last executing test programs: 5.022594995s ago: executing program 3 (id=1592): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a5b000/0x2000)=nil, 0x2000}, 0x1}) 5.015318846s ago: executing program 3 (id=1593): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720a00ff00007110770000070000bb9f1a00c01100000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 4.998485506s ago: executing program 3 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) 4.922793307s ago: executing program 3 (id=1596): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.617333771s ago: executing program 3 (id=1601): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0xad5, &(0x7f0000000040)={0x0, 0xfffffffc}) close(r0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 4.561361041s ago: executing program 3 (id=1603): unshare(0x4040600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22a, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000050000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="000000000d000000b705000008000000850000007000000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0xdd, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) 4.486028172s ago: executing program 32 (id=1603): unshare(0x4040600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22a, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000050000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="000000000d000000b705000008000000850000007000000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0xdd, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) 3.452049835s ago: executing program 2 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000)={[{@nogrpid}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, 0x0, 0x0) 3.281300818s ago: executing program 2 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000fe7f0000cc00000000"], 0x48) 3.155379909s ago: executing program 2 (id=1646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @auto="2d6d8be989c5ebe2"}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x100) 2.859659603s ago: executing program 0 (id=1656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.428009848s ago: executing program 2 (id=1660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 833.723459ms ago: executing program 0 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000001c"], 0x48) 764.25571ms ago: executing program 0 (id=1665): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000002c0)="00001cfb163ab34770", 0x9}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x4040) 684.883911ms ago: executing program 2 (id=1670): getpid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 638.663291ms ago: executing program 1 (id=1673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 638.372591ms ago: executing program 4 (id=1674): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000fc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00'/712) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 596.601682ms ago: executing program 1 (id=1676): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 558.355452ms ago: executing program 4 (id=1678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x31, 0x0, 0x0) 520.938053ms ago: executing program 1 (id=1680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 517.352772ms ago: executing program 4 (id=1681): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 480.035233ms ago: executing program 2 (id=1683): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x1, 0xffffffff, 0x0, 0x2, 0x4000, 0x42}) 477.261613ms ago: executing program 1 (id=1684): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 472.583953ms ago: executing program 4 (id=1685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200)) 389.334024ms ago: executing program 5 (id=1687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 389.055744ms ago: executing program 4 (id=1688): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x7, r2, 0x25}, 0x10) 387.575774ms ago: executing program 1 (id=1697): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="646f74732c636865636b3d6e6f726d616c2c006f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c71756965742c6e6f646ff4732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c0000000054432c6e66732c646f747325d56d61736b3d30103030303030303030303030303030303030300030302c646f74732c63686502003daf0c86431e0c59e8f4fa4b9d4893617374726963742c00"], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 349.087755ms ago: executing program 4 (id=1689): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}]}}, 0x0}, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 311.100125ms ago: executing program 1 (id=1690): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) personality(0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b00010000000009049c00020103"], 0x0) 272.435056ms ago: executing program 0 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000000), &(0x7f00000004c0)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 266.696736ms ago: executing program 0 (id=1692): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) 228.625056ms ago: executing program 0 (id=1693): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) 227.460187ms ago: executing program 5 (id=1694): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000340)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 38.020919ms ago: executing program 5 (id=1695): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x0) 23.337159ms ago: executing program 5 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x27) faccessat(0xffffffffffffffff, 0x0, 0x5) 12.029949ms ago: executing program 5 (id=1698): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 0s ago: executing program 5 (id=1699): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x401c5820, &(0x7f0000000940)=@v1={0x8, @adiantum, 0x2, @desc4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0xa, 0xcf, 0xccb, 0x1}) kernel console output (not intermixed with test programs): slave_1 may have been left with an inconsistent configuration, please check. [ 36.371373][ T400] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 36.446094][ T1183] loop0: detected capacity change from 0 to 128 [ 36.551353][ T1196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 36.694461][ T39] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.716371][ T39] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.763272][ T1214] fido_id[1214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.904297][ T1224] loop4: detected capacity change from 0 to 4096 [ 36.936243][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 36.936259][ T28] audit: type=1400 audit(1749189686.146:299): avc: denied { view } for pid=1231 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 36.985812][ T1236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'. [ 36.996747][ T1224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.046626][ T286] EXT4-fs (loop4): unmounting filesystem. [ 37.052307][ T28] audit: type=1400 audit(1749189686.266:300): avc: denied { map } for pid=1240 comm="syz.0.400" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.210262][ T28] audit: type=1400 audit(1749189686.426:301): avc: denied { wake_alarm } for pid=1260 comm="syz.1.410" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.357465][ T1281] loop0: detected capacity change from 0 to 256 [ 37.390078][ T1281] FAT-fs (loop0): Directory bread(block 64) failed [ 37.406723][ T1281] FAT-fs (loop0): Directory bread(block 65) failed [ 37.422244][ T1281] FAT-fs (loop0): Directory bread(block 66) failed [ 37.437652][ T1281] FAT-fs (loop0): Directory bread(block 67) failed [ 37.454377][ T1281] FAT-fs (loop0): Directory bread(block 68) failed [ 37.473282][ T1281] FAT-fs (loop0): Directory bread(block 69) failed [ 37.488631][ T1281] FAT-fs (loop0): Directory bread(block 70) failed [ 37.504101][ T1281] FAT-fs (loop0): Directory bread(block 71) failed [ 37.519444][ T1281] FAT-fs (loop0): Directory bread(block 72) failed [ 37.533660][ T1281] FAT-fs (loop0): Directory bread(block 73) failed [ 37.568001][ T1273] loop1: detected capacity change from 0 to 40427 [ 37.575385][ T1273] F2FS-fs (loop1): Not support 9007199254740992, larger than 256 [ 37.625109][ T1289] loop1: detected capacity change from 0 to 256 [ 37.662665][ T1289] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0d2a05fc, utbl_chksum : 0xe619d30d) [ 37.708288][ T28] audit: type=1400 audit(1749189686.926:302): avc: denied { setattr } for pid=1288 comm="syz.1.423" name="file0" dev="loop1" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.956512][ T28] audit: type=1400 audit(1749189687.176:303): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.996648][ T28] audit: type=1400 audit(1749189687.196:304): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.024077][ T28] audit: type=1400 audit(1749189687.196:305): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.078348][ T28] audit: type=1400 audit(1749189687.236:306): avc: denied { create } for pid=1311 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.098579][ T28] audit: type=1400 audit(1749189687.266:307): avc: denied { ioctl } for pid=1311 comm="syz.0.434" path="socket:[20008]" dev="sockfs" ino=20008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.124640][ T28] audit: type=1400 audit(1749189687.286:308): avc: denied { read } for pid=1302 comm="syz.1.430" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.436327][ T1171] Bluetooth: hci0: command 0x1003 tx timeout [ 38.442386][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.560585][ T1342] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 40.135536][ C0] sched: RT throttling activated [ 41.131689][ T1332] loop1: detected capacity change from 0 to 40427 [ 41.144737][ T1332] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 41.151833][ T1332] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.160400][ T1332] F2FS-fs (loop1): fault_injection options not supported [ 41.167695][ T1332] F2FS-fs (loop1): fault_type options not supported [ 41.175265][ T1332] F2FS-fs (loop1): invalid crc value [ 41.199863][ T1332] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.295796][ T1332] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.315809][ T1332] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.353401][ T1369] loop4: detected capacity change from 0 to 2048 [ 41.431214][ T1369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.534251][ T1398] syz.0.471[1398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.534332][ T1398] syz.0.471[1398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.557705][ T286] EXT4-fs (loop4): unmounting filesystem. [ 41.633525][ T1404] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.705858][ T1418] loop2: detected capacity change from 0 to 512 [ 41.731687][ T1418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.735709][ T290] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.759382][ T1418] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.481: bad orphan inode 16 [ 41.761078][ T1424] incfs: iterate_incfs_dir / -22 [ 41.769716][ T1418] ext4_test_bit(bit=15, block=4) = 0 [ 41.780005][ T1418] EXT4-fs (loop2): 1 orphan inode deleted [ 41.788349][ T1418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.810320][ T1427] loop4: detected capacity change from 0 to 512 [ 41.828528][ T1427] EXT4-fs: Ignoring removed nobh option [ 41.835368][ T284] EXT4-fs (loop2): unmounting filesystem. [ 41.837738][ T1427] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.484: invalid indirect mapped block 256 (level 2) [ 41.863353][ T1427] EXT4-fs (loop4): 2 truncates cleaned up [ 41.869395][ T1427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.893256][ T1427] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.484: bg 0: block 5: invalid block bitmap [ 41.908449][ T1427] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 41.921336][ T1427] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.921336][ T1427] [ 41.933097][ T1427] EXT4-fs (loop4): Total free blocks count 0 [ 41.939645][ T290] usb 4-1: Using ep0 maxpacket: 8 [ 41.944968][ T1427] EXT4-fs (loop4): Free/Dirty block details [ 41.951581][ T1427] EXT4-fs (loop4): free_blocks=0 [ 41.957183][ T1427] EXT4-fs (loop4): dirty_blocks=5 [ 41.962530][ T1427] EXT4-fs (loop4): Block reservation details [ 41.969066][ T290] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.977858][ T1427] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 41.983865][ T290] usb 4-1: config 179 has no interface number 0 [ 41.990607][ T290] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 42.010831][ T290] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 42.022399][ T290] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 42.033913][ T290] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 42.034759][ T286] EXT4-fs (loop4): unmounting filesystem. [ 42.045669][ T290] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 42.064540][ T290] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 42.074066][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.092843][ T1388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.232613][ T1433] loop2: detected capacity change from 0 to 40427 [ 42.429535][ T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 42.447957][ T1433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.486130][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 42.486145][ T28] audit: type=1400 audit(42.466:367): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=775 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.501726][ T1458] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.536486][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.543608][ T28] audit: type=1400 audit(42.466:368): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=775 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.544019][ T1458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.580527][ T28] audit: type=1400 audit(42.466:369): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=775 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.594921][ T1460] loop4: detected capacity change from 0 to 2048 [ 42.605434][ T1433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.631914][ T39] usb 4-1: USB disconnect, device number 4 [ 42.637831][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 42.637869][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 42.673760][ T28] audit: type=1400 audit(42.646:370): avc: denied { read append open } for pid=1431 comm="syz.2.486" path="/99/file0/memory.events.local" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.680809][ T39] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 42.709382][ T1460] Alternate GPT is invalid, using primary GPT. [ 42.716123][ T28] audit: type=1400 audit(42.686:371): avc: denied { create } for pid=1466 comm="syz.0.499" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.721864][ T1460] loop4: p1 p2 p3 [ 42.738532][ T28] audit: type=1400 audit(42.686:372): avc: denied { read } for pid=1466 comm="syz.0.499" name="file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.763426][ T284] syz-executor: attempt to access beyond end of device [ 42.763426][ T284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.763846][ T28] audit: type=1400 audit(42.686:373): avc: denied { open } for pid=1466 comm="syz.0.499" path="/110/file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.843681][ T28] audit: type=1400 audit(42.816:374): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.872285][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 42.873830][ T311] udevd[311]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.882914][ T447] udevd[447]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 42.937191][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 42.949527][ T447] udevd[447]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 42.952168][ T311] udevd[311]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.998036][ T1479] loop2: detected capacity change from 0 to 128 [ 43.035861][ T1479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.090748][ T284] EXT4-fs (loop2): unmounting filesystem. [ 43.128231][ T28] audit: type=1400 audit(43.106:375): avc: denied { create } for pid=1485 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.179515][ T28] audit: type=1400 audit(43.126:376): avc: denied { write } for pid=1485 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.229708][ T1477] loop4: detected capacity change from 0 to 40427 [ 43.253334][ T1477] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 43.280085][ T1477] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.345605][ T1477] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.403518][ T1514] loop0: detected capacity change from 0 to 512 [ 43.440660][ T1514] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.519: corrupted in-inode xattr [ 43.449692][ T1477] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 43.475770][ T1514] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.519: couldn't read orphan inode 15 (err -117) [ 43.488047][ T1514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.509950][ T1514] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.519: Directory hole found for htree leaf block 0 [ 43.529935][ T1477] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.538264][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.545472][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.553640][ T282] EXT4-fs (loop0): unmounting filesystem. [ 43.559876][ T1477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.772326][ T1546] loop0: detected capacity change from 0 to 256 [ 43.802439][ T1546] FAT-fs (loop0): Directory bread(block 64) failed [ 43.813172][ T1546] FAT-fs (loop0): Directory bread(block 65) failed [ 43.826979][ T1546] FAT-fs (loop0): Directory bread(block 66) failed [ 43.859937][ T1546] FAT-fs (loop0): Directory bread(block 67) failed [ 43.880174][ T1546] FAT-fs (loop0): Directory bread(block 68) failed [ 43.900319][ T1546] FAT-fs (loop0): Directory bread(block 69) failed [ 43.917965][ T1546] FAT-fs (loop0): Directory bread(block 70) failed [ 43.925990][ T1546] FAT-fs (loop0): Directory bread(block 71) failed [ 43.933542][ T1546] FAT-fs (loop0): Directory bread(block 72) failed [ 43.945622][ T1546] FAT-fs (loop0): Directory bread(block 73) failed [ 44.063726][ T1569] loop4: detected capacity change from 0 to 256 [ 44.120060][ T1569] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.136715][ T1569] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 44.148485][ T1569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 44.164186][ T1581] loop2: detected capacity change from 0 to 128 [ 44.193079][ T1585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 44.211286][ T308] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.214141][ T1588] loop3: detected capacity change from 0 to 512 [ 44.278784][ T1588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.337439][ T1605] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 44.354534][ T285] EXT4-fs (loop3): unmounting filesystem. [ 44.406491][ T1615] netlink: 'syz.4.564': attribute type 12 has an invalid length. [ 44.450853][ T1621] loop3: detected capacity change from 0 to 1024 [ 44.468459][ T1621] ext4: Unknown parameter 'nouser_xattr' [ 44.521053][ T311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.525606][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.563651][ T1611] loop0: detected capacity change from 0 to 40427 [ 44.570926][ T1611] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 44.578900][ T1611] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.588391][ T1611] F2FS-fs (loop0): invalid crc value [ 44.595137][ T1611] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.601563][ T855] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.629913][ T1611] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.637071][ T1611] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.725603][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 44.731905][ T39] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 44.740615][ T290] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.748452][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.758806][ T39] usb 3-1: config 0 has no interface number 0 [ 44.771282][ T39] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 44.780659][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.789027][ T39] usb 3-1: Product: syz [ 44.793246][ T39] usb 3-1: Manufacturer: syz [ 44.796964][ T855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.798761][ T39] usb 3-1: SerialNumber: syz [ 44.809656][ T855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.816208][ T39] usb 3-1: config 0 descriptor?? [ 44.830324][ T855] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.840370][ T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.853969][ T855] usb 2-1: config 0 descriptor?? [ 44.945598][ T290] usb 5-1: Using ep0 maxpacket: 8 [ 44.955599][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.967080][ T290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.980969][ T290] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 44.990187][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.999193][ T290] usb 5-1: config 0 descriptor?? [ 45.034723][ T1594] loop2: detected capacity change from 0 to 512 [ 45.042983][ T1594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.059948][ T1594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.554: missing EA_INODE flag [ 45.079265][ T1594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.554: error while reading EA inode 2 err=-117 [ 45.093098][ T1594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.554: missing EA_INODE flag [ 45.105127][ T1594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.554: error while reading EA inode 2 err=-117 [ 45.118343][ T1594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.554: inode #65536: comm syz.2.554: iget: illegal inode # [ 45.132117][ T1594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.554: error while reading EA inode 65536 err=-117 [ 45.145989][ T1594] EXT4-fs (loop2): 1 orphan inode deleted [ 45.151839][ T1594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.181721][ T39] usb 3-1: bad CDC descriptors [ 45.193781][ T39] usb 3-1: USB disconnect, device number 3 [ 45.274734][ T855] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 45.285361][ T855] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input7 [ 45.379398][ T855] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 45.409787][ T290] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x4 [ 45.426047][ T290] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 45.438654][ T290] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 45.457178][ T290] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 45.464517][ T290] hid-rmi 0003:06CB:81A7.0006: unbalanced collection at end of report description [ 45.489674][ T290] hid-rmi 0003:06CB:81A7.0006: parse failed [ 45.498928][ T290] hid-rmi: probe of 0003:06CB:81A7.0006 failed with error -22 [ 45.614788][ T290] usb 5-1: USB disconnect, device number 4 [ 45.690185][ T855] usb 2-1: USB disconnect, device number 4 [ 45.723360][ T284] EXT4-fs (loop2): unmounting filesystem. [ 45.900364][ T1671] loop0: detected capacity change from 0 to 256 [ 46.035626][ T291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.216692][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.235710][ T291] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 46.261259][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.272798][ T291] usb 3-1: config 0 descriptor?? [ 46.320899][ T1696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 46.412178][ T1707] loop0: detected capacity change from 0 to 4096 [ 46.452563][ T1707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.476544][ T1707] fs-verity: sha256 using implementation "sha256-avx2" [ 46.487053][ T1707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.602: bg 0: block 66: padding at end of block bitmap is not set [ 46.501991][ T1707] fs-verity (loop0, inode 15): ext4_end_enable_verity() failed with err -117 [ 46.519076][ T1707] syz.0.602 (1707) used greatest stack depth: 20480 bytes left [ 46.537256][ T282] EXT4-fs (loop0): unmounting filesystem. [ 46.759845][ T291] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 46.771847][ T291] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input8 [ 46.848531][ T291] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 46.957822][ T1752] netlink: 45 bytes leftover after parsing attributes in process `syz.1.621'. [ 47.165904][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 47.203402][ T39] usb 3-1: USB disconnect, device number 4 [ 47.348594][ T1796] loop1: detected capacity change from 0 to 512 [ 47.355971][ T1796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.367121][ T1796] EXT4-fs (loop1): 1 truncate cleaned up [ 47.372888][ T1796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.404552][ T565] EXT4-fs (loop1): unmounting filesystem. [ 47.535584][ T855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 47.660676][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 47.660692][ T28] audit: type=1400 audit(47.636:431): avc: denied { map } for pid=1821 comm="syz.3.651" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.725577][ T855] usb 5-1: Using ep0 maxpacket: 8 [ 47.733122][ T855] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 47.772163][ T1832] loop0: detected capacity change from 0 to 512 [ 47.773448][ T855] usb 5-1: config 179 has no interface number 0 [ 47.805625][ T855] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 47.840015][ T855] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 47.845491][ T1832] EXT4-fs (loop0): 1 orphan inode deleted [ 47.853292][ T1816] loop1: detected capacity change from 0 to 40427 [ 47.865637][ T1832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.870506][ T855] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.909907][ T1816] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 47.941981][ T1816] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.955795][ T855] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 47.970853][ T855] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 47.986439][ T1816] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.019497][ T855] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 48.035340][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.053450][ T1816] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 48.061149][ T1788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 48.062956][ T1816] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.101189][ T282] EXT4-fs (loop0): unmounting filesystem. [ 48.118096][ T28] audit: type=1400 audit(48.096:432): avc: denied { setattr } for pid=1815 comm="syz.1.648" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.140539][ T28] audit: type=1400 audit(48.096:433): avc: denied { rmdir } for pid=1815 comm="syz.1.648" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.189283][ T1859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.217247][ T28] audit: type=1400 audit(48.196:434): avc: denied { create } for pid=1860 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.251153][ T28] audit: type=1400 audit(48.216:435): avc: denied { bind } for pid=1860 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.273158][ T28] audit: type=1400 audit(48.216:436): avc: denied { node_bind } for pid=1860 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.326923][ T855] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 48.339957][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.528981][ T290] usb 5-1: USB disconnect, device number 5 [ 48.529114][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 48.543651][ T290] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 48.543855][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 48.561517][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 48.571667][ T1867] loop2: detected capacity change from 0 to 40427 [ 48.575435][ T6] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 48.593414][ T6] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 48.603966][ T6] usb 4-1: config 135 has no interface number 0 [ 48.606191][ T1867] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 48.610565][ T6] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 48.628848][ T6] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 48.642620][ T6] usb 4-1: config 135 interface 230 has no altsetting 0 [ 48.644364][ T1867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.658240][ T1867] F2FS-fs (loop2): fault_injection options not supported [ 48.665294][ T1867] F2FS-fs (loop2): fault_type options not supported [ 48.672506][ T1867] F2FS-fs (loop2): fault_type options not supported [ 48.680148][ T6] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 48.689620][ T1867] F2FS-fs (loop2): invalid crc value [ 48.695309][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.703683][ T6] usb 4-1: Product: syz [ 48.708356][ T6] usb 4-1: Manufacturer: syz [ 48.713108][ T6] usb 4-1: SerialNumber: syz [ 48.715502][ T1867] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.743719][ T6] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 48.754792][ T6] usb 4-1: No valid video chain found. [ 48.760095][ T1867] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.767711][ T1867] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.811774][ T400] kworker/u4:4: attempt to access beyond end of device [ 48.811774][ T400] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 48.826443][ T1867] VFS:Filesystem freeze failed [ 48.850132][ T28] audit: type=1400 audit(48.826:437): avc: denied { create } for pid=1884 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 48.953868][ T6] usb 4-1: USB disconnect, device number 5 [ 48.971133][ T1892] loop1: detected capacity change from 0 to 8192 [ 49.089089][ T1903] input: syz0 as /devices/virtual/input/input10 [ 49.127781][ T28] audit: type=1400 audit(49.106:438): avc: denied { bind } for pid=1906 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.187616][ T1917] loop4: detected capacity change from 0 to 512 [ 49.195220][ T1917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.221517][ T1917] EXT4-fs (loop4): 1 truncate cleaned up [ 49.231011][ T1917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.348407][ T1937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 49.375720][ T1937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 49.418675][ T286] EXT4-fs (loop4): unmounting filesystem. [ 49.447003][ T28] audit: type=1400 audit(49.426:439): avc: denied { create } for pid=1941 comm="syz.0.701" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.496090][ T28] audit: type=1400 audit(49.446:440): avc: denied { write } for pid=1941 comm="syz.0.701" name="file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.592288][ T1957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 49.735126][ T1974] loop1: detected capacity change from 0 to 256 [ 49.765658][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.788959][ T1974] FAT-fs (loop1): Directory bread(block 64) failed [ 49.805174][ T1974] FAT-fs (loop1): Directory bread(block 65) failed [ 49.812490][ T1980] loop3: detected capacity change from 0 to 16 [ 49.824484][ T1974] FAT-fs (loop1): Directory bread(block 66) failed [ 49.838166][ T1974] FAT-fs (loop1): Directory bread(block 67) failed [ 49.844912][ T1980] erofs: (device loop3): mounted with root inode @ nid 36. [ 49.846503][ T1946] loop0: detected capacity change from 0 to 40427 [ 49.852472][ T1974] FAT-fs (loop1): Directory bread(block 68) failed [ 49.870899][ T1974] FAT-fs (loop1): Directory bread(block 69) failed [ 49.874931][ T1980] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 49.877947][ T1974] FAT-fs (loop1): Directory bread(block 70) failed [ 49.887773][ T1946] F2FS-fs (loop0): invalid crc value [ 49.895654][ T1974] FAT-fs (loop1): Directory bread(block 71) failed [ 49.900468][ T1980] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 49.922665][ T1974] FAT-fs (loop1): Directory bread(block 72) failed [ 49.924273][ T1980] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 49.937467][ T1974] FAT-fs (loop1): Directory bread(block 73) failed [ 49.945608][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 49.951946][ T1980] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 49.962523][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 49.977340][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 49.988475][ T1946] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.028574][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.071387][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.085760][ T1946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 50.109597][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.118090][ T39] usb 3-1: SerialNumber: syz [ 50.118477][ T1974] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61) [ 50.131004][ T1932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.155606][ T1946] syz.0.702: attempt to access beyond end of device [ 50.155606][ T1946] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.340258][ T1996] loop3: detected capacity change from 0 to 40427 [ 50.350660][ T1996] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 50.360752][ T1996] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.371706][ T39] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 50.387101][ T39] usb 3-1: USB disconnect, device number 5 [ 50.407588][ T1996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.475609][ T305] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.493537][ T1996] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.501528][ T1996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.555850][ T2023] loop0: detected capacity change from 0 to 128 [ 50.582658][ T2023] FAT-fs (loop0): Directory bread(block 162) failed [ 50.599532][ T2023] FAT-fs (loop0): Directory bread(block 163) failed [ 50.609148][ T2023] FAT-fs (loop0): Directory bread(block 164) failed [ 50.615893][ T2023] FAT-fs (loop0): Directory bread(block 165) failed [ 50.622724][ T2023] FAT-fs (loop0): Directory bread(block 166) failed [ 50.629507][ T2023] FAT-fs (loop0): Directory bread(block 167) failed [ 50.636354][ T2023] FAT-fs (loop0): Directory bread(block 168) failed [ 50.643039][ T2023] FAT-fs (loop0): Directory bread(block 169) failed [ 50.663878][ T2023] FAT-fs (loop0): Directory bread(block 162) failed [ 50.678067][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.680809][ T2023] FAT-fs (loop0): Directory bread(block 163) failed [ 50.695603][ T305] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.714458][ T2023] syz.0.733: attempt to access beyond end of device [ 50.714458][ T2023] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 50.715218][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.742909][ T2023] syz.0.733: attempt to access beyond end of device [ 50.742909][ T2023] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 50.766459][ T305] usb 5-1: config 0 descriptor?? [ 50.902254][ T2037] loop3: detected capacity change from 0 to 512 [ 50.933287][ T2037] EXT4-fs: Ignoring removed i_version option [ 50.968177][ T2037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.080755][ T285] EXT4-fs (loop3): unmounting filesystem. [ 51.177921][ T305] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 51.203823][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input11 [ 51.235248][ T2062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.751'. [ 51.298303][ T305] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 51.302473][ T2015] loop1: detected capacity change from 0 to 131072 [ 51.330090][ T2015] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 51.350419][ T2015] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.387737][ T2015] F2FS-fs (loop1): invalid crc value [ 51.446518][ T2015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.553133][ T2015] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.558522][ T2088] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 51.561438][ T2015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 51.642104][ T6] usb 5-1: USB disconnect, device number 6 [ 51.925590][ T1869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 52.044724][ T2107] tmpfs: Bad value for 'gid' [ 52.115607][ T1869] usb 1-1: Using ep0 maxpacket: 16 [ 52.122133][ T1869] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 52.150970][ T1869] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 52.185942][ T1869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.217438][ T1869] usb 1-1: Product: syz [ 52.224248][ T2119] loop3: detected capacity change from 0 to 256 [ 52.232430][ T1869] usb 1-1: Manufacturer: syz [ 52.237853][ T1869] usb 1-1: SerialNumber: syz [ 52.253019][ T1869] usb 1-1: config 0 descriptor?? [ 52.264144][ T1869] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 52.274417][ T2119] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 52.290167][ T2121] loop4: detected capacity change from 0 to 512 [ 52.297139][ T1869] usb 1-1: Detected FT232R [ 52.307623][ T2121] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.319585][ T2121] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 52.330305][ T2119] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 52.339968][ T2119] exFAT-fs (loop3): Filesystem has been set read-only [ 52.347867][ T2121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.377796][ T2121] System zones: 0-2, 18-18, 34-34 [ 52.404938][ T2121] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.430515][ T2121] EXT4-fs (loop4): 1 truncate cleaned up [ 52.437138][ T2121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.465073][ T1869] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 52.481883][ T286] EXT4-fs (loop4): unmounting filesystem. [ 52.544017][ T2149] bridge_slave_0: default FDB implementation only supports local addresses [ 52.561517][ T2150] syz.1.791[2150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.561602][ T2150] syz.1.791[2150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.593792][ T2154] loop4: detected capacity change from 0 to 256 [ 52.634782][ T2158] tun0: tun_chr_ioctl cmd 1074025681 [ 52.641800][ T2154] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 52.661698][ T2154] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 52.673930][ T2154] exFAT-fs (loop4): Filesystem has been set read-only [ 52.681116][ T1869] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 52.730047][ T2163] loop2: detected capacity change from 0 to 512 [ 52.750496][ T2163] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.764584][ T2163] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 52.781885][ T2163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.791132][ T2163] System zones: 0-2, 18-18, 34-34 [ 52.792746][ T28] kauditd_printk_skb: 1421 callbacks suppressed [ 52.792763][ T28] audit: type=1400 audit(308.802:1862): avc: denied { mounton } for pid=2172 comm="syz.4.801" path="/144/file0" dev="incremental-fs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.803730][ T2173] overlayfs: workdir and upperdir must reside under the same mount [ 52.826427][ T2163] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.848804][ T2163] EXT4-fs (loop2): 1 truncate cleaned up [ 52.854468][ T2163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.880726][ T1869] usb 1-1: USB disconnect, device number 4 [ 52.904298][ T1869] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 52.914304][ T284] EXT4-fs (loop2): unmounting filesystem. [ 52.926578][ T2176] loop4: detected capacity change from 0 to 128 [ 52.938045][ T1869] ftdi_sio 1-1:0.0: device disconnected [ 52.967071][ T2178] netlink: 'syz.2.802': attribute type 3 has an invalid length. [ 53.037145][ T2190] loop1: detected capacity change from 0 to 256 [ 53.043522][ T28] audit: type=1400 audit(309.052:1863): avc: denied { ioctl } for pid=2187 comm="syz.4.808" path="socket:[24230]" dev="sockfs" ino=24230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.073287][ T2190] FAT-fs (loop1): Unrecognized mount option "check=relaxdd" or missing value [ 53.091260][ T2192] loop3: detected capacity change from 0 to 512 [ 53.104714][ T28] audit: type=1400 audit(309.112:1864): avc: denied { create } for pid=2193 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.132774][ T2192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.175627][ T28] audit: type=1400 audit(309.112:1865): avc: denied { write } for pid=2193 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.215663][ T28] audit: type=1400 audit(309.172:1866): avc: denied { create } for pid=2195 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.246686][ T2192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.266434][ T2207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 53.266627][ T2211] tipc: Started in network mode [ 53.295619][ T28] audit: type=1400 audit(309.182:1867): avc: denied { setopt } for pid=2195 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.315429][ T28] audit: type=1400 audit(309.182:1868): avc: denied { write } for pid=2195 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.321134][ T2211] tipc: Node identity ac14140f, cluster identity 4711 [ 53.341949][ T2211] tipc: New replicast peer: 255.255.255.255 [ 53.343119][ T285] EXT4-fs (loop3): unmounting filesystem. [ 53.348825][ T2211] tipc: Enabled bearer , priority 10 [ 53.355226][ T28] audit: type=1400 audit(309.362:1869): avc: denied { setopt } for pid=2214 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.410798][ T2221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.413048][ T28] audit: type=1400 audit(309.402:1870): avc: denied { write } for pid=2214 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.448258][ T28] audit: type=1400 audit(309.412:1871): avc: denied { mounton } for pid=2219 comm="syz.2.823" path="/144/file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.488691][ T2230] syz.3.827[2230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.488775][ T2230] syz.3.827[2230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.506466][ T1869] kernel write not supported for file /uinput (pid: 1869 comm: kworker/0:4) [ 53.766829][ T2259] Illegal XDP return value 4294967294 on prog (id 253) dev N/A, expect packet loss! [ 53.928889][ T2280] loop2: detected capacity change from 0 to 1024 [ 53.979091][ T2280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.008057][ T2290] loop1: detected capacity change from 0 to 2048 [ 54.025451][ T284] EXT4-fs (loop2): unmounting filesystem. [ 54.044429][ T2290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.059791][ T2296] loop2: detected capacity change from 0 to 512 [ 54.067584][ T2296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.076513][ T2290] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.112217][ T2290] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 54.122220][ T2296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.126698][ T2290] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.126698][ T2290] [ 54.145897][ T2300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.153155][ T2300] IPv6: NLM_F_CREATE should be set when creating new route [ 54.158930][ T2301] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.160412][ T2300] IPv6: NLM_F_CREATE should be set when creating new route [ 54.172768][ T2301] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.172768][ T2301] [ 54.180585][ T2290] EXT4-fs (loop1): Total free blocks count 0 [ 54.191022][ T2301] EXT4-fs (loop1): Total free blocks count 0 [ 54.202285][ T2301] EXT4-fs (loop1): Free/Dirty block details [ 54.202383][ T2290] EXT4-fs (loop1): Free/Dirty block details [ 54.218472][ T2290] EXT4-fs (loop1): free_blocks=2415919504 [ 54.230319][ T284] EXT4-fs (loop2): unmounting filesystem. [ 54.362373][ T2322] device bridge1 entered promiscuous mode [ 54.465630][ T6] tipc: Node number set to 2886997007 [ 54.501890][ T2339] loop1: detected capacity change from 0 to 256 [ 54.557852][ T2339] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 54.598702][ T2345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.605740][ T1869] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 54.653627][ T2347] loop0: detected capacity change from 