last executing test programs: 4.012329661s ago: executing program 0 (id=651): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9d", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40011103, 0x0, 0xffffffffffffffb5) 3.717794068s ago: executing program 0 (id=662): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) pselect6(0x40, &(0x7f0000003d00)={0x9, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x0, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3.572417171s ago: executing program 0 (id=655): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.195565431s ago: executing program 0 (id=660): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) 3.039180265s ago: executing program 0 (id=664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x3ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) 3.002053245s ago: executing program 0 (id=665): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a05050300000000000000000000000904010000010230000904010101010230000905010920000308e20a25250200"], 0x0) 1.832519205s ago: executing program 4 (id=683): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) close(0x3) 1.481552363s ago: executing program 4 (id=691): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800412, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x1, 0x5580, &(0x7f00000008c0)="$eJzs3EtvG1UUAOAzSZPSJxFiwa4jVUiJVEd1+hDsCrTiIVpVPBaswIldy23siWLXDV2BYIlY8E8QSKxY8htYsGaHWIDYIYE8d0wp5VGwY5f2+6Txmblz58y9IyfSmbEmgEfWSv7TD1kcj0MRsRgRR7Mo17NqKV1I4amIOBERC79bsqr9t4bliDgcEcdHyVPOrNr1yanhyXPfv/Ljl18fPHDk0y++md+sgXl7OiK6O2n9VjfFop3i9aq9MeyUsXt2WMW0Y7nK0S2W0vGtzTLDrca4X6OMZ9qpf7Fzsz+K17YbW6PY7lwr23d66YT9YXucpzzgemO33G62NsvY6RdlbN9O5927nf633e4PUp5mle/dMn0MBuOY2lt7rTSfnRtl3OoNqvaUt2i29kZxWMXqdLFVbDfLcWz+9+v8oHu107u5lw9bu/1O0cvPrdefWa+fr9V3i2Zr0Dpba3Sb58/mq+3tUbfaoNXoXmgXRXu7tb5VdNfy1fbWVq1ez1cvtjY7jV5er6+fWT9dO7dWrZ3KX7zyZr7dzFdH8flO7+ZyZ7ufXyt283TEWr6xfubZtfxkPX/98tX86muXLl2++sbbF9+68tzll1+oOt0zrHx14/TGRq1+urZRX3sA5j/6g7jP+Q8mmf+HEfF+NfD7nH822eWBv+cLBvCv3VP/h/of2H+T1P/dG9V2keI86v+YZv0fEbn6/5/r34XJ6/+J6t+Z1v9Z7Mf9jwdt/jAR9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCPr26XPXipXVtL2kar9WNX0RLWdRcRCRPzyJxZj+a6ci1Wepb/ov/SHMXyVRZlhdI6D1XI4Ii5Uy8+P7/dVAAAAgIfX5++d+DhV6+ljZd4DYpbSTZuFo+9MKV8WEUsr300p28Lo48kpJSu/3wdib0rZyhtYj00pWbrldmBa2e7L4jh8cOxOYzmhLIWFmQ4HAACYicW7wmyrEAAAAGbpo3kPgPnIYvwoc/wsuPzl/Z1Hm4fu2gcAAAD8D2XzHgAAAACw78r63/v/AAAA4OGW3v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAr+zcUY4SMRwH4P/s7Oyuq0ZifPfVY/i2HMMj+OijcAAvwRHwCl6AM6BPHsGAoa3EIRAlFMcl35dMd9olv7bASzukAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5/S1m48/f3z96fbEnNX6NJWmAwAAAOyx7ObjdDPK9ael/XlpelnqTURcRcS+tXsbN73MtuR0B17f7YzhTURK2PRxW677iHhbrh8vUtcAAADAcb5tisV09pBX67kYDT0q/qW8aXP17F2lvCYiutH3Smlpx+dVpbD0/b6OD5XS0gbWXaWwvOV2vf9/N7U66WvzO9LmWpnJ3SR9iKlmvw0AAC5Q2/tzYBUCAADABXg/9AAYRrMtts8ZyykA5YHgk14NAAAAeISaoQcAAAAAnF1a//8P5/99+fP5fwAAAMBvjvmxfj7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHNadvPxYjp72Gm+/3Uz+cuc1fo0dWcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxkf95RMISBKIze/2nsJPtfrFxQbOxtzoHAxwwJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7r+PkfcansSX5dtr4dTyT/LtqLF01RteNtRfm9e547EcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDO/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNf87pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFvv37tlHFAQD/+sc5aQERAsoQQEVigIWmbmnpCAMoYuBPQIpStwRcCm0GWkWULjChzF0QjAghgcLW/6FzI3UpWwcPQUJiMzr7zr4mEQ1Rcuc2n4/07n19ebr3fc+Sla/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAud578Uo9ixvpYWYY5+fuba0tp/3mtj51Z/3+fNrSuPa4ib579+CTn2yvFl+cmBvvUfPm6PRmv98fD/qmtNwAAAB4SjXy+j4iHiQbi2lfn4notcZj0pr/x+eGcV6rbq/7N7fWprM/zef1/x+/P3xpdJGZ4TxJRFxc6XZO7UyleSgLfAI8/9gRzcHOD757aQzekPqHt17sJYP9rH1/9+77rUE4VUa2AMB+nMz7LMj/H0r7dpWJAXBkNAuFd17/N2aqzQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDL1b8Uwe1yJivjmOU5tba8u79XfW78/n7dzt2+vFa6aXSCLi4kq3k5S4lkl37fqNz5a63c7V8oMTEbHnwfVDSuPjPYyJ+I8x/X6/n+3loe/YPjahVtGbO0lBPXt/JiWfgwyyj8Y4+CtX9IEEAMBTK8laWtc/SDYW03O12Yj+T6P6fyo9vJG9+D/1/8NPzt0rzlWs/9ulrXDyLaxe/mLh2vUbb61cXrrUudT5/O3T7XfaZ86fPXt+Id2rU82qMwQAAOBJ18pasf6vz+68/398GP5zMzu3ve6P6Z31/5c/tL8uztVQ/+9qfNOv8AULAAAAJWmNohde+/uv3cqyWqsVXy2trl5tD4+j16eHx1LT3aeprBXr/8Zs1VkBAAAAZeg1H73/f6EQxx6f/3/255d/LV6zERHHIq5EROfk8pXuhfKWM9HK+KHyYKJW1SsFAACgKseyVrz/nwye/6+PHnmoR8Sbrw/j/Kfoe6n/Gx98+0txruLz/2fKW+KEePTbjvrccD8G/VxEc66yxAAAADgCprOWFvt/JhuLn/52/KOW5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyvZvAAAA//+Rzzgt") mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r0, 0xe, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) 1.000071015s ago: executing program 4 (id=692): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) 691.941503ms ago: executing program 3 (id=698): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 373.639101ms ago: executing program 4 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0xc001001f, 0xfee00d00}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 322.899522ms ago: executing program 2 (id=706): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 307.271862ms ago: executing program 1 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="24000380040001001c0003800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 275.216493ms ago: executing program 2 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) unshare(0x22020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 274.810423ms ago: executing program 1 (id=709): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000280)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@resuid}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 264.975213ms ago: executing program 2 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 249.391374ms ago: executing program 3 (id=711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008"], 0x2c}}, 0x0) 216.925484ms ago: executing program 2 (id=712): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f00000001c0)='2', 0x1, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) 152.080096ms ago: executing program 4 (id=713): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg(r0, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4096, 0x1000}, 0x40002022) 151.893416ms ago: executing program 3 (id=714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 151.791886ms ago: executing program 4 (id=715): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r1, 0x0, r0, 0x0, 0x1, 0xa) 134.015016ms ago: executing program 2 (id=716): getdents64(0xffffffffffffffff, 0x0, 0x0) getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0xffffffff00000005, {0x5, 0xfffffffffffffffb, 0x1000000001000002, 0x6, 0x6, 0x5, {0x7, 0xc, 0x40000000000b, 0xfe2b25c, 0x7fffffffffc, 0x20000006a, 0x9, 0xb, 0x4010, 0xa000, 0xd244, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000000000000007000000000000009500000005000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 133.902716ms ago: executing program 3 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x6ee86004, 0x659f, 0x80000001, 0x54, 0x0, [{0x5b, 0x4c, 0xfe, '\x00', 0x5}, {0xe, 0x74, 0xf8, '\x00', 0x40}, {0x90, 0x0, 0x5}, {0x4, 0x4, 0xe, '\x00', 0xf9}, {0x8, 0x6, 0xfb, '\x00', 0x1}, {0x1, 0x7, 0x81, '\x00', 0xe3}, {0x97, 0x1, 0x2, '\x00', 0x6}, {0x0, 0x3, 0x9, '\x00', 0xe2}, {0x3, 0x68, 0x1, '\x00', 0x7}, {0x0, 0xfe, 0xf9, '\x00', 0xc}, {0x1, 0x0, 0x0, '\x00', 0xd}, {0xc, 0x2, 0x7, '\x00', 0x8}, {0xe, 0x5, 0x1, '\x00', 0x3}, {0x6, 0x1, 0x14, '\x00', 0x9}, {0xd7, 0x4, 0x9, '\x00', 0x5}, {0x8, 0xa0, 0x3, '\x00', 0x4}, {0x5, 0xd8, 0x6, '\x00', 0x7}, {0x5, 0x5, 0x6, '\x00', 0x4d}, {0x39, 0x8c, 0x7f, '\x00', 0x40}, {0x4, 0x60, 0x8}, {0x5, 0x1, 0x8, '\x00', 0x1}, {0x2, 0x7f, 0xc8}, {0x3, 0xcd, 0x7, '\x00', 0x5}, {0x24, 0xc1, 0x9, '\x00', 0x5}]}}) 108.752537ms ago: executing program 2 (id=718): memfd_create(0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) clock_getres(0xa, 0x0) 108.277267ms ago: executing program 1 (id=719): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 40.008859ms ago: executing program 3 (id=720): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) 39.887299ms ago: executing program 3 (id=721): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x1000, 0x800, 0xfff9, 0x3ff, 0x1, 0x8800, 0x4, 0x101, 0x25, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 34.226209ms ago: executing program 1 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') readv(r0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/139, 0x8b}], 0x1) 17.866059ms ago: executing program 1 (id=723): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 1 (id=724): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) fallocate(r0, 0x10, 0x37ec, 0x683) kernel console output (not intermixed with test programs): 0 [ 28.402465][ T574] ? rwsem_write_trylock+0x136/0x300 [ 28.407994][ T574] ? clear_nonspinnable+0x60/0x60 [ 28.413093][ T574] ? _raw_spin_lock+0x94/0xf0 [ 28.418726][ T574] ? _raw_spin_trylock_bh+0x150/0x150 [ 28.424281][ T574] ? inode_permission+0xef/0x4a0 [ 28.429714][ T574] ? take_dentry_name_snapshot+0x90/0x100 [ 28.435757][ T574] ? down_write+0x15/0x30 [ 28.440861][ T574] ? try_break_deleg+0x7c/0x130 [ 28.451660][ T574] ? f2fs_mknod+0x5a0/0x5a0 [ 28.456255][ T574] vfs_rename+0xd4a/0x10e0 [ 28.461194][ T574] ? __ia32_sys_link+0x90/0x90 [ 28.466232][ T574] ? d_alloc+0x1f4/0x260 [ 28.471298][ T574] ? lookup_one_qstr_excl+0x122/0x250 [ 28.476904][ T574] do_renameat2+0x965/0xfc0 [ 28.482026][ T574] ? fsnotify_move+0x450/0x450 [ 28.486874][ T574] ? strncpy_from_user+0x186/0x2d0 [ 28.495571][ T574] ? getname_flags+0x205/0x510 [ 28.500944][ T574] __x64_sys_renameat2+0xd8/0xf0 [ 28.506086][ T574] x64_sys_call+0x258/0x9a0 [ 28.510766][ T574] do_syscall_64+0x4c/0xa0 [ 28.515456][ T574] ? clear_bhb_loop+0x50/0xa0 [ 28.520333][ T574] ? clear_bhb_loop+0x50/0xa0 [ 28.525161][ T574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.531259][ T574] RIP: 0033:0x7f99f37e50d9 [ 28.536032][ T574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.557501][ T20] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 28.566423][ T574] RSP: 002b:00007f99f223e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 28.575287][ T574] RAX: ffffffffffffffda RBX: 00007f99f3a6cfa0 RCX: 00007f99f37e50d9 [ 28.576377][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input4 [ 28.584477][ T574] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 28.603178][ T574] RBP: 00007f99f387c024 R08: 0000000000000004 R09: 0000000000000000 [ 28.611512][ T574] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 28.619599][ T574] R13: 00007f99f3a6d038 R14: 00007f99f3a6cfa0 R15: 00007ffd53126b98 [ 28.627822][ T574] [ 28.630879][ T574] ---[ end trace 8b7521a9ee957abe ]--- [ 28.670614][ T20] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 28.818262][ T311] usb 5-1: USB disconnect, device number 2 [ 28.827985][ T609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.859326][ T609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.878963][ T609] EXT4-fs (loop3): 1 truncate cleaned up [ 28.886328][ T609] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 28.973224][ T621] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 29.047952][ T633] exfat: Deprecated parameter 'namecase' [ 29.056554][ T39] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 29.061446][ T633] exfat: Deprecated parameter 'namecase' [ 29.064304][ T39] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 29.077881][ T39] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 29.085201][ T633] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 29.287114][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.387081][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.417094][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.620003][ T645] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 29.627086][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 29.628688][ T645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 29.642807][ T645] F2FS-fs (loop4): invalid crc value [ 29.649930][ T645] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.672483][ T645] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 29.679734][ T645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 29.697909][ T20] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 29.708435][ T20] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 29.717894][ T20] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 29.731462][ T20] usb 4-1: config 220 interface 0 has no altsetting 0 [ 29.738627][ T20] usb 4-1: config 220 interface 1 has no altsetting 0 [ 29.747139][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.760391][ T39] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.797156][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.808628][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.819001][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.832200][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.841542][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.850870][ T311] usb 1-1: config 0 descriptor?? [ 29.897265][ T20] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 29.906920][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.914949][ T20] usb 4-1: Product: syz [ 29.919269][ T20] usb 4-1: Manufacturer: syz [ 29.923849][ T20] usb 4-1: SerialNumber: syz [ 29.927128][ T39] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 29.937686][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.945780][ T39] usb 3-1: Product: syz [ 29.950146][ T39] usb 3-1: Manufacturer: syz [ 29.957141][ T39] usb 3-1: SerialNumber: syz [ 30.114496][ T668] set_capacity_and_notify: 12 callbacks suppressed [ 30.114507][ T668] loop4: detected capacity change from 0 to 1024 [ 30.220244][ T668] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 30.235089][ T668] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.251552][ T668] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.142: bg 0: block 112: padding at end of block bitmap is not set [ 30.266296][ T668] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 30.279816][ T668] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.279816][ T668] [ 30.289716][ T668] EXT4-fs (loop4): Total free blocks count 0 [ 30.296015][ T668] EXT4-fs (loop4): Free/Dirty