incorrectly [ 54.587542][ T284] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 54.591715][ T1773] FAT-fs (loop0): Directory bread(block 70) failed [ 54.608803][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.636008][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.645429][ T1773] FAT-fs (loop0): Directory bread(block 71) failed [ 54.657361][ T1773] FAT-fs (loop0): Directory bread(block 72) failed [ 54.669948][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.687803][ T1773] FAT-fs (loop0): Directory bread(block 73) failed [ 54.703470][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.726265][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.757447][ T284] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 54.800696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.814350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.831493][ T1577] kworker/u4:6: attempt to access beyond end of device [ 54.831493][ T1577] loop0: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 54.859886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.880037][ T1789] input: syz0 as /devices/virtual/input/input10 [ 54.891280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.908851][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 54.908866][ T28] audit: type=1400 audit(1768951102.315:381): avc: denied { setopt } for pid=1790 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.980210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.005685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.015219][ T1795] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.046808][ T1795] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 55.079449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.102388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.127546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.144026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.172298][ T1714] device veth0_vlan entered promiscuous mode [ 55.203662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.212367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.237137][ T1714] device veth1_macvtap entered promiscuous mode [ 55.260119][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.272036][ T1808] loop5: detected capacity change from 0 to 512 [ 55.272085][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.308361][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.320769][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.338265][ T28] audit: type=1400 audit(1768951102.745:382): avc: denied { watch } for pid=1807 comm="syz.5.551" path="/68/file0/control" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.406488][ T1818] loop8: detected capacity change from 0 to 512 [ 55.453162][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.461678][ T1806] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.470959][ T1818] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.483845][ T28] audit: type=1400 audit(1768951102.885:383): avc: denied { read } for pid=1831 comm="syz.5.558" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.488000][ T1832] binder: 1831:1832 ioctl c0306201 0 returned -14 [ 55.514236][ T1806] device bridge_slave_0 entered promiscuous mode [ 55.514322][ T28] audit: type=1400 audit(1768951102.885:384): avc: denied { open } for pid=1831 comm="syz.5.558" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.526788][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.552020][ T28] audit: type=1400 audit(1768951102.895:385): avc: denied { ioctl } for pid=1831 comm="syz.5.558" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.579485][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.594529][ T1806] device bridge_slave_1 entered promiscuous mode [ 55.601770][ T1818] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 55.620994][ T1818] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 55.634397][ T1818] EXT4-fs (loop8): This should not happen!! Data will be lost [ 55.634397][ T1818] [ 55.645464][ T1818] EXT4-fs (loop8): Total free blocks count 0 [ 55.651725][ T1818] EXT4-fs (loop8): Free/Dirty block details [ 55.662570][ T1818] EXT4-fs (loop8): free_blocks=65280 [ 55.671456][ T1818] EXT4-fs (loop8): dirty_blocks=2 [ 55.676828][ T1818] EXT4-fs (loop8): Block reservation details [ 55.685922][ T1818] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 55.719167][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.726263][ T1806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.733635][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.740974][ T1806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.859319][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.868273][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.885659][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.920519][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.930996][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.938266][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.946634][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.953317][ T1855] loop8: detected capacity change from 0 to 512 [ 55.956281][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.968109][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.978043][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.991861][ T1855] EXT4-fs: Ignoring removed nobh option [ 56.011946][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.032013][ T1855] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 56.042639][ T1861] loop0: detected capacity change from 0 to 128 [ 56.052543][ T1806] device veth0_vlan entered promiscuous mode [ 56.059140][ T1855] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.565: invalid indirect mapped block 256 (level 1) [ 56.073860][ T1855] EXT4-fs (loop8): Remounting filesystem read-only [ 56.081093][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.081745][ T1855] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.565: invalid indirect mapped block 2683928664 (level 1) [ 56.104415][ T1855] EXT4-fs (loop8): Remounting filesystem read-only [ 56.111399][ T1855] EXT4-fs (loop8): 1 truncate cleaned up [ 56.117562][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.125159][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.145884][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.165798][ T10] device bridge_slave_1 left promiscuous mode [ 56.195976][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.208355][ T10] device bridge_slave_0 left promiscuous mode [ 56.214508][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.228962][ T1867] loop8: detected capacity change from 0 to 4096 [ 56.236453][ T10] device veth1_macvtap left promiscuous mode [ 56.243032][ T10] device veth0_vlan left promiscuous mode [ 56.462632][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.471587][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.488649][ T1806] device veth1_macvtap entered promiscuous mode [ 56.540198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.550147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.590234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.609423][ T1882] loop0: detected capacity change from 0 to 512 [ 56.616692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.643591][ T1882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.648930][ T1890] loop8: detected capacity change from 0 to 256 [ 56.652830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.662320][ T1888] loop7: detected capacity change from 0 to 1024 [ 56.675689][ T1890] exfat: Deprecated parameter 'utf8' [ 56.688574][ T1888] EXT4-fs: Ignoring removed orlov option [ 56.711771][ T1890] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 56.746209][ T1882] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.816829][ T28] audit: type=1400 audit(1768951104.225:386): avc: denied { write } for pid=1902 comm="syz.7.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.889880][ T1893] loop5: detected capacity change from 0 to 40427 [ 56.892767][ T1909] loop7: detected capacity change from 0 to 2048 [ 56.900091][ T1893] F2FS-fs (loop5): invalid crc value [ 56.911217][ T1893] F2FS-fs (loop5): Found nat_bits in checkpoint [ 56.982581][ T1893] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 57.016553][ T1909] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.017872][ T1920] loop0: detected capacity change from 0 to 512 [ 57.042996][ T1909] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 57.055704][ T1920] EXT4-fs: Ignoring removed i_version option [ 57.056840][ T1893] F2FS-fs (loop5): access invalid blkaddr:4043309056 [ 57.069048][ T1909] EXT4-fs (loop7): This should not happen!! Data will be lost [ 57.069048][ T1909] [ 57.069128][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 57.079229][ T1893] CPU: 1 PID: 1893 Comm: syz.5.580 Tainted: G W syzkaller #0 [ 57.079257][ T1893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.079267][ T1893] Call Trace: [ 57.102006][ T1920] incfs: Error allocating mount info. -12 [ 57.106825][ T1893] [ 57.106842][ T1893] __dump_stack+0x21/0x24 [ 57.106868][ T1893] dump_stack_lvl+0x110/0x170 [ 57.106884][ T1893] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.106900][ T1893] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 57.106923][ T1893] dump_stack+0x15/0x24 [ 57.111253][ T1920] incfs: mount failed -12 [ 57.117195][ T1893] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 57.117238][ T1893] f2fs_is_valid_blkaddr+0x23/0x30 [ 57.117255][ T1893] f2fs_map_blocks+0xd43/0x3ba0 [ 57.117269][ T1893] ? arch_stack_walk+0x118/0x150 [ 57.117300][ T1893] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 57.175785][ T1893] ? __alloc_pages+0x1d9/0x480 [ 57.180566][ T1893] ? __folio_alloc+0x12/0x40 [ 57.185589][ T1893] ? xas_start+0x317/0x3e0 [ 57.190013][ T1893] ? xas_load+0x39e/0x3b0 [ 57.194444][ T1893] ? xa_load+0xad/0xd0 [ 57.198522][ T1893] f2fs_mpage_readpages+0xa6c/0x1bb0 [ 57.203806][ T1893] ? dquot_release_reservation_block+0xa0/0xa0 [ 57.210207][ T1893] ? cgroup_rstat_updated+0xf5/0x360 [ 57.216041][ T1893] ? xas_nomem+0x6b/0x1f0 [ 57.220380][ T1893] f2fs_readahead+0xfc/0x240 [ 57.224994][ T1893] ? __cfi_f2fs_readahead+0x10/0x10 [ 57.230213][ T1893] read_pages+0x1c2/0xde0 [ 57.234552][ T1893] ? __cfi___filemap_add_folio+0x10/0x10 [ 57.240193][ T1893] ? page_cache_ra_unbounded+0x730/0x730 [ 57.246038][ T1893] ? folio_add_lru+0x26a/0x480 [ 57.251025][ T1893] page_cache_ra_unbounded+0x5e5/0x730 [ 57.256689][ T1893] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 57.262684][ T1893] ? __switch_to_asm+0x3a/0x60 [ 57.267808][ T1893] ? __schedule+0xbae/0x1500 [ 57.273183][ T1893] do_page_cache_ra+0xf2/0x110 [ 57.278547][ T1893] ondemand_readahead+0xa49/0xdc0 [ 57.283656][ T1893] ? page_cache_sync_ra+0x490/0x490 [ 57.289042][ T1893] page_cache_sync_ra+0x41b/0x490 [ 57.294341][ T1893] f2fs_readdir+0x46f/0x990 [ 57.298855][ T1893] ? __cfi_f2fs_readdir+0x10/0x10 [ 57.304142][ T1893] ? down_read_killable+0xbc/0x110 [ 57.309761][ T1893] ? __cfi_down_read_killable+0x10/0x10 [ 57.315390][ T1893] ? fsnotify_perm+0x269/0x5b0 [ 57.320333][ T1893] ? security_file_permission+0x94/0xb0 [ 57.325866][ T1893] iterate_dir+0x271/0x610 [ 57.330266][ T1893] ? __cfi_f2fs_readdir+0x10/0x10 [ 57.335449][ T1893] __se_sys_getdents64+0xf2/0x250 [ 57.340464][ T1893] ? __x64_sys_getdents64+0x90/0x90 [ 57.345652][ T1893] ? xfd_validate_state+0x70/0x150 [ 57.350953][ T1893] ? __cfi_filldir64+0x10/0x10 [ 57.355916][ T1893] ? fpregs_restore_userregs+0x128/0x260 [ 57.361736][ T1893] __x64_sys_getdents64+0x7b/0x90 [ 57.366911][ T1893] x64_sys_call+0x15c/0x9a0 [ 57.371399][ T1893] do_syscall_64+0x4c/0xa0 [ 57.375988][ T1893] ? clear_bhb_loop+0x30/0x80 [ 57.380745][ T1893] ? clear_bhb_loop+0x30/0x80 [ 57.385769][ T1893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.392346][ T1893] RIP: 0033:0x7f4b8b59acb9 [ 57.396833][ T1893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.416895][ T1893] RSP: 002b:00007f4b8c439028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 57.425332][ T1893] RAX: ffffffffffffffda RBX: 00007f4b8b815fa0 RCX: 00007f4b8b59acb9 [ 57.433298][ T1893] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000005 [ 57.441439][ T1893] RBP: 00007f4b8b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 57.449585][ T1893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.457671][ T1893] R13: 00007f4b8b816038 R14: 00007f4b8b815fa0 R15: 00007ffcd920d718 [ 57.465808][ T1893] [ 57.470895][ T1909] EXT4-fs (loop7): Total free blocks count 