last executing test programs: 1m30.499940031s ago: executing program 4 (id=21): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x7, @empty}, 0x1c) 1m30.473146123s ago: executing program 4 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x6, 0x110022}) 1m30.439232904s ago: executing program 4 (id=26): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x20000) 1m30.283481744s ago: executing program 32 (id=29): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2010804, &(0x7f0000000400)={[{@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@dots}, {}, {@fat=@umask={'umask', 0x3d, 0x1}}]}, 0x1, 0x262, &(0x7f0000000040)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1m30.280865954s ago: executing program 4 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4000005a, 0x0, 0x9}]}) 1m30.161291431s ago: executing program 4 (id=34): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m30.111103654s ago: executing program 33 (id=34): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m23.045620184s ago: executing program 34 (id=218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) close_range(r0, r0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 1m18.28936206s ago: executing program 35 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x21, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 1m8.238518762s ago: executing program 36 (id=693): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8064000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 50.949176285s ago: executing program 37 (id=1137): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x3, 0xf2, 0x3, 0x6, 0xcf4, 0x1, 0x9, 'syz0\x00'}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 46.539344701s ago: executing program 38 (id=1288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 45.577108237s ago: executing program 4 (id=1290): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 41.246321388s ago: executing program 0 (id=1430): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRES16=r1], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 41.20326424s ago: executing program 0 (id=1431): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000e80)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000180)=@canfd={{0x101, 0x1, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "653a52684fd40e0c2855026ecfc87e4be85909a941e94c7b82240c32357f8ad86e0b092f2442d9b7cf4c773a5753f5e2004d9b5598a31241966d6b821c3a5227"}, 0x48}}, 0x4080811) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100200009040000ff02020000052402000005240004000d240f01090000000000000000090581032000037fff09058202000000010009050302"], 0x0) 40.645351593s ago: executing program 0 (id=1439): syz_open_dev$loop(0x0, 0x6, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1}, 0x0) 40.644660603s ago: executing program 0 (id=1440): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 40.609996755s ago: executing program 0 (id=1442): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 40.496955971s ago: executing program 0 (id=1444): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) unshare(0x28000600) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/152}, {&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/29}], 0x0, &(0x7f0000000400)=""/104}, 0x7fff}], 0x32, 0x0, 0x0) 40.496700551s ago: executing program 39 (id=1444): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) unshare(0x28000600) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/152}, {&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/29}], 0x0, &(0x7f0000000400)=""/104}, 0x7fff}], 0x32, 0x0, 0x0) 30.557270278s ago: executing program 40 (id=1290): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 26.248922767s ago: executing program 1 (id=1744): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) close(0x3) 26.224393849s ago: executing program 1 (id=1746): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) unshare(0x22020600) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) 26.148684304s ago: executing program 1 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.132491144s ago: executing program 1 (id=1748): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5519, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setuid(0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 25.736976907s ago: executing program 1 (id=1756): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 25.489096742s ago: executing program 1 (id=1760): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 24.009998828s ago: executing program 41 (id=1760): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 15.777303625s ago: executing program 8 (id=2012): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15.70129581s ago: executing program 8 (id=2013): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x455, 0x1, 0x3, 0x101, 0x10]}, &(0x7f0000000240)=0x54) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r2, @ANYBLOB="14000600010000000100000001000000feffffff140002"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 15.7008242s ago: executing program 8 (id=2014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)) 15.599532765s ago: executing program 8 (id=2017): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 15.599257925s ago: executing program 8 (id=2018): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) io_uring_setup(0x3db6, 0x0) wait4(r0, 0x0, 0xa0000009, 0x0) 15.532036659s ago: executing program 8 (id=2020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r0}, &(0x7f0000001780), &(0x7f00000017c0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 15.469146273s ago: executing program 42 (id=2020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r0}, &(0x7f0000001780), &(0x7f00000017c0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12.825324116s ago: executing program 6 (id=2133): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 12.824625046s ago: executing program 6 (id=2135): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xf2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 12.824435016s ago: executing program 6 (id=2136): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 12.811061677s ago: executing program 6 (id=2138): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210850, 0x0, 0x0, 0x0, 0x0) 12.696309663s ago: executing program 6 (id=2139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 12.616514879s ago: executing program 6 (id=2143): socket(0x11, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/166, 0xa6}, 0x400}], 0x1, 0x10162, 0x0) 12.510815955s ago: executing program 43 (id=2143): socket(0x11, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/166, 0xa6}, 0x400}], 0x1, 0x10162, 0x0) 3.745343883s ago: executing program 7 (id=2412): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000004c0)={0x3, 0x200, 0xde4, 0x5, 0x80000, 0x1}) 2.007880574s ago: executing program 7 (id=2459): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty, 0x8000}, 0x1c) 1.998077635s ago: executing program 7 (id=2460): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc2000000000001090224000100000003090400000103000300092130b4000122060009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x40, 0x9, 0x5c, {0x5c, 0xf, "4639e44d0e5cf3035b02a92879b0dd376e0b43cbee8fab4044210405b603b4b84578414a737a492a3a3db706d15ec8fb69b0e440216ef0afcc94b0901287fe2081458a18794493d037287e7f9c70766cca1f4e26d37b99471951"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setfsuid(0x0) listen(0xffffffffffffffff, 0x200204) 912.251117ms ago: executing program 5 (id=2486): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000000) 841.153301ms ago: executing program 5 (id=2488): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x1, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x84}, {0x7ff, 0x0, 0x1, 0x3, 0xfffffffffffffff6, 0x2000000, 0x7fffffff}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x2b}, 0x0, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 840.554771ms ago: executing program 5 (id=2490): eventfd2(0x3, 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x232, 0xffffff01, 0x0}) 838.693581ms ago: executing program 5 (id=2492): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000640)={0xe, {0x3, 0x6, 0x2}}, 0xc) fcntl$setstatus(r0, 0x4, 0x40c00) io_setup(0x1000, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1, 0x0, 0x0, 0x2, r1}]) 669.035912ms ago: executing program 5 (id=2495): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 651.459473ms ago: executing program 5 (id=2498): r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x1], 0x2) io_uring_enter(r0, 0x7, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3961, 0x0, 0x0, 0x0, 0x0) 584.913306ms ago: executing program 3 (id=2500): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}]}}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) unshare(0x4040400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20) 584.336036ms ago: executing program 3 (id=2502): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 563.311918ms ago: executing program 3 (id=2504): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/68, 0x44}], 0x1}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f00000005c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x3, 0x60, 0x0) connect$bt_sco(r1, &(0x7f0000000280)={0x1f, @none}, 0x8) 408.919847ms ago: executing program 3 (id=2507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="8fe91098513766baf80cb8ec83aa871c660f10388a807766bafc0c66ed0f01d1f2e181f0109307000000440f20c0350d000000440f22c0b99d0b0000b803000000ba00000000a93066430f0055f8c7442400cd000000c744240200400000ff2c24400f01c6f9", 0x66}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 316.624871ms ago: executing program 9 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 304.609472ms ago: executing program 3 (id=2517): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 291.304883ms ago: executing program 3 (id=2518): timer_create(0x3, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 241.771126ms ago: executing program 9 (id=2521): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 189.377779ms ago: executing program 7 (id=2522): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x28, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xbbe, 0x7, 0x2, 0x42, 0xfe, 0x1605}, 0xc) 188.641659ms ago: executing program 7 (id=2523): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r0, 0x0}, 0x20) 188.235989ms ago: executing program 9 (id=2524): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@nodelalloc}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000200)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7800000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000580012800e00010069703665727370616e0000004400028005001600020000000400120014000700ff020007000000000000000000000001060018000100000005001700"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 183.756839ms ago: executing program 7 (id=2525): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, 0x0, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, 0x0}) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 133.943263ms ago: executing program 2 (id=2526): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 55.620677ms ago: executing program 2 (id=2527): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="280320000a00140000007ef506be00c48ad97a0000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6b0100995f96877870000000000000000", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random}, 0x14) 55.124997ms ago: executing program 2 (id=2528): creat(0x0, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbfdf9a684a51b86dd60108f8400283afffe80802d9460000000000000000000bbfe8000000000000000000000000000aa8900907800000000000000000000000099cf20ffffac1414bbfd"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) 54.890037ms ago: executing program 9 (id=2529): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 54.634877ms ago: executing program 2 (id=2530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) setresuid(0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r1], 0x20) 54.314987ms ago: executing program 9 (id=2531): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000980)="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", 0x101}], 0x1, 0x0, 0xe8}, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 1.21397ms ago: executing program 2 (id=2532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x80, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x400}, {0x0, 0x0, 0x101}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10000000) 495.88µs ago: executing program 9 (id=2533): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbaTFBAhoEgEoSJ1gIWmbmnpihAoYuBPQIpSpwRcCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytYhQ5CYGILufJeeY5dEBc6m+f2kd+/z+Xrve+dTlc/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2HkrviniJN1Mp5uJqOf77u6uLaX99oE+tbVxby5taVyrOvHx93L5xcnZ0SUCAADA8ZEU9X1E3G9uLqR9fTqr/5vFMWnN/90zvbio5w/W/du7a5P5W3NF/f/rLw9e2B9oOsnGSU+6vNLtnBlMpfEfTXHsPXvoEY3symffvSTZB1J/b/35nWZ2PWtf37nzTisLJ6rIFgB4HKeLPg+Kv4fSvj3KxAA4Nhqlwruo/5Pp0eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIWd9XiqiGsRMdd4GKe2d9eWhvVfbtyb28rbhdu3N8rnTE/RjIjllW7nTIVzGV/F1bz58WK327l2/UbVwcmIGPLWraP98yRP/5HHtCKib8+pF4ec54MjjHXgPANBfntGtddwKp3foQfX+vbUBi7423s9o7gBqgrq+eczLvkMBpOPvo0PCYp7799PrOL/jgAAeOI185ZWovebmwvpvtpMxN73/fX/q6U4+ur+vVu9Pb3XW6X6/8GHF+6WxyrX/+2K5vd/ML965dP56zduvr5yZfFy53LnkzfOtt9sn7t4/vzF+ey7kvnlqPvGBAAAgH+glbdy/V+fGVz/P1GK42/W/8v1/2fftr8oj5Wo/4d6uOg36kwAAACOo9Z+9Nwrf/xeG3JErdWKzxdXV6+1e9v912d720rTfUwTeSvX/8nMqLMCAAAAqrCzXutb/79UiuOI6/9P//DST+VzJhExFXE1Ijqnl652L1U3nbFWxc+bs4Fao54pAAAAozKVt/L6fzN7/r++/8hDPSJeOxXxZ/4b/jhi/Z+8+9WP5bHKz/+fq3SW46c+27seWT8b0ZgddUYAAAA8ySbzlhb7vzU3Fz76+cT7Lc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//VDwyJg==") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) 0s ago: executing program 2 (id=2534): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) exit(0x0) kernel console output (not intermixed with test programs): cvtap entered promiscuous mode [ 71.799663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.809994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.895966][ T474] device bridge_slave_1 left promiscuous mode [ 71.902136][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.915975][ T474] device bridge_slave_0 left promiscuous mode [ 71.925183][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.943600][ T474] device veth1_macvtap left promiscuous mode [ 71.949714][ T474] device veth0_vlan left promiscuous mode [ 72.204347][ T3788] loop3: detected capacity change from 0 to 2048 [ 72.216563][ T3788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 72.233271][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 72.249388][ T3795] loop3: detected capacity change from 0 to 512 [ 72.269322][ T3795] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1461: invalid indirect mapped block 4294967295 (level 1) [ 72.283601][ T3795] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1461: invalid indirect mapped block 4294967295 (level 1) [ 72.297896][ T3795] EXT4-fs (loop3): 2 truncates cleaned up [ 72.303667][ T3795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.327107][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 72.410035][ T3804] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1463'. [ 72.705055][ T491] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.885021][ T491] usb 4-1: Using ep0 maxpacket: 16 [ 72.891513][ T491] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 72.899778][ T491] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.910012][ T491] usb 4-1: config 0 has no interface number 0 [ 72.917824][ T491] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 72.926937][ T491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.935241][ T491] usb 4-1: Product: syz [ 72.939523][ T491] usb 4-1: Manufacturer: syz [ 72.945081][ T491] usb 4-1: SerialNumber: syz [ 72.951250][ T491] usb 4-1: config 0 descriptor?? [ 73.033101][ T3817] syz.1.1469 uses obsolete (PF_INET,SOCK_PACKET) [ 73.155893][ T3824] loop1: detected capacity change from 0 to 512 [ 73.163698][ T491] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 73.175800][ T491] usb 4-1: No valid video chain found. [ 73.176305][ T3824] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1474: invalid indirect mapped block 4294967295 (level 1) [ 73.182429][ T491] usb 4-1: USB disconnect, device number 3 [ 73.205708][ T3824] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1474: invalid indirect mapped block 4294967295 (level 1) [ 73.220022][ T3824] EXT4-fs (loop1): 2 truncates cleaned up [ 73.225896][ T3824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.251599][ T3746] EXT4-fs (loop1): unmounting filesystem. [ 73.331321][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 73.331336][ T28] audit: type=1400 audit(2000000011.340:641): avc: denied { mounton } for pid=3840 comm="syz.1.1491" path="/proc/30/cgroup" dev="proc" ino=29284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 73.438272][ T3847] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1485'. [ 73.833261][ T28] audit: type=1400 audit(2000000011.840:642): avc: denied { setopt } for pid=3865 comm="syz.8.