block details [ 30.302692][ T668] EXT4-fs (loop4): free_blocks=0 [ 30.307809][ T668] EXT4-fs (loop4): dirty_blocks=64 [ 30.313052][ T668] EXT4-fs (loop4): Block reservation details [ 30.319449][ T20] usb 4-1: selecting invalid altsetting 0 [ 30.326120][ T311] plantronics 0003:047F:FFFF.0005: unbalanced delimiter at end of report description [ 30.337307][ T668] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 30.338617][ T311] plantronics 0003:047F:FFFF.0005: parse failed [ 30.347348][ T39] usb 3-1: unit 4 not found! [ 30.349817][ T311] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 30.378151][ T39] usb 3-1: USB disconnect, device number 2 [ 30.387434][ T20] usb 4-1: USB disconnect, device number 2 [ 30.467671][ T684] loop4: detected capacity change from 0 to 8192 [ 30.504579][ T684] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.526031][ T60] usb 1-1: USB disconnect, device number 3 [ 30.600102][ T690] loop1: detected capacity change from 0 to 40427 [ 30.610620][ T690] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 30.618077][ T690] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.627171][ T690] F2FS-fs (loop1): invalid crc value [ 30.633641][ T690] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.661275][ T690] F2FS-fs (loop1): Start checkpoint disabled! [ 30.668102][ T690] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.675174][ T690] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.686610][ T692] loop4: detected capacity change from 0 to 4096 [ 30.715506][ T690] attempt to access beyond end of device [ 30.715506][ T690] loop1: rw=2049, want=77960, limit=40427 [ 30.735933][ T10] attempt to access beyond end of device [ 30.735933][ T10] loop1: rw=2049, want=45104, limit=40427 [ 30.760363][ T692] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.797281][ T692] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.818751][ T704] loop3: detected capacity change from 0 to 256 [ 30.830506][ T707] loop2: detected capacity change from 0 to 1024 [ 30.831858][ T692] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 30.899071][ T704] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 30.921092][ T704] FAT-fs (loop3): Filesystem has been set read-only [ 30.932388][ T712] loop1: detected capacity change from 0 to 1024 [ 30.938681][ T707] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 30.939836][ T704] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 30.990646][ T707] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 31.010509][ T712] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 31.032757][ T712] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.106005][ T725] loop3: detected capacity change from 0 to 128 [ 31.138574][ T725] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 31.165779][ T725] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.258646][ T725] ext2 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.370081][ T729] loop0: detected capacity change from 0 to 40427 [ 31.425976][ T729] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 31.451724][ T729] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.452375][ T750] loop3: detected capacity change from 0 to 1024 [ 31.485082][ T729] F2FS-fs (loop0): invalid crc value [ 31.499449][ T750] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 31.529646][ T750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0102] [ 31.538314][ T750] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 31.546050][ T750] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,debug,abort,barrier=0x0000000000000001,nobarrier,,errors=continue. Quota mode: writeback. [ 31.562778][ T729] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.626370][ T729] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.634414][ T729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.653621][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 31.653640][ T30] audit: type=1400 audit(1786388901.411:263): avc: denied { setopt } for pid=762 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.695161][ T729] attempt to access beyond end of device [ 31.695161][ T729] loop0: rw=10241, want=45104, limit=40427 [ 31.713056][ T760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.714439][ T30] audit: type=1400 audit(1786388901.461:264): avc: denied { ioctl } for pid=726 comm="syz.0.168" path="/20/bus/memory.swap.current" dev="loop0" ino=455 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.723939][ T765] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 31.773421][ T45] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 31.793741][ T45] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 31.809204][ T30] audit: type=1400 audit(1786388901.581:265): avc: denied { create } for pid=773 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.814918][ T772] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 31.849517][ T30] audit: type=1400 audit(1786388901.581:266): avc: denied { connect } for pid=773 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.893477][ T772] attempt to access beyond end of device [ 31.893477][ T772] loop3: rw=524288, want=34359738496, limit=256 [ 31.910366][ T30] audit: type=1400 audit(1786388901.581:267): avc: denied { write } for pid=773 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.912865][ T772] attempt to access beyond end of device [ 31.912865][ T772] loop3: rw=0, want=34359738496, limit=256 [ 31.930043][ T30] audit: type=1400 audit(1786388901.661:268): avc: denied { write } for pid=771 comm="syz.3.183" name="file1" dev="loop3" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.963573][ T30] audit: type=1400 audit(1786388901.661:269): avc: denied { map } for pid=771 comm="syz.3.183" path="/38/file1/file1" dev="loop3" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.964256][ T771] attempt to access beyond end of device [ 31.964256][ T771] loop3: rw=0, want=34359738496, limit=256 [ 32.000804][ T772] attempt to access beyond end of device [ 32.000804][ T772] loop3: rw=0, want=34359738496, limit=256 [ 32.013756][ T30] audit: type=1400 audit(1786388901.781:270): avc: denied { add_name } for pid=780 comm="syz.4.187" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.043409][ T771] attempt to access beyond end of device [ 32.043409][ T771] loop3: rw=0, want=34359738496, limit=256 [ 32.061990][ T30] audit: type=1400 audit(1786388901.781:271): avc: denied { create } for pid=780 comm="syz.4.187" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 32.092184][ T772] attempt to access beyond end of device [ 32.092184][ T772] loop3: rw=0, want=34359738496, limit=256 [ 32.112531][ T30] audit: type=1400 audit(1786388901.791:272): avc: denied { write } for pid=780 comm="syz.4.187" name="use" dev="configfs" ino=17709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 32.116826][ T772] attempt to access beyond end of device [ 32.116826][ T772] loop3: rw=0, want=34359738496, limit=256 [ 32.164668][ T791] exFAT-fs (loop3): hint_cluster is invalid (1) [ 32.172593][ T791] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.182776][ T786] EXT4-fs (loop0): Unrecognized mount option "subj_role=" or missing value [ 32.185739][ T791] exFAT-fs (loop3): Filesystem has been set read-only [ 32.210746][ T791] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 9, err : -5) [ 32.220904][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.229928][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 0, err : -5) [ 32.240181][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.249302][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 0, err : -5) [ 32.267433][ T791] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.280370][ T791] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 8, err : -5) [ 32.288535][ T795] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #3: comm syz.1.192: corrupted inode contents [ 32.290981][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.317020][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 1, err : -5) [ 32.321767][ T795] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #3: comm syz.1.192: mark_inode_dirty error [ 32.339746][ T795] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #3: comm syz.1.192: corrupted inode contents [ 32.347594][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.351846][ T795] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.192: mark_inode_dirty error [ 32.372007][ T795] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.192: Failed to acquire dquot type 0 [ 32.377897][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 2, err : -5) [ 32.383977][ T795] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.192: corrupted inode contents [ 32.405409][ T795] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #16: comm syz.1.192: mark_inode_dirty error [ 32.416849][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.421774][ T795] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.192: corrupted inode contents [ 32.437381][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.445265][ T795] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.192: mark_inode_dirty error [ 32.456747][ T795] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.192: corrupted inode contents [ 32.460878][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 3, err : -5) [ 32.468850][ T795] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 32.487847][ T795] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.192: corrupted inode contents [ 32.488964][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.499944][ T795] EXT4-fs error (device loop1): ext4_truncate:4317: inode #16: comm syz.1.192: mark_inode_dirty error [ 32.520174][ T795] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 32.530582][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 4, err : -5) [ 32.538990][ T795] EXT4-fs (loop1): 1 truncate cleaned up [ 32.548327][ T805] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 32.557244][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.569496][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 5, err : -5) [ 32.570432][ T795] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 32.579877][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.603285][ T772] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881294e67a0 iblock : 6, err : -5) [ 32.613344][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.622092][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.630855][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.639937][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.648721][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.657458][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.666312][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.675056][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.683914][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 32.689183][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.695342][ T795] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.697967][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.717495][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.726930][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.735950][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.736312][ T802] F2FS-fs (loop0): invalid crc value [ 32.754118][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.763811][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.772895][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.781912][ T772] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 32.784724][ T795] syz.1.192 (795) used greatest stack depth: 21120 bytes left [ 32.803383][ T802] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.807174][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.837113][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.853217][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.858000][ T802] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.917823][ T60] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.929260][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 32.943016][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.947141][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.964444][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 32.970022][ T60] usb 5-1: config 0 descriptor?? [ 32.993630][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.002778][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.026660][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.036885][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.046070][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.160827][ T830] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.194986][ T837] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=100 sclass=netlink_audit_socket pid=837 comm=syz.0.203 [ 33.196014][ T830] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.247093][ T307] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.258930][ T839] netlink: 'syz.0.208': attribute type 16 has an invalid length. [ 33.266827][ T839] netlink: 'syz.0.208': attribute type 17 has an invalid length. [ 33.276784][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 33.292822][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 33.318125][ T848] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,. Quota mode: writeback. [ 33.330710][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 33.339180][ T848] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.341146][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 33.357594][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 33.364987][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 33.372727][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 33.380502][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 33.387829][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 33.388577][ T848] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 3: comm syz.2.209: lblock 3 mapped to illegal pblock 3 (length 3) [ 33.395147][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 33.416356][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 33.423623][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 