0 [ 57.479285][ T1909] EXT4-fs (loop7): Free/Dirty block details [ 57.485508][ T1909] EXT4-fs (loop7): free_blocks=2415919104 [ 57.486103][ T1893] F2FS-fs (loop5): access invalid blkaddr:4043309056 [ 57.491989][ T1909] EXT4-fs (loop7): dirty_blocks=2368 [ 57.498397][ T1893] CPU: 0 PID: 1893 Comm: syz.5.580 Tainted: G W syzkaller #0 [ 57.503685][ T1909] EXT4-fs (loop7): Block reservation details [ 57.512244][ T1893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.512303][ T1893] Call Trace: [ 57.512309][ T1893] [ 57.512319][ T1893] __dump_stack+0x21/0x24 [ 57.512343][ T1893] dump_stack_lvl+0x110/0x170 [ 57.512359][ T1893] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.518693][ T1909] EXT4-fs (loop7): i_reserved_data_blocks=148 [ 57.528658][ T1893] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 57.528686][ T1893] ? f2fs_lookup_read_extent_cache_block+0x257/0x460 [ 57.568175][ T1893] dump_stack+0x15/0x24 [ 57.572420][ T1893] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 57.578225][ T1893] f2fs_is_valid_blkaddr+0x23/0x30 [ 57.583443][ T1893] f2fs_get_read_data_page+0x4ef/0x850 [ 57.588907][ T1893] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 57.595098][ T1893] f2fs_find_data_page+0x198/0x3a0 [ 57.600394][ T1893] f2fs_readdir+0x49e/0x990 [ 57.605064][ T1893] ? __cfi_f2fs_readdir+0x10/0x10 [ 57.610084][ T1893] ? down_read_killable+0xbc/0x110 [ 57.615284][ T1893] ? __cfi_down_read_killable+0x10/0x10 [ 57.621032][ T1893] ? fsnotify_perm+0x269/0x5b0 [ 57.625888][ T1893] ? security_file_permission+0x94/0xb0 [ 57.631656][ T1893] iterate_dir+0x271/0x610 [ 57.636089][ T1893] ? __cfi_f2fs_readdir+0x10/0x10 [ 57.641287][ T1893] __se_sys_getdents64+0xf2/0x250 [ 57.646576][ T1893] ? __x64_sys_getdents64+0x90/0x90 [ 57.651789][ T1893] ? xfd_validate_state+0x70/0x150 [ 57.656983][ T1893] ? __cfi_filldir64+0x10/0x10 [ 57.661853][ T1893] ? fpregs_restore_userregs+0x128/0x260 [ 57.667668][ T1893] __x64_sys_getdents64+0x7b/0x90 [ 57.672915][ T1893] x64_sys_call+0x15c/0x9a0 [ 57.677591][ T1893] do_syscall_64+0x4c/0xa0 [ 57.682279][ T1893] ? clear_bhb_loop+0x30/0x80 [ 57.687237][ T1893] ? clear_bhb_loop+0x30/0x80 [ 57.691941][ T1893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.697885][ T1893] RIP: 0033:0x7f4b8b59acb9 [ 57.702397][ T1893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.722844][ T1893] RSP: 002b:00007f4b8c439028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 57.731541][ T1893] RAX: ffffffffffffffda RBX: 00007f4b8b815fa0 RCX: 00007f4b8b59acb9 [ 57.739956][ T1893] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000005 [ 57.748894][ T1893] RBP: 00007f4b8b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 57.757057][ T1893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.765668][ T1893] R13: 00007f4b8b816038 R14: 00007f4b8b815fa0 R15: 00007ffcd920d718 [ 57.773992][ T1893] [ 57.815376][ T19] usb 9-1: Using ep0 maxpacket: 16 [ 57.824423][ T19] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 57.844471][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.857704][ T19] usb 9-1: Product: syz [ 57.862279][ T19] usb 9-1: Manufacturer: syz [ 57.873214][ T19] usb 9-1: SerialNumber: syz [ 57.879969][ T43] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 530 with error 28 [ 57.884278][ T19] usb 9-1: config 0 descriptor?? [ 57.897287][ T43] EXT4-fs (loop7): This should not happen!! Data will be lost [ 57.897287][ T43] [ 57.900764][ T19] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 57.916233][ T933] syz-executor: attempt to access beyond end of device [ 57.916233][ T933] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.164895][ T19] usb 9-1: USB disconnect, device number 2 [ 58.196350][ T1947] syz.0.596 uses obsolete (PF_INET,SOCK_PACKET) [ 58.242195][ T1949] device ip6_vti0 entered promiscuous mode [ 58.354258][ T1956] device batadv_slave_1 entered promiscuous mode [ 58.362518][ T1955] device batadv_slave_1 left promiscuous mode [ 58.407486][ T1933] loop7: detected capacity change from 0 to 131072 [ 58.427742][ T1933] F2FS-fs (loop7): Invalid segment/section count (31, 24 x 150994945) [ 58.448947][ T1933] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 58.460067][ T1933] F2FS-fs (loop7): invalid crc value [ 58.467316][ T1933] F2FS-fs (loop7): Found nat_bits in checkpoint [ 58.512190][ T1933] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 58.519601][ T1933] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 58.711484][ T1985] loop5: detected capacity change from 0 to 1024 [ 58.718728][ T1984] device batadv_slave_1 entered promiscuous mode [ 58.726866][ T1985] EXT4-fs: Ignoring removed bh option [ 58.739683][ T1982] device batadv_slave_1 left promiscuous mode [ 58.755486][ T1028] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 58.813327][ T28] audit: type=1400 audit(1768951106.215:387): avc: denied { read } for pid=1996 comm="syz.7.617" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.830933][ T2001] loop9: detected capacity change from 0 to 1024 [ 58.853230][ T2002] loop5: detected capacity change from 0 to 1024 [ 58.854679][ T2001] EXT4-fs: Ignoring removed orlov option [ 58.861731][ T2002] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.879995][ T28] audit: type=1400 audit(1768951106.255:388): avc: denied { open } for pid=1996 comm="syz.7.617" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.887443][ T2002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.923006][ T2002] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.616: bad orphan inode 11 [ 58.933646][ T2002] ext4_test_bit(bit=10, block=4) = 1 [ 58.940267][ T2002] is_bad_inode(inode)=0 [ 58.945200][ T2002] NEXT_ORPHAN(inode)=3254779904 [ 58.951873][ T2002] max_ino=32 [ 58.955174][ T2002] i_nlink=0 [ 58.972480][ T1028] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 58.985689][ T2002] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.616: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.000204][ T1028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.015753][ T2002] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 59.015897][ T1028] usb 1-1: Product: syz [ 59.024098][ T2002] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.616: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.028527][ T1028] usb 1-1: Manufacturer: syz [ 59.047450][ T1028] usb 1-1: SerialNumber: syz [ 59.086183][ T28] audit: type=1400 audit(1768951106.495:389): avc: denied { bind } for pid=2014 comm="syz.7.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.115421][ T2002] EXT4-fs error (device loop5): ext4_acquire_dquot:6796: comm syz.5.616: Failed to acquire dquot type 0 [ 59.123480][ T2017] binder: 2016:2017 ioctl 4018620d 0 returned -22 [ 59.126901][ T2002] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 59.146036][ T2002] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.616: mark_inode_dirty error [ 59.165503][ T2002] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 59.216979][ T2002] EXT4-fs (loop5): shut down requested (2) [ 59.353593][ T1023] usb 1-1: USB disconnect, device number 5 [ 59.424106][ T2040] loop5: detected capacity change from 0 to 21295 [ 59.444630][ T2040] loop5: detected capacity change from 21295 to 30999 [ 59.478480][ T2042] syz.9.635 (2042) used greatest stack depth: 21184 bytes left [ 59.538674][ T2049] loop7: detected capacity change from 0 to 256 [ 59.552547][ T2049] FAT-fs (loop7): Directory bread(block 64) failed [ 59.562638][ T2049] FAT-fs (loop7): Directory bread(block 65) failed [ 59.574463][ T2049] FAT-fs (loop7): Directory bread(block 66) failed [ 59.581340][ T2049] FAT-fs (loop7): Directory bread(block 67) failed [ 59.590311][ T2049] FAT-fs (loop7): Directory bread(block 68) failed [ 59.597158][ T2049] FAT-fs (loop7): Directory bread(block 69) failed [ 59.605319][ T2049] FAT-fs (loop7): Directory bread(block 70) failed [ 59.612510][ T2049] FAT-fs (loop7): Directory bread(block 71) failed [ 59.619335][ T2049] FAT-fs (loop7): Directory bread(block 72) failed [ 59.626188][ T2049] FAT-fs (loop7): Directory bread(block 73) failed [ 59.673823][ T43] kworker/u4:2: attempt to access beyond end of device [ 59.673823][ T43] loop7: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 59.787761][ T2055] loop7: detected capacity change from 0 to 40427 [ 59.798114][ T2055] F2FS-fs (loop7): invalid crc value [ 59.804445][ T2055] F2FS-fs (loop7): Found nat_bits in checkpoint [ 59.838127][ T2061] loop8: detected capacity change from 0 to 1024 [ 59.847855][ T2055] F2FS-fs (loop7): Start checkpoint disabled! [ 59.855083][ T2055] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 59.863698][ T2055] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 59.878231][ T2061] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.642: Allocating blocks 497-513 which overlap fs metadata [ 59.898797][ T2061] EXT4-fs (loop8): Remounting filesystem read-only [ 59.917073][ T2061] EXT4-fs (loop8): pa ffff8881170f5a80: logic 256, phys. 385, len 8 [ 59.925221][ T2061] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 59.941156][ T2061] EXT4-fs (loop8): Remounting filesystem read-only [ 60.010638][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 60.010651][ T28] audit: type=1326 audit(1768951107.415:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.046944][ T28] audit: type=1326 audit(1768951107.415:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.073038][ T28] audit: type=1326 audit(1768951107.415:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.097466][ T28] audit: type=1326 audit(1768951107.415:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.122742][ T28] audit: type=1326 audit(1768951107.415:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.146849][ T28] audit: type=1326 audit(1768951107.415:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.170784][ T28] audit: type=1326 audit(1768951107.415:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.216675][ T28] audit: type=1326 audit(1768951107.415:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.241767][ T28] audit: type=1326 audit(1768951107.415:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.265811][ T28] audit: type=1326 audit(1768951107.415:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2077 comm="syz.8.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622679acb9 code=0x7ffc0000 [ 60.277472][ T2093] device vlan2 entered promiscuous mode [ 60.296743][ T2093] device veth0 entered promiscuous mode [ 60.342818][ T2086] loop8: detected capacity change from 0 to 40427 [ 60.368127][ T2086] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 60.382148][ T2086] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 60.391753][ T2086] F2FS-fs (loop8): invalid crc value [ 60.399012][ T2086] F2FS-fs (loop8): Found nat_bits in checkpoint [ 60.437647][ T2086] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 60.444844][ T2086] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 60.475407][ T1028] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 60.621693][ T2106] loop8: detected capacity change from 0 to 256 [ 60.643538][ T2106] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 60.666511][ T1028] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 60.682257][ T1028] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 60.707568][ T1028] usb 6-1: config 8 has an invalid descriptor of length 41, skipping remainder of the config [ 60.721722][ T1028] usb 6-1: config 8 has no interface number 0 [ 60.739135][ T1028] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 60.757968][ T1028] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.792789][ T1028] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 60.802916][ T2114] loop8: detected capacity change from 0 to 256 [ 60.812577][ T1028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.822676][ T1028] usb 6-1: Product: syz [ 60.827099][ T1028] usb 6-1: Manufacturer: syz [ 60.841420][ T1028] usb 6-1: SerialNumber: syz [ 60.849043][ T2116] loop0: detected capacity change from 0 to 256 [ 60.901566][ T2116] FAT-fs (loop0): Directory bread(block 64) failed [ 60.915534][ T2116] FAT-fs (loop0): Directory bread(block 65) failed [ 60.928616][ T2116] FAT-fs (loop0): Directory bread(block 66) failed [ 60.944139][ T2116] FAT-fs (loop0): Directory bread(block 67) failed [ 60.963413][ T2116] FAT-fs (loop0): Directory bread(block 68) failed [ 60.980520][ T2116] FAT-fs (loop0): Directory bread(block 69) failed [ 60.995397][ T2116] FAT-fs (loop0): Directory bread(block 70) failed [ 61.002440][ T2116] FAT-fs (loop0): Directory