0 to 512 [ 54.660914][ T2347] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 54.681452][ T2347] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.879: iget: bad i_size value: -67835469387268086 [ 54.683624][ T2324] loop3: detected capacity change from 0 to 40427 [ 54.699925][ T2347] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.879: couldn't read orphan inode 15 (err -117) [ 54.720955][ T2347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.750648][ T282] EXT4-fs (loop0): unmounting filesystem. [ 54.751368][ T2324] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 54.766271][ T2324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 54.778591][ T2324] F2FS-fs (loop3): invalid crc value [ 54.813096][ T2324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.845625][ T1869] usb 3-1: Using ep0 maxpacket: 16 [ 54.852143][ T2356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.881'. [ 54.853060][ T1869] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.894027][ T1869] usb 3-1: config 0 has no interface number 0 [ 54.905176][ T1869] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.922215][ T1869] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.922463][ T2324] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.942651][ T1869] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 54.949750][ T2324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.975606][ T1869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.994281][ T1869] usb 3-1: config 0 descriptor?? [ 55.129643][ T2383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 55.187338][ T2390] loop3: detected capacity change from 0 to 256 [ 55.350191][ T2406] device erspan0 entered promiscuous mode [ 55.366593][ T2406] device erspan0 left promiscuous mode [ 55.603993][ T1869] uclogic 0003:28BD:0071.0009: pen parameters not found [ 55.611255][ T1869] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 55.622671][ T1869] usb 3-1: USB disconnect, device number 6 [ 55.635706][ T290] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 55.826811][ T290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.829296][ T2428] loop1: detected capacity change from 0 to 512 [ 55.838195][ T290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.854184][ T290] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 55.863736][ T290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.863839][ T2428] EXT4-fs: Ignoring removed orlov option [ 55.872903][ T290] usb 1-1: config 0 descriptor?? [ 55.885785][ T2428] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.892244][ T2428] EXT4-fs error (device loop1): ext4_find_extent:900: inode #4: comm syz.1.911: inode has invalid extent depth: 7 [ 55.904747][ T2428] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.919446][ T2428] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 55.926481][ T2428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.937057][ T2428] EXT4-fs (loop1): unmounting filesystem. [ 55.945622][ T39] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 56.125627][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 56.132056][ T39] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 56.140269][ T39] usb 4-1: config 0 has no interface number 0 [ 56.146517][ T39] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.157765][ T39] usb 4-1: config 0 interface 85 has no altsetting 0 [ 56.166141][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 56.176042][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.184138][ T39] usb 4-1: Product: syz [ 56.188679][ T39] usb 4-1: Manufacturer: syz [ 56.193375][ T39] usb 4-1: SerialNumber: syz [ 56.199240][ T39] usb 4-1: config 0 descriptor?? [ 56.285516][ T290] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 56.295719][ T290] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input12 [ 56.332782][ T2446] loop2: detected capacity change from 0 to 1024 [ 56.343440][ T2446] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 56.353270][ T2446] EXT4-fs (loop2): can't mount with commit=3, fs mounted w/o journal [ 56.379741][ T290] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 56.388716][ T2448] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 56.514893][ T2457] syz_tun: refused to change device tx_queue_len [ 56.541216][ T2461] loop4: detected capacity change from 0 to 1024 [ 56.567757][ T2461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.586814][ T2461] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.926: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 56.621507][ T6] usb 4-1: USB disconnect, device number 6 [ 56.629801][ T286] EXT4-fs (loop4): unmounting filesystem. [ 56.715277][ T1869] usb 1-1: USB disconnect, device number 5 [ 57.025626][ T855] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 57.165707][ T2513] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.207151][ T855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.209408][ T2517] loop3: detected capacity change from 0 to 512 [ 57.218528][ T855] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.218561][ T855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.229590][ T855] usb 3-1: config 0 descriptor?? [ 57.256645][ T2517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.309475][ T285] EXT4-fs (loop3): unmounting filesystem. [ 57.672218][ T855] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 57.687265][ T855] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input13 [ 57.725248][ T2532] SELinux: failed to load policy [ 57.749488][ T2534] loop4: detected capacity change from 0 to 512 [ 57.768442][ T2534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.778938][ T855] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 57.795450][ T2534] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.958: casefold flag without casefold feature [ 57.825641][ T2534] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.958: couldn't read orphan inode 15 (err -117) [ 57.845760][ T2534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.878530][ T2534] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.958: directory missing '.' [ 57.912835][ T286] EXT4-fs (loop4): unmounting filesystem. [ 57.967649][ T2542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 57.996534][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 57.996568][ T28] audit: type=1400 audit(314.012:1890): avc: denied { mount } for pid=2543 comm="syz.1.962" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 58.097675][ T1869] usb 3-1: USB disconnect, device number 7 [ 58.114409][ T28] audit: type=1400 audit(314.122:1891): avc: denied { mount } for pid=2550 comm="syz.4.965" name="/" dev="configfs" ino=10311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.163115][ T28] audit: type=1400 audit(314.122:1892): avc: denied { setattr } for pid=2550 comm="syz.4.965" name="/" dev="configfs" ino=10311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.186790][ T28] audit: type=1400 audit(314.122:1893): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.215047][ T28] audit: type=1326 audit(314.162:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2552 comm="syz.1.966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8376d8e929 code=0x0 [ 58.245985][ T28] audit: type=1400 audit(314.172:1895): avc: denied { read } for pid=2553 comm="syz.4.967" path="socket:[26212]" dev="sockfs" ino=26212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.319225][ T2566] syz.0.972[2566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.319307][ T2566] syz.0.972[2566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.334589][ T2566] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 58.358612][ T2566] SELinux: failed to load policy [ 58.395925][ T2576] loop4: detected capacity change from 0 to 256 [ 58.474519][ T28] audit: type=1400 audit(314.482:1896): avc: denied { name_bind } for pid=2582 comm="syz.3.980" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.520425][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 58.521019][ T28] audit: type=1400 audit(314.522:1897): avc: denied { node_bind } for pid=2582 comm="syz.3.980" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 58.549884][ T28] audit: type=1400 audit(314.532:1898): avc: denied { read } for pid=2588 comm="syz.4.983" path="socket:[26269]" dev="sockfs" ino=26269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.670412][ T28] audit: type=1400 audit(314.682:1899): avc: denied { write } for pid=2608 comm="syz.4.992" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 58.718820][ T2613] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.726677][ T2613] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.871152][ T2630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'. [ 58.926706][ T2632] loop0: detected capacity change from 0 to 128 [ 58.954587][ T2632] EXT4-fs: Ignoring removed nobh option [ 58.986060][ T2632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.029035][ T2638] loop1: detected capacity change from 0 to 2048 [ 59.076571][ T282] EXT4-fs (loop0): unmounting filesystem. [ 59.146496][ T2624] loop2: detected capacity change from 0 to 40427 [ 59.186886][ T2624] F2FS-fs (loop2): fault_injection options not supported [ 59.198449][ T2624] F2FS-fs (loop2): invalid crc value [ 59.221429][ T2624] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.294144][ T2658] loop3: detected capacity change from 0 to 512 [ 59.324951][ T2658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.346690][ T2662] loop1: detected capacity change from 0 to 512 [ 59.347719][ T2624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.381054][ T2658] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.400769][ T2658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 59.409611][ T284] syz-executor: attempt to access beyond end of device [ 59.409611][ T284] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 59.414747][ T2658] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.430872][ T2662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.431489][ T2658] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 59.454743][ T2658] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 59.475715][ T2658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1014: bg 0: block 40: padding at end of block bitmap is not set [ 59.491202][ T2658] EXT4-fs (loop3): Remounting filesystem read-only [ 59.498071][ T2658] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 59.515600][ T2658] EXT4-fs (loop3): Remounting filesystem read-only [ 59.522457][ T2658] EXT4-fs (loop3): 1 truncate cleaned up [ 59.535593][ T2658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.535974][ T565] EXT4-fs (loop1): unmounting filesystem. [ 59.608967][ T2658] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1014: bad symlink. [ 59.635195][ T2658] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1014: bad symlink. [ 59.686603][ T2658] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1014: bad symlink. [ 59.734084][ T285] EXT4-fs (loop3): unmounting filesystem. [ 59.838296][ T39] kernel write not supported for file /input/event2 (pid: 39 comm: kworker/1:1) [ 59.876705][ T2713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1039'. [ 59.904799][ T2718] loop4: detected capacity change from 0 to 512 [ 59.918799][ T2723] loop0: detected capacity change from 0 to 128 [ 59.932050][ T2713] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1039'. [ 59.942999][ T2713] netlink: 'syz.1.1039': attribute type 5 has an invalid length. [ 59.955905][ T2718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.973110][ T2713] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1039'. [ 59.981440][ T2718] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.995833][ T2718] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 60.011916][ T2718] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.018446][ T2718] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.035726][ T2718] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 60.065324][ T2718] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1041: bg 0: block 40: padding at end of block bitmap is not set [ 60.083613][ T2718] EXT4-fs (loop4): Remounting filesystem read-only [ 60.090878][ T2718] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 60.106169][ T2718] EXT4-fs (loop4): Remounting filesystem read-only [ 60.114084][ T2718] EXT4-fs (loop4): 1 truncate cleaned up [ 60.140280][ T2718] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1041: bad symlink. [ 60.196117][ T2749] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1041: bad symlink. [ 60.297781][ T2718] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1041: bad symlink. [ 60.443684][ T2777] pim6reg0: tun_chr_ioctl cmd 35111 [ 60.471298][ T2782] loop4: detected capacity change from 0 to 512 [ 60.491341][ T2786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1067'. [ 60.501046][ T2786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 60.513370][ T2782] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #4: comm syz.4.1065: corrupted inode contents [ 60.543910][ T2782] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.1065: mark_inode_dirty error [ 60.582469][ T2782] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #4: comm syz.4.1065: corrupted inode contents [ 60.647107][ T2803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 60.656303][ T2782] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.1065: mark_inode_dirty error [ 60.688275][ T2807] loop0: detected capacity change from 0 to 512 [ 60.705016][ T2782] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.1065: Failed to acquire dquot type 1 [ 60.749130][ T2807] ext4: Unknown parameter 'permit_directio' [ 62.001566][ T2831] devpts: called with bogus options [ 62.238177][ T2837] loop4: detected capacity change from 0 to 16 [ 62.254594][ T2837] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 62.350871][ T2848] loop1: detected capacity change from 0 to 256 [ 62.361657][ T2829] loop3: detected capacity change from 0 to 40427 [ 62.405621][ T2829] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 62.423357][ T2829] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.455824][ T2829] F2FS-fs (loop3): invalid crc value [ 62.487758][ T2861] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1099'. [ 62.516633][ T2829] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.568963][ T2872] loop1: detected capacity change from 0 to 128 [ 62.622091][ T2829] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 62.635720][ T2829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.710164][ T2859] loop0: detected capacity change from 0 to 40427 [ 62.739376][ T2859] F2FS-fs (loop0): heap/no_heap options were deprecated [ 62.757428][ T2882] loop2: detected capacity change from 0 to 128 [ 62.764437][ T2859] F2FS-fs (loop0): invalid crc value [ 62.776906][ T2859] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.805949][ T2882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.825908][ T2882] FAT-fs (loop2): Filesystem has been set read-only [ 62.849277][ T2882] syz.2.1108: attempt to access beyond end of device [ 62.849277][ T2882] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 62.864864][ T285] syz-executor: attempt to access beyond end of device [ 62.864864][ T285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.881434][ T2859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.881869][ T2882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.915677][ T2882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.940783][ T2882] syz.2.1108: attempt to access beyond end of device [ 62.940783][ T2882] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.984622][ T2882] syz.2.1108: attempt to access beyond end of device [ 62.984622][ T2882] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.001503][ T282] syz-executor: attempt to access beyond end of device [ 63.001503][ T282] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.193866][ T2899] input: syz1 as /devices/virtual/input/input15 [ 63.231932][ T311] udevd[311]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 63.354787][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 63.354804][ T28] audit: type=1400 audit(319.362:1925): avc: denied { write } for pid=2914 comm="syz.2.1121" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.383995][ T2917] loop3: detected capacity change from 0 to 4096 [ 63.439525][ T2917] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 63.480238][ T28] audit: type=1400 audit(319.412:1926): avc: denied { open } for pid=2914 comm="syz.2.1121" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.504895][ T28] audit: type=1400 audit(319.412:1927): avc: denied { ioctl } for pid=2914 comm="syz.2.1121" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.592840][ T2937] loop0: detected capacity change from 0 to 512 [ 63.736905][ T2953] loop1: detected capacity change from 0 to 1024 [ 63.744738][ T2953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.772324][ T2953] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.1139: missing EA_INODE flag [ 63.784229][ T2953] EXT4-fs (loop1): Remounting filesystem read-only [ 63.790996][ T2953] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1139: error while reading EA inode 11 err=-117 [ 63.808132][ T2953] EXT4-fs (loop1): Remounting filesystem read-only [ 63.816184][ T2953] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.1139: missing EA_INODE flag [ 63.828093][ T2953] EXT4-fs (loop1): Remounting filesystem read-only [ 63.835429][ T2953] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1139: error while reading EA inode 11 err=-117 [ 63.843391][ T2965] binder: 2964:2965 ioctl c0306201 200000000480 returned -14 [ 63.848000][ T28] audit: type=1400 audit(319.852:1928): avc: denied { set_context_mgr } for pid=2964 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.876226][ T2953] EXT4-fs (loop1): Remounting filesystem read-only [ 63.895655][ T6] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 63.904424][ T565] EXT4-fs unmount: 10 callbacks suppressed [ 63.904442][ T565] EXT4-fs (loop1): unmounting filesystem. [ 64.076715][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.087229][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.120623][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.137450][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.154310][ T6] usb 3-1: Product: syz [ 64.163943][ T6] usb 3-1: Manufacturer: syz [ 64.174082][ T6] usb 3-1: SerialNumber: syz [ 64.183151][ T28] audit: type=1400 audit(320.192:1929): avc: denied { map } for pid=3004 comm="syz.4.1160" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 64.331903][ T2999] loop1: detected capacity change from 0 to 40427 [ 64.348639][ T2999] F2FS-fs (loop1): fault_injection options not supported [ 64.356198][ T2999] F2FS-fs (loop1): heap/no_heap options were deprecated [ 64.357200][ T282] EXT4-fs (loop0): unmounting filesystem. [ 64.363387][ T2999] F2FS-fs (loop1): Image doesn't support compression [ 64.379835][ T2999] F2FS-fs (loop1): invalid crc value [ 64.407758][ T2999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.436789][ T3019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1165'. [ 64.481604][ T2999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.556481][ T3032] tipc: Enabling of bearer rejected, failed to enable media [ 64.565609][ T565] syz-executor: attempt to access beyond end of device [ 64.565609][ T565] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 64.617921][ T6] usb 3-1: 0:2 : does not exist [ 64.723132][ T28] audit: type=1400 audit(320.732:1930): avc: denied { append } for pid=3043 comm="syz.1.1172" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.745811][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 64.941533][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 64.953006][ T39] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 64.966130][ T39] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 64.974877][ T39] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 64.984535][ T39] usb 1-1: config 250 has no interface number 0 [ 64.996047][ T39] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 65.005688][ T3062] netlink: 'syz.1.1185': attribute type 4 has an invalid length. [ 65.008251][ T39] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 65.024784][ T6] usb 3-1: USB disconnect, device number 9 [ 65.026461][ T39] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 256 [ 65.044255][ T39] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 65.059211][ T39] usb 1-1: config 250 interface 228 has no altsetting 0 [ 65.074336][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 65.093897][ T39] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 65.107328][ T3066] loop1: detected capacity change from 0 to 512 [ 65.114065][ T39] usb 1-1: Product: syz [ 65.118784][ T39] usb 1-1: SerialNumber: syz [ 65.125198][ T39] hub 1-1:250.228: bad descriptor, ignoring hub [ 65.132701][ T39] hub: probe of 1-1:250.228 failed with error -5 [ 65.140263][ T3066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.150539][ T3066] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.159076][ T3066] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 65.168774][ T3066] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 65.178396][ T3066] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1187: Failed to acquire dquot type 1 [ 65.190520][ T3066] EXT4-fs (loop1): 1 truncate cleaned up [ 65.197450][ T3066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.232394][ T28] audit: type=1400 audit(321.242:1931): avc: denied { remount } for pid=3065 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.254797][ T3066] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 65.266791][ T3066] EXT4-fs warning (device loop1): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 65.266791][ T3066] [ 65.290815][ T565] EXT4-fs (loop1): unmounting filesystem. [ 65.326460][ T39] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 65.502254][ T28] audit: type=1400 audit(321.512:1932): avc: denied { mount } for pid=3078 comm="syz.1.1193" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.666139][ C1] usblp0: nonzero read bulk status received: -71 [ 65.681220][ T3090] tipc: Started in network mode [ 65.686713][ T3090] tipc: Node identity ac141425, cluster identity 4711 [ 65.693628][ T3090] tipc: New replicast peer: 0.0.0.0 [ 65.699427][ T290] usb 1-1: USB disconnect, device number 6 [ 65.706711][ T3090] tipc: Enabled bearer , priority 10 [ 65.714275][ T290] usblp0: removed [ 65.718178][ T3090] tipc: New replicast peer: 172.20.20.170 [ 65.719179][ T3092] loop1: detected capacity change from 0 to 256 [ 65.737795][ T3092] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 65.878695][ T3108] loop4: detected capacity change from 0 to 512 [ 65.887131][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 65.926400][ T3108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.000170][ T3119] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 66.076724][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.095855][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.113505][ T39] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.132447][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.151524][ T39] usb 4-1: config 0 descriptor?? [ 66.342452][ T3146] loop0: detected capacity change from 0 to 256 [ 66.343341][ T3145] 9p: Unknown uid 00000000004294967295 [ 66.369194][ T3146] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 66.569699][ T39] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 66.585064][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input16 [ 66.668653][ T286] EXT4-fs (loop4): unmounting filesystem. [ 66.680443][ T39] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 66.741898][ T3152] loop0: detected capacity change from 0 to 40427 [ 66.751514][ T3152] F2FS-fs (loop0): fault_injection options not supported [ 66.768250][ T3152] F2FS-fs (loop0): heap/no_heap options were deprecated [ 66.785950][ T3152] F2FS-fs (loop0): Image doesn't support compression [ 66.835649][ T39] tipc: Node number set to 2886997029 [ 66.841635][ T3152] F2FS-fs (loop0): invalid crc value [ 66.866215][ T3152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.946531][ T3152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.015951][ T39] usb 4-1: USB disconnect, device number 7 [ 67.047741][ T282] syz-executor: attempt to access beyond end of device [ 67.047741][ T282] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 67.238778][ T3181] tipc: Started in network mode [ 67.243779][ T3181] tipc: Node identity ac141425, cluster identity 4711 [ 67.258491][ T3181] tipc: New replicast peer: 0.0.0.0 [ 67.264895][ T3181] tipc: Enabled bearer , priority 10 [ 67.274497][ T3181] tipc: New replicast peer: 172.20.20.170 [ 67.395744][ T291] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 67.460348][ T3200] loop4: detected capacity change from 0 to 256 [ 67.472429][ T3200] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 67.485062][ T3200] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 67.519146][ T3203] tipc: Enabling of bearer rejected, media not registered [ 67.557565][ T3207] netlink: 'syz.4.1248': attribute type 4 has an invalid length. [ 67.600878][ T291] usb 3-1: Using ep0 maxpacket: 16 [ 67.612172][ T291] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 67.628337][ T3218] syz.4.1251[3218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.628417][ T3218] syz.4.1251[3218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.628631][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.665020][ T291] usb 3-1: config 0 descriptor?? [ 67.985633][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 68.077759][ T291] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 68.165579][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 68.171963][ T39] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 68.181131][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.190232][ T39] usb 2-1: config 0 descriptor?? [ 68.385617][ T6] tipc: Node number set to 2886997029 [ 68.478051][ T291] lenovo 0003:17EF:6047.000D: Failed to switch middle button: -71 [ 68.486441][ T291] lenovo 0003:17EF:6047.000D: Fn-lock setting failed: -71 [ 68.494387][ T291] lenovo 0003:17EF:6047.000D: Sensitivity setting failed: -71 [ 68.504463][ T291] usb 3-1: USB disconnect, device number 10 [ 68.538842][ T3231] fido_id[3231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 68.602095][ T39] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 69.020593][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 69.020619][ T28] audit: type=1400 audit(325.032:1939): avc: denied { execute_no_trans } for pid=3233 comm="syz.0.1268" path="/253/file0" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.075033][ T3240] loop0: detected capacity change from 0 to 512 [ 69.114100][ T3240] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.140862][ T3240] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #2: comm syz.0.1260: corrupted inode contents [ 69.153607][ T3240] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.1260: mark_inode_dirty error [ 69.170636][ T3240] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #2: comm syz.0.1260: corrupted inode contents [ 69.183026][ T3240] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1260: mark_inode_dirty error [ 69.201796][ T39] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71 [ 69.217682][ T39] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 69.222023][ T28] audit: type=1400 audit(325.232:1940): avc: denied { rename } for pid=3239 comm="syz.0.1260" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.248584][ T39] usb 2-1: USB disconnect, device number 5 [ 69.259585][ T282] EXT4-fs (loop0): unmounting filesystem. [ 69.293200][ T3250] fido_id[3250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 69.315736][ T291] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 69.380392][ T28] audit: type=1400 audit(325.392:1941): avc: denied { name_bind } for pid=3256 comm="syz.3.1265" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 69.400095][ T3259] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.415829][ T3259] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.431130][ T3259] overlayfs: conflicting lowerdir path [ 69.473287][ T3261] loop0: detected capacity change from 0 to 512 [ 69.496032][ T3261] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.1267: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 69.516175][ T3261] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1267: couldn't read orphan inode 15 (err -117) [ 69.529673][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.539781][ T3264] loop3: detected capacity change from 0 to 2048 [ 69.541064][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.547110][ T3261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.558751][ T291] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.575174][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.597793][ T3264] Alternate GPT is invalid, using primary GPT. [ 69.604253][ T3264] loop3: p2 p3 p7 [ 69.605221][ T282] EXT4-fs (loop0): unmounting filesystem. [ 69.612286][ T291] usb 3-1: config 0 descriptor?? [ 69.708049][ T447] udevd[447]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 69.710849][ T311] udevd[311]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 69.720326][ T449] udevd[449]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 69.767416][ T3268] SELinux: failed to load policy [ 69.875105][ T28] audit: type=1400 