33.431912][ T839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 33.433593][ T859] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.209: lblock 3 mapped to illegal pblock 3 (length 3) [ 33.448412][ T848] EXT4-fs (loop2): Remounting filesystem read-only [ 33.470307][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input5 [ 33.483054][ T859] EXT4-fs (loop2): Remounting filesystem read-only [ 33.549793][ T60] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 33.627278][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.655172][ T307] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 33.735611][ T20] usb 5-1: USB disconnect, device number 3 [ 33.764458][ T895] Mass Storage Function, version: 2009/09/11 [ 33.775087][ T895] LUN: removable file: (no medium) [ 33.809533][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.828393][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.837331][ T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.843656][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.846486][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.846508][ T307] usb 4-1: Product: syz [ 33.846519][ T307] usb 4-1: Manufacturer: syz [ 33.855516][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.877433][ T307] usb 4-1: SerialNumber: syz [ 33.880402][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.893399][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.901870][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.910482][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.917816][ T307] cdc_mbim 4-1:1.0: skipping garbage [ 34.041573][ T923] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 34.076854][ T923] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 34.095176][ T923] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.124947][ T818] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 34.350919][ T971] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 34.426878][ T952] F2FS-fs (loop1): invalid crc value [ 34.433925][ T952] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.458618][ T977] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 34.492842][ T977] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.508460][ T952] F2FS-fs (loop1): Start checkpoint disabled! [ 34.520057][ T952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 34.645341][ T990] F2FS-fs (loop2): invalid crc value [ 34.667964][ T990] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.786492][ T990] F2FS-fs (loop2): Start checkpoint disabled! [ 34.797416][ T818] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 34.810545][ T1012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.234'. [ 34.820306][ T307] cdc_mbim 4-1:1.0: setting tx_max = 28 [ 34.823531][ T990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 34.833497][ T307] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 34.859147][ T307] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:a5:58:b7:fa:f9 [ 34.967439][ T1027] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.074009][ T1027] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.094806][ T821] usb 4-1: USB disconnect, device number 3 [ 35.101916][ T821] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 35.586945][ T996] set_capacity_and_notify: 17 callbacks suppressed [ 35.586959][ T996] loop0: detected capacity change from 0 to 131072 [ 35.636425][ T996] F2FS-fs (loop0): invalid crc value [ 35.667491][ T996] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.678249][ T1083] loop3: detected capacity change from 0 to 1024 [ 35.715711][ T996] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 35.728368][ T1083] EXT4-fs (loop3): Ignoring removed orlov option [ 35.739554][ T996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.769621][ T1083] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 35.807794][ T996] F2FS-fs (loop0): Should run fsck to repair first. [ 35.865402][ T1089] loop3: detected capacity change from 0 to 256 [ 35.927156][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.989899][ T1093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 36.068966][ T1101] overlayfs: failed to set xattr on upper [ 36.167155][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 36.208649][ T1114] loop1: detected capacity change from 0 to 512 [ 36.248044][ T1114] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 36.258744][ T1114] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.257: corrupted in-inode xattr [ 36.270947][ T1114] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.257: couldn't read orphan inode 15 (err -117) [ 36.283768][ T1114] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x00000000000000ff,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,norecovery,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=continue,,errors=continue. Quota mode: none. [ 36.309801][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.329506][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.338818][ T6] usb 3-1: config 0 has no interfaces? [ 36.344740][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.354437][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.364423][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.373939][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 36.383934][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.393764][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.404051][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.413957][ T1048] loop4: detected capacity change from 0 to 262144 [ 36.414149][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.429914][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.439394][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.448528][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.457410][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.466248][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.475330][ T292] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.507234][ T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.507449][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 36.524733][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.547102][ T6] usb 3-1: Product: syz [ 36.551320][ T6] usb 3-1: Manufacturer: syz [ 36.556337][ T6] usb 3-1: SerialNumber: syz [ 36.566809][ T1048] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.595934][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 36.620867][ T1048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.741338][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 36.741354][ T30] audit: type=1400 audit(1786388906.511:320): avc: denied { mount } for pid=1126 comm="syz.0.261" name="/" dev="ramfs" ino=19119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.747205][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 36.748602][ T30] audit: type=1400 audit(1786388906.521:321): avc: denied { ioctl } for pid=1126 comm="syz.0.261" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 36.805386][ T1129] loop1: detected capacity change from 0 to 512 [ 36.827102][ T1131] overlayfs: failed to set xattr on upper [ 36.927339][ T307] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.937958][ T307] usb 4-1: config 0 has no interface number 0 [ 37.005988][ T1133] loop0: detected capacity change from 0 to 40427 [ 37.025603][ T1133] F2FS-fs (loop0): invalid crc value [ 37.032078][ T1133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.097374][ T307] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.108088][ T1133] F2FS-fs (loop0): Start checkpoint disabled! [ 37.114738][ T20] usb 3-1: USB disconnect, device number 3 [ 37.117479][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.124669][ T1133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 37.153816][ T1142] ip_tables: iptables: counters copy to user failed while replacing table [ 37.159978][ T30] audit: type=1400 audit(1786388906.921:322): avc: denied { write open } for pid=1132 comm="syz.0.264" path="/35/bus/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.165666][ T307] usb 4-1: Product: syz [ 37.213827][ T1142] tipc: Started in network mode [ 37.220354][ T307] usb 4-1: Manufacturer: syz [ 37.225517][ T307] usb 4-1: SerialNumber: syz [ 37.230807][ T1142] tipc: Node identity ac14140f, cluster identity 4711 [ 37.237872][ T30] audit: type=1400 audit(1786388906.961:323): avc: denied { ioctl } for pid=1132 comm="syz.0.264" path="/35/bus/file1" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.251317][ T307] usb 4-1: config 0 descriptor?? [ 37.269749][ T1142] tipc: New replicast peer: 255.255.255.255 [ 37.271275][ T1149] loop1: detected capacity change from 0 to 256 [ 37.275888][ T1142] tipc: Enabled bearer , priority 10 [ 37.311563][ T1152] input: syz0 as /devices/virtual/input/input6 [ 37.327627][ T307] smsc95xx v2.0.0 [ 37.334716][ T1149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 37.389233][ T1149] handle_bad_sector: 622 callbacks suppressed [ 37.389251][ T1149] attempt to access beyond end of device [ 37.389251][ T1149] loop1: rw=16777216, want=34359738496, limit=256 [ 37.391887][ T1154] loop6: detected capacity change from 0 to 1 [ 37.409334][ T30] audit: type=1400 audit(1786388907.171:324): avc: denied { unlink } for pid=1148 comm="syz.1.268" name="file0" dev="loop1" ino=1048631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.446544][ T45] attempt to access beyond end of device [ 37.446544][ T45] loop0: rw=2049, want=45104, limit=40427 [ 37.476990][ T30] audit: type=1400 audit(1786388907.241:325): avc: denied { read } for pid=1157 comm="syz.4.274" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.505995][ T30] audit: type=1400 audit(1786388907.261:326): avc: denied { open } for pid=1157 comm="syz.4.274" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.531903][ T30] audit: type=1400 audit(1786388907.271:327): avc: denied { write } for pid=1157 comm="syz.4.274" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.612522][ T1169] loop0: detected capacity change from 0 to 512 [ 37.613575][ T30] audit: type=1400 audit(1786388907.381:328): avc: denied { create } for pid=1167 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.644796][ T30] audit: type=1400 audit(1786388907.411:329): avc: denied { connect } for pid=1167 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.723410][ T1179] EXT4-fs (loop1): Ignoring removed orlov option [ 37.733449][ T1179] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 37.742608][ T1179] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,usrquota,nodelalloc,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 37.769869][ T1179] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.778093][ T1169] x_tables: ip6_tables: CT target: only valid in raw table, not ./bus [ 37.820390][ T1172] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 37.827209][ T1172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 37.847119][ T1172] F2FS-fs (loop2): invalid crc_offset: 1 [ 37.855793][ T1172] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 37.886849][ T1172] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 37.894630][ T1172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.005542][ T1192] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.037640][ T1192] EXT4-fs warning (device loop1): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 38.116974][ T1190] F2FS-fs (loop0): invalid crc value [ 38.141859][ T1190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.142944][ T287] attempt to access beyond end of device [ 38.142944][ T287] loop2: rw=2049, want=45104, limit=40427 [ 38.193153][ T1190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.242092][ T292] attempt to access beyond end of device [ 38.242092][ T292] loop0: rw=2049, want=45104, limit=40427 [ 38.388322][ T26] tipc: Node number set to 2886997007 [ 38.437144][ T307] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 38.461489][ T307] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.493593][ T1208] EXT4-fs (loop2): Ignoring removed nobh option [ 38.507636][ T307] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 38.517839][ T1216] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 38.528260][ T307] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 38.548051][ T1216] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 38.555828][ T307] usb 4-1: USB disconnect, device number 4 [ 38.581588][ T1208] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 38.584698][ T1216] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.615674][ T1208] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.656535][ T1216] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 38.667223][ T1216] System zones: 0-1, 3-36 [ 38.673209][ T1216] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 38.714823][ T1208] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.288: corrupted inode contents [ 38.766285][ T1216] capability: warning: `syz.0.294' uses deprecated v2 capabilities in a way that may be insecure [ 38.778698][ T1208] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #2: comm syz.2.288: mark_inode_dirty error [ 38.801007][ T1231] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 38.834480][ T1231] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.842031][ T1208] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.288: corrupted inode contents [ 38.854999][ T1208] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.288: mark_inode_dirty error [ 38.872954][ T1231] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 38.884627][ T1231] System zones: 0-5 [ 38.901491][ T1231] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 38.922968][ T1229] F2FS-fs (loop1): invalid crc value [ 38.938090][ T1229] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.980322][ T1229] F2FS-fs (loop1): Start checkpoint disabled! [ 39.010305][ T1229] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 39.169830][ T1252] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 39.227352][ T1252] attempt to access beyond end of device [ 39.227352][ T1252] loop2: rw=16777216, want=34359738496, limit=256 [ 39.387239][ T1256] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.575836][ T45] attempt to access beyond end of device [ 39.575836][ T45] loop1: rw=2049, want=40976, limit=40427 [ 39.589288][ T1247] F2FS-fs (loop4): invalid crc value [ 39.626644][ T1247] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.680364][ T1247] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 39.702688][ T1247] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.748990][ T1247] F2FS-fs (loop4): Should run fsck to repair first. [ 39.793509][ T1270] SELinux: failed to load policy [ 39.898097][ T1279] EXT4-fs (loop2): Ignoring removed orlov option [ 39.904711][ T1279] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 39.913668][ T1279] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,usrquota,nodelalloc,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 39.932051][ T1279] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.946369][ T1254] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 39.958356][ T1270] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 39.965703][ T1270] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 39.988369][ T1254] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.997414][ T1254] F2FS-fs (loop3): invalid crc value [ 40.004122][ T1270] F2FS-fs (loop1): invalid crc value [ 40.011162][ T1270] F2FS-fs (loop1): Mismatch valid blocks 257 vs. 64 [ 40.023692][ T1270] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 40.026874][ T1254] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.042739][ T1274] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 40.056182][ T1274] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.065813][ T1274] F2FS-fs (loop0): invalid crc value [ 40.083935][ T1274] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.086478][ T1254] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.098519][ T1254] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 40.164031][ T1274] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.172606][ T1274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.218620][ T1274] attempt to access beyond end of device [ 40.218620][ T1274] loop0: rw=2049, want=77960, limit=40427 [ 40.295021][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.306624][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.310254][ T45] attempt to access beyond end of device [ 40.310254][ T45] loop0: rw=1, want=77960, limit=40427 [ 40.316916][ T1299] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.341671][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.351573][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.364351][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 40.374705][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.413202][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.427827][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.437489][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.457091][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.469814][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.487076][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.508517][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.527109][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.536942][ T288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 40.707648][ T1301] set_capacity_and_notify: 16 callbacks suppressed [ 40.707668][ T1301] loop2: detected capacity change from 0 to 40427 [ 40.759696][ T1301] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 40.775444][ T1301] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 40.796128][ T1301] F2FS-fs (loop2): invalid crc value [ 40.821294][ T1301] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 40.837124][ T307] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.877673][ T1301] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 40.884865][ T1301] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.940477][ T1301] attempt to access beyond end of device [ 40.940477][ T1301] loop2: rw=2049, want=53384, limit=40427 [ 40.973010][ T287] attempt to access beyond end of device [ 40.973010][ T287] loop2: rw=2049, want=45104, limit=40427 [ 41.053568][ T1319] loop4: detected capacity change from 0 to 40427 [ 41.107414][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 41.123735][ T1325] tap0: tun_chr_ioctl cmd 1074025675 [ 41.129379][ T1325] tap0: persist enabled [ 41.138133][ T1325] tap0: tun_chr_ioctl cmd 1074025681 [ 41.143640][ T1319] F2FS-fs (loop4): invalid crc value [ 41.158141][ T1319] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.200439][ T1319] F2FS-fs (loop4): Start checkpoint disabled! [ 41.208714][ T1319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 41.227134][ T307] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.235514][ T307] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.262992][ T307] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.287084][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.303687][ T307] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.323238][ T307] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.350778][ T307] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.363795][ T1337] loop2: detected capacity change from 0 to 4096 [ 41.368612][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.391341][ T307] usb 1-1: config 0 descriptor?? [ 41.439547][ T1337] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.453788][ T1337] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 41.473948][ T1337] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003] [ 41.483631][ T1337] System zones: 0-5 [ 41.493267][ T1337] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 41.595186][ T1343] netlink: 9 bytes leftover after parsing attributes in process `syz.1.337'. [ 41.625046][ T1343] device gretap0 entered promiscuous mode [ 41.643555][ T1343] netlink: 5 bytes leftover after parsing attributes in process `syz.1.337'. [ 41.660380][ T307] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.681353][ T1343] 0{X: renamed from gretap0 [ 41.698449][ T1343] device 30{X left promiscuous mode [ 41.715725][ T1343] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 41.832166][ T1328] loop3: detected capacity change from 0 to 131072 [ 41.857275][ T1328] F2FS-fs (loop3): invalid crc value [ 41.867862][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 41.867876][ T30] audit: type=1400 audit(1786388911.641:353): avc: denied { read write } for pid=1306 comm="syz.0.319" name="lp0" dev="devtmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 41.909203][ T1357] FAULT_INJECTION: forcing a failure. [ 41.909203][ T1357] name fail_futex, interval 1, probability 0, space 0, times 1 [ 41.928776][ T1328] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.937620][ T1357] CPU: 1 PID: 1357 Comm: syz.1.343 Tainted: G W syzkaller #0 [ 41.946504][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.956654][ T1357] Call Trace: [ 41.960112][ T1357] [ 41.963053][ T1357] __dump_stack+0x21/0x30 [ 41.967392][ T1357] dump_stack_lvl+0x110/0x170 [ 41.972080][ T1357] ? show_regs_print_info+0x20/0x20 [ 41.977293][ T1357] dump_stack+0x15/0x20 [ 41.981465][ T1357] should_fail+0x3ab/0x500 [ 41.985904][ T1357] get_futex_key+0x143/0xb60 [ 41.990810][ T1357] ? futex_wait_restart+0x250/0x250 [ 41.996112][ T1357] ? activate_task+0x50/0xa0 [ 42.000799][ T1357] ? kvm_sched_clock_read+0x18/0x40 [ 42.006366][ T1357] futex_wait_setup+0x52/0x510 [ 42.007083][ T30] audit: type=1400 audit(1786388911.671:354): avc: denied { open } for pid=1306 comm="syz.0.319" path="/dev/usb/lp0" dev="devtmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.011229][ T1357] ? ttwu_do_wakeup+0x100/0x470 [ 42.011251][ T1357] futex_wait+0x235/0x8f0 [ 42.044619][ T1357] ? do_futex+0x27f0/0x27f0 [ 42.049131][ T1357] ? __stack_depot_save+0x34/0x480 [ 42.054333][ T1357] ? path_openat+0x284f/0x2f80 [ 42.059132][ T1357] do_futex+0xdb1/0x27f0 [ 42.063426][ T1357] ? kasan_set_track+0x4a/0x70 [ 42.068204][ T1357] ? kmem_cache_free+0x100/0x320 [ 42.073250][ T1357] ? do_sys_openat2+0x6df/0x7f0 [ 42.078118][ T1357] ? x64_sys_call+0x219/0x9a0 [ 42.082912][ T1357] ? do_syscall_64+0x4c/0xa0 [ 42.087615][ T1357] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.093817][ T1357] ? _kstrtoull+0x3bb/0x4c0 [ 42.098332][ T1357] ? futex_exit_release+0x1e0/0x1e0 [ 42.103547][ T1357] ? kstrtouint_from_user+0x1c4/0x220 [ 42.109050][ T1357] ? kstrtol_from_user+0x2a0/0x2a0 [ 42.114180][ T1357] ? __kasan_check_write+0x14/0x20 [ 42.119475][ T1357] ? proc_fail_nth_write+0x180/0x200 [ 42.124800][ T1357] ? proc_fail_nth_read+0x220/0x220 [ 42.130016][ T1357] ? security_file_permission+0x79/0xa0 [ 42.135584][ T1357] ? vfs_write+0xc72/0xfd0 [ 42.140053][ T1357] ? file_end_write+0x1b0/0x1b0 [ 42.145455][ T1357] ? __kasan_check_write+0x14/0x20 [ 42.150590][ T1357] ? mutex_unlock+0x8f/0x230 [ 42.155188][ T1357] __se_sys_futex+0x135/0x330 [ 42.159873][ T1357] ? __kasan_check_write+0x14/0x20 [ 42.162404][ T1347] loop4: detected capacity change from 0 to 40427 [ 42.164995][ T1357] ? __x64_sys_futex+0x100/0x100 [ 42.176317][ T1357] ? ksys_write+0x1fa/0x260 [ 42.180849][ T1357] ? __ia32_sys_read+0x90/0x90 [ 42.185624][ T1357] __x64_sys_futex+0xe5/0x100 [ 42.190308][ T1357] x64_sys_call+0x251/0x9a0 [ 42.194838][ T1357] do_syscall_64+0x4c/0xa0 [ 42.199353][ T1357] ? clear_bhb_loop+0x50/0xa0 [ 42.202215][ T1347] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 42.204152][ T1357] ? clear_bhb_loop+0x50/0xa0 [ 42.214252][ T1347] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 42.215332][ T1357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.229339][ T1357] RIP: 0033:0x7f46a6b5c0d9 [ 42.233774][ T1357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.234587][ T1347] F2FS-fs (loop4): invalid crc_offset: 1 [ 42.253465][ T1357] RSP: 002b:00007f46a55b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.253492][ T1357] RAX: ffffffffffffffda RBX: 00007f46a6de3fa8 RCX: 00007f46a6b5c0d9 [ 42.253502][ T1357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46a6de3fa8 [ 42.253512][ T1357] RBP: 00007f46a6de3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 42.253522][ T1357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.253532][ T1357] R13: 00007f46a6de4038 R14: 00007ffecb5a6d70 R15: 00007ffecb5a6e58 [ 42.307460][ T1357] [ 42.317686][ T1328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 42.327408][ T60] usb 1-1: USB disconnect, device number 4 [ 42.344392][ T60] usblp0: removed [ 42.374591][ T1347] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.398027][ T1345] loop2: detected capacity change from 0 to 131072 [ 42.410611][ T1345] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 42.426164][ T1347] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 42.429258][ T1345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.433322][ T1347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.462283][ T1345] F2FS-fs (loop2): invalid crc value [ 42.470302][ T1345] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.515437][ T1345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.527096][ T1345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 42.702371][ T288] handle_bad_sector: 1 callbacks suppressed [ 42.702391][ T288] attempt to access beyond end of device [ 42.702391][ T288] loop4: rw=2049, want=45104, limit=40427 [ 42.864785][ T1387] loop2: detected capacity change from 0 to 512 [ 42.892837][ T1387] EXT4-fs (loop2): 1 truncate cleaned up [ 42.902005][ T1387] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 42.926857][ T1394] loop0: detected capacity change from 0 to 512 [ 42.951333][ T1387] incfs: Can't find or create .index dir in ./file0 [ 42.953162][ T1394] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 42.966365][ T1387] incfs: mount failed -28 [ 42.966764][ T1394] System zones: 0-2, 18-18, 34-35 [ 42.978245][ T1394] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.989679][ T1394] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.087083][ T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.122999][ T30] audit: type=1400 audit(1786388912.891:355): avc: denied { create } for pid=1407 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.149299][ T30] audit: type=1400 audit(1786388912.911:356): avc: denied { getopt } for pid=1407 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.239050][ T1418] loop1: detected capacity change from 0 to 256 [ 43.269993][ T30] audit: type=1400 audit(1786388913.041:357): avc: denied { execstack } for pid=1419 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.321466][ T1418] FAT-fs (loop1): Directory bread(block 64) failed [ 43.340322][ T1418] FAT-fs (loop1): Directory bread(block 65) failed [ 43.346914][ T1418] FAT-fs (loop1): Directory bread(block 66) failed [ 43.353700][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 43.369540][ T1418] FAT-fs (loop1): Directory bread(block 67) failed [ 43.376543][ T1418] FAT-fs (loop1): Directory bread(block 68) failed [ 43.383396][ T1418] FAT-fs (loop1): Directory bread(block 69) failed [ 43.390348][ T1418] FAT-fs (loop1): Directory bread(block 70) failed [ 43.397481][ T1418] FAT-fs (loop1): Directory bread(block 71) failed [ 43.404128][ T1418] FAT-fs (loop1): Directory bread(block 72) failed [ 43.410950][ T1418] FAT-fs (loop1): Directory bread(block 73) failed [ 43.487163][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.498187][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.508078][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.520977][ T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.531264][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.542084][ T1426] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 43.550361][ T30] audit: type=1400 audit(1786388913.321:358): avc: denied { read } for pid=1429 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.550615][ T20] usb 4-1: config 0 descriptor?? [ 43.574595][ T1426] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 43.622356][ T1433] loop2: detected capacity change from 0 to 1024 [ 43.636733][ T1433] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.651431][ T1433] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.369: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.666273][ T1433] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 43.674862][ T1433] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.369: Invalid inode table block 1 in block_group 0 [ 43.688211][ T1433] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.698370][ T1433] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.369: mark_inode_dirty error [ 43.710308][ T1433] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 43.719738][ T1433] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.369: Failed to acquire dquot type 0 [ 43.731855][ T1433] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.741578][ T1433] EXT4-fs error (device loop2): ext4_evict_inode:285: inode #11: comm syz.2.369: mark_inode_dirty error [ 43.753094][ T1433] EXT4-fs warning (device loop2): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 43.761806][ T1414] F2FS-fs (loop0): invalid crc value [ 43.763393][ T1433] EXT4-fs (loop2): 1 orphan inode deleted [ 43.774506][ T1433] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: none. [ 43.793446][ T348] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.800364][ T1438] netlink: 9 bytes leftover after parsing attributes in process `syz.4.370'. [ 43.835881][ T1414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.845367][ T1438] device gretap0 entered promiscuous mode [ 43.852919][ T348] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 43.883565][ T348] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 43.900736][ T1433] EXT4-fs (loop2): shut down requested (2) [ 43.908428][ T1438] netlink: 5 bytes leftover after parsing attributes in process `syz.4.370'. [ 43.918340][ T30] audit: type=1400 audit(1786388913.691:359): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.919275][ T1438] 0{X: renamed from gretap0 [ 43.949717][ T1414] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 43.957862][ T1438] device 30{X left promiscuous mode [ 43.965128][ T1438] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 43.969540][ T1414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 44.019235][ T1453] input: syz0 as /devices/virtual/input/input7 [ 44.049931][ T60] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 44.067623][ T60] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.069145][ T20] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 44.085952][ T20] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 44.093928][ T20] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 44.101631][ T20] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 44.124217][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input8 [ 44.198417][ T20] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 44.372221][ T60] usb 4-1: USB disconnect, device number 5 [ 44.412848][ T1475] binder: 1474:1475 ioctl 4018620d 0 returned -22 [ 44.435556][ T1475] binder: 1474:1475 ioctl c0306201 200000000440 returned -22 [ 44.672812][ T1477] F2FS-fs (loop1): invalid crc value [ 44.682501][ T1477] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 44.711744][ T1477] F2FS-fs (loop1): Start checkpoint disabled! [ 44.718780][ T1488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.730562][ T1477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.758396][ T1488] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.807144][ T307] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.879684][ T1468] F2FS-fs (loop2): invalid crc value [ 44.914597][ T1468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.953822][ T1506] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.394: inode has both inline data and extents flags [ 44.972451][ T1506] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.394: couldn't read orphan inode 15 (err -117) [ 44.985213][ T1468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.988057][ T1506] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 45.029152][ T1468] syz.2.382 (pid 1468) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 45.088153][ T1517] program syz.3.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.113540][ T1519] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 45.207144][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.247158][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 45.291717][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.310587][ T307] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 45.338004][ T307] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 45.479480][ T1534] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.405: bg 0: block 5: invalid block bitmap [ 45.497202][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 45.517352][ T307] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 45.537596][ T1534] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 45.546988][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.555057][ T307] usb 1-1: Product: syz [ 45.560715][ T307] usb 1-1: Manufacturer: syz [ 45.562779][ T1534] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.405: invalid indirect mapped block 3 (level 2) [ 45.566386][ T307] usb 1-1: SerialNumber: syz [ 45.580974][ T1534] EXT4-fs (loop4): 1 orphan inode deleted [ 45.589039][ T1534] EXT4-fs (loop4): 1 truncate cleaned up [ 45.594816][ T1534] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 45.617485][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.629095][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.639385][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.650181][ T1521] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 45.656414][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.669701][ T60] usb 2-1: config 0 descriptor?? [ 45.670903][ T1521] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.685051][ T1521] F2FS-fs (loop3): invalid crc value [ 45.690894][ T1538] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 45.706857][ T1521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.707563][ T60] hub 2-1:0.0: USB hub found [ 45.759950][ T1521] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.767211][ T1521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 45.795946][ T1536] syz.2.406 (1536) used greatest stack depth: 20968 bytes left [ 45.819667][ T1548] program syz.4.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.829792][ T307] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.908185][ T1558] Illegal XDP return value 4294967274, expect packet loss! [ 45.917176][ T60] hub 2-1:0.0: 1 port detected [ 45.937735][ T1562] set_capacity_and_notify: 9 callbacks suppressed [ 45.937746][ T1562] loop2: detected capacity change from 0 to 512 [ 45.961381][ T1564] loop4: detected capacity change from 0 to 4096 [ 45.983247][ T1562] EXT4-fs (loop2): Ignoring removed nobh option [ 45.999051][ T1562] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 46.014317][ T1562] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.030661][ T1562] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.416: corrupted inode contents [ 46.043481][ T1562] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #2: comm syz.2.416: mark_inode_dirty error [ 46.055102][ T307] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 46.063647][ T307] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 46.073106][ T307] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 46.077566][ T1562] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.416: corrupted inode contents [ 46.102717][ T1564] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.129826][ T1562] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.416: mark_inode_dirty error [ 46.337225][ T1589] loop3: detected capacity change from 0 to 4096 [ 46.401561][ T60] usb 2-1: USB disconnect, device number 2 [ 46.410059][ T1589] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 46.457658][ T1591] loop4: detected capacity change from 0 to 65536 [ 46.477391][ T307] usb 1-1: invalid uac2 rates [ 46.482441][ T307] usb 1-1: invalid uac2 rates [ 46.509275][ T307] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 46.517711][ T821] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 46.530526][ T307] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 46.539915][ T307] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 46.582518][ T1598] loop3: detected capacity change from 0 to 16 [ 46.591022][ T1598] erofs: (device loop3): mounted with root inode @ nid 36. [ 46.687241][ T307] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 46.687959][ T1610] xt_hashlimit: size too large, truncated to 1048576 [ 46.734152][ T307] usb 1-1: USB disconnect, device number 5 [ 46.877172][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.897181][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 46.927117][ T821] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 46.946413][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.957602][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.984374][ T821] usb 3-1: config 0 descriptor?? [ 47.013726][ T1617] loop6: detected capacity change from 0 to 1 [ 47.045040][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 47.045056][ T30] audit: type=1400 audit(1786388916.811:397): avc: denied { mount } for pid=1620 comm="syz.3.441" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.082185][ T30] audit: type=1400 audit(1786388916.851:398): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.102947][ T30] audit: type=1400 audit(1786388916.851:399): avc: denied { setopt } for pid=1622 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.259354][ T30] audit: type=1400 audit(1786388917.031:400): avc: denied { mounton } for pid=1631 comm="syz.0.446" path="/53/file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.283169][ T1606] loop4: detected capacity change from 0 to 131072 [ 47.296472][ T1606] F2FS-fs (loop4): Test dummy encryption mode enabled [ 47.313219][ T1625] loop1: detected capacity change from 0 to 40427 [ 47.327163][ T1606] F2FS-fs (loop4): invalid crc value [ 47.328363][ T1625] F2FS-fs (loop1): fault_injection options not supported [ 47.348956][ T1625] F2FS-fs (loop1): fault_type options not supported [ 47.358088][ T1625] F2FS-fs (loop1): invalid crc value [ 47.364798][ T1625] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.373363][ T1606] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.406053][ T1625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.422906][ T1643] loop0: detected capacity change from 0 to 512 [ 47.432199][ T1606] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.459212][ T1643] EXT4-fs (loop0): Ignoring removed nobh option [ 47.467272][ T821] hid-led 0003:1294:1320.0009: unknown main item tag 0xd [ 47.476125][ T821] hid-led 0003:1294:1320.0009: unknown main item tag 0xe [ 47.484684][ T821] hid-led 0003:1294:1320.0009: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 47.498188][ T821] hid-led 0003:1294:1320.0009: Riso Kagaku Webmail Notifier initialized [ 47.499300][ T1643] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 47.521867][ T1643] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.572736][ T1643] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.448: corrupted inode contents [ 47.609902][ T1643] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #2: comm syz.0.448: mark_inode_dirty error [ 47.651187][ T1643] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.448: corrupted inode contents [ 47.697689][ T20] usb 3-1: USB disconnect, device number 4 [ 47.706171][ T311] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 47.715545][ T311] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 47.724682][ T1643] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.448: mark_inode_dirty error [ 47.742775][ T311] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 47.836101][ T1655] loop3: detected capacity change from 0 to 4096 [ 47.864420][ T1655] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 47.872390][ T1655] EXT4-fs (loop3): Test dummy encryption mode enabled [ 47.891761][ T1655] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 47.955231][ T1655] EXT4-fs (loop3): shut down requested (1) [ 48.102322][ T1676] tap0: tun_chr_ioctl cmd 2147767511 [ 48.127094][ T60] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.237733][ T30] audit: type=1400 audit(1786388918.011:401): avc: denied { map } for pid=1685 comm="syz.2.466" path="/dev/sda1" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.267367][ T1684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.314667][ T30] audit: type=1400 audit(1786388918.081:402): avc: denied { remount } for pid=1683 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.334467][ T1684] EXT4-fs (loop4): Cannot change journaled quota options when quota turned on [ 48.577256][ T60] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 48.586465][ T60] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 48.594752][ T60] usb 1-1: Product: syz [ 48.600410][ T60] usb 1-1: config 0 descriptor?? [ 48.605419][ T1690] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 48.615706][ T1690] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 48.616539][ T1668] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 48.634661][ T1668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 48.641406][ T1690] F2FS-fs (loop2): invalid crc value [ 48.649126][ T60] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 48.660736][ T60] usb 1-1: Detected FT232H [ 48.666159][ T1668] F2FS-fs (loop3): invalid crc value [ 48.674411][ T1668] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 48.674991][ T1690] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 48.706504][ T1668] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 48.716456][ T1690] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 48.716484][ T1690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.734016][ T1668] F2FS-fs (loop3): Bad quota inode 2:50331648 [ 48.741208][ T1668] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 48.751995][ T1668] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 48.760044][ T1668] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 48.768282][ T1668] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 48.776788][ T287] attempt to access beyond end of device [ 48.776788][ T287] loop2: rw=2049, want=45104, limit=40427 [ 48.788900][ T1700] EXT4-fs (loop4): Ignoring removed nobh option [ 48.828990][ T1700] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 48.845023][ T1700] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.858543][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 48.882155][ T1700] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.469: corrupted inode contents [ 48.906283][ T1700] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #2: comm syz.4.469: mark_inode_dirty error [ 48.918282][ T1700] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.469: corrupted inode contents [ 48.930219][ T1700] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.469: mark_inode_dirty error [ 48.990833][ T1704] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.468: bg 0: block 5: invalid block bitmap [ 49.023842][ T1704] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 49.037348][ T1704] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.468: invalid indirect mapped block 3 (level 2) [ 49.056067][ T1704] EXT4-fs (loop2): 1 orphan inode deleted [ 49.063125][ T1704] EXT4-fs (loop2): 1 truncate cleaned up [ 49.072826][ T1704] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 49.117579][ T1709] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 49.125830][ T1709] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.138938][ T1709] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 49.181278][ T1709] EXT4-fs (loop4): shut down requested (1) [ 49.330295][ T1723] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 49.338906][ T60] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.460625][ T1727] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.477295][ T1727] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.523696][ T30] audit: type=1400 audit(1786388919.291:403): avc: denied { map } for pid=1726 comm="syz.4.479" path="/104/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.580873][ T311] usb 1-1: USB disconnect, device number 6 [ 49.598702][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.611435][ T311] ftdi_sio 1-1:0.0: device disconnected [ 49.705949][ T1745] netlink: 27 bytes leftover after parsing attributes in process `syz.4.486'. [ 49.769924][ T1754] xt_hashlimit: size too large, truncated to 1048576 [ 49.857130][ T60] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 50.147330][ T1776] FAT-fs (loop1): Unrecognized mount option "nonumtaidtl=0" or missing value [ 50.227495][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.247068][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.267148][ T60] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.281627][ T1776] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 50.286755][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.297991][ T1776] System zones: 0-2, 18-18, 34-35 [ 50.303887][ T1776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.325886][ T60] usb 4-1: config 0 descriptor?? [ 50.335368][ T1776] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.366930][ T30] audit: type=1400 audit(1786388920.131:404): avc: denied { create } for pid=1785 comm="syz.0.502" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.421036][ T30] audit: type=1400 audit(1786388920.161:405): avc: denied { read append } for pid=1785 comm="syz.0.502" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.486223][ T30] audit: type=1400 audit(1786388920.161:406): avc: denied { open } for pid=1785 comm="syz.0.502" path="/60/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.625692][ T1770] F2FS-fs (loop4): Test dummy encryption mode enabled [ 50.633789][ T1770] F2FS-fs (loop4): invalid crc value [ 50.663025][ T1770] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.712995][ T1770] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.767561][ T414] loop0: p1 p3 < p5 p6 p7 > p4 [ 50.772546][ T414] loop0: partition table partially beyond EOD, truncated [ 50.795848][ T414] loop0: p4 start 1426063360 is beyond EOD, truncated [ 50.816741][ T414] loop0: p5 size 16777216 extends beyond EOD, truncated [ 50.827701][ T60] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 50.838459][ T414] loop0: p7 start 75776 is beyond EOD, truncated [ 50.838995][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input10 [ 50.848233][ T1790] loop0: p1 p3 < p5 p6 p7 > p4 [ 50.861250][ T1790] loop0: partition table partially beyond EOD, truncated [ 50.870000][ T1774] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 50.871566][ T1790] loop0: p4 start 1426063360 is beyond EOD, truncated [ 50.885780][ T1790] loop0: p5 size 16777216 extends beyond EOD, truncated [ 50.888435][ T1795] F2FS-fs (loop1): invalid crc value [ 50.917631][ T1790] loop0: p7 start 75776 is beyond EOD, truncated [ 50.920007][ T1774] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.933487][ T60] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 50.954403][ T1795] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.979138][ T1774] F2FS-fs (loop2): invalid crc value [ 51.020195][ T1774] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.058405][ T1795] F2FS-fs (loop1): Start checkpoint disabled! [ 51.080191][ T60] usb 4-1: USB disconnect, device number 6 [ 51.086004][ T1795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 51.128045][ T1774] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 51.130771][ T360] udevd[360]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.135250][ T1774] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 51.145908][ T414] udevd[414]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.153345][ T604] udevd[604]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 51.163042][ T364] udevd[364]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 51.239070][ T10] attempt to access beyond end of device [ 51.239070][ T10] loop1: rw=2049, want=40976, limit=40427 [ 51.242374][ T604] udevd[604]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.251709][ T1802] udevd[1802]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 51.261525][ T414] udevd[414]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.271003][ T364] udevd[364]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 51.375653][ T1816] set_capacity_and_notify: 16 callbacks suppressed [ 51.375669][ T1816] loop4: detected capacity change from 0 to 256 [ 51.464892][ T1820] loop4: detected capacity change from 0 to 256 [ 51.472856][ T1818] netlink: 'syz.1.509': attribute type 16 has an invalid length. [ 51.480893][ T1818] netlink: 'syz.1.509': attribute type 17 has an invalid length. [ 51.489320][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 51.496845][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 51.504884][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 51.512774][ T1818] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.555953][ T1820] FAT-fs (loop4): Directory bread(block 64) failed [ 51.562871][ T1820] FAT-fs (loop4): Directory bread(block 65) failed [ 51.567241][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 51.571063][ T1820] FAT-fs (loop4): Directory bread(block 66) failed [ 51.597598][ T1820] FAT-fs (loop4): Directory bread(block 67) failed [ 51.610719][ T1820] FAT-fs (loop4): Directory bread(block 68) failed [ 51.613230][ T1827] input: syz1 as /devices/virtual/input/input11 [ 51.619582][ T1820] FAT-fs (loop4): Directory bread(block 69) failed [ 51.626976][ T1827] input: failed to attach handler leds to device input11, error: -6 [ 51.631617][ T1820] FAT-fs (loop4): Directory bread(block 70) failed [ 51.645854][ T1820] FAT-fs (loop4): Directory bread(block 71) failed [ 51.654701][ T1820] FAT-fs (loop4): Directory bread(block 72) failed [ 51.661860][ T1820] FAT-fs (loop4): Directory bread(block 73) failed [ 51.726329][ T1832] loop3: detected capacity change from 0 to 512 [ 51.767892][ T1834] loop2: detected capacity change from 0 to 512 [ 51.780925][ T1836] loop1: detected capacity change from 0 to 4096 [ 51.789910][ T1832] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.801738][ T1838] loop4: detected capacity change from 0 to 512 [ 51.808975][ T1832] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 51.823672][ T1832] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.518: Failed to acquire dquot type 1 [ 51.835915][ T1836] EXT4-fs (loop1): Test dummy encryption mode enabled [ 51.841185][ T1838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.843418][ T1832] EXT4-fs (loop3): 1 truncate cleaned up [ 51.852848][ T1836] EXT4-fs (loop1): Test dummy encryption mode enabled [ 51.865851][ T1832] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 51.909037][ T1838] EXT4-fs (loop4): 1 truncate cleaned up [ 51.911737][ T1832] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.518: Failed to acquire dquot type 1 [ 51.920486][ T1836] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 51.926785][ T1838] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 51.955264][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.980391][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.995789][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.009281][ T1838] EXT4-fs (loop4): shut down requested (1) [ 52.016673][ T1838] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.026286][ T60] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.029515][ T1838] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.036024][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.072744][ T60] usb 1-1: config 0 descriptor?? [ 52.129483][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 52.129497][ T30] audit: type=1400 audit(1786388921.901:418): avc: denied { bind } for pid=1846 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.134577][ T1848] xt_hashlimit: size too large, truncated to 1048576 [ 52.171394][ T1854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.526'. [ 52.284364][ T30] audit: type=1400 audit(1786388922.051:419): avc: denied { ioctl } for pid=1866 comm="syz.1.531" path="socket:[22622]" dev="sockfs" ino=22622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.385837][ T1876] loop2: detected capacity change from 0 to 16 [ 52.418820][ T1876] erofs: (device loop2): mounted with root inode @ nid 36. [ 52.507861][ T1890] loop3: detected capacity change from 0 to 512 [ 52.543063][ T1900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.545'. [ 52.544129][ T1896] netlink: 64 bytes leftover after parsing attributes in process `syz.4.544'. [ 52.553284][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.571129][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.578768][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.589587][ T1900] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.596987][ T1900] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.607535][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.615131][ T30] audit: type=1400 audit(1786388922.381:420): avc: denied { write } for pid=1903 comm="syz.4.548" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.632608][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.646389][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.646753][ T1904] binder: 1903:1904 ioctl c0306201 0 returned -14 [ 52.654218][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.670520][ T1890] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.541: inode has both inline data and extents flags [ 52.683986][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.691792][ T1890] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.541: couldn't read orphan inode 15 (err -117) [ 52.691799][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.691825][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.719626][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.729068][ T1890] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.729097][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.748534][ T60] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 52.754650][ T1904] binder: 1903:1904 ioctl c0046209 0 returned -22 [ 52.758013][ T60] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 52.779008][ T60] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.813295][ T60] usb 1-1: USB disconnect, device number 7 [ 52.829411][ T1913] fido_id[1913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 52.852890][ T1917] loop1: detected capacity change from 0 to 512 [ 52.868918][ T1919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 52.954967][ T1925] xt_hashlimit: size too large, truncated to 1048576 [ 53.327109][ T821] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 53.345125][ T1930] device ip6erspan0 entered promiscuous mode [ 53.357982][ T1932] loop0: detected capacity change from 0 to 4096 [ 53.398408][ T30] audit: type=1400 audit(1786388923.171:421): avc: denied { create } for pid=1933 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.419081][ T30] audit: type=1400 audit(1786388923.171:422): avc: denied { read } for pid=1933 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.441391][ T1932] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.469482][ T30] audit: type=1400 audit(1786388923.241:423): avc: denied { watch_reads } for pid=1931 comm="syz.0.558" path="/64/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.574696][ T1939] EXT4-fs (loop0): Ignoring removed orlov option [ 53.591620][ T1939] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback. [ 53.610051][ T1939] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.687143][ T821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.699215][ T821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 53.713056][ T821] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 53.720469][ T1951] FAT-fs (loop0): Directory bread(block 64) failed [ 53.725287][ T821] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.733636][ T1951] FAT-fs (loop0): Directory bread(block 65) failed [ 53.753218][ T1951] FAT-fs (loop0): Directory bread(block 66) failed [ 53.760066][ T1951] FAT-fs (loop0): Directory bread(block 67) failed [ 53.766707][ T1951] FAT-fs (loop0): Directory bread(block 68) failed [ 53.808956][ T1955] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 53.826207][ T1951] FAT-fs (loop0): Directory bread(block 69) failed [ 53.834736][ T1951] FAT-fs (loop0): Directory bread(block 70) failed [ 53.842665][ T1955] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.853367][ T1951] FAT-fs (loop0): Directory bread(block 71) failed [ 53.860938][ T1951] FAT-fs (loop0): Directory bread(block 72) failed [ 53.870184][ T1951] FAT-fs (loop0): Directory bread(block 73) failed [ 53.907160][ T821] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.912763][ T1955] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.569: bg 0: block 112: padding at end of block bitmap is not set [ 53.920106][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.941610][ T821] usb 5-1: Product: syz [ 53.945878][ T821] usb 5-1: Manufacturer: syz [ 53.950601][ T821] usb 5-1: SerialNumber: syz [ 53.963890][ T1955] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 53.976475][ T1928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.978450][ T1955] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.978450][ T1955] [ 53.993359][ T1955] EXT4-fs (loop2): Total free blocks count 0 [ 54.002824][ T1955] EXT4-fs (loop2): Free/Dirty block details [ 54.010415][ T1955] EXT4-fs (loop2): free_blocks=0 [ 54.015445][ T1955] EXT4-fs (loop2): dirty_blocks=64 [ 54.022020][ T1955] EXT4-fs (loop2): Block reservation details [ 54.028282][ T1955] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 54.044761][ T1961] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 54.057148][ T1961] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 54.121082][ T1974] netlink: 'syz.2.576': attribute type 4 has an invalid length. [ 54.186562][ T30] audit: type=1400 audit(1786388923.951:424): avc: denied { write } for pid=1982 comm="syz.3.580" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.213296][ T1928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.223178][ T30] audit: type=1400 audit(1786388923.951:425): avc: denied { open } for pid=1982 comm="syz.3.580" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.252568][ T30] audit: type=1400 audit(1786388924.021:426): avc: denied { ioctl } for pid=1982 comm="syz.3.580" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.285100][ T1985] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 54.328051][ T30] audit: type=1400 audit(1786388924.101:427): avc: denied { watch } for pid=1990 comm="syz.2.583" path="/130/file0" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.477643][ T1987] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.488773][ T1987] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.508063][ T1987] F2FS-fs (loop1): invalid crc value [ 54.534055][ T1993] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 54.542145][ T2005] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.550073][ T1993] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.553636][ T2005] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 54.562682][ T1993] F2FS-fs (loop2): invalid crc value [ 54.572423][ T1987] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.578612][ T2005] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 54.594752][ T1993] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 54.638552][ T1993] F2FS-fs (loop2): Start checkpoint disabled! [ 54.640820][ T1987] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.652452][ T1993] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 54.656845][ T1987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.665615][ T1993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 54.708458][ T1987] attempt to access beyond end of device [ 54.708458][ T1987] loop1: rw=10241, want=45104, limit=40427 [ 54.721087][ T1993] attempt to access beyond end of device [ 54.721087][ T1993] loop2: rw=2049, want=77960, limit=40427 [ 54.736252][ T1843] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 54.751135][ T1843] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 54.761314][ T8] attempt to access beyond end of device [ 54.761314][ T8] loop2: rw=2049, want=45104, limit=40427 [ 54.773785][ T2009] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 54.805048][ T2009] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.816746][ T2009] ext2 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.888028][ T1928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.959235][ T2018] input: syz0 as /devices/virtual/input/input12 [ 54.986630][ T2021] input: syz1 as /devices/virtual/input/input13 [ 55.056830][ T2026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.597'. [ 55.077443][ T2026] Zero length message leads to an empty skb [ 55.096140][ T2028] EXT4-fs (loop1): Ignoring removed bh option [ 55.135981][ T2028] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 55.155299][ T821] cdc_ncm 5-1:1.0: bind() failure [ 55.160807][ T2028] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.176912][ T2028] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: block 3: comm syz.1.598: lblock 3 mapped to illegal pblock 3 (length 3) [ 55.193480][ T2028] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.598: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 55.195568][ T2038] netlink: 104 bytes leftover after parsing attributes in process `syz.2.600'. [ 55.214747][ T821] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 55.234770][ T2028] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.598: lblock 0 mapped to illegal pblock 0 (length 3) [ 55.249014][ T2028] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 55.261760][ T2028] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.261760][ T2028] [ 55.277155][ T821] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 55.313866][ T821] usb 5-1: USB disconnect, device number 4 [ 55.394581][ T2058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 55.517141][ T307] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.588261][ T2072] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.617: invalid indirect mapped block 4294967295 (level 1) [ 55.617608][ T2072] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.617: invalid indirect mapped block 4294967295 (level 1) [ 55.647405][ T2074] F2FS-fs (loop2): invalid crc value [ 55.656241][ T2072] EXT4-fs (loop1): 2 truncates cleaned up [ 55.662874][ T2072] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,init_itable=0x0000000000004004,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 55.683201][ T2074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.702313][ T2070] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 55.719703][ T2070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.728157][ T2074] F2FS-fs (loop2): Start checkpoint disabled! [ 55.735931][ T2070] F2FS-fs (loop3): invalid crc value [ 55.737564][ T2074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 55.743176][ T2070] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 55.788853][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 55.841435][ T2070] F2FS-fs (loop3): Start checkpoint disabled! [ 55.852588][ T2074] attempt to access beyond end of device [ 55.852588][ T2074] loop2: rw=2049, want=45104, limit=40427 [ 55.874746][ T2070] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 55.885420][ T2070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 55.907151][ T307] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 55.927154][ T307] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 55.929133][ T8] attempt to access beyond end of device [ 55.929133][ T8] loop2: rw=2049, want=40976, limit=40427 [ 55.952229][ T307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.967191][ T307] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 55.988730][ T8] attempt to access beyond end of device [ 55.988730][ T8] loop3: rw=2049, want=45104, limit=40427 [ 56.007175][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.022664][ T307] usb 1-1: config 0 descriptor?? [ 56.216047][ T2101] EXT4-fs (loop1): Unrecognized mount option "subj_role=" or missing value [ 56.509969][ T307] wacom 0003:056A:4001.000C: ignoring exceeding usage max [ 56.539622][ T307] wacom 0003:056A:4001.000C: hidraw0: USB HID v0.01 Device [HID 056a:4001] on usb-dummy_hcd.0-1/input0 [ 56.737995][ T60] usb 1-1: USB disconnect, device number 8 [ 56.770782][ T2105] set_capacity_and_notify: 16 callbacks suppressed [ 56.770801][ T2105] loop1: detected capacity change from 0 to 40427 [ 56.791433][ T2105] F2FS-fs (loop1): invalid crc value [ 56.828317][ T2105] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.898680][ T2105] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.950014][ T2104] loop3: detected capacity change from 0 to 131072 [ 56.969840][ T2104] F2FS-fs (loop3): Test dummy encryption mode enabled [ 56.986601][ T2104] F2FS-fs (loop3): invalid crc value [ 57.006813][ T2104] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.012600][ T307] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.017293][ T311] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 57.034490][ T291] attempt to access beyond end of device [ 57.034490][ T291] loop1: rw=2049, want=40976, limit=40427 [ 57.053621][ T2104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 57.334918][ T2123] loop3: detected capacity change from 0 to 512 [ 57.379050][ T2123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.387213][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.390622][ T2123] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.401773][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 57.425208][ T311] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 57.434260][ T39] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 57.452657][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.461718][ T311] usb 5-1: config 0 descriptor?? [ 57.477960][ T2128] xt_hashlimit: size too large, truncated to 1048576 [ 57.507145][ T307] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 57.522114][ T307] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 57.531591][ T307] usb 3-1: Product: syz [ 57.537932][ T307] usb 3-1: config 0 descriptor?? [ 57.574135][ T2133] loop3: detected capacity change from 0 to 512 [ 57.583840][ T2133] EXT4-fs (loop3): Ignoring removed orlov option [ 57.597678][ T307] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 57.605923][ T307] usb 3-1: Detected FT232H [ 57.612000][ T2133] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback. [ 57.625198][ T2133] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.684173][ T2137] binder: 2136:2137 ioctl c0306201 0 returned -14 [ 57.691439][ T2137] binder: 2136:2137 ioctl c0046209 0 returned -22 [ 57.702106][ T2139] loop0: detected capacity change from 0 to 512 [ 57.719149][ T2139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.731586][ T2139] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.817217][ T307] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 57.824355][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.839286][ T2154] device syz_tun entered promiscuous mode [ 57.846034][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 57.857543][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 57.858543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 57.877508][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.887217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.895857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 57.904283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.913044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.922158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.930708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.940337][ T311] hid-led 0003:1294:1320.000D: unknown main item tag 0xd [ 57.948077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.956292][ T311] hid-led 0003:1294:1320.000D: unknown main item tag 0xe [ 57.966974][ T311] hid-led 0003:1294:1320.000D: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 57.981516][ T311] hid-led 0003:1294:1320.000D: Riso Kagaku Webmail Notifier initialized [ 58.011807][ T2156] loop3: detected capacity change from 0 to 40427 [ 58.029739][ T2156] F2FS-fs (loop3): invalid crc value [ 58.041266][ T2156] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.057187][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.076501][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.086616][ T39] usb 2-1: Product: syz [ 58.090973][ T39] usb 2-1: Manufacturer: syz [ 58.095662][ T39] usb 2-1: SerialNumber: syz [ 58.107435][ T2156] F2FS-fs (loop3): Start checkpoint disabled! [ 58.121530][ T2156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 58.129214][ T2121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.183666][ T2160] loop0: detected capacity change from 0 to 40427 [ 58.187469][ T311] usb 5-1: USB disconnect, device number 5 [ 58.204303][ T20] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 58.204970][ T2160] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 58.212961][ T20] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 58.225167][ T2160] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.238105][ T20] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 58.238434][ T2156] attempt to access beyond end of device [ 58.238434][ T2156] loop3: rw=2049, want=45104, limit=40427 [ 58.248208][ T2160] F2FS-fs (loop0): invalid crc value [ 58.265313][ T2160] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 58.294343][ T45] attempt to access beyond end of device [ 58.294343][ T45] loop3: rw=2049, want=40976, limit=40427 [ 58.295050][ T2160] F2FS-fs (loop0): Start checkpoint disabled! [ 58.312846][ T2160] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.320554][ T2160] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 58.329715][ T307] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.369087][ T2121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.390009][ T45] attempt to access beyond end of device [ 58.390009][ T45] loop0: rw=2049, want=45104, limit=40427 [ 58.489895][ T2166] xt_hashlimit: size too large, truncated to 1048576 [ 58.536277][ T60] usb 3-1: USB disconnect, device number 5 [ 58.553492][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.567320][ T60] ftdi_sio 3-1:0.0: device disconnected [ 58.687055][ T2169] binder: 2168:2169 ioctl c0306201 0 returned -14 [ 58.687114][ T307] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 58.694840][ T2169] binder: 2168:2169 ioctl c0046209 0 returned -22 [ 58.728746][ T2171] netlink: 52 bytes leftover after parsing attributes in process `syz.4.649'. [ 58.742496][ T2171] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.749980][ T2171] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.017848][ T2121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 59.057297][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.065120][ T2179] xt_hashlimit: size too large, truncated to 1048576 [ 59.073253][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 59.087282][ T307] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.098828][ T307] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 19 [ 59.227377][ T2189] loop0: detected capacity change from 0 to 512 [ 59.257153][ T39] cdc_ncm 2-1:1.0: bind() failure [ 59.267169][ T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.276339][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.284625][ T39] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 59.293042][ T307] usb 4-1: Product: syz [ 59.297673][ T307] usb 4-1: Manufacturer: syz [ 59.302919][ T307] usb 4-1: SerialNumber: syz [ 59.317211][ T39] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 59.322165][ T2189] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.329114][ T39] usb 2-1: USB disconnect, device number 3 [ 59.356482][ T2198] xt_hashlimit: size too large, truncated to 1048576 [ 59.370582][ T2189] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 59.385550][ T2189] __quota_error: 8 callbacks suppressed [ 59.385570][ T2189] Quota error (device loop0): write_blk: dquota write failed [ 59.399613][ T2189] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 59.409165][ T2189] Quota error (device loop0): write_blk: dquota write failed [ 59.409391][ T2195] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 59.416760][ T2189] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 59.434714][ T2189] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.655: Failed to acquire dquot type 1 [ 59.445206][ T2195] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 59.454949][ T2189] EXT4-fs (loop0): 1 truncate cleaned up [ 59.462253][ T2189] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 59.525770][ T2189] Quota error (device loop0): write_blk: dquota write failed [ 59.534098][ T2189] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 59.544767][ T2189] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.655: Failed to acquire dquot type 1 [ 59.787581][ T60] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 59.805563][ T60] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 59.825757][ T60] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 59.880862][ T2220] fido_id[2220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.915738][ T2207] loop4: detected capacity change from 0 to 40427 [ 59.948807][ T2207] F2FS-fs (loop4): invalid crc value [ 59.957630][ T2207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.987136][ T2207] F2FS-fs (loop4): Start checkpoint disabled! [ 59.994150][ T2207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 60.032755][ T2224] dummy_hcd dummy_hcd.0: remove, state 1 [ 60.038521][ T2224] usb usb1: USB disconnect, device number 1 [ 60.039558][ T1843] attempt to access beyond end of device [ 60.039558][ T1843] loop4: rw=2049, want=40976, limit=40427 [ 60.077344][ T20] usb usb1-port1: attempt power cycle [ 60.117081][ T311] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 60.130751][ T2224] dummy_hcd dummy_hcd.0: stopped [ 60.137996][ T2224] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 60.192142][ T2226] netlink: 'syz.4.668': attribute type 16 has an invalid length. [ 60.200333][ T2226] netlink: 'syz.4.668': attribute type 17 has an invalid length. [ 60.209382][ T2226] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 60.213146][ T2232] loop1: detected capacity change from 0 to 256 [ 60.217382][ T2226] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 60.230857][ T2226] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 60.237439][ T2232] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 60.238838][ T2226] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.344313][ T2238] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 60.360989][ T2238] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.383912][ T2238] EXT4-fs (loop1): shut down requested (1) [ 60.437143][ T307] cdc_ncm 4-1:1.0: bind() failure [ 60.457412][ T307] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 60.477104][ T307] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 60.498719][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.501841][ T307] usb 4-1: USB disconnect, device number 7 [ 60.518503][ T2241] EXT4-fs (loop1): Ignoring removed orlov option [ 60.523022][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.556487][ T311] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 60.556657][ T2241] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback. [ 60.567661][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.591842][ T311] usb 3-1: config 0 descriptor?? [ 60.597530][ T2241] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.788910][ T2236] F2FS-fs (loop4): Test dummy encryption mode enabled [ 60.804739][ T2236] F2FS-fs (loop4): invalid crc value [ 60.832794][ T2236] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.870931][ T2236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.877120][ T30] audit: type=1400 audit(1786389186.640:436): avc: denied { map } for pid=2257 comm="syz.1.681" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.911435][ T2261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=2261 comm=syz.1.682 [ 60.962497][ T30] audit: type=1400 audit(1786389186.730:437): avc: denied { create } for pid=2264 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.068390][ T311] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 61.081238][ T311] hid-generic 0003:04F3:0755.000F: unknown main item tag 0x0 [ 61.097571][ T311] hid-generic 0003:04F3:0755.000F: failed to start in urb: -90 [ 61.108494][ T311] hid-generic 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 61.323774][ T311] usb 3-1: USB disconnect, device number 6 [ 61.514996][ T2281] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 61.523447][ T2281] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 61.557212][ T2281] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 61.604818][ T2281] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.683876][ T2281] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 61.698368][ T2281] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.787347][ T2277] F2FS-fs (loop1): Test dummy encryption mode enabled [ 61.800297][ T2275] F2FS-fs (loop3): Test dummy encryption mode enabled [ 61.807589][ T2277] F2FS-fs (loop1): invalid crc value [ 61.818379][ T2275] F2FS-fs (loop3): invalid crc value [ 61.829468][ T2277] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.868270][ T2275] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.912001][ T2277] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.938342][ T30] audit: type=1400 audit(1786389187.710:438): avc: denied { bind } for pid=2295 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.977110][ T2275] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.034432][ T2303] set_capacity_and_notify: 6 callbacks suppressed [ 62.034447][ T2303] loop4: detected capacity change from 0 to 1024 [ 62.118278][ T2303] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 62.159156][ T2303] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 62.167422][ T2303] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.217576][ T2303] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 62.257219][ T2303] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.292704][ T2312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 62.319446][ T2303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.692: bg 0: block 112: padding at end of block bitmap is not set [ 62.380436][ T2303] EXT4-fs (loop4): Remounting filesystem read-only [ 62.388906][ T30] audit: type=1400 audit(1786389188.160:439): avc: denied { audit_read } for pid=2317 comm="syz.1.702" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.513068][ T2335] loop1: detected capacity change from 0 to 1024 [ 62.534248][ T2340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.711'. [ 62.553615][ T2335] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 62.586427][ T2335] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.602136][ T2335] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: block 3: comm syz.1.709: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.617320][ T2335] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.709: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 62.638972][ T2335] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.709: Freeing blocks not in datazone - block = 3, count = 1 [ 62.719608][ T2362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'. [ 62.780410][ T2218] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 62.792491][ T2218] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 62.800910][ T2218] CPU: 1 PID: 2218 Comm: syz.0.665 Tainted: G W syzkaller #0 [ 62.809600][ T2218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.819866][ T2218] RIP: 0010:set_link_state+0x2a/0x1210 [ 62.825351][ T2218] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 2d 08 40 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 88 77 7f fe 4d 8b 75 00 49 8d 95 8b [ 62.845041][ T2218] RSP: 0018:ffffc90000ba7760 EFLAGS: 00010046 [ 62.851399][ T2218] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881165393c0 [ 62.859366][ T2218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.867413][ T2218] RBP: ffffc90000ba77e8 R08: 0000000000000003 R09: 0000000000000004 [ 62.875374][ T2218] R10: dffffc0000000000 R11: fffff52000174eec R12: 0000000000000000 [ 62.883340][ T2218] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810b768000 [ 62.892038][ T2218] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 62.901073][ T2218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.907647][ T2218] CR2: 00007ffd53126db8 CR3: 000000000660f000 CR4: 00000000003506a0 [ 62.915629][ T2218] DR0: 0000000000000001 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.923861][ T2218] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 62.931833][ T2218] Call Trace: [ 62.935101][ T2218] [ 62.938023][ T2218] dummy_pullup+0xcd/0x130 [ 62.942625][ T2218] ? dummy_set_selfpowered+0x150/0x150 [ 62.948252][ T2218] usb_gadget_disconnect+0xe0/0x330 [ 62.953465][ T2218] usb_gadget_remove_driver+0x46/0x310 [ 62.959087][ T2218] usb_gadget_unregister_driver+0x181/0x480 [ 62.964984][ T2218] ? kasan_quarantine_put+0x34/0x190 [ 62.970428][ T2218] raw_release+0xda/0x260 [ 62.974738][ T2218] ? raw_open+0x3d0/0x3d0 [ 62.979093][ T2218] __fput+0x22b/0x900 [ 62.983355][ T2218] ____fput+0x15/0x20 [ 62.987520][ T2218] task_work_run+0x127/0x190 [ 62.992390][ T2218] do_exit+0xb70/0x29a0 [ 62.996621][ T2218] ? kasan_quarantine_put+0x34/0x190 [ 63.001908][ T2218] ? put_task_struct+0x90/0x90 [ 63.006668][ T2218] ? __kasan_check_write+0x14/0x20 [ 63.011857][ T2218] ? _raw_spin_lock_irq+0x95/0xf0 [ 63.016884][ T2218] do_group_exit+0x149/0x310 [ 63.021655][ T2218] ? __kasan_check_write+0x14/0x20 [ 63.026936][ T2218] ? recalc_sigpending+0x1c4/0x230 [ 63.032174][ T2218] get_signal+0x64f/0x1430 [ 63.036593][ T2218] arch_do_signal_or_restart+0xe2/0x1100 [ 63.042217][ T2218] ? file_end_write+0x1b0/0x1b0 [ 63.047361][ T2218] ? __fget_files+0x2e1/0x340 [ 63.052293][ T2218] ? get_sigframe_size+0x10/0x10 [ 63.057424][ T2218] ? __se_sys_futex+0x135/0x330 [ 63.062505][ T2218] ? __kasan_check_write+0x14/0x20 [ 63.068356][ T2218] exit_to_user_mode_loop+0xa7/0xe0 [ 63.073674][ T2218] exit_to_user_mode_prepare+0x87/0xd0 [ 63.079383][ T2218] syscall_exit_to_user_mode+0x1a/0x30 [ 63.084917][ T2218] do_syscall_64+0x58/0xa0 [ 63.089775][ T2218] ? clear_bhb_loop+0x50/0xa0 [ 63.094525][ T2218] ? clear_bhb_loop+0x50/0xa0 [ 63.099185][ T2218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.105067][ T2218] RIP: 0033:0x7fae779c80d9 [ 63.109464][ T2218] Code: Unable to access opcode bytes at RIP 0x7fae779c80af. [ 63.117261][ T2218] RSP: 002b:00007fae764000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.125907][ T2218] RAX: fffffffffffffe00 RBX: 00007fae77c50098 RCX: 00007fae779c80d9 [ 63.134148][ T2218] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae77c50098 [ 63.142339][ T2218] RBP: 00007fae77c50090 R08: 0000000000000000 R09: 0000000000000000 [ 63.150307][ T2218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.158312][ T2218] R13: 00007fae77c50128 R14: 00007ffe566b3a20 R15: 00007ffe566b3b08 [ 63.166288][ T2218] [ 63.169329][ T2218] Modules linked in: [ 63.173321][ T2218] ---[ end trace 8b7521a9ee957abf ]--- [ 63.178934][ T2218] RIP: 0010:set_link_state+0x2a/0x1210 [ 63.184574][ T2218] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 2d 08 40 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 88 77 7f fe 4d 8b 75 00 49 8d 95 8b [ 63.204603][ T2218] RSP: 0018:ffffc90000ba7760 EFLAGS: 00010046 [ 63.210669][ T2218] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881165393c0 [ 63.218816][ T2218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.226795][ T2218] RBP: ffffc90000ba77e8 R08: 0000000000000003 R09: 0000000000000004 [ 63.234778][ T2218] R10: dffffc0000000000 R11: fffff52000174eec R12: 0000000000000000 [ 63.242762][ T2218] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810b768000 [ 63.250743][ T2218] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 63.259930][ T2218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.266518][ T2218] CR2: 00007ffd53126db8 CR3: 000000000660f000 CR4: 00000000003506a0 [ 63.274495][ T2218] DR0: 0000000000000001 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.282463][ T2218] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 63.290512][ T2218] Kernel panic - not syncing: Fatal exception [ 63.296787][ T2218] Kernel Offset: disabled [ 63.301214][ T2218] Rebooting in 86400 seconds..