bread(block 71) failed [ 61.013887][ T2116] FAT-fs (loop0): Directory bread(block 72) failed [ 61.021315][ T2116] FAT-fs (loop0): Directory bread(block 73) failed [ 61.060521][ T1028] usb 6-1: USB disconnect, device number 4 [ 61.124641][ T2116] syz.0.662: attempt to access beyond end of device [ 61.124641][ T2116] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 61.142809][ T2116] syz.0.662: attempt to access beyond end of device [ 61.142809][ T2116] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.165520][ T2116] syz.0.662: attempt to access beyond end of device [ 61.165520][ T2116] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.278334][ T2144] loop7: detected capacity change from 0 to 7 [ 61.334952][ T2150] capability: warning: `syz.9.678' uses deprecated v2 capabilities in a way that may be insecure [ 61.476724][ T2142] loop8: detected capacity change from 0 to 40427 [ 61.487394][ T2142] F2FS-fs (loop8): invalid crc value [ 61.493752][ T2142] F2FS-fs (loop8): Found nat_bits in checkpoint [ 61.534008][ T2142] F2FS-fs (loop8): Start checkpoint disabled! [ 61.550849][ T2142] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 61.560606][ T2142] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 61.597706][ T2179] loop7: detected capacity change from 0 to 256 [ 61.610505][ T2179] FAT-fs (loop7): Directory bread(block 64) failed [ 61.627380][ T2179] FAT-fs (loop7): Directory bread(block 65) failed [ 61.629336][ T2142] syz.8.675: attempt to access beyond end of device [ 61.629336][ T2142] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 61.634131][ T2179] FAT-fs (loop7): Directory bread(block 66) failed [ 61.657144][ T2179] FAT-fs (loop7): Directory bread(block 67) failed [ 61.664531][ T2142] syz.8.675: attempt to access beyond end of device [ 61.664531][ T2142] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 61.665781][ T2179] FAT-fs (loop7): Directory bread(block 68) failed [ 61.685268][ T2179] FAT-fs (loop7): Directory bread(block 69) failed [ 61.692339][ T2179] FAT-fs (loop7): Directory bread(block 70) failed [ 61.699214][ T2179] FAT-fs (loop7): Directory bread(block 71) failed [ 61.699811][ T2142] syz.8.675: attempt to access beyond end of device [ 61.699811][ T2142] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 61.706667][ T2179] FAT-fs (loop7): Directory bread(block 72) failed [ 61.726560][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 61.734468][ T2179] FAT-fs (loop7): Directory bread(block 73) failed [ 61.758156][ T339] kworker/u4:4: attempt to access beyond end of device [ 61.758156][ T339] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 61.802163][ T2183] loop0: detected capacity change from 0 to 1024 [ 61.802937][ T2179] syz.7.688: attempt to access beyond end of device [ 61.802937][ T2179] loop7: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 61.822777][ T2179] syz.7.688: attempt to access beyond end of device [ 61.822777][ T2179] loop7: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.833425][ T2183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.864886][ T2183] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.865460][ T2179] syz.7.688: attempt to access beyond end of device [ 61.865460][ T2179] loop7: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.895190][ T2187] loop8: detected capacity change from 0 to 256 [ 61.904541][ T2187] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 61.917020][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.933061][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.943282][ T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.971147][ T60] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.981107][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.993163][ T60] usb 10-1: config 0 descriptor?? [ 62.020077][ T2191] loop0: detected capacity change from 0 to 256 [ 62.080356][ T2196] pimreg1: tun_chr_ioctl cmd 2147767520 [ 62.086648][ T2196] pimreg1: tun_chr_ioctl cmd 1074025678 [ 62.092317][ T2196] pimreg1: group set to 0 [ 62.118029][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 62.127869][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 62.147981][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 62.157959][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 62.167732][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 62.180931][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 62.195042][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 62.212611][ T2205] netem: incorrect ge model size [ 62.220290][ T2205] netem: change failed [ 62.392571][ T2227] loop8: detected capacity change from 0 to 256 [ 62.402645][ T2220] loop0: detected capacity change from 0 to 40427 [ 62.411650][ T60] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 62.420009][ T2220] F2FS-fs (loop0): invalid crc value [ 62.441854][ T60] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 62.465979][ T2220] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.528454][ T2220] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.564992][ T2242] loop8: detected capacity change from 0 to 2048 [ 62.624993][ T10] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.641743][ T10] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 62.660510][ T10] EXT4-fs (loop8): This should not happen!! Data will be lost [ 62.660510][ T10] [ 62.671135][ T10] EXT4-fs (loop8): Total free blocks count 0 [ 62.683872][ T1023] usb 10-1: USB disconnect, device number 2 [ 62.685757][ T10] EXT4-fs (loop8): Free/Dirty block details [ 62.713739][ T10] EXT4-fs (loop8): free_blocks=2415919504 [ 62.724450][ T10] EXT4-fs (loop8): dirty_blocks=32 [ 62.729991][ T10] EXT4-fs (loop8): Block reservation details [ 62.736492][ T10] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 62.779083][ T2257] netlink: 408 bytes leftover after parsing attributes in process `syz.5.721'. [ 62.822456][ T2263] netlink: 104 bytes leftover after parsing attributes in process `syz.5.723'. [ 62.884318][ T2270] binder: 2269:2270 ioctl c0306201 2000000003c0 returned -22 [ 62.931657][ T2272] loop5: detected capacity change from 0 to 8192 [ 62.992549][ T2276] loop5: detected capacity change from 0 to 128 [ 63.002000][ T2276] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.015693][ T2276] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.037666][ T2276] VFS: Lookup of 'file0' in vfat loop5 would have caused loop [ 63.052623][ T10] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.232368][ T2250] loop0: detected capacity change from 0 to 131072 [ 63.252872][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.9.736'. [ 63.280396][ T2250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.350919][ T2250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.354530][ T2282] loop5: detected capacity change from 0 to 40427 [ 63.390008][ T2282] F2FS-fs (loop5): invalid crc value [ 63.409741][ T2282] F2FS-fs (loop5): Found nat_bits in checkpoint [ 63.434079][ T2284] loop7: detected capacity change from 0 to 40427 [ 63.457299][ T2284] F2FS-fs (loop7): invalid crc value [ 63.481947][ T2284] F2FS-fs (loop7): Found nat_bits in checkpoint [ 63.492401][ T2282] F2FS-fs (loop5): Start checkpoint disabled! [ 63.503561][ T2282] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 63.518726][ T2282] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 63.547336][ T2284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 63.757487][ T2321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 63.769059][ T2323] loop8: detected capacity change from 0 to 512 [ 63.855832][ T2332] loop9: detected capacity change from 0 to 256 [ 63.881701][ T2337] loop0: detected capacity change from 0 to 512 [ 63.902183][ T2337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.911181][ T2332] FAT-fs (loop9): Directory bread(block 64) failed [ 63.936992][ T2332] FAT-fs (loop9): Directory bread(block 65) failed [ 63.943957][ T2332] FAT-fs (loop9): Directory bread(block 66) failed [ 63.944931][ T2337] EXT4-fs (loop0): 1 truncate cleaned up [ 63.951044][ T2332] FAT-fs (loop9): Directory bread(block 67) failed [ 63.963243][ T2332] FAT-fs (loop9): Directory bread(block 68) failed [ 63.970095][ T2332] FAT-fs (loop9): Directory bread(block 69) failed [ 63.971449][ T2337] EXT4-fs mount: 43 callbacks suppressed [ 63.971463][ T2337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 63.991893][ T2332] FAT-fs (loop9): Directory bread(block 70) failed [ 63.999526][ T2332] FAT-fs (loop9): Directory bread(block 71) failed [ 64.006490][ T2332] FAT-fs (loop9): Directory bread(block 72) failed [ 64.013467][ T2332] FAT-fs (loop9): Directory bread(block 73) failed [ 64.035623][ T2346] binder: 2345:2346 ioctl c0306201 200000000c80 returned -14 [ 64.080642][ T286] EXT4-fs (loop0): unmounting filesystem. [ 64.215388][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.225767][ T2368] loop0: detected capacity change from 0 to 128 [ 64.232987][ T2368] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.245869][ T2368] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.260460][ T2370] loop9: detected capacity change from 0 to 1024 [ 64.268116][ T2370] EXT4-fs: Ignoring removed orlov option [ 64.281996][ T10] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.297779][ T2370] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 64.364918][ T1806] EXT4-fs (loop9): unmounting filesystem. [ 64.376845][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.425392][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 64.425851][ T2393] loop8: detected capacity change from 0 to 128 [ 64.434670][ T24] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 64.451982][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.469856][ T24] usb 6-1: Product: syz [ 64.477708][ T24] usb 6-1: Manufacturer: syz [ 64.494000][ T2395] loop0: detected capacity change from 0 to 512 [ 64.500740][ T24] usb 6-1: SerialNumber: syz [ 64.508605][ T24] usb 6-1: config 0 descriptor?? [ 64.516248][ T24] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 64.528327][ T24] usb 6-1: Detected FT-X [ 64.560699][ T2395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 64.563832][ T2408] loop8: detected capacity change from 0 to 1024 [ 64.569527][ T2395] System zones: 0-2, 18-18, 34-34 [ 64.580761][ T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 64.596821][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.607980][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.608419][ T2395] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.778: bg 0: block 248: padding at end of block bitmap is not set [ 64.617866][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 64.644314][ T2408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.646225][ T60] usb 8-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 64.660863][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.669584][ T60] usb 8-1: config 0 descriptor?? [ 64.675043][ T2395] EXT4-fs error (device loop0): ext4_acquire_dquot:6796: comm syz.0.778: Failed to acquire dquot type 1 [ 64.691817][ T2395] EXT4-fs (loop0): 1 truncate cleaned up [ 64.698236][ T2395] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.709843][ T2395] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.710198][ T2408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.724432][ T2414] loop9: detected capacity change from 0 to 2048 [ 64.740378][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 64.745021][ T2414] EXT4-fs: Ignoring removed i_version option [ 64.767770][ T2408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.775935][ T2414] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 64.779052][ T2408] System zones: 0-1, 3-36 [ 64.784722][ T2414] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.793689][ T2395] EXT4-fs: Ignoring removed orlov option [ 64.806317][ T2408] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 64.825494][ T2395] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 64.836469][ T2414] EXT4-fs (loop9): re-mounted. Quota mode: none. [ 64.843145][ T2395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.852779][ T2395] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 64.852842][ T1714] EXT4-fs (loop8): unmounting filesystem. [ 64.865953][ T2414] EXT4-fs (loop9): re-mounted. Quota mode: none. [ 64.875319][ T286] EXT4-fs (loop0): unmounting filesystem. [ 64.902765][ T1806] EXT4-fs (loop9): unmounting filesystem. [ 64.904192][ T2422] loop8: detected capacity change from 0 to 512 [ 64.916514][ T2422] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.928387][ T2422] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.944160][ T2422] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.787: bg 0: block 248: padding at end of block bitmap is not set [ 64.960156][ T2422] EXT4-fs error (device loop8): ext4_acquire_dquot:6796: comm syz.8.787: Failed to acquire dquot type 1 [ 64.973208][ T2422] EXT4-fs (loop8): 1 truncate cleaned up [ 64.979014][ T2422] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 64.992697][ T2422] EXT4-fs error (device loop8): ext4_acquire_dquot:6796: comm syz.8.787: Failed to acquire dquot type 1 [ 65.004864][ T2422] syz.8.787 (2422) used greatest stack depth: 20640 bytes left [ 65.014495][ T1714] EXT4-fs (loop8): unmounting filesystem. [ 65.020591][ T334] __quota_error: 132 callbacks suppressed [ 65.020604][ T334] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 65.036351][ T334] EXT4-fs error (device loop8): ext4_release_dquot:6832: comm kworker/u4:3: Failed to release dquot type 1 [ 65.062972][ T2428] loop8: detected capacity change from 0 to 512 [ 65.072522][ T2428] EXT4-fs: Ignoring removed orlov option [ 65.080656][ T2428] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 65.095776][ T60] wacom 0003:056A:0015.0008: unbalanced collection at end of report description [ 65.109718][ T2428] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2196: inode #15: comm syz.8.790: corrupted in-inode xattr [ 65.124109][ T60] wacom 0003:056A:0015.0008: parse failed [ 65.131086][ T60] wacom: probe of 0003:056A:0015.0008 failed with error -22 [ 65.142279][ T2428] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.790: couldn't read orphan inode 15 (err -117) [ 65.154985][ T24] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 65.162595][ T24] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 65.168940][ T2428] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 65.174309][ T24] usb 6-1: USB disconnect, device number 5 [ 65.188443][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 65.204676][ T24] ftdi_sio 6-1:0.0: device disconnected [ 65.215068][ T1714] EXT4-fs (loop8): unmounting filesystem. [ 65.233879][ T2436] netlink: 'syz.8.793': attribute type 4 has an invalid length. [ 65.270006][ T2441] loop8: detected capacity change from 0 to 1024 [ 65.276828][ T2441] EXT4-fs: Ignoring removed orlov option [ 65.283165][ T2441] EXT4-fs (loop8): Test dummy encryption mode enabled [ 65.293493][ T2441] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 65.324205][ T28] audit: type=1400 audit(1768951112.725:534): avc: denied { create } for pid=2440 comm="syz.8.795" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.333283][ T1023] usb 8-1: USB disconnect, device number 2 [ 65.363035][ T28] audit: type=1400 audit(1768951112.765:535): avc: denied { read open } for pid=2440 comm="syz.8.795" path="/68/bus/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.386077][ T28] audit: type=1400 audit(1768951112.775:536): avc: denied { write } for pid=2440 comm="syz.8.795" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.445104][ T28] audit: type=1400 audit(1768951112.845:537): avc: denied { mount } for pid=2449 comm="syz.0.799" name="/" dev="configfs" ino=14520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 65.477103][ T28] audit: type=1400 audit(1768951112.875:538): avc: denied { search } for pid=2449 comm="syz.0.799" name="/" dev="configfs" ino=14520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.499939][ T28] audit: type=1400 audit(1768951112.875:539): avc: denied { read } for pid=2449 comm="syz.0.799" name="/" dev="configfs" ino=14520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.522781][ T28] audit: type=1400 audit(1768951112.875:540): avc: denied { open } for pid=2449 comm="syz.0.799" path="/" dev="configfs" ino=14520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.722699][ T2458] loop5: detected capacity change from 0 to 128 [ 65.732710][ T2458] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 65.741946][ T2458] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.761930][ T933] EXT4-fs (loop5): unmounting filesystem. [ 65.782889][ T2461] loop5: detected capacity change from 0 to 128 [ 65.789593][ T2461] EXT4-fs: Ignoring removed nobh option [ 65.800724][ T2461] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 65.810004][ T2461] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.828000][ T28] audit: type=1400 audit(1768951113.235:541): avc: denied { append } for pid=2460 comm="syz.5.804" path="/110/mnt/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.853071][ T933] EXT4-fs (loop5): unmounting filesystem. [ 66.019239][ T2466] loop5: detected capacity change from 0 to 40427 [ 66.029598][ T2466] F2FS-fs (loop5): invalid crc value [ 66.035981][ T2466] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.069245][ T2466] F2FS-fs (loop5): Start checkpoint disabled! [ 66.075896][ T2466] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 66.083834][ T2466] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 66.131881][ T2466] bio_check_eod: 5 callbacks suppressed [ 66.131899][ T2466] syz.5.806: attempt to access beyond end of device [ 66.131899][ T2466] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 66.172895][ T339] kworker/u4:4: attempt to access beyond end of device [ 66.172895][ T339] loop5: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 66.187541][ T339] kworker/u4:4: attempt to access beyond end of device [ 66.187541][ T339] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 66.187681][ T1714] EXT4-fs (loop8): unmounting filesystem. [ 66.226882][ T2472] loop7: detected capacity change from 0 to 512 [ 66.237335][ T28] audit: type=1400 audit(1768951113.645:542): avc: denied { execmem } for pid=2473 comm="syz.8.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.272809][ T2472] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.292478][ T2472] EXT4-fs (loop7): 1 truncate cleaned up [ 66.298759][ T2472] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 66.330702][ T2472] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.7.809: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 66.361155][ T2472] EXT4-fs (loop7): Remounting filesystem read-only [ 66.385449][ T2472] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 66.394528][ T2472] EXT4-fs (loop7): Remounting filesystem read-only [ 66.401349][ T2472] EXT4-fs warning (device loop7): ext4_rename_delete:3778: inode #2: comm syz.7.809: Deleting old file: nlink 5, error=-117 [ 66.453994][ T1660] EXT4-fs (loop7): unmounting filesystem. [ 66.539319][ T2496] loop8: detected capacity change from 0 to 2048 [ 66.563181][ T2478] loop5: detected capacity change from 0 to 40427 [ 66.579735][ T2478] F2FS-fs (loop5): invalid crc value [ 66.593831][ T2478] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.607479][ T2496] loop8: p4 < > [ 66.640878][ T429] udevd[429]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 66.654461][ T2478] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 66.682373][ T2478] syz.5.807: attempt to access beyond end of device [ 66.682373][ T2478] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 66.704421][ T933] syz-executor: attempt to access beyond end of device [ 66.704421][ T933] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.859005][ T2516] loop8: detected capacity change from 0 to 40427 [ 66.874301][ T2516] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 66.895907][ T2516] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 66.907447][ T2516] F2FS-fs (loop8): invalid crc value [ 66.945425][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 66.949470][ T1479] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.958488][ T2516] F2FS-fs (loop8): Found nat_bits in checkpoint [ 66.991266][ T1023] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 67.011472][ T1023] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.021736][ T2516] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 67.035388][ T2516] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 67.068633][ T1714] syz-executor: attempt to access beyond end of device [ 67.068633][ T1714] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 67.109379][ T2522] loop7: detected capacity change from 0 to 40427 [ 67.133126][ T2522] F2FS-fs (loop7): invalid crc value [ 67.157166][ T2522] F2FS-fs (loop7): Found nat_bits in checkpoint [ 67.198854][ T2522] F2FS-fs (loop7): Start checkpoint disabled! [ 67.205536][ T2522] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 67.224881][ T2522] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 67.332388][ T2522] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 67.421901][ T334] kworker/u4:3: attempt to access beyond end of device [ 67.421901][ T334] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.444099][ T2557] loop5: detected capacity change from 0 to 256 [ 67.455014][ T2557] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.473819][ T2557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.536275][ T2562] loop5: detected capacity change from 0 to 128 [ 67.566688][ T2562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.584685][ T2562] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.640369][ T933] EXT4-fs (loop5): unmounting filesystem. [ 67.666169][ T60] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 67.694137][ T2589] loop5: detected capacity change from 0 to 1024 [ 67.702643][ T2589] EXT4-fs: Ignoring removed i_version option [ 67.708656][ T2591] loop7: detected capacity change from 0 to 512 [ 67.718475][ T2589] EXT4-fs (loop5): Test dummy encryption mode enabled [ 67.730438][ T2591] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 67.737866][ T2589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c001c01c, mo2=0102] [ 67.748356][ T2591] fs-verity (loop7, inode 16): Unsupported log_blocksize: 12 [ 67.762077][ T2589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 67.779510][ T1660] EXT4-fs (loop7): unmounting filesystem. [ 67.807740][ T2603] loop9: detected capacity change from 0 to 512 [ 67.818876][ T2558] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.847859][ T933] EXT4-fs (loop5): unmounting filesystem. [ 67.866447][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.895222][ T60] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 67.917604][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.930330][ T60] usb 9-1: config 0 descriptor?? [ 67.939585][ T2619] raw_sendmsg: syz.5.868 forgot to set AF_INET. Fix it! [ 68.027333][ T2558] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 68.035767][ T2558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.047279][ T2558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.057321][ T2558] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.070741][ T2558] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.080336][ T2558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.089651][ T2558] usb 1-1: config 0 descriptor?? [ 68.351810][ T60] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 68.498071][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.506028][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.513493][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.521601][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.529220][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.537205][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.544898][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.553925][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.561554][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.569589][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.577518][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.585152][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.593213][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.601044][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.608688][ T2558] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.616723][ T2558] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 68.627184][ T2558] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 68.786172][ T2558] usb 1-1: USB disconnect, device number 6 [ 68.790274][ T2633] loop7: detected capacity change from 0 to 256 [ 68.802522][ T2633] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 68.831814][ T2637] loop5: detected capacity change from 0 to 2048 [ 68.882574][ T339] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.890636][ T2637] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 68.899689][ T2637] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.931037][ T2653] input: syz0 as /devices/virtual/input/input11 [ 68.941714][ T933] EXT4-fs (loop5): unmounting filesystem. [ 68.970931][ T60] lenovo 0003:17EF:6047.000A: Fn-lock setting failed: -71 [ 68.980289][ T60] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71 [ 68.988929][ T60] usb 9-1: USB disconnect, device number 3 [ 69.007791][ T2661] fido_id[2661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 69.067257][ T2668] pimreg: tun_chr_ioctl cmd 2147767517 [ 69.073390][ T2668] pimreg: tun_chr_ioctl cmd 2148553947 [ 69.079368][ T2670] loop5: detected capacity change from 0 to 1024 [ 69.086209][ T2670] EXT4-fs: Ignoring removed orlov option [ 69.092771][ T2670] EXT4-fs (loop5): Test dummy encryption mode enabled [ 69.101496][ T2670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.259001][ T2678] netlink: 20 bytes leftover after parsing attributes in process `syz.9.891'. [ 69.498479][ T2714] netlink: 40 bytes leftover after parsing attributes in process `syz.8.908'. [ 69.512121][ T2714] netlink: 40 bytes leftover after parsing attributes in process `syz.8.908'. [ 69.524187][ T2714] netlink: 40 bytes leftover after parsing attributes in process `syz.8.908'. [ 69.536555][ T2714] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 69.629360][ T2724] loop0: detected capacity change from 0 to 512 [ 69.651694][ T2724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.677144][ T2724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.686836][ T2724] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.707139][ T2724] EXT4-fs warning (device loop0): ext4_group_extend:1894: will only finish group (16384 blocks, 16256 new) [ 69.718942][ T2724] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 69.734880][ T286] EXT4-fs (loop0): unmounting filesystem. [ 69.819412][ T2737] loop0: detected capacity change from 0 to 2048 [ 69.848900][ T2737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.912802][ T286] EXT4-fs (loop0): unmounting filesystem. [ 69.959548][ T2743] loop0: detected capacity change from 0 to 1024 [ 69.987559][ T2743] EXT4-fs: Ignoring removed orlov option [ 70.011875][ T933] EXT4-fs (loop5): unmounting filesystem. [ 70.023894][ T2743] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.072200][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 70.072219][ T28] audit: type=1400 audit(1768951117.475:552): avc: denied { create } for pid=2744 comm="syz.9.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.125483][ T28] audit: type=1400 audit(1768951117.475:553): avc: denied { module_request } for pid=2744 comm="syz.9.921" kmod="net-pf-10-proto-132-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.150822][ T28] audit: type=1326 audit(1768951117.545:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.174693][ T28] audit: type=1326 audit(1768951117.545:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.180779][ T286] EXT4-fs (loop0): unmounting filesystem. [ 70.200052][ T28] audit: type=1326 audit(1768951117.545:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.229779][ T28] audit: type=1326 audit(1768951117.545:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.273525][ T2762] loop0: detected capacity change from 0 to 512 [ 70.278175][ T28] audit: type=1326 audit(1768951117.545:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.309595][ T2764] netlink: 'syz.5.927': attribute type 3 has an invalid length. [ 70.309599][ T28] audit: type=1326 audit(1768951117.545:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.309625][ T28] audit: type=1326 audit(1768951117.635:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.373937][ T28] audit: type=1326 audit(1768951117.635:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2753 comm="syz.9.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112599acb9 code=0x7ffc0000 [ 70.384318][ T2770] loop5: detected capacity change from 0 to 128 [ 70.484523][ T2784] loop9: detected capacity change from 0 to 128 [ 70.753537][ T2796] loop9: detected capacity change from 0 to 40427 [ 70.770836][ T2809] loop0: detected capacity change from 0 to 1024 [ 70.776927][ T2796] F2FS-fs (loop9): invalid crc value [ 70.778063][ T2809] EXT4-fs: Ignoring removed oldalloc option [ 70.793691][ T2809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.799006][ T2796] F2FS-fs (loop9): Found nat_bits in checkpoint [ 70.816858][ T2809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.842612][ T2796] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 70.845138][ T2809] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 70.868330][ T2809] EXT4-fs (loop0): Remounting filesystem read-only [ 70.890950][ T286] EXT4-fs (loop0): unmounting filesystem. [ 70.945393][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 70.945447][ T1479] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.955438][ T1023] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.998408][ T2827] loop7: detected capacity change from 0 to 512 [ 71.021281][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.026277][ T2827] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 71.037800][ T2827] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.046060][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.064574][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.080198][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.088966][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.097712][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.108365][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.117192][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.129007][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.129772][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.138238][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.149919][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.157806][ T1023] usb 6-1: Using ep0 maxpacket: 8 [ 71.169556][ T1806] syz-executor: attempt to access beyond end of device [ 71.169556][ T1806] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.175693][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.201049][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.214108][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.226332][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.226433][ T1023] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 71.247709][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.259750][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.276512][ T1023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.285016][ T1023] usb 6-1: Product: syz [ 71.289650][ T1023] usb 6-1: Manufacturer: syz [ 71.294337][ T2833] netlink: 'syz.0.955': attribute type 12 has an invalid length. [ 71.302743][ T1660] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 71.314567][ T1023] usb 6-1: SerialNumber: syz [ 71.321561][ T1023] usb 6-1: config 0 descriptor?? [ 71.376126][ T1660] EXT4-fs (loop7): unmounting filesystem. [ 71.585744][ T403] usb 6-1: USB disconnect, device number 6 [ 71.603503][ T2837] loop9: detected capacity change from 0 to 40427 [ 71.628916][ T2837] F2FS-fs (loop9): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 71.658663][ T2837] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 71.675464][ T2837] F2FS-fs (loop9): fault_type options not supported [ 71.682565][ T2837] F2FS-fs (loop9): fault_injection options not supported [ 71.691195][ T2837] F2FS-fs (loop9): Image doesn't support compression [ 71.720090][ T2847] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.722708][ T2853] loop8: detected capacity change from 0 to 128 [ 71.727902][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.741614][ T2847] device bridge_slave_0 entered promiscuous mode [ 71.748741][ T2837] F2FS-fs (loop9): invalid crc value [ 71.754951][ T2847] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.762275][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.770811][ T2837] F2FS-fs (loop9): Found nat_bits in checkpoint [ 71.777621][ T2847] device bridge_slave_1 entered promiscuous mode [ 71.878630][ T2837] F2FS-fs (loop9): Start checkpoint disabled! [ 71.897682][ T2837] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 71.925831][ T2837] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 71.932999][ T2837] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 71.941569][ T1577] device bridge_slave_1 left promiscuous mode [ 71.955548][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.961509][ T2835] loop0: detected capacity change from 0 to 131072 [ 71.972651][ T2835] F2FS-fs (loop0): invalid crc value [ 71.976214][ T1577] device bridge_slave_0 left promiscuous mode [ 71.990193][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.006584][ T1577] device veth1_macvtap left promiscuous mode [ 72.006918][ T2835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.012652][ T1577] device veth0_vlan left promiscuous mode [ 72.032618][ T10] kworker/u4:1: attempt to access beyond end of device [ 72.032618][ T10] loop9: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 72.090159][ T2835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 72.155397][ T403] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 72.275784][ T2866] loop9: detected capacity change from 0 to 40427 [ 72.285701][ T2866] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 72.293459][ T2866] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 72.345376][ T403] usb 9-1: Using ep0 maxpacket: 32 [ 72.351668][ T403] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 72.364406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.374270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.380163][ T403] usb 9-1: config 0 has no interface number 0 [ 72.390135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.399323][ T2866] F2FS-fs (loop9): invalid crc value [ 72.402835][ T403] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 72.405192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.426286][ T2877] loop5: detected capacity change from 0 to 4096 [ 72.430100][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.434257][ T403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.439895][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.440677][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.451459][ T2877] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.458011][ T2866] F2FS-fs (loop9): Found nat_bits in checkpoint [ 72.472317][ T403] usb 9-1: Product: syz [ 72.476908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.481088][ T403] usb 9-1: Manufacturer: syz [ 72.493807][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.501077][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.501118][ T403] usb 9-1: SerialNumber: syz [ 72.514654][ T2877] EXT4-fs (loop5): Test dummy encryption mode enabled [ 72.518092][ T403] usb 9-1: config 0 descriptor?? [ 72.539229][ T403] smsc95xx v2.0.0 [ 72.541958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.550938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.552104][ T2866] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 72.560713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.567292][ T2866] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 72.575221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.596096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.611870][ T2877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.611943][ T2847] device veth0_vlan entered promiscuous mode [ 72.636693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.650574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.659522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.668160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.685983][ T2847] device veth1_macvtap entered promiscuous mode [ 72.693526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.709330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.723687][ T933] EXT4-fs (loop5): unmounting filesystem. [ 72.730416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.742661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.757258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.775282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.783907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.793497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.802638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.874241][ T1806] syz-executor: attempt to access beyond end of device [ 72.874241][ T1806] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 