audit(325.882:1942): avc: denied { setopt } for pid=3291 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.912812][ T3296] loop0: detected capacity change from 0 to 1024 [ 69.927810][ T3296] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.950339][ T3296] EXT4-fs (loop0): group descriptors corrupted! [ 70.022036][ T291] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 70.025693][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.034279][ T291] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input17 [ 70.164128][ T291] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 70.235656][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 70.243549][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.283998][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.297060][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 70.314136][ T39] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 70.327492][ T3312] loop0: detected capacity change from 0 to 256 [ 70.347290][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.371137][ T39] usb 2-1: config 0 descriptor?? [ 70.377121][ T3312] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 70.398077][ T3312] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 70.445177][ T3316] bridge0: port 3(syz_tun) entered blocking state [ 70.456232][ T3316] bridge0: port 3(syz_tun) entered disabled state [ 70.464518][ T3316] device syz_tun entered promiscuous mode [ 70.492840][ T6] usb 3-1: USB disconnect, device number 11 [ 70.516342][ T3320] loop4: detected capacity change from 0 to 128 [ 70.547460][ T311] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.554220][ T3325] loop0: detected capacity change from 0 to 512 [ 70.565490][ T3325] ext3: Unknown parameter 'fowner>00000000000000000000' [ 70.681119][ T3335] netlink: 'syz.0.1300': attribute type 12 has an invalid length. [ 70.744127][ T28] audit: type=1400 audit(326.752:1943): avc: denied { bpf } for pid=3345 comm="syz.0.1305" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.781132][ T28] audit: type=1400 audit(326.752:1944): avc: denied { map_create } for pid=3345 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.803123][ T39] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 70.828859][ T28] audit: type=1400 audit(326.752:1945): avc: denied { map_read map_write } for pid=3345 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.850679][ T28] audit: type=1400 audit(326.752:1946): avc: denied { prog_load } for pid=3345 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.869948][ T28] audit: type=1400 audit(326.752:1947): avc: denied { perfmon } for pid=3345 comm="syz.0.1305" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.890924][ T28] audit: type=1400 audit(326.752:1948): avc: denied { prog_run } for pid=3345 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.940605][ T3354] loop0: detected capacity change from 0 to 1024 [ 70.970712][ T3354] EXT4-fs: Ignoring removed oldalloc option [ 70.985815][ T3354] EXT4-fs: Ignoring removed orlov option [ 71.033862][ T39] usb 2-1: USB disconnect, device number 6 [ 71.061324][ T3354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.104146][ T282] EXT4-fs (loop0): unmounting filesystem. [ 71.108010][ T3366] netlink: 'syz.4.1316': attribute type 12 has an invalid length. [ 71.335625][ T290] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 71.425646][ T855] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 71.525594][ T290] usb 4-1: Using ep0 maxpacket: 16 [ 71.532346][ T290] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.551160][ T290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.575189][ T290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.587395][ T290] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.597689][ T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.607441][ T290] usb 4-1: Product: syz [ 71.617295][ T290] usb 4-1: Manufacturer: syz [ 71.622288][ T290] usb 4-1: SerialNumber: syz [ 71.639458][ T855] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 71.657469][ T855] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.664387][ T855] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 71.674251][ T855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.692583][ T855] usb 3-1: config 0 descriptor?? [ 71.701512][ T3377] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.749673][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 71.874435][ T3418] loop1: detected capacity change from 0 to 128 [ 71.885278][ T3418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 71.887427][ T102] udevd[102]: worker [3275] terminated by signal 33 (Unknown signal 33) [ 71.893726][ T3418] System zones: 1-3, 19-19, 35-36 [ 71.902984][ T102] udevd[102]: worker [3275] failed while handling '/devices/virtual/block/loop1' [ 71.914293][ T3418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.944289][ T102] udevd[102]: worker [447] terminated by signal 33 (Unknown signal 33) [ 71.949501][ T3418] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 469864759 (only 1 groups) [ 71.952810][ T102] udevd[102]: worker [447] failed while handling '/devices/virtual/block/loop1' [ 71.980433][ T565] EXT4-fs (loop1): unmounting filesystem. [ 71.991792][ T3423] loop0: detected capacity change from 0 to 1024 [ 71.998799][ T3423] EXT4-fs: Ignoring removed bh option [ 72.009543][ T3423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.016458][ T102] udevd[102]: worker [1647] terminated by signal 33 (Unknown signal 33) [ 72.021147][ T3425] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.030154][ T102] udevd[102]: worker [1647] failed while handling '/devices/virtual/block/loop0' [ 72.049388][ T290] usb 4-1: 0:2 : does not exist [ 72.057893][ T3423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.075836][ T102] udevd[102]: worker [449] terminated by signal 33 (Unknown signal 33) [ 72.077975][ T3423] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 72.131328][ T282] EXT4-fs (loop0): unmounting filesystem. [ 72.134413][ T855] uclogic 0003:28BD:0078.0011: interface is invalid, ignoring [ 72.164489][ T3434] loop0: detected capacity change from 0 to 256 [ 72.336939][ T855] usb 3-1: USB disconnect, device number 12 [ 72.387372][ T3456] device ip6gre1 entered promiscuous mode [ 72.621654][ T3479] loop0: detected capacity change from 0 to 1024 [ 72.630583][ T3479] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.641991][ T3479] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.657644][ T290] usb 4-1: USB disconnect, device number 8 [ 72.663755][ T3479] JBD2: no valid journal superblock found [ 72.664683][ T308] printk: udevd: 4 output lines suppressed due to ratelimiting [ 72.677781][ T3479] EXT4-fs (loop0): error loading journal [ 72.894728][ T3498] netlink: 'syz.4.1373': attribute type 12 has an invalid length. [ 72.913308][ T3498] netlink: 'syz.4.1373': attribute type 29 has an invalid length. [ 72.922290][ T3498] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1373'. [ 72.937028][ T3498] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 72.981243][ T3504] loop4: detected capacity change from 0 to 1024 [ 72.995115][ T3504] EXT4-fs: Ignoring removed bh option [ 73.002492][ T3504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.038091][ T3504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.055715][ T3504] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 73.137599][ T286] EXT4-fs (loop4): unmounting filesystem. [ 73.293009][ T3531] loop2: detected capacity change from 0 to 512 [ 73.336586][ T3531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.376006][ T284] EXT4-fs (loop2): unmounting filesystem. [ 73.483593][ T3524] loop3: detected capacity change from 0 to 40427 [ 73.492901][ T3524] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 73.509810][ T3524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 73.519731][ T3524] F2FS-fs (loop3): invalid crc value [ 73.535078][ T3524] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 73.593116][ T3524] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 73.617807][ T3524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.672598][ T3524] syz.3.1383: attempt to access beyond end of device [ 73.672598][ T3524] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 73.693455][ T3524] syz.3.1383: attempt to access beyond end of device [ 73.693455][ T3524] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 73.724533][ T285] syz-executor: attempt to access beyond end of device [ 73.724533][ T285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.748701][ T3560] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.759331][ T3562] loop1: detected capacity change from 0 to 1024 [ 73.766057][ T3560] FAT-fs (loop9): unable to read boot sector [ 73.766535][ T3562] EXT4-fs: Ignoring removed bh option [ 73.790116][ T3562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.827891][ T3562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.886105][ T3562] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 74.006331][ T565] EXT4-fs (loop1): unmounting filesystem. [ 74.050326][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 74.050343][ T28] audit: type=1400 audit(330.062:2027): avc: denied { create } for pid=3579 comm="syz.1.1402" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.108678][ T28] audit: type=1400 audit(330.062:2028): avc: denied { map } for pid=3579 comm="syz.1.1402" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.185705][ T28] audit: type=1400 audit(330.062:2029): avc: denied { read write } for pid=3579 comm="syz.1.1402" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.251619][ T28] audit: type=1400 audit(330.072:2030): avc: denied { mounton } for pid=3579 comm="syz.1.1402" path="/258/file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.314622][ T28] audit: type=1400 audit(330.072:2031): avc: denied { write } for pid=855 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31326 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.363379][ T3599] loop2: detected capacity change from 0 to 2048 [ 74.434324][ T3599] GPT:first_usable_lbas don't match. [ 74.442593][ T3599] GPT:34 != 290 [ 74.446188][ T3599] GPT: Use GNU Parted to correct GPT errors. [ 74.452880][ T3599] loop2: p1 p2 p3 [ 74.456752][ T28] audit: type=1400 audit(330.462:2032): avc: denied { name_bind } for pid=3615 comm="syz.1.1421" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.575664][ T28] audit: type=1400 audit(330.582:2033): avc: denied { getopt } for pid=3613 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.606639][ T3623] netlink: 'syz.0.1424': attribute type 5 has an invalid length. [ 74.656427][ T28] audit: type=1400 audit(330.672:2034): avc: denied { create } for pid=3628 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.685708][ T28] audit: type=1400 audit(330.672:2035): avc: denied { create } for pid=3630 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.724452][ T28] audit: type=1400 audit(330.672:2036): avc: denied { write } for pid=3630 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.877771][ T3659] loop0: detected capacity change from 0 to 256 [ 74.898324][ T3659] FAT-fs (loop0): Directory bread(block 64) failed [ 74.905826][ T3659] FAT-fs (loop0): Directory bread(block 65) failed [ 74.920658][ T3659] FAT-fs (loop0): Directory bread(block 66) failed [ 74.927625][ T3659] FAT-fs (loop0): Directory bread(block 67) failed [ 74.936120][ T3659] FAT-fs (loop0): Directory bread(block 68) failed [ 74.946760][ T3659] FAT-fs (loop0): Directory bread(block 69) failed [ 74.954072][ T3659] FAT-fs (loop0): Directory bread(block 70) failed [ 74.961026][ T3659] FAT-fs (loop0): Directory bread(block 71) failed [ 74.967856][ T3659] FAT-fs (loop0): Directory bread(block 72) failed [ 74.980709][ T3659] FAT-fs (loop0): Directory bread(block 73) failed [ 75.142299][ T3679] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1448'. [ 75.177705][ T3667] loop2: detected capacity change from 0 to 40427 [ 75.185437][ T3667] F2FS-fs (loop2): invalid crc value [ 75.192802][ T3667] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.249534][ T3667] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 75.268274][ T3694] loop0: detected capacity change from 0 to 512 [ 75.299691][ T3694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.311816][ T284] syz-executor: attempt to access beyond end of device [ 75.311816][ T284] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 75.326619][ T284] syz-executor: attempt to access beyond end of device [ 75.326619][ T284] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 75.329230][ T282] EXT4-fs (loop0): unmounting filesystem. [ 75.341432][ T284] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 75.346927][ T284] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 75.371621][ T3703] loop4: detected capacity change from 0 to 4096 [ 75.387437][ T3703] EXT4-fs (loop4): Test dummy encryption mode enabled [ 75.405084][ T3703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.643839][ T286] EXT4-fs (loop4): unmounting filesystem. [ 75.649720][ T3730] input: syz0 as /devices/virtual/input/input19 [ 75.663109][ T3732] loop0: detected capacity change from 0 to 1024 [ 75.687762][ T3732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.714434][ T282] EXT4-fs (loop0): unmounting filesystem. [ 75.835575][ T855] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 75.955759][ T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.028298][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.030064][ T3765] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1480'. [ 76.040212][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.059531][ T855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.075330][ T855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.084880][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.095964][ T855] usb 4-1: config 0 descriptor?? [ 76.135592][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 76.142146][ T6] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 76.151783][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.161857][ T6] usb 5-1: config 0 descriptor?? [ 76.504688][ T855] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x6 [ 76.512860][ T855] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 76.523298][ T855] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.572397][ T6] lenovo 0003:17EF:6047.0013: hidraw1: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 76.776425][ T291] usb 4-1: USB disconnect, device number 9 [ 77.172582][ T6] lenovo 0003:17EF:6047.0013: Fn-lock setting failed: -71 [ 77.180046][ T6] lenovo 0003:17EF:6047.0013: Sensitivity setting failed: -71 [ 77.188444][ T6] usb 5-1: USB disconnect, device number 7 [ 77.400262][ T3820] loop1: detected capacity change from 0 to 1024 [ 