last executing test programs: 1m45.933330169s ago: executing program 3 (id=210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40c02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m45.932978709s ago: executing program 3 (id=211): r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x8, 0x22900) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00020000b0ffe1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) read$usbmon(r0, 0x0, 0x0) 1m44.291212546s ago: executing program 3 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) madvise(&(0x7f000066b000/0x3000)=nil, 0x3000, 0x1d) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000080060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) 1m43.097122238s ago: executing program 3 (id=225): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x8, 0x4000, 0x4000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='defconte\x00']) 1m41.718175664s ago: executing program 3 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000100018000ffef2000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1m41.154942347s ago: executing program 3 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000080000000800000005", @ANYBLOB="b334533d855953e611f8b49c27246069a60834996f9980898918abdc40204537a1d51322825d3600680589ac0d68fb16", @ANYBLOB="687b591bcb7f22d76041412d"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = dup(r7) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r8, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472611e6e733d66642c7266646e6f", @ANYRESHEX=r6, @ANYBLOB=',wfd', @ANYBLOB=',cache_']) utime(&(0x7f0000000200)='./file0\x00', 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000000100000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 1m41.081371653s ago: executing program 32 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000080000000800000005", @ANYBLOB="b334533d855953e611f8b49c27246069a60834996f9980898918abdc40204537a1d51322825d3600680589ac0d68fb16", @ANYBLOB="687b591bcb7f22d76041412d"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = dup(r7) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r8, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472611e6e733d66642c7266646e6f", @ANYRESHEX=r6, @ANYBLOB=',wfd', @ANYBLOB=',cache_']) utime(&(0x7f0000000200)='./file0\x00', 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000000100000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 2.44159337s ago: executing program 5 (id=907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) io_setup(0x1, &(0x7f0000000080)=0x0) io_destroy(r1) 2.300041781s ago: executing program 5 (id=908): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.289193511s ago: executing program 1 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x6) socket$inet(0xa, 0x2, 0x84) socket$inet(0xa, 0x800, 0x84) listen(0xffffffffffffffff, 0xb) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.234714226s ago: executing program 2 (id=912): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 2.036746481s ago: executing program 2 (id=914): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) 1.923828279s ago: executing program 1 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) 1.92349632s ago: executing program 2 (id=918): unshare(0x24020400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) fcntl$getownex(r1, 0x10, 0x0) 1.91582942s ago: executing program 2 (id=919): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1280, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') renameat2(r0, 0x0, r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r1, 0x0, 0x0) 1.906845561s ago: executing program 1 (id=920): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.835788047s ago: executing program 4 (id=922): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b"], 0x50) r4 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000480), 0x66) 1.775944191s ago: executing program 1 (id=924): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) 1.569194187s ago: executing program 2 (id=925): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x8020, 0x0, 0x0) 1.561858398s ago: executing program 4 (id=926): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96b, 0x6, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000)='9', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 1.484220914s ago: executing program 1 (id=928): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000080)={0x0, 0x1, r0, 0x4}) 1.433992348s ago: executing program 4 (id=929): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.342346935s ago: executing program 4 (id=932): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) 991.920612ms ago: executing program 5 (id=933): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 831.495245ms ago: executing program 5 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000301010800000000000000000200000418000280140001"], 0x2c}, 0x1, 0x0, 0x0, 0xc5}, 0x8000) 743.845682ms ago: executing program 5 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000880)='syzkaller\x00', 0x6, 0xf, &(0x7f00000008c0)=""/15, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x1, 0xa, 0x7ad6df0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 715.905924ms ago: executing program 0 (id=938): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100005"], 0x38}}, 0x0) r1 = dup(r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[]) 714.648764ms ago: executing program 5 (id=939): r0 = socket$igmp6(0xa, 0x3, 0x2) lseek(0xffffffffffffffff, 