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.899468][ T3853] loop1: detected capacity change from 0 to 131072 [ 73.914794][ T3853] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 73.930656][ T3853] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.947233][ T3853] F2FS-fs (loop1): invalid crc value [ 73.971333][ T3853] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.985951][ T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.015386][ T28] audit: type=1400 audit(2000000012.030:643): avc: denied { getopt } for pid=3872 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.046951][ T3853] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.054113][ T3853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 74.158904][ T3876] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1498'. [ 74.176292][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.189281][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.203773][ T60] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.212998][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.245258][ T60] usb 4-1: config 0 descriptor?? [ 74.398112][ T3895] loop1: detected capacity change from 0 to 128 [ 74.414499][ T3895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.425989][ T3895] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.431761][ T28] audit: type=1400 audit(2000000012.440:644): avc: denied { read write } for pid=3897 comm="syz.8.1505" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.482953][ T3895] EXT4-fs error (device loop1): make_indexed_dir:2333: inode #2: block 20: comm syz.1.1499: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 74.513777][ T348] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 74.531821][ T348] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.535588][ T28] audit: type=1400 audit(2000000012.480:645): avc: denied { open } for pid=3897 comm="syz.8.1505" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.569786][ T3746] EXT4-fs (loop1): unmounting filesystem. [ 74.593679][ T28] audit: type=1326 audit(2000000012.590:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.2.1510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6247b9aeb9 code=0x0 [ 74.676903][ T60] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 74.680936][ T3916] loop8: detected capacity change from 0 to 256 [ 74.686938][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input5 [ 74.767876][ T60] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 74.879303][ T348] usb 4-1: USB disconnect, device number 4 [ 74.905051][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.055041][ T491] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 75.086257][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.097344][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.106422][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.115768][ T6] usb 2-1: config 0 descriptor?? [ 75.245025][ T491] usb 9-1: Using ep0 maxpacket: 16 [ 75.251476][ T491] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 75.262382][ T491] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.272410][ T491] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.282218][ T491] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 5 [ 75.291914][ T491] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 75.305685][ T491] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.314730][ T491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.322896][ T491] usb 9-1: SerialNumber: syz [ 75.328994][ T3920] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 75.337009][ T491] cdc_acm: probe of 9-1:1.0 failed with error -12 [ 75.443562][ T3930] netlink: 'syz.3.1516': attribute type 4 has an invalid length. [ 75.523595][ T6] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 75.534102][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input6 [ 75.556177][ T491] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 75.571752][ T348] usb 9-1: USB disconnect, device number 7 [ 75.574568][ T491] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.627799][ T6] keytouch 0003:0926:3333.000C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 75.749537][ T3951] loop3: detected capacity change from 0 to 128 [ 75.767880][ T3951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.778669][ T3951] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.812364][ C0] Mem-Info: [ 75.815499][ C0] active_anon:7601 inactive_anon:10 isolated_anon:0 [ 75.815499][ C0] active_file:6112 inactive_file:2565 isolated_file:0 [ 75.815499][ C0] unevictable:0 dirty:338 writeback:0 [ 75.815499][ C0] slab_reclaimable:8560 slab_unreclaimable:74591 [ 75.815499][ C0] mapped:29486 shmem:205 pagetables:728 [ 75.815499][ C0] sec_pagetables:0 bounce:0 [ 75.815499][ C0] kernel_misc_reclaimable:0 [ 75.815499][ C0] free:1528837 free_pcp:5430 free_cma:0 [ 75.818682][ T3951] EXT4-fs error (device loop3): make_indexed_dir:2333: inode #2: block 20: comm syz.3.1527: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 75.860332][ C0] Node 0 active_anon:30404kB inactive_anon:40kB active_file:24448kB inactive_file:10260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117944kB dirty:1352kB writeback:0kB shmem:820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5408kB pagetables:2912kB sec_pagetables:0kB all_unreclaimable? no [ 75.860396][ C0] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971940kB mlocked:0kB bounce:0kB free_pcp:5456kB local_pcp:5456kB free_cma:0kB [ 75.925039][ T28] audit: type=1400 audit(2000000013.830:647): avc: denied { create } for pid=3950 comm="syz.3.1527" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.940283][ C0] lowmem_reserve[]: 0 3932 3932 3932 [ 75.940316][ C0] Normal free:3148624kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:30372kB inactive_anon:40kB active_file:24448kB inactive_file:10272kB unevictable:0kB writepending:1376kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:16524kB local_pcp:14964kB free_cma:0kB [ 75.986636][ T28] audit: type=1400 audit(2000000013.830:648): avc: denied { write open } for pid=3950 comm="syz.3.1527" path="/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.986720][ C0] lowmem_reserve[]: 0 0 0 0 [ 76.087618][ C0] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 76.103046][ C0] Normal: 548*4kB (UME) 666*8kB (UME) 363*16kB (UME) 445*32kB (UME) 173*64kB (UM) 263*128kB (UME) 102*256kB (UM) 57*512kB (UM) 36*1024kB (UME) 13*2048kB (UM) 722*4096kB (UM) = 3148400kB [ 76.121444][ C0] 8889 total pagecache pages [ 76.126058][ C0] 11 pages in swap cache [ 76.130309][ C0] Free swap = 124324kB [ 76.134477][ C0] Total swap = 124996kB [ 76.138629][ C0] 2097051 pages RAM [ 76.142440][ C0] 0 pages HighMem/MovableOnly [ 76.147118][ C0] 347466 pages reserved [ 76.151273][ C0] 0 pages cma reserved [ 76.176931][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 76.195233][ T3958] loop8: detected capacity change from 0 to 128 [ 76.212422][ T3958] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.248155][ T28] audit: type=1400 audit(2000000014.260:649): avc: denied { watch watch_reads } for pid=3957 comm="syz.8.1530" path="/194/file0/file0" dev="loop8" ino=1048692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 76.318310][ T348] kernel write not supported for file bpf-prog (pid: 348 comm: kworker/1:3) [ 76.367270][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 76.378809][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.542342][ T491] usb 2-1: USB disconnect, device number 3 [ 76.548262][ C0] keytouch 0003:0926:3333.000C: usb_submit_urb(ctrl) failed: -19 [ 76.687700][ T3978] loop3: detected capacity change from 0 to 40427 [ 76.706288][ T3978] F2FS-fs (loop3): invalid crc value [ 76.715341][ T3978] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.750050][ T3978] F2FS-fs (loop3): Start checkpoint disabled! [ 76.756450][ T3978] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 76.763770][ T3978] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 76.793544][ T28] audit: type=1400 audit(2000000014.800:650): avc: denied { read append } for pid=3977 comm="syz.3.1538" path="/62/file1/memory.current" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.135015][ T491] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.163997][ T3993] loop8: detected capacity change from 0 to 512 [ 77.170681][ T3993] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.293080][ T3999] loop8: detected capacity change from 0 to 32768 [ 77.325033][ T491] usb 4-1: Using ep0 maxpacket: 32 [ 77.334124][ T491] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 77.342438][ T491] usb 4-1: config 0 has no interface number 0 [ 77.349756][ T3999] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 77.357722][ T3999] loop8: partition table partially beyond EOD, truncated [ 77.359817][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 77.365219][ T3999] loop8: p1 start 460800 is beyond EOD, truncated [ 77.380265][ T3999] loop8: p2 size 83886080 extends beyond EOD, truncated [ 77.384488][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 77.388259][ T491] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 77.405772][ T3999] loop8: p3 start 2147483648 is beyond EOD, truncated [ 77.412860][ T491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.415221][ T3999] loop8: p5 start 460800 is beyond EOD, [ 77.420925][ T491] usb 4-1: Product: syz [ 77.420941][ T491] usb 4-1: Manufacturer: syz [ 77.420955][ T491] usb 4-1: SerialNumber: syz [ 77.422288][ T491] usb 4-1: config 0 descriptor?? [ 77.436373][ T3999] truncated [ 77.441190][ T491] smsc95xx v2.0.0 [ 77.445370][ T3999] loop8: p6 size 83886080 extends beyond EOD, truncated [ 77.561411][ T348] kernel write not supported for file bpf-prog (pid: 348 comm: kworker/1:3) [ 77.586820][ T370] udevd[370]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 77.596274][ T542] udevd[542]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 77.598202][ T337] udevd[337]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 77.619333][ T370] udevd[370]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 77.626324][ T542] udevd[542]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 77.630138][ T337] udevd[337]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 77.911496][ T4026] loop1: detected capacity change from 0 to 512 [ 77.918802][ T4026] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.992222][ T4033] loop1: detected capacity change from 0 to 256 [ 78.040292][ T4029] netlink: 'syz.8.1563': attribute type 4 has an invalid length. [ 78.145066][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 78.256553][ T491] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 78.307506][ T4073] input: syz1 as /devices/virtual/input/input7 [ 78.415045][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 78.428566][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.442271][ T4081] netlink: 'syz.1.1585': attribute type 4 has an invalid length. [ 78.457158][ T491] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 78.471915][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 78.476425][ T491] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 78.488722][ T491] usb 4-1: USB disconnect, device number 5 [ 78.503750][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.522682][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.531115][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.545554][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.555640][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.568213][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.576810][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.613038][ T4083] loop1: detected capacity change from 0 to 128 [ 78.651419][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 78.651434][ T28] audit: type=1400 audit(2000000016.660:653): avc: denied { append } for pid=4084 comm="syz.1.1589" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.655583][ T4087] loop8: detected capacity change from 0 to 512 [ 78.659931][ T28] audit: type=1400 audit(2000000016.670:654): avc: denied { read } for pid=4084 comm="syz.1.1589" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.714022][ T28] audit: type=1400 audit(2000000016.670:655): avc: denied { open } for pid=4084 comm="syz.1.1589" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.765879][ T4087] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 78.806072][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 78.847793][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1596'. [ 78.861340][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1596'. [ 79.024612][ T4112] netlink: 'syz.2.1599': attribute type 4 has an invalid length. [ 79.066679][ T4114] loop8: detected capacity change from 0 to 1024 [ 79.086718][ T4116] erofs: (device loop3): mounted with root inode @ nid 36. [ 79.098666][ T28] audit: type=1400 audit(2000000017.110:656): avc: denied { map } for pid=4115 comm="syz.3.1601" path="socket:[30317]" dev="sockfs" ino=30317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 79.122438][ T4114] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 79.137155][ T4114] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.178458][ T28] audit: type=1400 audit(2000000017.190:657): avc: denied { map } for pid=4113 comm="syz.8.1600" path="/216/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.202574][ T474] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 79.217026][ T474] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 79.229788][ T474] EXT4-fs (loop8): This should not happen!! Data will be lost [ 79.229788][ T474] [ 79.240452][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 79.254176][ T4133] netlink: 'syz.8.1607': attribute type 12 has an invalid length. [ 79.298135][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 79.537988][ T4135] F2FS-fs (loop8): Found nat_bits in checkpoint [ 79.572242][ T4135] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 79.715229][ T39] kernel write not supported for file bpf-prog (pid: 39 comm: kworker/1:1) [ 79.772694][ T4157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.824034][ T3746] EXT4-fs (loop1): unmounting filesystem. [ 79.848133][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 79.873954][ T4169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.906332][ T4169] EXT4-fs (loop1): 1 truncate cleaned up [ 79.912069][ T4169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.925422][ T28] audit: type=1400 audit(2000000017.940:658): avc: denied { lock } for pid=4168 comm="syz.1.1621" path="/45/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.948684][ T28] audit: type=1400 audit(2000000017.960:659): avc: denied { link } for pid=4168 comm="syz.1.1621" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.973719][ T3746] EXT4-fs (loop1): unmounting filesystem. [ 80.245052][ T491] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 80.446692][ T491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.465060][ T491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.474820][ T491] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.505003][ T491] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.514045][ T491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.528179][ T491] usb 4-1: config 0 descriptor?? [ 80.765762][ T4213] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1642'. [ 80.866135][ T28] audit: type=1400 audit(2000000018.880:660): avc: denied { map } for pid=4220 comm="syz.8.1646" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.937522][ T491] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 80.950983][ T4225] set_capacity_and_notify: 4 callbacks suppressed [ 80.951001][ T4225] loop1: detected capacity change from 0 to 1024 [ 80.965507][ T4225] EXT4-fs: Ignoring removed nobh option [ 80.966452][ T491] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 80.981592][ T4225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.989567][ T491] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.051295][ T4225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.071848][ T28] audit: type=1326 audit(2000000019.080:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 81.096189][ T3746] EXT4-fs (loop1): unmounting filesystem. [ 81.097965][ T28] audit: type=1326 audit(2000000019.080:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 81.266235][ T491] usb 4-1: USB disconnect, device number 6 [ 81.325990][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 81.343527][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.408775][ T4263] device syz_tun entered promiscuous mode [ 81.457436][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 81.472647][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 81.540855][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 81.651141][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.675706][ T4286] loop1: detected capacity change from 0 to 128 [ 81.683081][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.711588][ T4279] device bridge_slave_0 entered promiscuous mode [ 81.718540][ T4286] EXT4-fs: Ignoring removed orlov option [ 81.743697][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 81.755410][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.762467][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.805779][ T4286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.825715][ T4286] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.859989][ T4279] device bridge_slave_1 entered promiscuous mode [ 81.999404][ T3746] EXT4-fs (loop1): unmounting filesystem. [ 82.155148][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 82.177836][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.184902][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.192209][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.199271][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.224739][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.244670][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.258651][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.267387][ T4297] loop3: detected capacity change from 0 to 40427 [ 82.283772][ T4297] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 82.294200][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.304769][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.311087][ T4297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 82.311845][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.345874][ T4297] F2FS-fs (loop3): invalid crc value [ 82.352857][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.365631][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.372793][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.389701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.399337][ T4297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.406476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.447303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.462639][ T4297] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.466924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.470036][ T4297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.485677][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.505461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.525225][ T4279] device veth0_vlan entered promiscuous mode [ 82.569466][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.578790][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.617869][ T4279] device veth1_macvtap entered promiscuous mode [ 82.660355][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.677637][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.694203][ T4321] input: syz1 as /devices/virtual/input/input9 [ 82.705275][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.732766][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.763783][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.785499][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 82.798153][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.157498][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.164993][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.172457][ T4345] device bridge_slave_0 entered promiscuous mode [ 83.198606][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.220576][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.236537][ T4345] device bridge_slave_1 entered promiscuous mode [ 83.255087][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.266956][ T4354] input: syz1 as /devices/virtual/input/input10 [ 83.287405][ T351] device bridge_slave_1 left promiscuous mode [ 83.293564][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.312087][ T542] udevd[542]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 83.313921][ T351] device bridge_slave_0 left promiscuous mode [ 83.345118][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 83.355725][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.372420][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.392531][ T351] device veth1_macvtap left promiscuous mode [ 83.398864][ T351] device veth0_vlan left promiscuous mode [ 83.534975][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 83.556184][ T39] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.572949][ T39] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.590466][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.620509][ T39] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 83.630039][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.643780][ T39] usb 4-1: config 0 descriptor?? [ 83.655768][ T28] kauditd_printk_skb: 4921 callbacks suppressed [ 83.655783][ T28] audit: type=1326 audit(2000000021.660:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.686950][ T28] audit: type=1326 audit(2000000021.660:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.710418][ T28] audit: type=1326 audit(2000000021.660:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bc79aeb9 code=0x7ffc0000 [ 83.734231][ T28] audit: type=1326 audit(2000000021.660:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.758050][ T28] audit: type=1326 audit(2000000021.660:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bc79aeb9 code=0x7ffc0000 [ 83.781919][ T28] audit: type=1326 audit(2000000021.660:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.816179][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.823791][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.833693][ T28] audit: type=1326 audit(2000000021.660:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.855213][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.867634][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.876954][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.884092][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.884986][ T28] audit: type=1326 audit(2000000021.660:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.911657][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.925907][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.934232][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.935000][ T28] audit: type=1326 audit(2000000021.660:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.941277][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.972659][ T28] audit: type=1326 audit(2000000021.660:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.8.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bc73c2d9 code=0x7ffc0000 [ 83.996699][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.005164][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.013769][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.037573][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.046448][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.054548][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.064201][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.073971][ T39] hid-generic 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 84.074338][ T4345] device veth0_vlan entered promiscuous mode [ 84.115301][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.126218][ T4345] device veth1_macvtap entered promiscuous mode [ 84.137827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.147594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.169866][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.185346][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.283755][ T4384] loop8: detected capacity change from 0 to 1024 [ 84.284746][ T19] usb 4-1: USB disconnect, device number 7 [ 84.319534][ T4384] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 84.328308][ T4384] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.356182][ T4384] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: comm syz.8.1706: lblock 0 mapped to illegal pblock 0 (length 6) [ 84.369735][ T4384] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 84.383060][ T4384] EXT4-fs (loop8): This should not happen!! Data will be lost [ 84.383060][ T4384] [ 84.399862][ T4384] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #15: comm syz.8.1706: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.413556][ T4384] EXT4-fs error (device loop8): ext4_ext_remove_space:2930: inode #15: comm syz.8.1706: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 84.432714][ T4384] EXT4-fs error (device loop8) in ext4_setattr:5673: Corrupt filesystem [ 84.454585][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 84.490289][ T4394] loop8: detected capacity change from 0 to 16 [ 84.499925][ T4394] erofs: (device loop8): mounted with root inode @ nid 36. [ 84.535076][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.538415][ T4398] loop1: detected capacity change from 0 to 128 [ 84.544788][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.585715][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 84.606717][ T351] device bridge_slave_1 left promiscuous mode [ 84.613065][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.620889][ T351] device bridge_slave_0 left promiscuous mode [ 84.627418][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.637540][ T351] device veth1_macvtap left promiscuous mode [ 84.648600][ T351] device veth0_vlan left promiscuous mode [ 84.691842][ T4408] loop8: detected capacity change from 0 to 1024 [ 84.708112][ T4408] EXT4-fs: Ignoring removed bh option [ 84.723762][ T4408] EXT4-fs: Ignoring removed nobh option [ 84.733853][ T4408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.758833][ T4408] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 84.788626][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 84.795095][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 84.818769][ T4416] loop8: detected capacity change from 0 to 1024 [ 84.839422][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 84.849475][ T4420] loop3: detected capacity change from 0 to 128 [ 84.856105][ T4420] EXT4-fs: Ignoring removed orlov option [ 84.866702][ T4416] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 84.882865][ T4420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.899100][ T4420] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.913539][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 84.935909][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.962687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 84.984455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.990629][ T4433] loop8: detected capacity change from 0 to 2048 [ 84.996552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 85.007642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.016123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.016844][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 85.024565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.038353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.046058][ T4433] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 85.046723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.067775][ T4433] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.118759][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 85.135955][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 85.144327][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.165376][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.186939][ T4444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.206497][ T4444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.215489][ T4444] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.244866][ T4448] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 85.264099][ T4345] EXT4-fs (loop1): unmounting filesystem. [ 85.335022][ T348] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 85.425060][ T1751] Bluetooth: hci0: command 0x1003 tx timeout [ 85.425102][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.525018][ T348] usb 4-1: Using ep0 maxpacket: 16 [ 85.531312][ T348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.541850][ T348] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.552425][ T348] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.561601][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.569743][ T348] usb 4-1: Product: syz [ 85.573905][ T348] usb 4-1: Manufacturer: syz [ 85.578648][ T348] usb 4-1: SerialNumber: syz [ 85.606896][ T4472] netlink: 'syz.1.1741': attribute type 12 has an invalid length. [ 85.614854][ T4472] netlink: 'syz.1.1741': attribute type 29 has an invalid length. [ 85.622921][ T4472] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1741'. [ 85.632161][ T4472] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 85.640542][ T4472] netlink: 'syz.1.1741': attribute type 2 has an invalid length. [ 85.688089][ T4478] device lo entered promiscuous mode [ 85.693986][ T4478] device lo left promiscuous mode [ 85.735012][ T60] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 85.785557][ T348] usb 4-1: 0:2 : does not exist [ 85.790490][ T348] usb 4-1: unit 9 not found! [ 85.798521][ T348] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 85.808387][ T348] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 85.818113][ T348] usb 4-1: USB disconnect, device number 8 [ 85.826036][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.833834][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.847259][ T542] udevd[542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.916136][ T60] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.925376][ T60] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.937677][ T60] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.947254][ T60] usb 9-1: config 1 has no interface number 1 [ 85.962506][ T60] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.971847][ T4484] set_capacity_and_notify: 2 callbacks suppressed [ 85.971864][ T4484] loop1: detected capacity change from 0 to 40427 [ 85.977214][ T60] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.997421][ T4484] F2FS-fs (loop1): invalid crc value [ 86.002814][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.011660][ T60] usb 9-1: Product: syz [ 86.019858][ T4484] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.020929][ T60] usb 9-1: Manufacturer: syz [ 86.030942][ T60] usb 9-1: SerialNumber: syz [ 86.045046][ T491] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 86.081311][ T4484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.147192][ T4345] syz-executor: attempt to access beyond end of device [ 86.147192][ T4345] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 86.163265][ T4345] syz-executor: attempt to access beyond end of device [ 86.163265][ T4345] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 86.225874][ T491] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 86.243568][ T60] usb 9-1: MIDIStreaming interface descriptor not found [ 86.252577][ T4504] syz.1.1748: attempt to access beyond end of device [ 86.252577][ T4504] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.256682][ T60] usb 9-1: USB disconnect, device number 8 [ 86.865017][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.068496][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.075723][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.083211][ T4517] device bridge_slave_0 entered promiscuous mode [ 88.095236][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.102378][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.110044][ T4517] device bridge_slave_1 entered promiscuous mode [ 88.388271][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.395450][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.402716][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.409769][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.449746][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.466000][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.473554][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.485195][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.495183][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.502258][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.522665][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.531262][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.538326][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.546008][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.562474][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.589926][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.608372][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.625781][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.645163][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.652883][ T4517] device veth0_vlan entered promiscuous mode [ 88.667279][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.677374][ T4517] device veth1_macvtap entered promiscuous mode [ 88.688693][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.705781][ T43] device bridge_slave_1 left promiscuous mode [ 88.712297][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.720332][ T43] device bridge_slave_0 left promiscuous mode [ 88.726635][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.736746][ T43] device veth1_macvtap left promiscuous mode [ 88.742914][ T43] device veth0_vlan left promiscuous mode [ 88.921194][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 88.930534][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.943927][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.955276][ T491] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.084160][ T4571] loop8: detected capacity change from 0 to 256 [ 89.091766][ T4571] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.102531][ T4571] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 89.113034][ T4571] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 89.130448][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 89.130462][ T28] audit: type=1400 audit(2000000027.140:5755): avc: denied { mounton } for pid=4570 comm="syz.8.1782" path="/258/bus/file0/file0" dev="loop8" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.161039][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 89.165866][ T19] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.176255][ T28] audit: type=1400 audit(2000000027.140:5756): avc: denied { rename } for pid=4570 comm="syz.8.1782" name="file0" dev="loop8" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.213817][ T4577] loop8: detected capacity change from 0 to 512 [ 89.213954][ T4579] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 89.245861][ T4581] device batadv_slave_1 entered promiscuous mode [ 89.252719][ T4580] device batadv_slave_1 left promiscuous mode [ 89.274583][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.290591][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 89.299967][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.308623][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 89.317808][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.326024][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.334149][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.342602][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.351015][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.371105][ T4588] loop8: detected capacity change from 0 to 512 [ 89.389449][ T4588] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 89.398583][ T4588] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.405003][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 89.419493][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.429442][ T60] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 89.438938][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.448597][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 89.454511][ T4593] loop5: detected capacity change from 0 to 256 [ 89.462679][ T60] usb 4-1: config 0 descriptor?? [ 89.476814][ T4595] fuse: blksize only supported for fuseblk [ 89.483374][ T28] audit: type=1400 audit(2000000027.490:5757): avc: denied { append } for pid=4594 comm="syz.8.1791" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.512237][ T28] audit: type=1400 audit(2000000027.490:5758): avc: denied { write } for pid=4594 comm="syz.8.1791" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.563510][ T4604] loop8: detected capacity change from 0 to 512 [ 89.572149][ T4604] EXT4-fs: Ignoring removed oldalloc option [ 89.581545][ T4604] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 89.592862][ T4604] EXT4-fs (loop8): 1 truncate cleaned up [ 89.599634][ T4604] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 89.630513][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 89.677750][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 89.683743][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 89.708167][ T60] usb 4-1: USB disconnect, device number 9 [ 89.775007][ T19] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 89.775752][ T4610] loop8: detected capacity change from 0 to 40427 [ 89.790031][ T4610] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 89.797177][ T4610] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 89.809695][ T4610] F2FS-fs (loop8): invalid crc value [ 89.819603][ T4610] F2FS-fs (loop8): Found nat_bits in checkpoint [ 89.868085][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.875748][ T4610] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 89.880716][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 89.896249][ T4610] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 89.901150][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.923930][ T1221] syz-executor: attempt to access beyond end of device [ 89.923930][ T1221] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 89.933737][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 89.954739][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.965188][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.965267][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.984226][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.992753][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.004988][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.016404][ T19] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.027627][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.035725][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.043716][ T19] usb 6-1: SerialNumber: syz [ 90.099247][ T28] audit: type=1400 audit(2000000028.110:5759): avc: denied { bind } for pid=4648 comm="syz.8.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.225060][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 90.238055][ T4655] loop8: detected capacity change from 0 to 40427 [ 90.247447][ T4655] F2FS-fs (loop8): fault_injection options not supported [ 90.254720][ T4655] F2FS-fs (loop8): fault_type options not supported [ 90.265309][ T4655] F2FS-fs (loop8): invalid crc value [ 90.266342][ T19] usb 6-1: 0:2 : does not exist [ 90.285230][ T60] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 90.294295][ T19] usb 6-1: USB disconnect, device number 5 [ 90.301482][ T4655] F2FS-fs (loop8): Found nat_bits in checkpoint [ 90.345753][ T4655] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 90.477113][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.487050][ T60] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 90.491057][ T4670] loop8: detected capacity change from 0 to 512 [ 90.496176][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.510740][ T542] udevd[542]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.526946][ T4670] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 90.527549][ T60] usb 4-1: config 0 descriptor?? [ 90.538747][ T4670] EXT4-fs (loop8): 1 truncate cleaned up [ 90.549551][ T4670] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 90.570218][ T1221] EXT4-fs (loop8): unmounting filesystem. [ 90.634633][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.855000][ T19] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 90.950365][ T60] hid-multitouch 0003:1FD2:6007.0010: unbalanced delimiter at end of report description [ 90.960510][ T60] hid-multitouch: probe of 0003:1FD2:6007.0010 failed with error -22 [ 91.037245][ T19] usb 9-1: Using ep0 maxpacket: 16 [ 91.045111][ T19] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 91.054186][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.062816][ T19] usb 9-1: config 0 descriptor?? [ 91.068642][ T19] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 91.171745][ T60] usb 4-1: USB disconnect, device number 10 [ 91.269386][ T19] usb 9-1: Detected FT232B [ 91.469762][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.478987][ T19] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.680728][ T60] usb 9-1: USB disconnect, device number 9 [ 91.698559][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 91.699786][ T4691] loop6: detected capacity change from 0 to 1024 [ 91.713599][ T60] ftdi_sio 9-1:0.0: device disconnected [ 91.735162][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.742449][ T4700] overlayfs: failed to clone lowerpath [ 91.757244][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.775000][ T4691] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.799602][ T4691] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 91.827841][ T4517] EXT4-fs (loop6): unmounting filesystem. [ 92.198200][ T4723] loop3: detected capacity change from 0 to 16 [ 92.202072][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.213783][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.215624][ T4723] erofs: (device loop3): mounted with root inode @ nid 36. [ 92.222907][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.235449][ T4724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.243656][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 92.294602][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.304230][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.316668][ T4735] loop3: detected capacity change from 0 to 1024 [ 92.325698][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 92.332718][ T4735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.341311][ T4735] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.358138][ T4735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.376649][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 92.475049][ T39] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 92.624455][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.655034][ T39] usb 9-1: Using ep0 maxpacket: 16 [ 92.661375][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.671276][ T39] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 92.680391][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.687091][ T28] audit: type=1326 audit(2000000030.700:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.6.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4ab9aeb9 code=0x7fc00000 [ 92.689138][ T39] usb 9-1: config 0 descriptor?? [ 92.759626][ T4767] netlink: 'syz.5.1864': attribute type 12 has an invalid length. [ 92.789624][ T4769] loop5: detected capacity change from 0 to 128 [ 92.834024][ T28] audit: type=1400 audit(2000000030.840:5761): avc: denied { ioctl } for pid=4772 comm="syz.6.1867" path="/newroot/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.865104][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 92.908061][ T28] audit: type=1400 audit(2000000030.920:5762): avc: denied { append } for pid=4782 comm="syz.3.1872" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.922256][ T4783] input: syz1 as /devices/virtual/input/input11 [ 92.940284][ T39] usbhid 9-1:0.0: can't add hid device: -71 [ 92.952527][ T39] usbhid: probe of 9-1:0.0 failed with error -71 [ 92.990691][ T39] usb 9-1: USB disconnect, device number 10 [ 93.025850][ T348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 93.029082][ T4798] loop5: detected capacity change from 0 to 256 [ 93.043318][ T4798] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.123680][ T28] audit: type=1400 audit(2000000031.130:5763): avc: denied { ioctl } for pid=4811 comm="syz.2.1886" path="socket:[33836]" dev="sockfs" ino=33836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.202679][ T28] audit: type=1400 audit(2000000031.170:5764): avc: denied { getopt } for pid=4819 comm="syz.5.