72.881844][ T2892] loop3: detected capacity change from 0 to 4096 [ 72.914221][ T2892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.942039][ T403] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 72.958113][ T403] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 72.976842][ T2892] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.958: corrupted inode contents [ 72.990790][ T2892] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #15: comm syz.3.958: mark_inode_dirty error [ 73.003343][ T2892] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.958: corrupted inode contents [ 73.016359][ T2892] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.958: mark_inode_dirty error [ 73.029196][ T2892] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.958: corrupted inode contents [ 73.108187][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 73.110083][ T2892] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.958: mark_inode_dirty error [ 73.128448][ T2899] netlink: 'syz.0.972': attribute type 4 has an invalid length. [ 73.147641][ T2892] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.958: corrupted inode contents [ 73.165780][ T2892] EXT4-fs error (device loop3): ext4_truncate:4320: inode #15: comm syz.3.958: mark_inode_dirty error [ 73.186334][ T2892] EXT4-fs error (device loop3) in ext4_setattr:5674: Corrupt filesystem [ 73.212411][ T2898] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.958: corrupted inode contents [ 73.229943][ T2905] sock: sock_set_timeout: `syz.0.973' (pid 2905) tries to set negative timeout [ 73.270396][ T2847] EXT4-fs (loop3): unmounting filesystem. [ 73.306515][ T6] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 73.310506][ T2915] loop0: detected capacity change from 0 to 128 [ 73.321751][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.335885][ T2915] FAT-fs (loop0): bogus number of FAT sectors [ 73.343240][ T2915] FAT-fs (loop0): Can't find a valid FAT filesystem [ 73.358499][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.369033][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.382394][ T6] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.392075][ T403] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 73.399120][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.413215][ T403] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 73.431178][ T6] usb 6-1: config 0 descriptor?? [ 73.443785][ T403] usb 9-1: USB disconnect, device number 4 [ 73.490053][ T2909] loop9: detected capacity change from 0 to 40427 [ 73.517037][ T2923] loop3: detected capacity change from 0 to 2048 [ 73.530040][ T2909] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 73.546831][ T2909] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 73.571272][ T2909] F2FS-fs (loop9): invalid crc value [ 73.575717][ T2923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.587189][ T2923] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.594633][ T2909] F2FS-fs (loop9): Found nat_bits in checkpoint [ 73.620160][ T2847] EXT4-fs (loop3): unmounting filesystem. [ 73.640488][ T2909] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 73.649420][ T2909] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 73.749911][ T2941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.990'. [ 73.759458][ T2941] netlink: 43 bytes leftover after parsing attributes in process `syz.3.990'. [ 73.768857][ T2941] netlink: 'syz.3.990': attribute type 5 has an invalid length. [ 73.777122][ T2941] netlink: 43 bytes leftover after parsing attributes in process `syz.3.990'. [ 73.806005][ T2945] loop3: detected capacity change from 0 to 1024 [ 73.812965][ T2945] EXT4-fs: Ignoring removed orlov option [ 73.830048][ T2945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.850722][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.858620][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.866510][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.874341][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.883342][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.888442][ T2945] incfs: Can't find or create .index dir in ./file0 [ 73.893925][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.900909][ T2945] incfs: mount failed -28 [ 73.907214][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.919179][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.927916][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.936165][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.945267][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.953173][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.961174][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.968669][ T2847] EXT4-fs (loop3): unmounting filesystem. [ 73.969090][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.982215][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 73.989999][ T6] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 74.020668][ T2958] loop3: detected capacity change from 0 to 256 [ 74.027833][ T6] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 74.037428][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.047258][ T2962] loop8: detected capacity change from 0 to 256 [ 74.076307][ T2962] FAT-fs (loop8): error, clusters badly computed (0 != 128) [ 74.086038][ T2962] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 74.095122][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.103555][ T2962] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 74.106035][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.119616][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.141649][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.149223][ T2958] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 74.156223][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.163049][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.170233][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.178632][ T2958] FAT-fs (loop3): Directory bread(block 1285) failed [ 74.186156][ T6] usb 6-1: USB disconnect, device number 7 [ 74.469317][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.565768][ T3007] loop0: detected capacity change from 0 to 256 [ 74.583752][ T3007] FAT-fs (loop0): Directory bread(block 64) failed [ 74.590577][ T3007] FAT-fs (loop0): Directory bread(block 65) failed [ 74.598398][ T3007] FAT-fs (loop0): Directory bread(block 66) failed [ 74.605246][ T3007] FAT-fs (loop0): Directory bread(block 67) failed [ 74.612339][ T3007] FAT-fs (loop0): Directory bread(block 68) failed [ 74.619221][ T3007] FAT-fs (loop0): Directory bread(block 69) failed [ 74.627614][ T3007] FAT-fs (loop0): Directory bread(block 70) failed [ 74.634375][ T3007] FAT-fs (loop0): Directory bread(block 71) failed [ 74.641431][ T3007] FAT-fs (loop0): Directory bread(block 72) failed [ 74.648417][ T3007] FAT-fs (loop0): Directory bread(block 73) failed [ 74.702993][ T43] kworker/u4:2: attempt to access beyond end of device [ 74.702993][ T43] loop0: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 74.766642][ T3011] loop0: detected capacity change from 0 to 4096 [ 74.783483][ T3011] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.797241][ T3011] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.805640][ T3011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.834512][ T2995] loop8: detected capacity change from 0 to 131072 [ 74.852826][ T2995] F2FS-fs (loop8): invalid crc value [ 74.876871][ T286] EXT4-fs (loop0): unmounting filesystem. [ 74.884741][ T2995] F2FS-fs (loop8): Found nat_bits in checkpoint [ 74.921309][ T2995] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 74.948642][ T2995] F2FS-fs (loop8): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 74.962371][ T2995] F2FS-fs (loop8): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 75.045431][ T1023] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 75.059443][ T3029] loop9: detected capacity change from 0 to 8192 [ 75.242952][ T3038] device veth0 entered promiscuous mode [ 75.248618][ T1023] usb 6-1: Using ep0 maxpacket: 16 [ 75.255009][ T1023] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.276701][ T3037] device veth0 left promiscuous mode [ 75.285406][ T1023] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.305393][ T1023] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 75.320320][ T1023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.339349][ T1023] usb 6-1: config 0 descriptor?? [ 75.408687][ T3040] loop9: detected capacity change from 0 to 40427 [ 75.420754][ T3040] F2FS-fs (loop9): fault_injection options not supported [ 75.428911][ T3040] F2FS-fs (loop9): fault_type options not supported [ 75.444417][ T3040] F2FS-fs (loop9): invalid crc value [ 75.451373][ T3040] F2FS-fs (loop9): Found nat_bits in checkpoint [ 75.486733][ T3040] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 75.530116][ T3040] syz.9.1029: attempt to access beyond end of device [ 75.530116][ T3040] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.588188][ T3027] loop0: detected capacity change from 0 to 131072 [ 75.641500][ T3044] loop8: detected capacity change from 0 to 40427 [ 75.656855][ T3027] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.659228][ T3044] F2FS-fs (loop8): invalid crc value [ 75.699921][ T3044] F2FS-fs (loop8): Found nat_bits in checkpoint [ 75.718795][ T3027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.738325][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 75.738339][ T28] audit: type=1400 audit(1768951123.145:593): avc: denied { relabelfrom } for pid=3056 comm="syz.9.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 75.765012][ T28] audit: type=1400 audit(1768951123.145:594): avc: denied { relabelto } for pid=3056 comm="syz.9.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 75.767286][ T3044] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 75.854692][ T3061] loop9: detected capacity change from 0 to 256 [ 75.877977][ T3061] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 75.967176][ T1023] usbhid 6-1:0.0: can't add hid device: -71 [ 75.981439][ T1023] usbhid: probe of 6-1:0.0 failed with error -71 [ 75.989145][ T1023] usb 6-1: USB disconnect, device number 8 [ 76.002290][ T1714] syz-executor: attempt to access beyond end of device [ 76.002290][ T1714] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.092288][ T3073] 9pnet: p9_errstr2errno: server reported unknown error  [ 76.129385][ T3078] loop0: detected capacity change from 0 to 1024 [ 76.156810][ T3078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.165623][ T3078] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.186881][ T3078] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.1042: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.200692][ T3078] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 76.213561][ T3078] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.213561][ T3078] [ 76.228934][ T3078] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.1042: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.242679][ T3078] EXT4-fs error (device loop0): ext4_ext_remove_space:2930: inode #15: comm syz.0.1042: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 76.261617][ T3078] EXT4-fs error (device loop0) in ext4_setattr:5674: Corrupt filesystem [ 76.283647][ T286] EXT4-fs (loop0): unmounting filesystem. [ 76.370893][ T3084] loop8: detected capacity change from 0 to 40427 [ 76.386881][ T3084] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 76.394787][ T3084] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 76.413656][ T3084] F2FS-fs (loop8): invalid crc value [ 76.415388][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 76.428152][ T3084] F2FS-fs (loop8): Found nat_bits in checkpoint [ 76.463167][ T3084] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 76.470767][ T3084] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 76.493755][ T3088] loop0: detected capacity change from 0 to 40427 [ 76.516478][ T3088] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.545521][ T1479] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.546493][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 76.559806][ T3000] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 76.606959][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.617444][ T3088] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.625379][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.645698][ T24] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.665167][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.673523][ T24] usb 10-1: SerialNumber: syz [ 76.679956][ T28] audit: type=1400 audit(1768951124.085:595): avc: denied { setattr } for pid=3087 comm="syz.0.1044" name=".pending_reads" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.705527][ T286] syz-executor: attempt to access beyond end of device [ 76.705527][ T286] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.751392][ T1714] syz-executor: attempt to access beyond end of device [ 76.751392][ T1714] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 76.765912][ T403] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 76.916978][ T24] usb 10-1: 0:2 : does not exist [ 76.934497][ T24] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 76.948060][ T403] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.966142][ T403] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.979553][ T403] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 76.991938][ T403] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 77.004409][ T3121] loop8: detected capacity change from 0 to 1024 [ 77.009077][ T24] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 77.023177][ T3121] EXT4-fs: Ignoring removed bh option [ 77.035512][ T403] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.038702][ T3121] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 77.047568][ T24] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 77.065487][ T403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.071250][ T3121] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.1051: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 77.093579][ T3121] EXT4-fs (loop8): Remounting filesystem read-only [ 77.102561][ T3121] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz.8.1051: path /106/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 77.103671][ T403] usb 6-1: Product: syz [ 77.125205][ T3121] EXT4-fs (loop8): Remounting filesystem read-only [ 77.131912][ T24] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5) [ 77.145950][ T1714] EXT4-fs (loop8): unmounting filesystem. [ 77.157746][ T403] usb 6-1: Manufacturer: syz [ 77.166891][ T24] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5) [ 77.185723][ T403] usb 6-1: SerialNumber: syz [ 77.191995][ T3094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 77.200299][ T24] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 77.209266][ T403] cdc_mbim 6-1:1.0: skipping garbage [ 77.221364][ T3131] Invalid argument reading file caps for ./file0 [ 77.230400][ T24] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 77.250450][ T24] usb 10-1: USB disconnect, device number 3 [ 77.324086][ T3123] loop0: detected capacity change from 0 to 40427 [ 77.340041][ T3123] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 77.355738][ T3123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 77.364203][ T3123] F2FS-fs (loop0): fault_type options not supported [ 77.370959][ T3123] F2FS-fs (loop0): fault_injection options not supported [ 77.378636][ T3123] F2FS-fs (loop0): Image doesn't support compression [ 77.386253][ T3123] F2FS-fs (loop0): invalid crc value [ 77.392874][ T3123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.417522][ T3094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 77.424821][ T3094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 77.447652][ T3123] F2FS-fs (loop0): Start checkpoint disabled! [ 77.454328][ T3123] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 77.462802][ T3123] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 77.470230][ T3123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 77.514232][ T28] audit: type=1400 audit(1768951124.915:596): avc: denied { map } for pid=3122 comm="syz.0.1057" path="/241/file2/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.543399][ T28] audit: type=1400 audit(1768951124.945:597): avc: denied { execute } for pid=3122 comm="syz.0.1057" path="/241/file2/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.587732][ T43] kworker/u4:2: attempt to access beyond end of device [ 77.587732][ T43] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 77.724615][ T3153] Invalid argument reading file caps for ./file0 [ 77.776118][ T3157] mmap: syz.9.1070 (3157) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.790240][ T3159] device veth0 entered promiscuous mode [ 77.806511][ T3158] device veth0 left promiscuous mode [ 77.811338][ T3147] loop8: detected capacity change from 0 to 40427 [ 77.836643][ T3147] F2FS-fs (loop8): fault_injection options not supported [ 77.844230][ T3147] F2FS-fs (loop8): fault_type options not supported [ 77.861983][ T3147] F2FS-fs (loop8): invalid crc value [ 77.874565][ T3147] F2FS-fs (loop8): Found nat_bits in checkpoint [ 77.915383][ T3147] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 77.967125][ T3147] syz.8.1066: attempt to access beyond end of device [ 77.967125][ T3147] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.985170][ T3161] loop0: detected capacity change from 0 to 40427 [ 78.002592][ T3161] F2FS-fs (loop0): invalid crc value [ 78.026232][ T3161] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.058070][ T3094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 78.067765][ T3171] loop3: detected capacity change from 0 to 128 [ 78.074523][ T3094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 78.092289][ T403] cdc_mbim 6-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048 [ 78.115258][ T403] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 78.125005][ T3161] F2FS-fs (loop0): Start checkpoint disabled! [ 78.140253][ T3173] binder: 3172:3173 ioctl c0306201 2000000001c0 returned -14 [ 78.140986][ T3161] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 78.156085][ T1028] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 78.170535][ T3161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 78.171789][ T3177] loop3: detected capacity change from 0 to 512 [ 78.204049][ T3177] EXT4-fs: Ignoring removed bh option [ 78.227231][ T3177] EXT4-fs (loop3): 1 truncate cleaned up [ 78.233952][ T3177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.261242][ T43] kworker/u4:2: attempt to access beyond end of device [ 78.261242][ T43] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.261882][ T3177] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1078: invalid indirect mapped block 4294901760 (level 0) [ 78.291380][ T3177] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1078: invalid indirect mapped block 4294967295 (level 1) [ 78.310472][ T403] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 78.325562][ T3186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 78.328497][ T403] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 6a:29:af:6b:42:98 [ 78.348135][ T403] usb 6-1: USB disconnect, device number 9 [ 78.354756][ T1028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.370053][ T1028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.386069][ T403] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 78.405885][ T1028] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.417089][ T2847] EXT4-fs (loop3): unmounting filesystem. [ 78.448904][ T1028] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 78.467351][ T1028] usb 10-1: Manufacturer: syz [ 78.475689][ T1028] usb 10-1: config 0 descriptor?? [ 78.557141][ T3204] loop3: detected capacity change from 0 to 16 [ 78.565502][ T3204] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.625351][ C0] ================================================================== [ 78.633541][ C0] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 78.640586][ C0] Write of size 8 at addr ffff88810e26ca00 by task syz.3.1094/3213 [ 78.648787][ C0] [ 78.651131][ C0] CPU: 0 PID: 3213 Comm: syz.3.1094 Tainted: G W syzkaller #0 [ 78.660254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.670652][ C0] Call Trace: [ 78.673985][ C0] [ 78.676820][ C0] __dump_stack+0x21/0x24 [ 78.681171][ C0] dump_stack_lvl+0x110/0x170 [ 78.686199][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.691227][ C0] ? update_rq_clock+0x536/0x5c0 [ 78.696265][ C0] ? __run_timers+0x340/0x9f0 [ 78.701300][ C0] print_address_description+0x71/0x200 [ 78.706992][ C0] print_report+0x4a/0x60 [ 78.711408][ C0] kasan_report+0x122/0x150 [ 78.715916][ C0] ? __run_timers+0x340/0x9f0 [ 78.720593][ C0] __asan_report_store8_noabort+0x17/0x20 [ 78.726379][ C0] __run_timers+0x340/0x9f0 [ 78.731046][ C0] ? sched_clock+0x9/0x10 [ 78.735355][ C0] ? sched_clock_cpu+0x6e/0x260 [ 78.740179][ C0] ? calc_index+0x200/0x200 [ 78.744659][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 78.749861][ C0] run_timer_softirq+0x6a/0xf0 [ 78.754683][ C0] handle_softirqs+0x1d7/0x600 [ 78.759684][ C0] __irq_exit_rcu+0x52/0xf0 [ 78.764450][ C0] irq_exit_rcu+0x9/0x10 [ 78.768778][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 78.774655][ C0] [ 78.777713][ C0] [ 78.780635][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 78.786726][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 78.791656][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 78.812119][ C0] RSP: 0018:ffffc900060e7580 EFLAGS: 00000246 [ 78.818965][ C0] RAX: ffff8881126c9600 RBX: 0000000000000001 RCX: 0000000000000000 [ 78.827393][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8881126c9740 [ 78.835709][ C0] RBP: ffffc900060e75e0 R08: ffff8881f5c00000 R09: ffff8881126c9640 [ 78.844277][ C0] R10: 00000000748811f7 R11: 0000000000000001 R12: ffffc900060e7608 [ 78.852323][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 78.860374][ C0] ? slab_post_alloc_hook+0x6d/0x2d0 [ 78.865669][ C0] kmem_cache_alloc_node+0x181/0x340 [ 78.871027][ C0] ? __alloc_skb+0xea/0x4b0 [ 78.875521][ C0] __alloc_skb+0xea/0x4b0 [ 78.879864][ C0] ? mutex_lock+0x93/0x1b0 [ 78.884364][ C0] alloc_uevent_skb+0x85/0x240 [ 78.889149][ C0] kobject_uevent_net_broadcast+0x343/0x5b0 [ 78.895063][ C0] kobject_uevent_env+0x54f/0x730 [ 78.900204][ C0] kobject_uevent+0x1d/0x30 [ 78.904905][ C0] gadget_bind_driver+0x5bc/0x990 [ 78.910139][ C0] ? __cfi_gadget_bind_driver+0x10/0x10 [ 78.915740][ C0] really_probe+0x2cb/0x960 [ 78.920546][ C0] ? pm_runtime_barrier+0x161/0x1e0 [ 78.925834][ C0] __driver_probe_device+0x198/0x280 [ 78.931221][ C0] driver_probe_device+0x54/0x3e0 [ 78.936241][ C0] __driver_attach+0x426/0x5f0 [ 78.941006][ C0] bus_for_each_dev+0x18c/0x200 [ 78.945948][ C0] ? __cfi_kobject_init_and_add+0x10/0x10 [ 78.952074][ C0] ? __cfi___driver_attach+0x10/0x10 [ 78.957353][ C0] ? __cfi_bus_for_each_dev+0x10/0x10 [ 78.962844][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 78.967694][ C0] ? klist_add_tail+0x1d7/0x210 [ 78.972722][ C0] driver_attach+0x42/0x50 [ 78.977655][ C0] bus_add_driver+0x335/0x580 [ 78.982826][ C0] driver_register+0x33a/0x440 [ 78.987730][ C0] usb_gadget_register_driver_owner+0xf8/0x270 [ 78.993971][ C0] raw_ioctl+0x1126/0x3090 [ 78.998504][ C0] ? ioctl_has_perm+0x1b8/0x4f0 [ 79.003538][ C0] ? ioctl_has_perm+0x3a6/0x4f0 [ 79.008578][ C0] ? __cfi_raw_ioctl+0x10/0x10 [ 79.013341][ C0] ? has_cap_mac_admin+0x370/0x370 [ 79.019157][ C0] ? handle_mm_fault+0x1841/0x26c0 [ 79.024792][ C0] ? selinux_file_ioctl+0x3a0/0x4d0 [ 79.030063][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 79.035607][ C0] ? __fget_files+0x2d5/0x330 [ 79.040271][ C0] ? security_file_ioctl+0x95/0xc0 [ 79.045536][ C0] ? __cfi_raw_ioctl+0x10/0x10 [ 79.050365][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 79.055121][ C0] __x64_sys_ioctl+0x7b/0x90 [ 79.060018][ C0] x64_sys_call+0x58b/0x9a0 [ 79.064966][ C0] do_syscall_64+0x4c/0xa0 [ 79.069384][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.074145][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.080297][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.086391][ C0] RIP: 0033:0x7f9afbf9a94b [ 79.090788][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 79.110909][ C0] RSP: 002b:00007f9afcf06f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.119396][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9afbf9a94b [ 79.127618][ C0] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 79.135760][ C0] RBP: 00007f9afcf07fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 79.143789][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.151757][ C0] R13: 0000200000000480 R14: 0000000000000000 R15: 0000000000000000 [ 79.159818][ C0] [ 79.162851][ C0] [ 79.165162][ C0] Allocated by task 3000: [ 79.169551][ C0] kasan_set_track+0x4b/0x70 [ 79.174445][ C0] kasan_save_alloc_info+0x25/0x30 [ 79.179653][ C0] __kasan_kmalloc+0x95/0xb0 [ 