0xc, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000480)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x80ad}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x3, 0x1}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 659.990798ms ago: executing program 2 (id=940): syz_clone(0x802000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x7, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) read$FUSE(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, 0x0, 0x0) 596.099183ms ago: executing program 0 (id=941): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f00000002c0)) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 587.594074ms ago: executing program 1 (id=942): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x14, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0}) 558.483316ms ago: executing program 0 (id=943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 259.99259ms ago: executing program 0 (id=944): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x0, 0x9) 259.77524ms ago: executing program 4 (id=945): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 217.648473ms ago: executing program 0 (id=946): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x0, 0x3, 0x800000) chdir(&(0x7f0000000240)='./file0\x00') 67.319314ms ago: executing program 4 (id=947): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008018, &(0x7f00000000c0)=ANY=[], 0x5, 0x202, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x402a, 0x10100002000001, 0x0, 0x7}) 0s ago: executing program 0 (id=948): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./bus\x00', 0x8, &(0x7f00000005c0)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 0 audit(1766075648.409:320): avc: denied { read } for pid=1112 comm="syz.3.211" name="usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.625325][ T30] audit: type=1400 audit(1766075648.409:321): avc: denied { open } for pid=1112 comm="syz.3.211" path="/dev/usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.709416][ T1121] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.084294][ T30] audit: type=1400 audit(1766075649.069:322): avc: denied { connect } for pid=1082 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.167923][ T1136] netlink: 188 bytes leftover after parsing attributes in process `syz.2.219'. [ 75.202777][ T367] usbhid 1-1:0.0: can't add hid device: -71 [ 75.209107][ T367] usbhid: probe of 1-1:0.0 failed with error -71 [ 75.216199][ T1137] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 75.219574][ T367] usb 1-1: USB disconnect, device number 3 [ 75.530147][ T1142] loop3: detected capacity change from 0 to 1024 [ 75.603109][ T1142] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.705203][ T1142] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 76.418178][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 76.480391][ T1161] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 76.843273][ T1165] loop4: detected capacity change from 0 to 4096 [ 76.863337][ T1165] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 76.978402][ T1163] loop3: detected capacity change from 0 to 40427 [ 76.995256][ T1163] F2FS-fs (loop3): invalid crc value [ 77.013745][ T1163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.072388][ T1163] F2FS-fs (loop3): Start checkpoint disabled! [ 77.086543][ T1163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 77.174543][ T1173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.226'. [ 77.265626][ T30] audit: type=1400 audit(1766075651.179:323): avc: denied { create } for pid=1174 comm="syz.0.227" dev="anon_inodefs" ino=19173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.284121][ T1163] attempt to access beyond end of device [ 77.284121][ T1163] loop3: rw=2049, want=77960, limit=40427 [ 77.302962][ T1163] attempt to access beyond end of device [ 77.302962][ T1163] loop3: rw=0, want=77960, limit=40427 [ 77.303993][ T30] audit: type=1400 audit(1766075651.179:324): avc: denied { ioctl } for pid=1174 comm="syz.0.227" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19173 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.340373][ T6] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.426688][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.767250][ T30] audit: type=1400 audit(1766075651.749:325): avc: denied { unlink } for pid=1162 comm="syz.3.225" name="#5" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.789641][ T1178] incfs: Options parsing error. -22 [ 77.802752][ T1178] incfs: mount failed -22 [ 77.827205][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.00 [ 77.842253][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.853304][ T6] usb 3-1: config 0 descriptor?? [ 77.875253][ T283] attempt to access beyond end of device [ 77.875253][ T283] loop3: rw=524288, want=45072, limit=40427 [ 77.892283][ T283] attempt to access beyond end of device [ 77.892283][ T283] loop3: rw=0, want=45072, limit=40427 [ 77.907106][ T1184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.231'. [ 77.918912][ T1184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.231'. [ 77.928440][ T1182] device wireguard0 entered promiscuous mode [ 77.942962][ T428] attempt to access beyond end of device [ 77.942962][ T428] loop3: rw=2049, want=40992, limit=40427 [ 78.024475][ T1192] loop4: detected capacity change from 0 to 1024 [ 78.063463][ T1192] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.243413][ T1197] loop1: detected capacity change from 0 to 40427 [ 78.304977][ T1197] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 78.312778][ T1197] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.431994][ T1197] F2FS-fs (loop1): invalid crc value [ 78.524459][ T1197] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 78.555160][ T1197] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 78.561947][ T1197] F2FS-fs (loop1): Start checkpoint disabled! [ 78.576182][ T1197] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.583305][ T1197] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 78.665089][ T6] apple 0003:05AC:0215.0002: unbalanced collection at end of report description [ 78.674557][ T6] apple 0003:05AC:0215.0002: parse failed [ 78.680314][ T6] apple: probe of 0003:05AC:0215.0002 failed with error -22 [ 78.726138][ T6] usb 3-1: USB disconnect, device number 6 [ 78.757634][ T30] audit: type=1400 audit(1766075652.739:326): avc: denied { mounton } for pid=1210 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.787380][ T485] device bridge_slave_1 left promiscuous mode [ 78.799048][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.815466][ T485] device bridge_slave_0 left promiscuous mode [ 78.828276][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.845120][ T485] device veth1_macvtap left promiscuous mode [ 78.854210][ T485] device veth0_vlan left promiscuous mode [ 78.956883][ T10] attempt to access beyond end of device [ 78.956883][ T10] loop1: rw=2049, want=45104, limit=40427 [ 79.179285][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.187113][ T1210] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.195000][ T1210] device bridge_slave_0 entered promiscuous mode [ 79.213909][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.221073][ T1210] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.233511][ T1210] device bridge_slave_1 entered promiscuous mode [ 79.299332][ T1228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1228 comm=syz.4.243 [ 79.322099][ T1230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'. [ 79.365043][ T1232] loop1: detected capacity change from 0 to 512 [ 79.390297][ T1230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'. [ 79.417775][ T1232] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.473135][ T1232] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 79.482347][ T1232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 79.587300][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.594430][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.601762][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.608872][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.944936][ T1247] netlink: 'syz.4.246': attribute type 4 has an invalid length. [ 80.053109][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.063354][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.079463][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.107391][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.134020][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.147209][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.154318][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.161756][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.170119][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.177187][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.193035][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.250884][ T1221] loop0: detected capacity change from 0 to 131072 [ 80.267018][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.284504][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.295173][ T1221] F2FS-fs (loop0): invalid crc value [ 80.337316][ T1221] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.351297][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.397907][ T1210] device veth0_vlan entered promiscuous mode [ 80.405437][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.414198][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.422769][ T1221] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 80.429946][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.439191][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.442757][ T1221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 80.448275][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.465609][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.842381][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.852897][ T30] audit: type=1400 audit(1766075654.809:327): avc: denied { append } for pid=1219 comm="syz.0.242" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.880988][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.908872][ T1210] device veth1_macvtap entered promiscuous mode [ 80.916406][ T1271] device syzkaller0 entered promiscuous mode [ 80.928616][ T1271] tipc: Enabled bearer , priority 0 [ 80.942899][ T30] audit: type=1400 audit(1766075654.879:328): avc: denied { mounton } for pid=1276 comm="syz.1.254" path="/syzcgroup/cpu/syz1/cpuset.cpus" dev="cgroup" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 80.969320][ T1279] xt_bpf: check failed: parse error [ 80.984780][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.992529][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.021809][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.060844][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.099691][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.192484][ T1269] tipc: Resetting bearer [ 81.200195][ T1269] tipc: Disabling bearer [ 81.290439][ T30] audit: type=1400 audit(1766075655.269:329): avc: denied { mounton } for pid=1210 