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.240276][ T4836] loop5: detected capacity change from 0 to 256 [ 93.271880][ T4836] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.287472][ T4836] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 93.309214][ T4836] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 93.378404][ T4858] tipc: Started in network mode [ 93.383955][ T4858] tipc: Node identity 7f000001, cluster identity 4711 [ 93.385714][ T4859] loop5: detected capacity change from 0 to 512 [ 93.391091][ T4858] tipc: Enabling of bearer rejected, failed to enable media [ 93.436965][ T4865] loop6: detected capacity change from 0 to 16 [ 93.447334][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 93.456647][ T4865] erofs: (device loop6): mounted with root inode @ nid 36. [ 93.465413][ T60] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.505338][ T491] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 93.521933][ T4874] loop6: detected capacity change from 0 to 1024 [ 93.545367][ T4874] EXT4-fs: Ignoring removed bh option [ 93.579496][ T4874] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 93.610396][ T4874] overlayfs: workdir and upperdir must be separate subtrees [ 93.636707][ T4517] EXT4-fs (loop6): unmounting filesystem. [ 93.664139][ T4885] loop6: detected capacity change from 0 to 512 [ 93.675126][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 93.687133][ T4885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 93.696236][ T4885] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.711426][ T491] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.725474][ T491] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 93.734647][ T491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.735546][ T4517] EXT4-fs (loop6): unmounting filesystem. [ 93.746061][ T491] usb 9-1: config 0 descriptor?? [ 93.812749][ T4912] exfat: Deprecated parameter 'utf8' [ 93.820553][ T4912] exfat: Deprecated parameter 'utf8' [ 93.830916][ T4912] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 93.866504][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.866539][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.866625][ T39] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.868101][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.868129][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.868147][ T39] usb 4-1: Product: syz [ 93.868159][ T39] usb 4-1: Manufacturer: syz [ 93.868172][ T39] usb 4-1: SerialNumber: syz [ 93.871996][ T39] cdc_mbim 4-1:1.0: skipping garbage [ 94.102661][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.158196][ T491] hid-multitouch 0003:1FD2:6007.0012: unbalanced delimiter at end of report description [ 94.172688][ T491] hid-multitouch: probe of 0003:1FD2:6007.0012 failed with error -22 [ 94.379362][ T348] usb 9-1: USB disconnect, device number 11 [ 94.489275][ T4932] F2FS-fs (loop6): Test dummy encryption mode enabled [ 94.497126][ T4932] F2FS-fs (loop6): invalid crc value [ 94.514616][ T4932] F2FS-fs (loop6): Found nat_bits in checkpoint [ 94.572465][ T4942] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.579074][ T4942] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.580659][ T4932] F2FS-fs (loop6): Start checkpoint disabled! [ 94.591912][ T4942] EXT4-fs (loop5): Test dummy encryption mode enabled [ 94.593305][ T4932] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 94.606207][ T4932] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 94.613799][ T4942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.636462][ T4942] EXT4-fs (loop5): 1 truncate cleaned up [ 94.642229][ T4942] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 94.654265][ T4942] fscrypt: AES-256-XTS using blk-crypto-fallback [ 94.666793][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 94.666808][ T28] audit: type=1400 audit(2000000032.680:5769): avc: denied { setattr } for pid=4941 comm="syz.5.1941" path="/48/bus/pids.current" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.700598][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 94.785028][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 94.834550][ T4956] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.869289][ T4956] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 94.887742][ T4956] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3852: comm syz.5.1947: Allocating blocks 385-513 which overlap fs metadata [ 94.898703][ T39] cdc_mbim 4-1:1.0: bind() failure [ 94.907884][ T39] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 94.914836][ T39] cdc_ncm 4-1:1.1: bind() failure [ 94.917978][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1951'. [ 94.926662][ T39] usb 4-1: USB disconnect, device number 11 [ 94.937696][ T4956] EXT4-fs (loop5): pa ffff8881375efa80: logic 16, phys. 129, len 24 [ 94.945845][ T4956] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8 [ 94.967667][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1951'. [ 94.975922][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 95.041533][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1960'. [ 95.167723][ T28] audit: type=1400 audit(2000000033.180:5770): avc: denied { bind } for pid=5012 comm="syz.8.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.239965][ T5017] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 95.322445][ T4517] EXT4-fs (loop6): unmounting filesystem. [ 95.345061][ T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.418115][ T28] audit: type=1400 audit(2000000033.430:5771): avc: denied { connect } for pid=5032 comm="syz.3.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.487548][ T28] audit: type=1400 audit(2000000033.500:5772): avc: denied { mount } for pid=5043 comm="syz.2.1985" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.513862][ T5026] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 95.521912][ T5026] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 95.531202][ T5026] F2FS-fs (loop6): invalid crc value [ 95.536522][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 95.542574][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.557326][ T5026] F2FS-fs (loop6): Found nat_bits in checkpoint [ 95.564552][ T19] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 95.592250][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.603318][ T5026] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 95.605643][ T19] usb 6-1: config 0 descriptor?? [ 95.611298][ T5026] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 95.826750][ T19] usbhid 6-1:0.0: can't add hid device: -71 [ 95.832799][ T19] usbhid: probe of 6-1:0.0 failed with error -71 [ 95.846629][ T19] usb 6-1: USB disconnect, device number 6 [ 95.948501][ T5069] 9pnet: p9_errstr2errno: server reported unknown error @c [ 96.076450][ T5095] exfat: Deprecated parameter 'utf8' [ 96.082800][ T5095] exfat: Deprecated parameter 'utf8' [ 96.088992][ T5095] exfat: Deprecated parameter 'utf8' [ 96.101441][ T5095] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 96.125574][ T28] audit: type=1400 audit(2000000034.140:5773): avc: denied { append } for pid=5094 comm="syz.8.2008" path="/283/file1/blkio.bfq.time" dev="loop8" ino=1048721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.283668][ T28] audit: type=1400 audit(2000000034.290:5774): avc: denied { mount } for pid=5113 comm="syz.8.2017" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.306056][ T28] audit: type=1400 audit(2000000034.290:5775): avc: denied { mounton } for pid=5113 comm="syz.8.2017" path="/287/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.329603][ T28] audit: type=1400 audit(2000000034.320:5776): avc: denied { unmount } for pid=1221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.409499][ T28] audit: type=1400 audit(2000000034.420:5777): avc: denied { mount } for pid=5115 comm="syz.3.2019" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 96.415053][ T19] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 96.492542][ T28] audit: type=1400 audit(2000000034.500:5778): avc: denied { unmount } for pid=3061 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 96.593213][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.600488][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.608161][ T5118] device bridge_slave_0 entered promiscuous mode [ 96.617484][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.624695][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.636068][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.649586][ T5118] device bridge_slave_1 entered promiscuous mode [ 96.655011][ T19] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 96.674979][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.686392][ T19] usb 6-1: config 0 descriptor?? [ 96.715367][ T5125] set_capacity_and_notify: 8 callbacks suppressed [ 96.715381][ T5125] loop3: detected capacity change from 0 to 40427 [ 96.770932][ T5125] F2FS-fs (loop3): invalid crc value [ 96.792521][ T5125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.838322][ T5125] F2FS-fs (loop3): Start checkpoint disabled! [ 96.845575][ T5125] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 96.847136][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.853313][ T5125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 96.860138][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.860235][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.860248][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.889233][ T5125] syz.3.2024: attempt to access beyond end of device [ 96.889233][ T5125] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 96.914134][ T474] device bridge_slave_1 left promiscuous mode [ 96.925207][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.932857][ T474] device bridge_slave_0 left promiscuous mode [ 96.939278][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.940947][ T351] kworker/u4:4: attempt to access beyond end of device [ 96.940947][ T351] loop3: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 96.960879][ T351] kworker/u4:4: attempt to access beyond end of device [ 96.960879][ T351] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 96.960985][ T474] device bridge0 left promiscuous mode [ 96.994688][ T474] device veth1_macvtap left promiscuous mode [ 97.005472][ T474] device veth0_vlan left promiscuous mode [ 97.097275][ T19] hid-multitouch 0003:1FD2:6007.0013: unbalanced delimiter at end of report description [ 97.133261][ T19] hid-multitouch: probe of 0003:1FD2:6007.0013 failed with error -22 [ 97.145883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.158825][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.192901][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.214785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.223610][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.230714][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.240162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.249499][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.256592][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.291161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.316810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.327255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.340222][ T5118] device veth0_vlan entered promiscuous mode [ 97.355694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.367413][ T39] usb 6-1: USB disconnect, device number 7 [ 97.373740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.385890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.409796][ T5187] syz.3.2047 (5187) used greatest stack depth: 20672 bytes left [ 97.414890][ T5118] device veth1_macvtap entered promiscuous mode [ 97.429900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.438617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.457623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.471319][ T5203] loop2: detected capacity change from 0 to 7 [ 97.478490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.487088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.497224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.505803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.700861][ T5209] loop3: detected capacity change from 0 to 128 [ 97.791241][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2064'. [ 97.871964][ T5244] loop3: detected capacity change from 0 to 512 [ 97.885274][ T5244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.895393][ T5244] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 97.979334][ T5259] loop3: detected capacity change from 0 to 128 [ 97.999046][ T5261] input: syz0 as /devices/virtual/input/input12 [ 98.022026][ T5259] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.067184][ T5259] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.131668][ T5275] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2086'. [ 98.143457][ T5276] loop9: detected capacity change from 0 to 4096 [ 98.176275][ T5276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.214907][ T5276] EXT4-fs (loop9): Test dummy encryption mode enabled [ 98.230964][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2094'. [ 98.232368][ T5276] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 98.269839][ T5291] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2094'. [ 98.274158][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 98.317367][ T5303] loop9: detected capacity change from 0 to 256 [ 98.463566][ T5323] loop6: detected capacity change from 0 to 512 [ 98.475054][ T491] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 98.479374][ T5328] input: syz1 as /devices/virtual/input/input13 [ 98.491921][ T5323] EXT4-fs (loop6): Test dummy encryption mode enabled [ 98.509288][ T5323] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 98.520200][ T5323] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 98.529227][ T5323] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 98.545322][ T5323] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 98.558392][ T4517] EXT4-fs (loop6): unmounting filesystem. [ 98.626748][ T5350] loop5: detected capacity change from 0 to 512 [ 98.637553][ T5350] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2119: inode has both inline data and extents flags [ 98.651124][ T5350] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2119: couldn't read orphan inode 15 (err -117) [ 98.663107][ T5350] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 98.672270][ T491] usb 4-1: Using ep0 maxpacket: 32 [ 98.678526][ T491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.690356][ T491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.700390][ T491] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.712418][ T491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.721088][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 98.727295][ T491] usb 4-1: config 0 descriptor?? [ 98.761513][ T5358] loop5: detected capacity change from 0 to 1024 [ 98.769152][ T5358] EXT4-fs: Ignoring removed bh option [ 98.775020][ T6] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 98.801285][ T5358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 98.811464][ T5358] raw_sendmsg: syz.5.2121 forgot to set AF_INET. Fix it! [ 98.824844][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 98.908124][ T5377] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.920469][ T5377] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.934067][ T5377] incfs: ino conflict with backing FS 1 [ 98.949051][ T4517] FAT-fs (loop6): error, invalid access to FAT (entry 0xffff0000) [ 98.957304][ T4517] FAT-fs (loop6): Filesystem has been set read-only [ 98.964990][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 98.971500][ T4517] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.981926][ T6] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 98.998615][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.009980][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.020508][ T6] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 99.034000][ T6] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 99.043769][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.052945][ T6] usb 10-1: config 0 descriptor?? [ 99.133574][ T5396] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 99.148680][ T491] savu 0003:1E7D:2D5A.