79.184324][ C0] __kmalloc+0xb1/0x1e0 [ 79.188469][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 79.193752][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 79.198793][ C0] tty_ioctl+0x8ef/0xc60 [ 79.203018][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 79.207871][ C0] __x64_sys_ioctl+0x7b/0x90 [ 79.212649][ C0] x64_sys_call+0x58b/0x9a0 [ 79.217232][ C0] do_syscall_64+0x4c/0xa0 [ 79.221639][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.227886][ C0] [ 79.230286][ C0] Freed by task 3000: [ 79.234237][ C0] kasan_set_track+0x4b/0x70 [ 79.238822][ C0] kasan_save_free_info+0x31/0x50 [ 79.243918][ C0] ____kasan_slab_free+0x132/0x180 [ 79.249361][ C0] __kasan_slab_free+0x11/0x20 [ 79.254117][ C0] slab_free_freelist_hook+0xc2/0x190 [ 79.259657][ C0] __kmem_cache_free+0xb7/0x1b0 [ 79.264617][ C0] kfree+0x6f/0xf0 [ 79.268444][ C0] hci_release_dev+0x12a3/0x13b0 [ 79.273554][ C0] bt_host_release+0x82/0x90 [ 79.278130][ C0] device_release+0xa4/0x1d0 [ 79.282695][ C0] kobject_put+0x19d/0x280 [ 79.287087][ C0] put_device+0x1f/0x30 [ 79.291235][ C0] hci_dev_cmd+0x279/0x740 [ 79.295624][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 79.300485][ C0] sock_do_ioctl+0x114/0x330 [ 79.305261][ C0] sock_ioctl+0x4ca/0x720 [ 79.309595][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 79.314382][ C0] __x64_sys_ioctl+0x7b/0x90 [ 79.319056][ C0] x64_sys_call+0x58b/0x9a0 [ 79.323643][ C0] do_syscall_64+0x4c/0xa0 [ 79.328051][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.334146][ C0] [ 79.336463][ C0] Last potentially related work creation: [ 79.342165][ C0] kasan_save_stack+0x3a/0x60 [ 79.346827][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 79.352289][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 79.358183][ C0] insert_work+0x51/0x300 [ 79.362595][ C0] __queue_work+0x9b1/0xd30 [ 79.367429][ C0] queue_work_on+0xde/0x150 [ 79.372180][ C0] __hci_cmd_sync_sk+0xa7f/0xd30 [ 79.377294][ C0] hci_cmd_sync_status+0x53/0x120 [ 79.382504][ C0] hci_dev_cmd+0x648/0x740 [ 79.386921][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 79.391656][ C0] sock_do_ioctl+0x114/0x330 [ 79.396514][ C0] sock_ioctl+0x4ca/0x720 [ 79.401028][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 79.405875][ C0] __x64_sys_ioctl+0x7b/0x90 [ 79.411844][ C0] x64_sys_call+0x58b/0x9a0 [ 79.416513][ C0] do_syscall_64+0x4c/0xa0 [ 79.421180][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.427145][ C0] [ 79.429462][ C0] Second to last potentially related work creation: [ 79.436015][ C0] kasan_save_stack+0x3a/0x60 [ 79.440671][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 79.446052][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 79.452014][ C0] insert_work+0x51/0x300 [ 79.457803][ C0] __queue_work+0x9b1/0xd30 [ 79.462368][ C0] queue_work_on+0xde/0x150 [ 79.466942][ C0] hci_cmd_timeout+0x191/0x200 [ 79.471807][ C0] process_one_work+0x71f/0xc40 [ 79.476952][ C0] worker_thread+0xa29/0x11e0 [ 79.481622][ C0] kthread+0x281/0x320 [ 79.485824][ C0] ret_from_fork+0x1f/0x30 [ 79.491189][ C0] [ 79.493509][ C0] The buggy address belongs to the object at ffff88810e26c000 [ 79.493509][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 79.509434][ C0] The buggy address is located 2560 bytes inside of [ 79.509434][ C0] 8192-byte region [ffff88810e26c000, ffff88810e26e000) [ 79.523308][ C0] [ 79.525648][ C0] The buggy address belongs to the physical page: [ 79.532272][ C0] page:ffffea0004389a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e268 [ 79.542558][ C0] head:ffffea0004389a00 order:3 compound_mapcount:0 compound_pincount:0 [ 79.551299][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 79.557458][ C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500 [ 79.566715][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 79.575476][ C0] page dumped because: kasan: bad access detected [ 79.582269][ C0] page_owner tracks the page as allocated [ 79.588065][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 287, tgid 287 (syz-executor), ts 24110601567, free_ts 24085016171 [ 79.609840][ C0] post_alloc_hook+0x1f5/0x210 [ 79.614693][ C0] prep_new_page+0x1c/0x110 [ 79.620167][ C0] get_page_from_freelist+0x2d12/0x2d80 [ 79.625719][ C0] __alloc_pages+0x1d9/0x480 [ 79.631051][ C0] alloc_slab_page+0x6e/0xf0 [ 79.635732][ C0] new_slab+0x98/0x3d0 [ 79.639793][ C0] ___slab_alloc+0x6bd/0xb20 [ 79.644452][ C0] __slab_alloc+0x5e/0xa0 [ 79.648760][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 79.654204][ C0] __kmalloc_node_track_caller+0xa0/0x1e0 [ 79.659911][ C0] kmemdup+0x2b/0x60 [ 79.663911][ C0] ipv4_sysctl_init_net+0x40/0x310 [ 79.669357][ C0] ops_init+0x1c8/0x4a0 [ 79.673855][ C0] setup_net+0x4b4/0xcc0 [ 79.678096][ C0] copy_net_ns+0x355/0x5c0 [ 79.682803][ C0] create_new_namespaces+0x3a2/0x660 [ 79.689469][ C0] page last free stack trace: [ 79.694668][ C0] free_unref_page_prepare+0x742/0x750 [ 79.700400][ C0] free_unref_page+0x95/0x540 [ 79.705166][ C0] __free_pages+0x67/0x100 [ 79.709586][ C0] __free_slab+0xca/0x1a0 [ 79.714001][ C0] __unfreeze_partials+0x160/0x190 [ 79.719834][ C0] put_cpu_partial+0xa9/0x100 [ 79.725471][ C0] __slab_free+0x1c4/0x280 [ 79.730597][ C0] ___cache_free+0xbf/0xd0 [ 79.735186][ C0] qlist_free_all+0xc6/0x140 [ 79.739946][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 79.745654][ C0] __kasan_slab_alloc+0x24/0x80 [ 79.750591][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 79.756133][ C0] kmem_cache_alloc+0x16e/0x330 [ 79.761663][ C0] mas_alloc_nodes+0x2d8/0x850 [ 79.766519][ C0] mas_preallocate+0xe13/0x1440 [ 79.771447][ C0] vma_expand+0x3b7/0xa10 [ 79.775853][ C0] [ 79.778165][ C0] Memory state around the buggy address: [ 79.783958][ C0] ffff88810e26c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.792205][ C0] ffff88810e26c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.800671][ C0] >ffff88810e26ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.809963][ C0] ^ [ 79.814198][ C0] ffff88810e26ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.822342][ C0] ffff88810e26cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.830549][ C0] ================================================================== [ 79.839298][ C0] Disabling lock debugging due to kernel taint [ 79.845841][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 79.858674][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 79.867250][ C0] CPU: 0 PID: 3213 Comm: syz.3.1094 Tainted: G B W syzkaller #0 [ 79.876099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.886443][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 79.891844][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ec 70 6e 00 49 8b 7d 00 e8 33 7c [ 79.911691][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 79.917767][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888112a33cc0 [ 79.925827][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 79.934071][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 79.942042][ C0] R10: dffffc0000000000 R11: ffffed1021c4d939 R12: dffffc0000000000 [ 79.950199][ C0] R13: 0000000000000000 R14: ffff88810e26c9c8 R15: 0000000000000008 [ 79.958357][ C0] FS: 00007f9afcf096c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 79.967572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.974168][ C0] CR2: 00007f9afbf83ec0 CR3: 0000000132253000 CR4: 00000000003506b0 [ 79.982333][ C0] Call Trace: [ 79.985710][ C0] [ 79.988633][ C0] delayed_work_timer_fn+0x61/0x80 [ 79.994035][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 79.999851][ C0] call_timer_fn+0x46/0x2a0 [ 80.004460][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 80.010381][ C0] __run_timers+0x689/0x9f0 [ 80.014911][ C0] ? calc_index+0x200/0x200 [ 80.019511][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 80.024720][ C0] run_timer_softirq+0x6a/0xf0 [ 80.029501][ C0] handle_softirqs+0x1d7/0x600 [ 80.034261][ C0] __irq_exit_rcu+0x52/0xf0 [ 80.038907][ C0] irq_exit_rcu+0x9/0x10 [ 80.043162][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 80.048915][ C0] [ 80.051860][ C0] [ 80.054791][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 80.060899][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 80.065958][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 80.085721][ C0] RSP: 0018:ffffc900060e7580 EFLAGS: 00000246 [ 80.091771][ C0] RAX: ffff8881126c9600 RBX: 0000000000000001 RCX: 0000000000000000 [ 80.099814][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8881126c9740 [ 80.108826][ C0] RBP: ffffc900060e75e0 R08: ffff8881f5c00000 R09: ffff8881126c9640 [ 80.116790][ C0] R10: 00000000748811f7 R11: 0000000000000001 R12: ffffc900060e7608 [ 80.124845][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 80.133000][ C0] ? slab_post_alloc_hook+0x6d/0x2d0 [ 80.138290][ C0] kmem_cache_alloc_node+0x181/0x340 [ 80.145367][ C0] ? __alloc_skb+0xea/0x4b0 [ 80.150138][ C0] __alloc_skb+0xea/0x4b0 [ 80.154454][ C0] ? mutex_lock+0x93/0x1b0 [ 80.158857][ C0] alloc_uevent_skb+0x85/0x240 [ 80.163620][ C0] kobject_uevent_net_broadcast+0x343/0x5b0 [ 80.169786][ C0] kobject_uevent_env+0x54f/0x730 [ 80.174865][ C0] kobject_uevent+0x1d/0x30 [ 80.179548][ C0] gadget_bind_driver+0x5bc/0x990 [ 80.184593][ C0] ? __cfi_gadget_bind_driver+0x10/0x10 [ 80.190227][ C0] really_probe+0x2cb/0x960 [ 80.194823][ C0] ? pm_runtime_barrier+0x161/0x1e0 [ 80.200202][ C0] __driver_probe_device+0x198/0x280 [ 80.205593][ C0] driver_probe_device+0x54/0x3e0 [ 80.211030][ C0] __driver_attach+0x426/0x5f0 [ 80.215897][ C0] bus_for_each_dev+0x18c/0x200 [ 80.220830][ C0] ? __cfi_kobject_init_and_add+0x10/0x10 [ 80.226554][ C0] ? __cfi___driver_attach+0x10/0x10 [ 80.232009][ C0] ? __cfi_bus_for_each_dev+0x10/0x10 [ 80.237474][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 80.242397][ C0] ? klist_add_tail+0x1d7/0x210 [ 80.247242][ C0] driver_attach+0x42/0x50 [ 80.251656][ C0] bus_add_driver+0x335/0x580 [ 80.256355][ C0] driver_register+0x33a/0x440 [ 80.261118][ C0] usb_gadget_register_driver_owner+0xf8/0x270 [ 80.267283][ C0] raw_ioctl+0x1126/0x3090 [ 80.271698][ C0] ? ioctl_has_perm+0x1b8/0x4f0 [ 80.276531][ C0] ? ioctl_has_perm+0x3a6/0x4f0 [ 80.281371][ C0] ? __cfi_raw_ioctl+0x10/0x10 [ 80.286126][ C0] ? has_cap_mac_admin+0x370/0x370 [ 80.291315][ C0] ? handle_mm_fault+0x1841/0x26c0 [ 80.296412][ C0] ? selinux_file_ioctl+0x3a0/0x4d0 [ 80.301642][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 80.307342][ C0] ? __fget_files+0x2d5/0x330 [ 80.312094][ C0] ? security_file_ioctl+0x95/0xc0 [ 80.317281][ C0] ? __cfi_raw_ioctl+0x10/0x10 [ 80.322021][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 80.327111][ C0] __x64_sys_ioctl+0x7b/0x90 [ 80.331768][ C0] x64_sys_call+0x58b/0x9a0 [ 80.336247][ C0] do_syscall_64+0x4c/0xa0 [ 80.340648][ C0] ? clear_bhb_loop+0x30/0x80 [ 80.345397][ C0] ? clear_bhb_loop+0x30/0x80 [ 80.350516][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.356504][ C0] RIP: 0033:0x7f9afbf9a94b [ 80.361079][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 80.380847][ C0] RSP: 002b:00007f9afcf06f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.389707][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9afbf9a94b [ 80.397701][ C0] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 80.406703][ C0] RBP: 00007f9afcf07fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 80.415155][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.423301][ C0] R13: 0000200000000480 R14: 0000000000000000 R15: 0000000000000000 [ 80.431932][ C0] [ 80.435124][ C0] Modules linked in: [ 80.439125][ C0] ---[ end trace 0000000000000000 ]--- [ 80.444847][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 80.450486][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ec 70 6e 00 49 8b 7d 00 e8 33 7c [ 80.471042][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 80.477098][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888112a33cc0 [ 80.485235][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 80.493276][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 80.501597][ C0] R10: dffffc0000000000 R11: ffffed1021c4d939 R12: dffffc0000000000 [ 80.509912][ C0] R13: 0000000000000000 R14: ffff88810e26c9c8 R15: 0000000000000008 [ 80.518399][ C0] FS: 00007f9afcf096c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 80.528207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.535393][ C0] CR2: 00007f9afbf83ec0 CR3: 0000000132253000 CR4: 00000000003506b0 [ 80.543851][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 80.551728][ C0] Kernel Offset: disabled [ 80.556177][ C0] Rebooting in 86400 seconds..