77.407654][ T3820] EXT4-fs: Ignoring removed orlov option [ 77.417488][ T3820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.440838][ T565] EXT4-fs (loop1): unmounting filesystem. [ 77.540183][ T3836] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1513'. [ 77.549829][ T3836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 77.572787][ T3841] input: syz1 as /devices/virtual/input/input20 [ 77.858514][ T3862] loop2: detected capacity change from 0 to 8192 [ 77.953878][ T3872] input: syz0 as /devices/virtual/input/input21 [ 77.992845][ T3880] binder: 3879:3880 ioctl c0306201 200000000080 returned -14 [ 78.006701][ T3882] loop2: detected capacity change from 0 to 128 [ 78.028514][ T3882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.076855][ T284] EXT4-fs (loop2): unmounting filesystem. [ 78.221221][ T3912] syz.3.1546[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.221334][ T3912] syz.3.1546[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.489195][ T6] hid-generic 0000:0004:0000.0014: item fetching failed at offset 0/3 [ 78.525836][ T6] hid-generic: probe of 0000:0004:0000.0014 failed with error -22 [ 78.585787][ T3948] loop4: detected capacity change from 0 to 4096 [ 78.595724][ T1173] Bluetooth: hci0: command 0x1003 tx timeout [ 78.602444][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.609206][ T3779] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 78.629466][ T3948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.641652][ T3948] fs-verity (loop4, inode 16): fs-verity keyring is empty, rejecting signed file! [ 78.661745][ T286] EXT4-fs (loop4): unmounting filesystem. [ 78.868836][ T3961] support for the xor transformation has been removed. [ 78.925561][ T291] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.115675][ T291] usb 1-1: Using ep0 maxpacket: 32 [ 79.122081][ T291] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.130233][ T291] usb 1-1: config 0 has no interface number 0 [ 79.137891][ T291] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.146987][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.154997][ T291] usb 1-1: Product: syz [ 79.159218][ T291] usb 1-1: Manufacturer: syz [ 79.163867][ T291] usb 1-1: SerialNumber: syz [ 79.169380][ T291] usb 1-1: config 0 descriptor?? [ 79.175131][ T291] smsc95xx v2.0.0 [ 79.215639][ T290] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.246569][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 79.246642][ T28] audit: type=1400 audit(335.252:2097): avc: denied { create } for pid=3974 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.272507][ T28] audit: type=1400 audit(335.262:2098): avc: denied { connect } for pid=3974 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.293727][ T28] audit: type=1400 audit(335.262:2099): avc: denied { write } for pid=3974 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.374357][ T3983] loop1: detected capacity change from 0 to 4096 [ 79.406720][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.425593][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.450549][ T28] audit: type=1400 audit(335.462:2100): avc: denied { mount } for pid=3982 comm="syz.1.1577" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.473261][ T290] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 79.496596][ T28] audit: type=1400 audit(335.462:2101): avc: denied { unmount } for pid=3982 comm="syz.1.1577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.513430][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.535568][ T604] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 79.543700][ T290] usb 5-1: config 0 descriptor?? [ 79.548893][ T604] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.578880][ T3992] loop1: detected capacity change from 0 to 1024 [ 79.585775][ T3992] EXT4-fs: Ignoring removed orlov option [ 79.591737][ T3992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.607612][ T3992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.623148][ T28] audit: type=1400 audit(335.632:2102): avc: denied { rename } for pid=3991 comm="syz.1.1581" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.624385][ T3988] hid-generic 0000:0000:0000.0015: pid 3988 passed too short report [ 79.661841][ T565] EXT4-fs (loop1): unmounting filesystem. [ 79.811195][ T28] audit: type=1400 audit(335.822:2103): avc: denied { mount } for pid=4008 comm="syz.3.1588" name="/" dev="ramfs" ino=32560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.849197][ T28] audit: type=1400 audit(335.862:2104): avc: denied { setopt } for pid=4010 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.869195][ T28] audit: type=1400 audit(335.872:2105): avc: denied { create } for pid=4012 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.889379][ T28] audit: type=1400 audit(335.872:2106): avc: denied { write } for pid=4012 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.941527][ T4037] loop1: detected capacity change from 0 to 512 [ 79.949753][ T4037] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.951872][ T4039] incfs: Backing dir is not set, filesystem can't be mounted. [ 79.959536][ T4037] EXT4-fs (loop1): invalid journal inode [ 79.967225][ T4039] incfs: mount failed -2 [ 79.973638][ T290] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 79.985401][ T290] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 79.997140][ T4037] EXT4-fs (loop1): can't get journal size [ 80.005012][ T4037] EXT4-fs (loop1): 1 truncate cleaned up [ 80.011049][ T4037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.013765][ T4043] loop3: detected capacity change from 0 to 512 [ 80.028355][ T4043] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.035206][ T4043] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1596: bad orphan inode 13 [ 80.045946][ T4043] ext4_test_bit(bit=12, block=18) = 1 [ 80.051554][ T4043] is_bad_inode(inode)=0 [ 80.052785][ T565] EXT4-fs (loop1): unmounting filesystem. [ 80.056455][ T4043] NEXT_ORPHAN(inode)=2130706432 [ 80.066835][ T4043] max_ino=32 [ 80.070122][ T4043] i_nlink=1 [ 80.073612][ T4043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.095381][ T4043] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 80.136346][ T4043] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1596: bg 0: block 248: padding at end of block bitmap is not set [ 80.166102][ T4043] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.1596: Failed to acquire dquot type 1 [ 80.173320][ T290] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 80.184772][ T291] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 80.209301][ T291] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 80.226832][ T4043] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.245613][ T291] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 80.257421][ T4050] loop2: detected capacity change from 0 to 1024 [ 80.264239][ T4050] EXT4-fs: Ignoring removed nobh option [ 80.269975][ T291] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 80.278671][ T291] usb 1-1: USB disconnect, device number 7 [ 80.295490][ T4050] EXT4-fs: Ignoring removed bh option [ 80.303419][ T285] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 80.316758][ T285] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 80.339977][ T4050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.369986][ T4050] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.1598: Allocating blocks 497-513 which overlap fs metadata [ 80.389415][ T290] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 80.406276][ T290] cp2112: probe of 0003:10C4:EA90.0016 failed with error -71 [ 80.422918][ T4049] EXT4-fs (loop2): pa ffff88810062c9d8: logic 1, phys. 241, len 17 [ 80.425701][ T290] usb 5-1: USB disconnect, device number 8 [ 80.431055][ T4049] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 2 [ 80.462355][ T284] EXT4-fs (loop2): unmounting filesystem. [ 80.527687][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 80.603668][ T4066] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.610994][ T604] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 80.618676][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.627129][ T4066] device bridge_slave_0 entered promiscuous mode [ 80.634865][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.642873][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.650720][ T4066] device bridge_slave_1 entered promiscuous mode [ 80.704150][ T4087] loop2: detected capacity change from 0 to 128 [ 80.712741][ T4087] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.746777][ T284] EXT4-fs (loop2): unmounting filesystem. [ 80.778803][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.786260][ T4066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.787595][ T4092] loop2: detected capacity change from 0 to 512 [ 80.793863][ T4066] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.807442][ T4066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.815788][ T604] usb 2-1: Using ep0 maxpacket: 32 [ 80.822153][ T604] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.839554][ T604] usb 2-1: config 0 has no interface number 0 [ 80.841617][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.853802][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.855198][ T604] usb 2-1: config 0 interface 184 has no altsetting 0 [ 80.866300][ T4092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.877216][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.879997][ T604] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.896244][ T43] device bridge_slave_1 left promiscuous mode [ 80.902428][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.911119][ T604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.919703][ T43] device bridge_slave_0 left promiscuous mode [ 80.920030][ T284] EXT4-fs (loop2): unmounting filesystem. [ 80.926418][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.945134][ T43] device bridge0 left promiscuous mode [ 80.951053][ T604] usb 2-1: Product: syz [ 80.955236][ T604] usb 2-1: Manufacturer: syz [ 80.960753][ T43] device veth1_macvtap left promiscuous mode [ 80.967870][ T604] usb 2-1: SerialNumber: syz [ 80.974719][ T604] usb 2-1: config 0 descriptor?? [ 80.975872][ T43] device veth0_vlan left promiscuous mode [ 80.981365][ T604] smsc75xx v1.0.0 [ 80.989727][ T4098] loop4: detected capacity change from 0 to 2048 [ 81.011714][ T4100] loop2: detected capacity change from 0 to 512 [ 81.028377][ T4100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.050562][ T4100] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.1620: corrupted inode contents [ 81.051268][ T4098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.063303][ T4100] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.1620: mark_inode_dirty error [ 81.087166][ T4100] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.1620: corrupted inode contents [ 81.099664][ T4100] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1620: mark_inode_dirty error [ 81.114454][ T4098] fs-verity: sha512 using implementation "sha512-avx2" [ 81.123354][ T4100] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #18: comm syz.2.1620: directory missing '.' [ 81.144532][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.157215][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.164329][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.174775][ T286] EXT4-fs (loop4): unmounting filesystem. [ 81.182209][ T284] EXT4-fs (loop2): unmounting filesystem. [ 81.189268][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.201455][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.208767][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.242640][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.257391][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.267284][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.272607][ T4066] device veth0_vlan entered promiscuous mode [ 81.282768][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.283255][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.283541][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.307906][ T4116] loop0: detected capacity change from 0 to 256 [ 81.320837][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.322327][ T4066] device veth1_macvtap entered promiscuous mode [ 81.342188][ T4116] FAT-fs (loop0): Directory bread(block 64) failed [ 81.342221][ T4116] FAT-fs (loop0): Directory bread(block 65) failed [ 81.342259][ T4116] FAT-fs (loop0): Directory bread(block 66) failed [ 81.342279][ T4116] FAT-fs (loop0): Directory bread(block 67) failed [ 81.342316][ T4116] FAT-fs (loop0): Directory bread(block 68) failed [ 81.342335][ T4116] FAT-fs (loop0): Directory bread(block 69) failed [ 81.342370][ T4116] FAT-fs (loop0): Directory bread(block 70) failed [ 81.342390][ T4116] FAT-fs (loop0): Directory bread(block 71) failed [ 81.342433][ T4116] FAT-fs (loop0): Directory bread(block 72) failed [ 81.342454][ T4116] FAT-fs (loop0): Directory bread(block 73) failed [ 81.351322][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.361123][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.361492][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.476173][ T4135] loop2: detected capacity change from 0 to 512 [ 81.554201][ T4135] EXT4-fs (loop2): Test dummy encryption mode enabled [ 81.554245][ T4135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.555330][ T4135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 81.584069][ T4135] System zones: 1-12 [ 81.595716][ T604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 81.595751][ T604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.597066][ T4135] EXT4-fs (loop2): 1 truncate cleaned up [ 81.597086][ T4135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.628773][ T284] EXT4-fs (loop2): unmounting filesystem. [ 81.629404][ T4148] incfs: Options parsing error. -22 [ 81.629457][ T4148] incfs: mount failed -22 [ 81.796866][ T604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.796901][ T604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 81.796924][ T604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 81.796945][ T604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 81.797014][ T604] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 81.803188][ T604] usb 2-1: USB disconnect, device number 7 [ 82.004252][ T4174] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1653'. [ 82.102829][ T4160] loop2: detected capacity change from 0 to 40427 [ 82.112620][ T4160] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.134640][ T4160] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.173180][ T4160] F2FS-fs (loop2): invalid crc value [ 82.189573][ T4160] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.246630][ T4160] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.253825][ T4160] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.127066][ T4198] Non-string source [ 84.262332][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 84.262351][ T28] audit: type=1400 audit(340.272:2127): avc: denied { setopt } for pid=4218 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.308111][ T28] audit: type=1400 audit(340.312:2128): avc: denied { bind } for pid=4218 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.351324][ T28] audit: type=1400 audit(340.322:2129): avc: denied { map } for pid=4221 comm="syz.4.1674" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.470227][ T28] audit: type=1400 audit(340.482:2130): avc: denied { append } for pid=4242 comm="syz.1.1684" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.549889][ T28] audit: type=1400 audit(340.562:2131): avc: denied { setopt } for pid=4250 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.571003][ T4253] loop1: detected capacity change from 0 to 256 [ 84.580787][ T4255] loop5: detected capacity change from 0 to 1024 [ 84.594545][ T28] audit: type=1400 audit(340.592:2132): avc: denied { bind } for pid=4250 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.598009][ T4255] EXT4-fs: Ignoring removed bh option [ 84.632876][ T4255] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.657416][ T4255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 84.678748][ T4255] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 84.708919][ T4066] EXT4-fs (loop5): unmounting filesystem. [ 84.745623][ T604] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 84.855636][ T290] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.895631][ T855] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 84.933696][ T4066] ------------[ cut here ]------------ [ 84.939444][ T4066] WARNING: CPU: 1 PID: 4066 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 84.947502][ T4066] Modules linked in: [ 84.951505][ T4066] CPU: 1 PID: 4066 Comm: syz-executor Not tainted 6.1.138-syzkaller-00056-g7af56ffc913d #0 [ 84.961549][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.972091][ T4066] RIP: 0010:drop_nlink+0xc5/0x110 [ 84.977379][ T4066] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 63 ee f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 94 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 84.997041][ T4066] RSP: 0018:ffffc90009af7c38 EFLAGS: 00010293 [ 85.003280][ T4066] RAX: ffffffff81c35c75 RBX: ffff88811b5171a8 RCX: ffff88811f485100 [ 85.011451][ T4066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.019458][ T4066] RBP: ffffc90009af7c60 R08: 0000000000000004 R09: 0000000000000003 [ 85.027473][ T4066] R10: fffff5200135ef78 R11: 1ffff9200135ef78 R12: dffffc0000000000 [ 85.035839][ T4066] R13: 1ffff110236a2e3e R14: ffff88811b5171f0 R15: 0000000000000000 [ 85.044081][ T4066] FS: 000055555f1e7500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 85.053081][ T4066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.059783][ T4066] CR2: 000055555f20a4e8 CR3: 000000012645f000 CR4: 00000000003506a0 [ 85.067897][ T4066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.075956][ T4066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.084153][ T4066] Call Trace: [ 85.087572][ T4066] [ 85.090529][ T4066] shmem_rmdir+0x5b/0x90 [ 85.091672][ T855] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 85.094798][ T4066] vfs_rmdir+0x393/0x500 [ 85.103524][ T855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.107362][ T4066] incfs_kill_sb+0x105/0x220 [ 85.117952][ T855] usb 2-1: config 0 has no interface number 0 [ 85.122277][ T4066] deactivate_locked_super+0xb5/0x120 [ 85.122314][ T4066] deactivate_super+0xaf/0xe0 [ 85.129129][ T855] usb 2-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.134242][ T4066] cleanup_mnt+0x45f/0x4e0 [ 85.134285][ T4066] __cleanup_mnt+0x19/0x20 [ 85.139492][ T855] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 85.152299][ T4066] task_work_run+0x1db/0x240 [ 85.152340][ T4066] ? __cfi_task_work_run+0x10/0x10 [ 85.158229][ T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.161821][ T4066] ? __x64_sys_umount+0x125/0x160 [ 85.161855][ T4066] ? __cfi___x64_sys_umount+0x10/0x10 [ 85.172429][ T855] usb 2-1: config 0 descriptor?? [ 85.175865][ T4066] exit_to_user_mode_loop+0x9b/0xb0 [ 85.182570][ T855] usb 2-1: MIDIStreaming interface descriptor not found [ 85.188944][ T4066] exit_to_user_mode_prepare+0x5a/0xa0 [ 85.222244][ T4066] syscall_exit_to_user_mode+0x1a/0x30 [ 85.227828][ T4066] do_syscall_64+0x58/0xa0 [ 85.232262][ T4066] ? clear_bhb_loop+0x15/0x70 [ 85.236989][ T4066] ? clear_bhb_loop+0x15/0x70 [ 85.241728][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.247701][ T4066] RIP: 0033:0x7f1af118fc57 [ 85.252223][ T4066] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 85.272831][ T4066] RSP: 002b:00007ffc4d0bd6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.282741][ T4066] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1af118fc57 [ 85.290848][ T4066] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d0bd7a0 [ 85.298972][ T4066] RBP: 00007ffc4d0bd7a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.307468][ T4066] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4d0be830 [ 85.316058][ T4066] R13: 00007f1af1210925 R14: 0000000000014ba3 R15: 00007ffc4d0be870 [ 85.325039][ T4066] [ 85.328289][ T4066] ---[ end trace 0000000000000000 ]--- [ 85.333943][ T4066] ================================================================== [ 85.337326][ T604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.342016][ T4066] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 85.353038][ T604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.359234][ T4066] Write of size 4 at addr 0000000000000170 by task syz-executor/4066 [ 85.359260][ T4066] [ 85.359266][ T4066] CPU: 0 PID: 4066 Comm: syz-executor Tainted: G W 6.1.138-syzkaller-00056-g7af56ffc913d #0 [ 85.359287][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.359299][ T4066] Call Trace: [ 85.359307][ T4066] [ 85.369860][ T604] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.377353][ T4066] __dump_stack+0x21/0x24 [ 85.377395][ T4066] dump_stack_lvl+0xee/0x150 [ 85.377421][ T4066] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.380482][ T604] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.391190][ T4066] ? ihold+0x20/0x60 [ 85.391230][ T4066] ? ihold+0x20/0x60 [ 85.391257][ T4066] print_report+0x3d/0x60 [ 85.401757][ T604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.404702][ T4066] kasan_report+0x122/0x150 [ 85.408809][ T604] usb 3-1: config 0 descriptor?? [ 85.420814][ T4066] ? ihold+0x20/0x60 [ 85.420854][ T4066] kasan_check_range+0x280/0x290 [ 85.420878][ T4066] __kasan_check_write+0x14/0x20 [ 85.435654][ T290] usb 5-1: Using ep0 maxpacket: 16 [ 85.444437][ T4066] ihold+0x20/0x60 [ 85.449695][ T290] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.452385][ T4066] vfs_rmdir+0x25f/0x500 [ 85.457231][ T290] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.465232][ T4066] incfs_kill_sb+0x105/0x220 [ 85.465270][ T4066] deactivate_locked_super+0xb5/0x120 [ 85.470236][ T290] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.474815][ T4066] deactivate_super+0xaf/0xe0 [ 85.479583][ T290] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 85.483675][ T4066] cleanup_mnt+0x45f/0x4e0 [ 85.488939][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.493814][ T4066] __cleanup_mnt+0x19/0x20 [ 85.498860][ T290] usb 5-1: config 0 descriptor?? [ 85.508474][ T4066] task_work_run+0x1db/0x240 [ 85.508512][ T4066] ? __cfi_task_work_run+0x10/0x10 [ 85.508535][ T4066] ? __x64_sys_umount+0x125/0x160 [ 85.508559][ T4066] ? __cfi___x64_sys_umount+0x10/0x10 [ 85.595353][ T4066] exit_to_user_mode_loop+0x9b/0xb0 [ 85.600695][ T4066] exit_to_user_mode_prepare+0x5a/0xa0 [ 85.606549][ T4066] syscall_exit_to_user_mode+0x1a/0x30 [ 85.612753][ T4066] do_syscall_64+0x58/0xa0 [ 85.617401][ T4066] ? clear_bhb_loop+0x15/0x70 [ 85.622190][ T4066] ? clear_bhb_loop+0x15/0x70 [ 85.626891][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.632885][ T4066] RIP: 0033:0x7f1af118fc57 [ 85.637313][ T4066] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 85.657183][ T4066] RSP: 002b:00007ffc4d0bd6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.665607][ T4066] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1af118fc57 [ 85.673766][ T4066] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d0bd7a0 [ 85.682135][ T4066] RBP: 00007ffc4d0bd7a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.690130][ T4066] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4d0be830 [ 85.698207][ T4066] R13: 00007f1af1210925 R14: 0000000000014ba3 R15: 00007ffc4d0be870 [ 85.706282][ T4066] [ 85.709320][ T4066] ================================================================== [ 85.727347][ T855] usb 2-1: USB disconnect, device number 8 [ 85.733993][ T4066] Disabling lock debugging due to kernel taint [ 85.743613][ T4066] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 85.751722][ T4066] #PF: supervisor write access in kernel mode [ 85.757929][ T4066] #PF: error_code(0x0002) - not-present page [ 85.764041][ T4066] PGD 1261e6067 P4D 1261e6067 PUD 0 [ 85.769543][ T4066] Oops: 0002 [#1] PREEMPT SMP KASAN [ 85.774769][ T4066] CPU: 0 PID: 4066 Comm: syz-executor Tainted: G B W 6.1.138-syzkaller-00056-g7af56ffc913d #0 [ 85.786239][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.796307][ T4066] RIP: 0010:ihold+0x26/0x60 [ 85.800857][ T4066] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 8c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 a0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 85.820496][ T4066] RSP: 0018:ffffc90009af7c78 EFLAGS: 00010246 [ 85.826677][ T4066] RAX: ffff88811f485100 RBX: 0000000000000000 RCX: ffff88811f485100 [ 85.829896][ T604] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 85.834845][ T4066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.834866][ T4066] RBP: ffffc90009af7c88 R08: dffffc0000000000 R09: fffffbfff0f2cafd [ 85.842433][ T604] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 85.850199][ T4066] R10: fffffbfff0f2cafd R11: 1ffffffff0f2cafc R12: ffff88811b5171b4 [ 85.850222][ T4066] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 85.850235][ T4066] FS: 000055555f1e7500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.850251][ T4066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.850265][ T4066] CR2: 0000000000000170 CR3: 000000012645f000 CR4: 00000000003506b0 [ 85.850281][ T4066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.850293][ T4066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.850306][ T4066] Call Trace: [ 85.850312][ T4066] [ 85.850322][ T4066] vfs_rmdir+0x25f/0x500 [ 85.860872][ T604] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 85.865765][ T4066] incfs_kill_sb+0x105/0x220 [ 85.865797][ T4066] deactivate_locked_super+0xb5/0x120 [ 85.865822][ T4066] deactivate_super+0xaf/0xe0 [ 85.874048][ T604] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 85.881763][ T4066] cleanup_mnt+0x45f/0x4e0 [ 85.881806][ T4066] __cleanup_mnt+0x19/0x20 [ 85.881832][ T4066] task_work_run+0x1db/0x240 [ 85.890930][ T28] audit: type=1400 audit(341.872:2133): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 85.897408][ T4066] ? __cfi_task_work_run+0x10/0x10 [ 85.897445][ T4066] ? __x64_sys_umount+0x125/0x160 [ 85.897471][ T4066] ? __cfi___x64_sys_umount+0x10/0x10 [ 85.906447][ T28] audit: type=1400 audit(341.872:2134): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.913415][ T4066] exit_to_user_mode_loop+0x9b/0xb0 [ 85.923074][ T290] chicony 0003:04F2:0418.0018: unbalanced collection at end of report description [ 85.924682][ T4066] exit_to_user_mode_prepare+0x5a/0xa0 [ 85.928145][ T290] chicony 0003:04F2:0418.0018: Chicony hid parse failed: -22 [ 85.931876][ T4066] syscall_exit_to_user_mode+0x1a/0x30 [ 85.939678][ T604] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 85.944053][ T4066] do_syscall_64+0x58/0xa0 [ 85.949589][ T28] audit: type=1400 audit(341.872:2135): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.954269][ T4066] ? clear_bhb_loop+0x15/0x70 [ 85.962028][ T604] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 85.966092][ T4066] ? clear_bhb_loop+0x15/0x70 [ 85.966125][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.970989][ T290] chicony: probe of 0003:04F2:0418.0018 failed with error -22 [ 85.975321][ T4066] RIP: 0033:0x7f1af118fc57 [ 85.997547][ T604] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 86.002143][ T4066] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 86.007587][ T28] audit: type=1400 audit(341.872:2136): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.012610][ T4066] RSP: 002b:00007ffc4d0bd6e8 EFLAGS: 00000246 [ 86.034934][ T604] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 86.038726][ T4066] ORIG_RAX: 00000000000000a6 [ 86.038739][ T4066] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1af118fc57 [ 86.038753][ T4066] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d0bd7a0 [ 86.038765][ T4066] RBP: 00007ffc4d0bd7a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.038778][ T4066] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4d0be830 [ 86.206417][ T604] usb 5-1: USB disconnect, device number 9 [ 86.207385][ T4066] R13: 00007f1af1210925 R14: 0000000000014ba3 R15: 00007ffc4d0be870 [ 86.220459][ T290] usb 3-1: USB disconnect, device number 13 [ 86.223512][ T4066] [ 86.262319][ T4066] Modules linked in: [ 86.266220][ T4066] CR2: 0000000000000170 [ 86.270376][ T4066] ---[ end trace 0000000000000000 ]--- [ 86.275836][ T4066] RIP: 0010:ihold+0x26/0x60 [ 86.280375][ T4066] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 8c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 a0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 86.300044][ T4066] RSP: 0018:ffffc90009af7c78 EFLAGS: 00010246 [ 86.306286][ T4066] RAX: ffff88811f485100 RBX: 0000000000000000 RCX: ffff88811f485100 [ 86.314279][ T4066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.322355][ T4066] RBP: ffffc90009af7c88 R08: dffffc0000000000 R09: fffffbfff0f2cafd [ 86.330336][ T4066] R10: fffffbfff0f2cafd R11: 1ffffffff0f2cafc R12: ffff88811b5171b4 [ 86.338403][ T4066] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 86.346411][ T4066] FS: 000055555f1e7500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 86.355343][ T4066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.361927][ T4066] CR2: 0000000000000170 CR3: 000000012645f000 CR4: 00000000003506b0 [ 86.369927][ T4066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.377983][ T4066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.386089][ T4066] Kernel panic - not syncing: Fatal exception [ 86.392547][ T4066] Kernel Offset: disabled [ 86.396867][ T4066] Rebooting in 86400 seconds..