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 99.158464][ T5396] incfs: ino conflict with backing FS 1 [ 99.178427][ T5396] incfs_lookup_dentry err:-84 [ 99.417192][ T39] usb 4-1: USB disconnect, device number 12 [ 99.452422][ T5406] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2145: inode has both inline data and extents flags [ 99.465148][ T6] kye 0003:0458:5013.0015: unknown main item tag 0x6 [ 99.472449][ T6] kye 0003:0458:5013.0015: unknown main item tag 0x5 [ 99.479820][ T5406] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2145: couldn't read orphan inode 15 (err -117) [ 99.495434][ T5406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 99.524620][ T6] kye 0003:0458:5013.0015: unknown main item tag 0x4 [ 99.545653][ T5406] EXT4-fs error (device loop5): ext4_check_dx_root:2266: inode #2: comm syz.5.2145: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 99.561207][ T6] kye 0003:0458:5013.0015: item fetching failed at offset 31/160 [ 99.581918][ T6] kye 0003:0458:5013.0015: parse failed [ 99.600956][ T6] kye: probe of 0003:0458:5013.0015 failed with error -22 [ 99.609961][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 99.647355][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.654428][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.662320][ T5408] device bridge_slave_0 entered promiscuous mode [ 99.669257][ T19] usb 10-1: USB disconnect, device number 3 [ 99.682450][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.693971][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.702250][ T5408] device bridge_slave_1 entered promiscuous mode [ 99.757607][ T5416] exfat: Deprecated parameter 'utf8' [ 99.783002][ T5416] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 99.797084][ T474] device bridge_slave_1 left promiscuous mode [ 99.803234][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.811149][ T474] device bridge_slave_0 left promiscuous mode [ 99.832696][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.856687][ T474] device veth1_macvtap left promiscuous mode [ 99.862952][ T474] device veth0_vlan left promiscuous mode [ 100.002383][ T5429] input: syz0 as /devices/virtual/input/input14 [ 100.150140][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.157273][ T5408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.164597][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.171670][ T5408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.225233][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.255560][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.287944][ T5457] pim6reg: tun_chr_ioctl cmd 3222820985 [ 100.295467][ T5457] pim6reg: tun_chr_ioctl cmd 1074025681 [ 100.306732][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.329706][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.348443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.356761][ T5461] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 100.365955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.374623][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.381707][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.396205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.406542][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 100.406556][ T28] audit: type=1400 audit(2000000038.420:5785): avc: denied { watch } for pid=5460 comm="syz.5.2166" path="/86/file0/control" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.413788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.444145][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.451324][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.465757][ T5449] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 100.473874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.481994][ T5449] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.490927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.492024][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 100.499972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.514172][ T5449] F2FS-fs (loop3): invalid crc value [ 100.521031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.536046][ T5449] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.548393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.564730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.594601][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.608805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.628987][ T5479] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.639788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.656603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.656731][ T5479] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 100.673688][ T5408] device veth0_vlan entered promiscuous mode [ 100.677532][ T5449] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.690857][ T5449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.694391][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.714634][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.727843][ T5449] syz.3.2160: attempt to access beyond end of device [ 100.727843][ T5449] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.744075][ T5408] device veth1_macvtap entered promiscuous mode [ 100.755855][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.781455][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.790151][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.808396][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.818672][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.873536][ T28] audit: type=1326 audit(2000000038.880:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 100.924765][ T5501] device batadv_slave_1 entered promiscuous mode [ 100.926343][ T28] audit: type=1326 audit(2000000038.910:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 100.939729][ T5500] device batadv_slave_1 left promiscuous mode [ 100.967019][ T28] audit: type=1326 audit(2000000038.910:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 100.990997][ T28] audit: type=1326 audit(2000000038.910:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 101.015802][ T28] audit: type=1326 audit(2000000038.910:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 101.044006][ T28] audit: type=1326 audit(2000000038.910:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 101.068548][ T28] audit: type=1326 audit(2000000038.910:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 101.093002][ T28] audit: type=1326 audit(2000000038.910:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 101.117114][ T28] audit: type=1326 audit(2000000038.910:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa55319aeb9 code=0x7ffc0000 [ 101.185317][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 101.366309][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.376621][ T6] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.385774][ T6] usb 10-1: config 1 has no interface number 0 [ 101.391997][ T6] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.403001][ T6] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 101.412192][ T6] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.422074][ T6] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.437132][ T6] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.446362][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.454433][ T6] usb 10-1: Product: syz [ 101.458694][ T6] usb 10-1: Manufacturer: syz [ 101.463366][ T6] usb 10-1: SerialNumber: syz [ 101.670428][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2181'. [ 101.681786][ T6] cdc_ncm 10-1:1.1: bind() failure [ 101.688726][ T6] usb 10-1: USB disconnect, device number 4 [ 101.859228][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.867092][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.874881][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.882819][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.890643][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.898476][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.906287][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.914161][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.921980][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.929901][ T5533] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 102.029966][ T5543] SELinux: failed to load policy [ 102.225035][ T39] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 102.250655][ T5555] set_capacity_and_notify: 9 callbacks suppressed [ 102.250667][ T5555] loop5: detected capacity change from 0 to 40427 [ 102.276801][ T5555] F2FS-fs (loop5): invalid crc value [ 102.288970][ T5555] F2FS-fs (loop5): Found nat_bits in checkpoint [ 102.331181][ T5555] F2FS-fs (loop5): Start checkpoint disabled! [ 102.337856][ T5572] loop9: detected capacity change from 0 to 16 [ 102.348737][ T5555] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 102.355351][ T5572] erofs: (device loop9): mounted with root inode @ nid 36. [ 102.356461][ T5555] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 102.376809][ T46] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 102.421289][ T8] kworker/u4:0: attempt to access beyond end of device [ 102.421289][ T8] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 102.437760][ T5577] loop9: detected capacity change from 0 to 256 [ 102.446780][ T5577] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 102.447971][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.475856][ T348] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 102.489126][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.506414][ T39] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.515635][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.523729][ T39] usb 4-1: SerialNumber: syz [ 102.619923][ T5586] loop5: detected capacity change from 0 to 512 [ 102.637358][ T5586] EXT4-fs: Invalid want_extra_isize 2 [ 102.676038][ T348] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.696247][ T348] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.721326][ T348] usb 8-1: config 0 interface 0 has no altsetting 0 [ 102.731819][ T5588] tun0: tun_chr_ioctl cmd 1074025675 [ 102.737593][ T5588] tun0: persist enabled [ 102.741948][ T5588] tun0: tun_chr_ioctl cmd 1074025675 [ 102.752097][ T348] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 102.752743][ T5588] tun0: persist enabled [ 102.761840][ T39] usb 4-1: 0:2 : does not exist [ 102.784875][ T348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.795224][ T39] usb 4-1: USB disconnect, device number 13 [ 102.814367][ T542] udevd[542]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.831074][ T348] usb 8-1: config 0 descriptor?? [ 102.893300][ T5584] loop9: detected capacity change from 0 to 40427 [ 102.943997][ T5584] F2FS-fs (loop9): Found nat_bits in checkpoint [ 102.982742][ T5584] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 103.017882][ T5118] syz-executor: attempt to access beyond end of device [ 103.017882][ T5118] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.359670][ T5652] loop5: detected capacity change from 0 to 512 [ 103.362152][ T5650] loop3: detected capacity change from 0 to 8192 [ 103.421375][ T5654] loop5: detected capacity change from 0 to 1024 [ 103.428533][ T5654] EXT4-fs (loop5): Invalid log cluster size: 32 [ 103.583890][ T5665] loop3: detected capacity change from 0 to 40427 [ 103.592482][ T5665] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 103.601977][ T5665] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.610431][ T5665] F2FS-fs (loop3): fault_type options not supported [ 103.617328][ T5665] F2FS-fs (loop3): fault_injection options not supported [ 103.624416][ T5665] F2FS-fs (loop3): Image doesn't support compression [ 103.631972][ T5665] F2FS-fs (loop3): invalid crc value [ 103.638644][ T5665] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.645484][ T348] hid-led: probe of 0003:0FC5:B080.0016 failed with error -71 [ 103.662566][ T348] usb 8-1: USB disconnect, device number 4 [ 103.671948][ T5665] F2FS-fs (loop3): Start checkpoint disabled! [ 103.679818][ T5665] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 103.687539][ T5665] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.694696][ T5665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 103.724576][ T10] kworker/u4:1: attempt to access beyond end of device [ 103.724576][ T10] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.741083][ T6] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 103.750047][ T5670] netlink: 'syz.2.2254': attribute type 12 has an invalid length. [ 103.940658][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.954647][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.954681][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.954702][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.970746][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.998751][ T6] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.007222][ T6] usb 6-1: Manufacturer: syz [ 104.012483][ T6] usb 6-1: config 0 descriptor?? [ 104.066729][ T5700] loop3: detected capacity change from 0 to 128 [ 104.095614][ T5700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.114518][ T5700] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.145219][ T5696] F2FS-fs (loop9): invalid crc value [ 104.180389][ T5696] F2FS-fs (loop9): Found nat_bits in checkpoint [ 104.185493][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 104.251146][ T5696] F2FS-fs (loop9): Start checkpoint disabled! [ 104.267086][ T5696] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 104.305169][ T5696] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 104.335459][ T5696] syz.9.2265: attempt to access beyond end of device [ 104.335459][ T5696] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.397683][ T10] kworker/u4:1: attempt to access beyond end of device [ 104.397683][ T10] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 104.417921][ T6] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 104.435257][ T6] appleir 0003:05AC:8243.0017: No inputs registered, leaving [ 104.455434][ T6] appleir 0003:05AC:8243.0017: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 104.635056][ T348] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 104.686481][ T4485] usb 6-1: USB disconnect, device number 8 [ 104.775509][ T5751] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.805007][ T6] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 104.826379][ T348] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.843379][ T348] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.862903][ T5757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.870427][ T348] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.879784][ T348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.880741][ T5757] EXT4-fs (loop9): Test dummy encryption mode enabled [ 104.888115][ T348] usb 8-1: SerialNumber: syz [ 104.915494][ T5757] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 104.923641][ T5757] System zones: 0-5 [ 104.928207][ T5757] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 104.952949][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 104.970892][ T5762] virtiofs: Unknown parameter 'always 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 18 wg0 : 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 19 wg1 : 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 20 wg2 : 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 21 veth0_to_bridge: 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 22 bridge_slave_0: 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 23 veth1_to_bridge: 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 24 bridge_slave_1: 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 104.970892][ T5762] 25 veth0_to_bond: 1 V3 [ 104.970892][ T5762] 010000E0 1 0:00000000 0 [ 105.066432][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.076120][ T6] usb 4-1: not running at top speed; connect to a high speed hub [ 105.091568][ T6] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 105.100073][ T6] usb 4-1: config 1 has no interface number 0 [ 105.106550][ T6] usb 4-1: config 1 interface 138 has no altsetting 0 [ 105.117428][ T348] usb 8-1: 0:2 : does not exist [ 105.124061][ T6] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 105.141412][ T348] usb 8-1: USB disconnect, device number 5 [ 105.145010][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.160787][ T6] usb 4-1: Product: syz [ 105.169502][ T6] usb 4-1: Manufacturer: syz [ 105.174096][ T6] usb 4-1: SerialNumber: syz [ 105.349062][ T5788] EXT4-fs: Ignoring removed i_version option [ 105.364928][ T5788] EXT4-fs: Ignoring removed bh option [ 105.391857][ T5788] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 105.406317][ T6] usb 4-1: USB disconnect, device number 14 [ 105.422524][ T5788] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.447520][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 105.474861][ T5799] overlayfs: failed to clone upperpath [ 105.647851][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 105.647866][ T28] audit: type=1400 audit(2000000043.660:5808): avc: denied { ioctl } for pid=5816 comm="syz.7.2318" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.826931][ T5805] F2FS-fs (loop9): invalid crc value [ 105.837654][ T5805] F2FS-fs (loop9): Found nat_bits in checkpoint [ 105.861660][ T5805] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 105.947985][ T28] audit: type=1400 audit(2000000043.960:5809): avc: denied { bind } for pid=5835 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.974989][ T348] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 105.983554][ T28] audit: type=1400 audit(2000000043.980:5810): avc: denied { listen } for pid=5835 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.178726][ T348] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.182551][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2324'. [ 106.198910][ T348] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.209884][ T348] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.211668][ T5855] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.225090][ T348] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.244718][ T60] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 106.269208][ T348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.283858][ T5861] tipc: Started in network mode [ 106.289885][ T5861] tipc: Node identity fe80000000000000000000000000000c, cluster identity 4711 [ 106.293951][ T348] usb 8-1: config 0 descriptor?? [ 106.304215][ T5861] tipc: Enabled bearer , priority 10 [ 106.439181][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 106.453457][ T5886] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 106.461067][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.481062][ T60] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 106.498576][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.508497][ T60] usb 4-1: Product: syz [ 106.513400][ T60] usb 4-1: Manufacturer: syz [ 106.518568][ T60] usb 4-1: SerialNumber: syz [ 106.526737][ T60] usb 4-1: config 0 descriptor?? [ 106.535819][ T60] snd-usb-audio: probe of 4-1:0.0 failed with error -90 [ 106.542817][ T28] audit: type=1400 audit(2000000044.550:5811): avc: denied { shutdown } for pid=5883 comm="syz.5.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.603509][ T5888] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 106.611547][ T5888] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 106.622211][ T5888] F2FS-fs (loop9): Found nat_bits in checkpoint [ 106.651576][ T5888] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 106.658728][ T5888] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 106.675064][ T28] audit: type=1400 audit(2000000044.680:5812): avc: denied { mounton } for pid=5887 comm="syz.9.2350" path="/64/file0/bus" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.680532][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.698046][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.705768][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.713476][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.714520][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.721314][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.729897][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.736328][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.749456][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.751504][ T5118] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 106.759123][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.781304][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.788771][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.796381][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.803942][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.811387][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.818819][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.826413][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.834628][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.846970][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.854707][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.862329][ T348] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 106.874724][ T348] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 106.883927][ T4485] usb 4-1: USB disconnect, device number 15 [ 106.892790][ T348] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 107.016031][ T348] usb 8-1: USB disconnect, device number 6 [ 107.042238][ T5904] EXT4-fs: Ignoring removed nobh option [ 107.048181][ T5904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.068580][ T5904] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 107.080286][ T5904] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3852: comm syz.9.2354: Allocating blocks 497-513 which overlap fs metadata [ 107.094557][ T5904] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 107.106962][ T5904] EXT4-fs (loop9): This should not happen!! Data will be lost [ 107.106962][ T5904] [ 107.121014][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 107.152601][ T5912] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.163533][ T5912] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 107.176124][ T5912] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.295025][ T491] tipc: Node number set to 4269801484 [ 107.357291][ T5936] set_capacity_and_notify: 10 callbacks suppressed [ 107.357309][ T5936] loop3: detected capacity change from 0 to 256 [ 107.389306][ T5939] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D0xffffffffffffffff [ 107.423836][ T5943] loop5: detected capacity change from 0 to 128 [ 107.475871][ T5949] netlink: 'syz.9.2375': attribute type 12 has an invalid length. [ 107.484046][ T5949] netlink: 'syz.9.2375': attribute type 29 has an invalid length. [ 107.492188][ T5949] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2375'. [ 107.501420][ T5949] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2375'. [ 107.532802][ T5951] loop5: detected capacity change from 0 to 1024 [ 107.547045][ T5951] EXT4-fs: Ignoring removed bh option [ 107.554303][ T5951] EXT4-fs: Ignoring removed nobh option [ 107.564810][ T5951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.570095][ T5958] loop7: detected capacity change from 0 to 512 [ 107.580531][ T5959] loop9: detected capacity change from 0 to 1024 [ 107.593390][ T5959] EXT4-fs: Ignoring removed oldalloc option [ 107.601063][ T5959] EXT4-fs: Ignoring removed bh option [ 107.606423][ T5958] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 107.616778][ T5959] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.634606][ T5958] EXT4-fs (loop7): 1 truncate cleaned up [ 107.641776][ T5958] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 107.641857][ T5951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 107.670852][ T5959] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 107.693012][ T5951] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3852: comm syz.5.2376: Allocating blocks 497-513 which overlap fs metadata [ 107.715136][ T5951] EXT4-fs (loop5): pa ffff8881375ef498: logic 256, phys. 385, len 8 [ 107.723194][ T5951] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 107.741388][ T5408] EXT4-fs (loop7): unmounting filesystem. [ 107.744701][ T5976] loop3: detected capacity change from 0 to 512 [ 107.773143][ T5976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.788251][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 107.788711][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 107.814489][ T5980] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.827095][ T5976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.836917][ T5980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.848231][ T5976] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.859098][ T5980] overlayfs: conflicting lowerdir path [ 107.898684][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 108.020916][ T6018] loop3: detected capacity change from 0 to 512 [ 108.050696][ T6018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.061262][ T6018] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.100314][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 108.117199][ T6031] loop3: detected capacity change from 0 to 1024 [ 108.157552][ T6031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.190483][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 108.214648][ T6044] loop3: detected capacity change from 0 to 1024 [ 108.221694][ T6044] EXT4-fs: Ignoring removed bh option [ 108.237198][ T6044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.253738][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 108.285047][ T4485] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 108.325325][ T6054] loop3: detected capacity change from 0 to 256 [ 108.334058][ T6054] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 108.387773][ T28] audit: type=1400 audit(2000000046.400:5813): avc: denied { mounton } for pid=6061 comm="syz.9.2421" path="/proc/183" dev="proc" ino=38409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 108.437651][ T6069] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2425'. [ 108.455513][ T6] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 108.466204][ T4485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 108.484041][ T4485] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 108.493505][ T4485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.524084][ T4485] usb 6-1: config 0 descriptor?? [ 108.529927][ T6017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.646156][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.669026][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.688999][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.706787][ T6] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.716330][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.725452][ T6] usb 8-1: config 0 descriptor?? [ 108.921209][ T351] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.941358][ T4485] hid-generic 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 109.124999][ T60] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 109.133224][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.140763][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.145628][ T4485] usb 6-1: USB disconnect, device number 9 [ 109.148230][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.161549][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.169195][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.176677][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.184080][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.191560][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.199000][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.206552][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.213960][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.221402][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.228979][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.236396][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.243991][ T6] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 109.251624][ T6] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 109.260628][ T6] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 109.316200][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.327347][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.337330][ T60] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 109.346505][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.355138][ T60] usb 10-1: config 0 descriptor?? [ 109.405796][ T4485] usb 8-1: USB disconnect, device number 7 [ 109.688452][ T6128] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 109.711823][ T4279] EXT4-fs (loop5): unmounting filesystem. [ 109.718175][ T6135] 9pnet: p9_errstr2errno: server reported unknown error [ 109.763275][ T60] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 109.771468][ T60] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 109.779796][ T60] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 109.787513][ T60] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 109.795164][ T60] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 109.803217][ T60] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 110.195023][ T6] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 110.364088][ T60] playstation 0003:054C:0DF2.001B: Failed to retrieve feature with reportID 5: -71 [ 110.373535][ T60] playstation 0003:054C:0DF2.001B: Failed to retrieve DualSense calibration info: -71 [ 110.383186][ T60] playstation 0003:054C:0DF2.001B: Failed to get calibration data from DualSense [ 110.392421][ T60] playstation 0003:054C:0DF2.001B: Failed to create dualsense. [ 110.395023][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 110.405588][ T60] playstation: probe of 0003:054C:0DF2.001B failed with error -71 [ 110.412993][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.415407][ T60] usb 10-1: USB disconnect, device number 5 [ 110.433705][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.445628][ T6] usb 8-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 110.448028][ T6169] fido_id[6169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 110.454803][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.487542][ T6] usb 8-1: config 0 descriptor?? [ 110.679564][ T28] audit: type=1326 audit(2000000048.690:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.704046][ T28] audit: type=1326 audit(2000000048.690:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.734238][ T28] audit: type=1326 audit(2000000048.690:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.758722][ T28] audit: type=1326 audit(2000000048.690:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.782276][ T28] audit: type=1326 audit(2000000048.690:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.806709][ T28] audit: type=1326 audit(2000000048.690:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.830201][ T28] audit: type=1326 audit(2000000048.690:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.853787][ T28] audit: type=1326 audit(2000000048.690:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.890138][ T28] audit: type=1326 audit(2000000048.690:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.913658][ T28] audit: type=1326 audit(2000000048.690:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed199aeb9 code=0x7fc00000 [ 110.945038][ T1752] Bluetooth: hci0: command 0x1003 tx timeout [ 110.950284][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.957923][ T6108] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 110.962556][ T6] logitech 0003:046D:C29C.001C: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.7-1/input0 [ 110.982089][ T6200] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 111.103539][ T6237] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 111.115496][ T6237] EXT4-fs (loop3): invalid journal inode [ 111.121191][ T6237] EXT4-fs (loop3): can't get journal size [ 111.143797][ T6237] EXT4-fs (loop3): 1 truncate cleaned up [ 111.149644][ T6237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.159811][ T6] logitech 0003:046D:C29C.001C: no inputs found [ 111.178131][ T6] usb 8-1: USB disconnect, device number 8 [ 111.196375][ T3061] EXT4-fs (loop3): unmounting filesystem. [ 111.239566][ T6244] fido_id[6244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 111.305264][ T6253] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 111.347525][ T6253] EXT4-fs (loop9): 1 truncate cleaned up [ 111.355165][ T6253] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 111.401278][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 111.425161][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 111.444392][ T6272] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x601cdf01, utbl_chksum : 0xe619d30d) [ 111.775602][ T6316] EXT4-fs: Ignoring removed orlov option [ 111.785807][ T6316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.812999][ T6316] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 111.830424][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2524'. [ 111.845319][ T5118] EXT4-fs (loop9): unmounting filesystem. [ 111.886060][ T6334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2532'. [ 111.955017][ T19] ================================================================== [ 111.963117][ T19] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 111.970144][ T19] Write of size 8 at addr ffff88811d2d4a00 by task kworker/0:1/19 [ 111.978393][ T19] [ 111.980732][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted syzkaller #0 [ 111.988111][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.998174][ T19] Workqueue: usb_hub_wq hub_event [ 112.003211][ T19] Call Trace: [ 112.006480][ T19] [ 112.009399][ T19] __dump_stack+0x21/0x24 [ 112.013723][ T19] dump_stack_lvl+0x110/0x170 [ 112.018507][ T19] ? __cfi_dump_stack_lvl+0x8/0x8 [ 112.023573][ T19] ? enqueue_timer+0xae/0x480 [ 112.028244][ T19] print_address_description+0x71/0x200 [ 112.033784][ T19] print_report+0x4a/0x60 [ 112.038106][ T19] kasan_report+0x122/0x150 [ 112.042603][ T19] ? enqueue_timer+0xae/0x480 [ 112.047270][ T19] __asan_report_store8_noabort+0x17/0x20 [ 112.052987][ T19] enqueue_timer+0xae/0x480 [ 112.057482][ T19] __mod_timer+0x84c/0xc00 [ 112.061899][ T19] schedule_timeout+0x154/0x340 [ 112.066741][ T19] ? __cfi_schedule_timeout+0x10/0x10 [ 112.072102][ T19] ? __cfi_process_timeout+0x10/0x10 [ 112.077382][ T19] ? _raw_spin_lock+0x94/0xf0 [ 112.082048][ T19] wait_for_common+0x365/0x640 [ 112.086802][ T19] ? usb_hcd_giveback_urb+0x351/0x410 [ 112.092169][ T19] ? wait_for_completion+0x20/0x20 [ 112.097275][ T19] ? usb_submit_urb+0x1150/0x1820 [ 112.102308][ T19] wait_for_completion_timeout+0xe/0x10 [ 112.107849][ T19] usb_start_wait_urb+0x173/0x300 [ 112.112869][ T19] ? usb_api_blocking_completion+0xb0/0xb0 [ 112.118679][ T19] ? __kasan_check_write+0x14/0x20 [ 112.123828][ T19] usb_control_msg+0x241/0x3f0 [ 112.128614][ T19] hub_ext_port_status+0x100/0x6b0 [ 112.133740][ T19] hub_port_reset+0x652/0x16e0 [ 112.138496][ T19] hub_port_init+0x2ad/0x2890 [ 112.143162][ T19] ? __cfi_queue_work_on+0x10/0x10 [ 112.148266][ T19] ? __kasan_check_write+0x14/0x20 [ 112.153363][ T19] ? __cfi_mutex_unlock+0x10/0x10 [ 112.158385][ T19] ? _find_next_zero_bit+0x8d/0x140 [ 112.163593][ T19] hub_event+0x267d/0x46b0 [ 112.168004][ T19] ? __cfi_hub_event+0x10/0x10 [ 112.172763][ T19] ? __kasan_check_write+0x14/0x20 [ 112.177947][ T19] ? _raw_spin_lock_irq+0x95/0xf0 [ 112.183050][ T19] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 112.188587][ T19] process_one_work+0x71f/0xc40 [ 112.193434][ T19] worker_thread+0xa29/0x11e0 [ 112.198102][ T19] kthread+0x281/0x320 [ 112.202159][ T19] ? __cfi_worker_thread+0x10/0x10 [ 112.207261][ T19] ? __cfi_kthread+0x10/0x10 [ 112.211839][ T19] ret_from_fork+0x1f/0x30 [ 112.216282][ T19] [ 112.219293][ T19] [ 112.221601][ T19] Allocated by task 6108: [ 112.225925][ T19] kasan_set_track+0x4b/0x70 [ 112.230513][ T19] kasan_save_alloc_info+0x25/0x30 [ 112.235620][ T19] __kasan_kmalloc+0x95/0xb0 [ 112.240196][ T19] __kmalloc+0xb1/0x1e0 [ 112.244332][ T19] hci_alloc_dev_priv+0x27/0x1bd0 [ 112.249359][ T19] hci_uart_tty_ioctl+0x3d6/0xa20 [ 112.254396][ T19] tty_ioctl+0x8ef/0xc60 [ 112.258672][ T19] __se_sys_ioctl+0x12f/0x1b0 [ 112.263347][ T19] __x64_sys_ioctl+0x7b/0x90 [ 112.267943][ T19] x64_sys_call+0x58b/0x9a0 [ 112.272617][ T19] do_syscall_64+0x4c/0xa0 [ 112.277021][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.282910][ T19] [ 112.285214][ T19] Freed by task 6108: [ 112.289171][ T19] kasan_set_track+0x4b/0x70 [ 112.293747][ T19] kasan_save_free_info+0x31/0x50 [ 112.298764][ T19] ____kasan_slab_free+0x132/0x180 [ 112.303862][ T19] __kasan_slab_free+0x11/0x20 [ 112.308610][ T19] slab_free_freelist_hook+0xc2/0x190 [ 112.313977][ T19] __kmem_cache_free+0xb7/0x1b0 [ 112.318841][ T19] kfree+0x6f/0xf0 [ 112.322565][ T19] hci_release_dev+0x12a3/0x13b0 [ 112.327677][ T19] bt_host_release+0x82/0x90 [ 112.332277][ T19] device_release+0xa4/0x1d0 [ 112.336861][ T19] kobject_put+0x19d/0x280 [ 112.341271][ T19] put_device+0x1f/0x30 [ 112.345416][ T19] hci_dev_cmd+0x279/0x740 [ 112.349819][ T19] hci_sock_ioctl+0x41e/0x7f0 [ 112.354517][ T19] sock_do_ioctl+0x114/0x330 [ 112.359093][ T19] sock_ioctl+0x4ca/0x720 [ 112.363408][ T19] __se_sys_ioctl+0x12f/0x1b0 [ 112.368069][ T19] __x64_sys_ioctl+0x7b/0x90 [ 112.372646][ T19] x64_sys_call+0x58b/0x9a0 [ 112.377139][ T19] do_syscall_64+0x4c/0xa0 [ 112.381549][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.387609][ T19] [ 112.389916][ T19] Last potentially related work creation: [ 112.395611][ T19] kasan_save_stack+0x3a/0x60 [ 112.400277][ T19] __kasan_record_aux_stack+0xb6/0xc0 [ 112.405641][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 112.411440][ T19] insert_work+0x51/0x300 [ 112.415756][ T19] __queue_work+0x9b1/0xd30 [ 112.420252][ T19] queue_work_on+0xde/0x150 [ 112.424749][ T19] __hci_cmd_sync_sk+0xa7f/0xd30 [ 112.429678][ T19] hci_cmd_sync_status+0x53/0x120 [ 112.434691][ T19] hci_dev_cmd+0x648/0x740 [ 112.439092][ T19] hci_sock_ioctl+0x41e/0x7f0 [ 112.443789][ T19] sock_do_ioctl+0x114/0x330 [ 112.448365][ T19] sock_ioctl+0x4ca/0x720 [ 112.452680][ T19] __se_sys_ioctl+0x12f/0x1b0 [ 112.457348][ T19] __x64_sys_ioctl+0x7b/0x90 [ 112.461924][ T19] x64_sys_call+0x58b/0x9a0 [ 112.466415][ T19] do_syscall_64+0x4c/0xa0 [ 112.470831][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.476715][ T19] [ 112.479033][ T19] Second to last potentially related work creation: [ 112.485602][ T19] kasan_save_stack+0x3a/0x60 [ 112.490266][ T19] __kasan_record_aux_stack+0xb6/0xc0 [ 112.495629][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 112.501425][ T19] insert_work+0x51/0x300 [ 112.505739][ T19] __queue_work+0x9b1/0xd30 [ 112.510228][ T19] queue_work_on+0xde/0x150 [ 112.514722][ T19] hci_cmd_timeout+0x191/0x200 [ 112.519479][ T19] process_one_work+0x71f/0xc40 [ 112.524314][ T19] worker_thread+0xa29/0x11e0 [ 112.528983][ T19] kthread+0x281/0x320 [ 112.533037][ T19] ret_from_fork+0x1f/0x30 [ 112.537454][ T19] [ 112.539781][ T19] The buggy address belongs to the object at ffff88811d2d4000 [ 112.539781][ T19] which belongs to the cache kmalloc-8k of size 8192 [ 112.553831][ T19] The buggy address is located 2560 bytes inside of [ 112.553831][ T19] 8192-byte region [ffff88811d2d4000, ffff88811d2d6000) [ 112.567281][ T19] [ 112.569593][ T19] The buggy address belongs to the physical page: [ 112.575990][ T19] page:ffffea000474b400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d2d0 [ 112.586210][ T19] head:ffffea000474b400 order:3 compound_mapcount:0 compound_pincount:0 [ 112.594516][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 112.600590][ T19] raw: 4000000000010200 ffffea00047e2c00 dead000000000005 ffff888100043500 [ 112.609167][ T19] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 112.617726][ T19] page dumped because: kasan: bad access detected [ 112.624125][ T19] page_owner tracks the page as allocated [ 112.629821][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4345, tgid 4345 (syz-executor), ts 83135694311, free_ts 83134607380 [ 112.652565][ T19] post_alloc_hook+0x1f5/0x210 [ 112.657341][ T19] prep_new_page+0x1c/0x110 [ 112.661943][ T19] get_page_from_freelist+0x2d12/0x2d80 [ 112.667479][ T19] __alloc_pages+0x1d9/0x480 [ 112.672059][ T19] alloc_slab_page+0x6e/0xf0 [ 112.676672][ T19] new_slab+0x98/0x3d0 [ 112.680732][ T19] ___slab_alloc+0x6bd/0xb20 [ 112.685313][ T19] __slab_alloc+0x5e/0xa0 [ 112.689657][ T19] __kmem_cache_alloc_node+0x203/0x2c0 [ 112.695111][ T19] __kmalloc_node+0xa1/0x1e0 [ 112.699692][ T19] kvmalloc_node+0x28a/0x460 [ 112.704267][ T19] wg_packet_queue_init+0x95/0x320 [ 112.709480][ T19] wg_newlink+0x40b/0x7a0 [ 112.713820][ T19] rtnl_newlink+0x1537/0x20b0 [ 112.718486][ T19] rtnetlink_rcv_msg+0xb3b/0xe00 [ 112.723416][ T19] netlink_rcv_skb+0x20f/0x460 [ 112.728164][ T19] page last free stack trace: [ 112.732814][ T19] free_unref_page_prepare+0x742/0x750 [ 112.738262][ T19] free_unref_page+0x95/0x540 [ 112.742928][ T19] __free_pages+0x67/0x100 [ 112.747329][ T19] __free_slab+0xca/0x1a0 [ 112.751648][ T19] __unfreeze_partials+0x160/0x190 [ 112.756753][ T19] put_cpu_partial+0xa9/0x100 [ 112.761422][ T19] __slab_free+0x1c4/0x280 [ 112.765828][ T19] ___cache_free+0xbf/0xd0 [ 112.770325][ T19] qlist_free_all+0xc6/0x140 [ 112.774896][ T19] kasan_quarantine_reduce+0x14a/0x170 [ 112.780341][ T19] __kasan_slab_alloc+0x24/0x80 [ 112.785179][ T19] slab_post_alloc_hook+0x4f/0x2d0 [ 112.790390][ T19] __kmem_cache_alloc_node+0x192/0x2c0 [ 112.795941][ T19] kmalloc_trace+0x29/0xb0 [ 112.800529][ T19] ipv6_add_dev+0x5b0/0x1230 [ 112.805105][ T19] addrconf_notify+0x6d5/0xe40 [ 112.809866][ T19] [ 112.812171][ T19] Memory state around the buggy address: [ 112.817782][ T19] ffff88811d2d4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.825825][ T19] ffff88811d2d4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.833867][ T19] >ffff88811d2d4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.841911][ T19] ^ [ 112.846053][ T19] ffff88811d2d4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.854094][ T19] ffff88811d2d4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.862138][ T19] ================================================================== [ 112.870179][ T19] Disabling lock debugging due to kernel taint [ 112.887876][ T6337] set_capacity_and_notify: 6 callbacks suppressed [ 112.887893][ T6337] loop9: detected capacity change from 0 to 40427 [ 112.905313][ T6337] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 112.913439][ T6337] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 112.929075][ T6337] F2FS-fs (loop9): invalid crc value [ 112.935811][ T6337] F2FS-fs (loop9): Found nat_bits in checkpoint [ 112.958992][ T6337] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 112.966139][ T6337] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 112.988261][ T351] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 112.997301][ T19] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 112.997606][ T351] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 113.025013][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 113.036770][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 113.045175][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 113.053648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.063681][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 113.068955][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 113.088544][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 113.094591][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701c680 [ 113.102537][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 113.110491][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 113.118441][ C0] R10: dffffc0000000000 R11: ffffed1023a5a939 R12: dffffc0000000000 [ 113.126391][ C0] R13: 0000000000000000 R14: ffff88811d2d49c8 R15: 0000000000000008 [ 113.134339][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 113.143266][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.149836][ C0] CR2: 0000000000000000 CR3: 000000012133a000 CR4: 00000000003506b0 [ 113.157799][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.165934][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.173886][ C0] Call Trace: [ 113.177147][ C0] [ 113.179973][ C0] delayed_work_timer_fn+0x61/0x80 [ 113.185070][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 113.190856][ C0] call_timer_fn+0x46/0x2a0 [ 113.195346][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 113.201156][ C0] __run_timers+0x689/0x9f0 [ 113.205660][ C0] ? calc_index+0x200/0x200 [ 113.210167][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 113.215443][ C0] run_timer_softirq+0x6a/0xf0 [ 113.220200][ C0] handle_softirqs+0x1d7/0x600 [ 113.224949][ C0] ? irqtime_account_irq+0xc4/0x240 [ 113.230135][ C0] __irq_exit_rcu+0x52/0xf0 [ 113.234615][ C0] irq_exit_rcu+0x9/0x10 [ 113.238830][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 113.244439][ C0] [ 113.247346][ C0] [ 113.250319][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 113.256276][ C0] RIP: 0010:default_idle+0xf/0x20 [ 113.261282][ C0] Code: d7 6f b6 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 03 08 66 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 113.280876][ C0] RSP: 0018:ffffffff87007d58 EFLAGS: 00000257 [ 113.286927][ C0] RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: 5fc0b7d536067900 [ 113.294879][ C0] RDX: 0000000000000001 RSI: ffffffff85ca7060 RDI: ffffffff85ca7020 [ 113.302854][ C0] RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916 [ 113.310805][ C0] R10: 0000000000000000 R11: ffffffff85002af0 R12: 0000000000000000 [ 113.318775][ C0] R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000 [ 113.326750][ C0] ? __cfi_default_idle+0x10/0x10 [ 113.331765][ C0] arch_cpu_idle+0x1c/0x20 [ 113.336179][ C0] default_idle_call+0x71/0x1d0 [ 113.341110][ C0] do_idle+0x1a7/0x560 [ 113.345161][ C0] ? sysvec_call_function_single+0x61/0xc0 [ 113.350966][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 113.356149][ C0] ? schedule_idle+0x5b/0x90 [ 113.360719][ C0] ? do_idle+0xa/0x560 [ 113.364764][ C0] cpu_startup_entry+0x43/0x60 [ 113.369504][ C0] rest_init+0x10a/0x130 [ 113.373730][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 113.379082][ C0] arch_call_rest_init+0xe/0x10 [ 113.383909][ C0] start_kernel+0x47e/0x4ec [ 113.388391][ C0] x86_64_start_reservations+0x2a/0x2c [ 113.393856][ C0] x86_64_start_kernel+0x7c/0x81 [ 113.398774][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 113.404649][ C0] [ 113.407659][ C0] Modules linked in: [ 113.411535][ C0] ---[ end trace 0000000000000000 ]--- [ 113.416967][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 113.422233][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 113.441853][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 113.448173][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701c680 [ 113.456150][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 113.464110][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 113.472064][ C0] R10: dffffc0000000000 R11: ffffed1023a5a939 R12: dffffc0000000000 [ 113.480013][ C0] R13: 0000000000000000 R14: ffff88811d2d49c8 R15: 0000000000000008 [ 113.487965][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 113.496872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.503438][ C0] CR2: 0000000000000000 CR3: 000000012133a000 CR4: 00000000003506b0 [ 113.511843][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.519802][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.527762][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 113.535189][ C0] Kernel Offset: disabled [ 113.539517][ C0] Rebooting in 86400 seconds..