comm="syz-executor" path="/root/syzkaller.Z6GVlY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.444342][ T1294] tmpfs: Unknown parameter 'nolazytime7777777777777' [ 81.453002][ T1294] loop4: detected capacity change from 0 to 256 [ 81.588984][ T1294] FAT-fs (loop4): Unrecognized mount option "0x000000000000000a00000000000000000000000" or missing value [ 81.799216][ T1294] device wireguard0 entered promiscuous mode [ 83.016016][ T1307] loop1: detected capacity change from 0 to 40427 [ 83.023036][ T30] audit: type=1400 audit(1766075656.849:330): avc: denied { bind } for pid=1303 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.106138][ T1307] F2FS-fs (loop1): invalid crc value [ 83.153705][ T1307] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 83.154062][ T1314] netlink: 'syz.0.259': attribute type 27 has an invalid length. [ 83.184056][ T30] audit: type=1400 audit(1766075656.849:331): avc: denied { setopt } for pid=1303 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.204572][ T1307] F2FS-fs (loop1): inconsistent node block, nid:3, node_footer[nid:83886083,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 83.217683][ T1307] F2FS-fs (loop1): Failed to read root inode [ 83.251412][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.258678][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.934973][ T1317] netlink: 'syz.0.259': attribute type 8 has an invalid length. [ 84.259852][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 84.313677][ T1328] loop2: detected capacity change from 0 to 512 [ 84.363636][ T1328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 84.371649][ T1328] System zones: 1-12 [ 84.376658][ T1328] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.264: Directory hole found for htree index block 0 [ 84.389240][ T1328] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 84.397745][ T1328] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.264: Directory hole found for htree index block 0 [ 84.412265][ T1328] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 84.420533][ T1328] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 84.506828][ T1336] netlink: 'syz.5.266': attribute type 4 has an invalid length. [ 85.586019][ T1346] loop5: detected capacity change from 0 to 512 [ 85.625087][ T1346] SELinux: security_context_str_to_sid(sy) failed for (dev ?, type ?) errno=-22 [ 85.696454][ T1346] EXT4-fs (loop5): Ignoring removed orlov option [ 85.704687][ T1346] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.270: inode #1: comm syz.5.270: iget: illegal inode # [ 85.717802][ T1346] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.270: error while reading EA inode 1 err=-117 [ 85.737528][ T1346] EXT4-fs (loop5): 1 orphan inode deleted [ 85.738132][ T1349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 85.743445][ T290] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 85.752359][ T1349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'. [ 85.760079][ T1346] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,orlov,norecovery,journal_ioprio=0x0000000000000005,min_batch_time=0x000000000000f09d,errors=continue,dioread_lock,noblock_validity,noquota,nolazytime,errors=continue. Quota mode: none. [ 85.770701][ T1349] bridge0: port 3(vlan2) entered blocking state [ 85.803268][ T1346] SELinux: security_context_str_to_sid(sy) failed for (dev loop5, type ext4) errno=-22 [ 85.804807][ T1349] bridge0: port 3(vlan2) entered disabled state [ 85.871229][ T1351] 9pnet: Insufficient options for proto=fd [ 85.921081][ T1355] loop2: detected capacity change from 0 to 256 [ 85.936913][ T30] audit: type=1400 audit(1766075659.919:332): avc: denied { remount } for pid=1354 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.962831][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.032692][ T290] usb 2-1: Invalid ep0 maxpacket: 64 [ 86.078616][ T1357] xt_hashlimit: size too large, truncated to 1048576 [ 86.182683][ T290] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 86.513454][ T20] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 86.587299][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.602212][ T20] usb 1-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.615347][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.621974][ T20] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 86.631042][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.639693][ T20] usb 1-1: config 0 descriptor?? [ 86.644872][ T290] usb 2-1: Invalid ep0 maxpacket: 64 [ 86.650303][ T290] usb usb2-port1: attempt power cycle [ 86.720229][ T1367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.276'. [ 86.953236][ T20] usb-storage 1-1:0.0: USB Mass Storage device detected [ 86.961245][ T20] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 87.241620][ T1373] loop2: detected capacity change from 0 to 512 [ 87.298051][ T1373] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.313441][ T1373] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.324000][ T290] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 87.466838][ T1373] EXT4-fs error (device loop2): __ext4_iget:4939: inode #2: block 256: comm syz.2.277: invalid block [ 87.480061][ T1373] EXT4-fs (loop2): get root inode failed [ 87.485829][ T1373] EXT4-fs (loop2): mount failed [ 87.530968][ T1376] loop5: detected capacity change from 0 to 128 [ 87.572836][ T290] usb 2-1: device descriptor read/8, error -71 [ 87.599554][ T371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.641367][ T371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.661397][ T333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.782884][ T290] usb 2-1: device descriptor read/8, error -71 [ 87.875908][ T371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.883399][ T1380] attempt to access beyond end of device [ 87.883399][ T1380] loop5: rw=2049, want=1041, limit=128 [ 88.332462][ T1390] 9pnet: Insufficient options for proto=fd [ 88.443724][ T1396] netlink: 104 bytes leftover after parsing attributes in process `syz.2.284'. [ 88.758474][ T371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.778841][ T1406] tipc: New replicast peer: 255.255.255.255 [ 88.791916][ T1406] tipc: Enabled bearer , priority 10 [ 88.831626][ T333] usb 1-1: USB disconnect, device number 4 [ 88.958664][ T1411] loop2: detected capacity change from 0 to 512 [ 89.272864][ T1411] EXT4-fs (loop2): 1 orphan inode deleted [ 89.278803][ T1411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.290358][ T1411] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.428132][ T1416] loop5: detected capacity change from 0 to 512 [ 89.783454][ T1416] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.485024][ T30] audit: type=1400 audit(1766075664.469:333): avc: denied { write } for pid=1421 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.589650][ T1416] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 90.652992][ T1416] FAT-fs (loop5): Filesystem has been set read-only [ 91.682723][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.605248][ T1416] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 93.865776][ T1443] loop4: detected capacity change from 0 to 1024 [ 94.767726][ T1444] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 94.818138][ T1443] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.988487][ T1444] syz.1.297 (1444) used greatest stack depth: 20192 bytes left [ 95.007598][ T1451] loop5: detected capacity change from 0 to 256 [ 95.023878][ T1443] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 95.063645][ T1451] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.073965][ T30] audit: type=1400 audit(1766075669.059:334): avc: denied { getopt } for pid=1452 comm="syz.1.303" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.091473][ T1451] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 95.109389][ T1451] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 97.074535][ T1474] loop4: detected capacity change from 0 to 256 [ 97.193916][ T1474] FAT-fs (loop4): bogus number of FAT sectors [ 97.200098][ T1474] FAT-fs (loop4): Can't find a valid FAT filesystem [ 97.264091][ T20] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 97.546606][ T1483] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 97.604262][ T1481] netlink: 'syz.0.309': attribute type 12 has an invalid length. [ 97.616444][ T30] audit: type=1400 audit(1766075671.599:335): avc: denied { connect } for pid=1480 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.804316][ T30] audit: type=1326 audit(1766075671.789:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 97.894356][ T1497] input: syz0 as /devices/virtual/input/input8 [ 97.987735][ T20] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 98.011819][ T1500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'. [ 98.046728][ T30] audit: type=1326 audit(1766075671.789:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 98.186615][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.197021][ T20] usb 3-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.210057][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.217263][ T20] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 98.226370][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.275501][ T1505] loop2: detected capacity change from 0 to 128 [ 98.286100][ T30] audit: type=1326 audit(1766075671.789:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 98.319464][ T30] audit: type=1326 audit(1766075671.789:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 98.363034][ T30] audit: type=1326 audit(1766075671.789:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 98.897459][ T20] usb 3-1: config 0 descriptor?? [ 98.932748][ T20] usb 3-1: can't set config #0, error -71 [ 98.965366][ T1510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1510 comm=syz.1.315 [ 98.985663][ T20] usb 3-1: USB disconnect, device number 7 [ 98.991665][ T30] audit: type=1326 audit(1766075671.789:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 99.124100][ T30] audit: type=1326 audit(1766075671.809:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 99.149954][ T1517] loop0: detected capacity change from 0 to 128 [ 99.259618][ T1508] netlink: 'syz.5.317': attribute type 4 has an invalid length. [ 99.278967][ T30] audit: type=1326 audit(1766075671.829:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531af2e749 code=0x7ffc0000 [ 99.315165][ T1517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.338614][ T1517] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.364893][ T1523] 9pnet: Insufficient options for proto=fd [ 99.922725][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.424642][ T1546] FAULT_INJECTION: forcing a failure. [ 100.424642][ T1546] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.438070][ T1546] CPU: 1 PID: 1546 Comm: syz.0.327 Not tainted syzkaller #0 [ 100.445388][ T1546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.455470][ T1546] Call Trace: [ 100.458761][ T1546] [ 100.461703][ T1546] __dump_stack+0x21/0x30 [ 100.466063][ T1546] dump_stack_lvl+0xee/0x150 [ 100.470672][ T1546] ? show_regs_print_info+0x20/0x20 [ 100.476326][ T1546] dump_stack+0x15/0x20 [ 100.480520][ T1546] should_fail+0x3c1/0x510 [ 100.484971][ T1546] should_fail_alloc_page+0x55/0x80 [ 100.490210][ T1546] prepare_alloc_pages+0x156/0x600 [ 100.495362][ T1546] ? __alloc_pages_bulk+0xab0/0xab0 [ 100.500599][ T1546] ? memset_erms+0xb/0x10 [ 100.504968][ T1546] __alloc_pages+0x10a/0x440 [ 100.509576][ T1546] ? prep_new_page+0x110/0x110 [ 100.514439][ T1546] ? finish_task_switch+0x16b/0x780 [ 100.519642][ T1546] ? __schedule+0xb76/0x14c0 [ 100.524233][ T1546] push_pipe+0x36b/0x630 [ 100.528479][ T1546] copy_pipe_to_iter+0xb0/0x370 [ 100.533339][ T1546] ? __kasan_check_read+0x11/0x20 [ 100.538373][ T1546] ? preempt_schedule_irq+0xbb/0x110 [ 100.543673][ T1546] _copy_to_iter+0x5bc/0x1070 [ 100.548451][ T1546] ? irqentry_exit_cond_resched+0x29/0x30 [ 100.554173][ T1546] ? irqentry_exit+0x37/0x40 [ 100.558771][ T1546] ? iov_iter_init+0x180/0x180 [ 100.563694][ T1546] ? __virt_addr_valid+0x14e/0x2e0 [ 100.568824][ T1546] ? __check_object_size+0x2f4/0x3c0 [ 100.574123][ T1546] seq_read_iter+0xb50/0xd30 [ 100.578736][ T1546] proc_reg_read_iter+0x1be/0x290 [ 100.583768][ T1546] generic_file_splice_read+0x39f/0x590 [ 100.589323][ T1546] ? splice_shrink_spd+0xb0/0xb0 [ 100.594292][ T1546] ? sysvec_reschedule_ipi+0x78/0x80 [ 100.599587][ T1546] splice_direct_to_actor+0x404/0xb30 [ 100.604999][ T1546] ? do_splice_direct+0x2c0/0x2c0 [ 100.610029][ T1546] ? pipe_to_sendpage+0x310/0x310 [ 100.615058][ T1546] ? security_file_permission+0x83/0xa0 [ 100.620613][ T1546] ? rw_verify_area+0xa7/0x1c0 [ 100.625382][ T1546] do_splice_direct+0x1b3/0x2c0 [ 100.630237][ T1546] ? avc_policy_seqno+0x1b/0x70 [ 100.635111][ T1546] ? splice_direct_to_actor+0xb30/0xb30 [ 100.640661][ T1546] ? security_file_permission+0x83/0xa0 [ 100.646212][ T1546] do_sendfile+0x5c6/0xeb0 [ 100.650641][ T1546] ? release_firmware_map_entry+0x190/0x190 [ 100.656540][ T1546] ? do_preadv+0x330/0x330 [ 100.661045][ T1546] ? preempt_schedule_irq+0xbb/0x110 [ 100.666331][ T1546] ? __cond_resched+0xb0/0xb0 [ 100.671011][ T1546] ? fput_many+0x15a/0x1a0 [ 100.675516][ T1546] __x64_sys_sendfile64+0x18f/0x1f0 [ 100.680747][ T1546] ? sysvec_reschedule_ipi+0x78/0x80 [ 100.686080][ T1546] ? __ia32_sys_sendfile+0x190/0x190 [ 100.691376][ T1546] x64_sys_call+0x88d/0x9a0 [ 100.695882][ T1546] do_syscall_64+0x4c/0xa0 [ 100.700301][ T1546] ? clear_bhb_loop+0x50/0xa0 [ 100.704982][ T1546] ? clear_bhb_loop+0x50/0xa0 [ 100.709659][ T1546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.715570][ T1546] RIP: 0033:0x7f548391e749 [ 100.719992][ T1546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.739950][ T1546] RSP: 002b:00007f5482344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 100.748380][ T1546] RAX: ffffffffffffffda RBX: 00007f5483b75180 RCX: 00007f548391e749 [ 100.756357][ T1546] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 100.764335][ T1546] RBP: 00007f5482344090 R08: 0000000000000000 R09: 0000000000000000 [ 100.773438][ T1546] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 100.781408][ T1546] R13: 00007f5483b75218 R14: 00007f5483b75180 R15: 00007ffebad56e68 [ 100.789390][ T1546] [ 100.836096][ T1552] netlink: 'syz.1.330': attribute type 27 has an invalid length. [ 101.138123][ T1554] netlink: 'syz.1.330': attribute type 8 has an invalid length. [ 101.324985][ T1566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.332'. [ 101.472676][ T733] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.692530][ T1574] 9pnet: Insufficient options for proto=fd [ 101.732701][ T733] usb 1-1: Using ep0 maxpacket: 16 [ 101.872966][ T733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.901821][ T733] usb 1-1: config 0 has no interfaces? [ 101.981683][ T733] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.013321][ T1580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 102.019212][ T733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.097898][ T733] usb 1-1: config 0 descriptor?? [ 102.201199][ T1590] loop5: detected capacity change from 0 to 512 [ 102.265666][ T1590] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.284571][ T1590] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.301416][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 102.301459][ T30] audit: type=1400 audit(1766075688.279:405): avc: denied { execute_no_trans } for pid=1589 comm="syz.5.340" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.395239][ T1593] raw_sendmsg: syz.0.331 forgot to set AF_INET. Fix it! [ 103.366672][ T1602] loop5: detected capacity change from 0 to 512 [ 105.382153][ T1604] loop2: detected capacity change from 0 to 512 [ 105.707745][ T1602] EXT4-fs (loop5): 1 orphan inode deleted [ 105.713635][ T1602] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.725323][ T1602] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.814741][ T1604] EXT4-fs (loop2): 1 orphan inode deleted [ 105.820569][ T1604] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.832406][ T1604] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.602176][ T1612] loop1: detected capacity change from 0 to 2048 [ 106.669446][ T333] usb 1-1: USB disconnect, device number 5 [ 106.679172][ T30] audit: type=1400 audit(1766075692.659:406): avc: denied { mounton } for pid=1608 comm="syz.4.345" path="/proc/253/task" dev="proc" ino=20095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 106.728793][ T1623] 9pnet: Insufficient options for proto=fd [ 106.729539][ T1612] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 106.785610][ T1627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 106.814104][ T1627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.348'. [ 106.857286][ T1627] bridge0: port 3(vlan1) entered blocking state [ 106.903793][ T1627] bridge0: port 3(vlan1) entered disabled state [ 106.917959][ T1640] loop5: detected capacity change from 0 to 512 [ 107.004496][ T1612] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.344: bg 0: block 234: padding at end of block bitmap is not set [ 107.029075][ T1640] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 107.049232][ T1612] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.072684][ T1640] EXT4-fs (loop5): Test dummy encryption mode enabled [ 107.136224][ T1640] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 107.251956][ T1640] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.265896][ T1612] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.265896][ T1612] [ 107.280575][ T1612] EXT4-fs (loop1): Total free blocks count 0 [ 107.287962][ T1612] EXT4-fs (loop1): Free/Dirty block details [ 107.295481][ T1612] EXT4-fs (loop1): free_blocks=0 [ 107.300900][ T1612] EXT4-fs (loop1): dirty_blocks=4368 [ 107.312870][ T1612] EXT4-fs (loop1): Block reservation details [ 107.318962][ T1612] EXT4-fs (loop1): i_reserved_data_blocks=273 [ 107.319789][ T1640] EXT4-fs (loop5): 1 truncate cleaned up [ 107.332218][ T1640] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 107.350672][ T30] audit: type=1326 audit(1766075693.339:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.374647][ T355] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 107.387576][ T355] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.387576][ T355] [ 107.406420][ T1652] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=422521815 (54082792320 ns) > initial count (22125137792 ns). Using initial count to start timer. [ 107.424530][ T30] audit: type=1326 audit(1766075693.349:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.448181][ T30] audit: type=1326 audit(1766075693.359:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.471874][ T30] audit: type=1326 audit(1766075693.359:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.491731][ T1650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=422521815 (54082792320 ns) > initial count (22125137792 ns). Using initial count to start timer. [ 107.495394][ T30] audit: type=1326 audit(1766075693.379:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.515453][ T1640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1640 comm=syz.5.353 [ 107.550534][ T30] audit: type=1326 audit(1766075693.379:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.581007][ T30] audit: type=1326 audit(1766075693.379:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.605363][ T30] audit: type=1326 audit(1766075693.389:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.629538][ T30] audit: type=1326 audit(1766075693.389:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.659276][ T30] audit: type=1326 audit(1766075693.389:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 107.721914][ T1664] netlink: 'syz.1.356': attribute type 12 has an invalid length. [ 108.006350][ T1669] loop5: detected capacity change from 0 to 512 [ 108.972314][ T1666] kthread_run failed with err -4 [ 109.021809][ T1669] EXT4-fs (loop5): 1 orphan inode deleted [ 109.027653][ T1669] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.038757][ T1669] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.065398][ T1679] loop4: detected capacity change from 0 to 512 [ 109.072559][ T1677] 9pnet: Insufficient options for proto=fd [ 109.093922][ T1684] loop0: detected capacity change from 0 to 512 [ 109.118101][ T1679] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 109.231153][ T1690] input: syz0 as /devices/virtual/input/input9 [ 109.574079][ T1684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.643689][ T1684] EXT4-fs (loop0): 1 truncate cleaned up [ 109.649602][ T1684] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,user_xattr,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 109.673286][ T1679] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.990083][ T1702] tipc: Started in network mode [ 109.995179][ T1702] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 110.018867][ T1707] loop0: detected capacity change from 0 to 128 [ 110.030968][ T1702] tipc: Enabling of bearer rejected, failed to enable media [ 110.324185][ T1711] attempt to access beyond end of device [ 110.324185][ T1711] loop0: rw=2049, want=1041, limit=128 [ 110.831466][ T1726] loop4: detected capacity change from 0 to 512 [ 110.838926][ T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.993393][ T1726] EXT4-fs (loop4): 1 orphan inode deleted [ 110.999302][ T1726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.011074][ T1726] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.397374][ T20] usb 6-1: Using ep0 maxpacket: 32 [ 111.852944][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 111.880531][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9140, setting to 1024 [ 112.164094][ T1746] tipc: Enabling of bearer rejected, failed to enable media [ 112.182730][ T20] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 112.211776][ T20] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.326342][ T1750] loop1: detected capacity change from 0 to 256 [ 112.340690][ T1753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 112.350007][ T20] usb 6-1: Manufacturer: syz [ 112.358658][ T1750] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.375188][ T20] usb 6-1: config 0 descriptor?? [ 112.383632][ T1753] HTB: quantum of class 80020005 is small. Consider r2q change. [ 112.412693][ T1750] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 112.434250][ T1750] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 112.449212][ T1758] loop0: detected capacity change from 0 to 512 [ 112.530853][ T1709] loop2: detected capacity change from 0 to 131072 [ 112.557144][ T1758] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.561228][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 112.561245][ T30] audit: type=1400 audit(1766075698.539:451): avc: denied { create } for pid=1749 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.604390][ T1709] F2FS-fs (loop2): invalid crc value [ 112.626654][ T1698] loop5: detected capacity change from 0 to 512 [ 112.695612][ T1709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.750226][ T1766] loop0: detected capacity change from 0 to 512 [ 112.750690][ T1698] EXT4-fs (loop5): Ignoring removed orlov option [ 112.774170][ T1766] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.782120][ T1698] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 112.793960][ T1709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.795150][ T1698] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2229: inode #15: comm syz.5.366: corrupted in-inode xattr [ 112.805826][ T1766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0102] [ 112.821827][ T1766] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.829161][ T1698] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.366: couldn't read orphan inode 15 (err -117) [ 112.842295][ T1766] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.386: bg 0: block 361: padding at end of block bitmap is not set [ 112.865038][ T1698] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none. [ 112.885182][ T1766] EXT4-fs (loop0): Remounting filesystem read-only [ 112.892256][ T1766] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 112.901614][ T1766] EXT4-fs (loop0): Remounting filesystem read-only [ 112.911065][ T1766] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.386: invalid indirect mapped block 1358954509 (level 0) [ 112.927712][ T1766] EXT4-fs (loop0): Remounting filesystem read-only [ 112.936721][ T1766] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.386: invalid indirect mapped block 2185560079 (level 1) [ 112.967382][ T1766] EXT4-fs (loop0): Remounting filesystem read-only [ 112.988592][ T1766] EXT4-fs (loop0): 1 truncate cleaned up [ 113.000537][ T1766] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,noblock_validity,discard,errors=remount-ro,data_err=ignore. Quota mode: none. [ 113.282698][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 113.288714][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 113.313619][ T20] usb 6-1: USB disconnect, device number 2 [ 113.443156][ T1774] loop0: detected capacity change from 0 to 40427 [ 113.483833][ T1774] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.641934][ T1791] loop4: detected capacity change from 0 to 1024 [ 113.693737][ T1791] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.789954][ T1791] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 114.651872][ T1797] loop2: detected capacity change from 0 to 512 [ 114.858834][ T1797] EXT4-fs (loop2): 1 orphan inode deleted [ 114.864691][ T1797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.876369][ T1797] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.918160][ T1774] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.282716][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.432037][ T1805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 115.718848][ T282] attempt to access beyond end of device [ 115.718848][ T282] loop0: rw=2049, want=45104, limit=40427 [ 115.783911][ T30] audit: type=1400 audit(1766075701.769:452): avc: denied { mounton } for pid=1807 comm="syz.4.393" path="/92/file0" dev="incremental-fs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.830089][ T1815] loop2: detected capacity change from 0 to 4096 [ 115.893021][ T30] audit: type=1400 audit(1766075701.799:453): avc: denied { read write } for pid=1812 comm="syz.1.397" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.916295][ T30] audit: type=1400 audit(1766075701.799:454): avc: denied { open } for pid=1812 comm="syz.1.397" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.918147][ T1815] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 117.034974][ T1837] 9pnet: Insufficient options for proto=fd [ 117.092041][ T1844] loop0: detected capacity change from 0 to 1024 [ 117.132043][ T30] audit: type=1400 audit(1766075704.108:455): avc: denied { write } for pid=1841 comm="syz.1.406" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.157532][ T1845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.395'. [ 117.213080][ T30] audit: type=1400 audit(1766075704.138:456): avc: denied { ioctl } for pid=1841 comm="syz.1.406" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.253837][ T1844] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.386819][ T1836] loop4: detected capacity change from 0 to 40427 [ 117.410371][ T1836] F2FS-fs (loop4): invalid crc value [ 117.417016][ T1836] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 117.447188][ T1836] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:83886083,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 117.459997][ T1836] F2FS-fs (loop4): Failed to read root inode [ 117.851261][ T1859] loop4: detected capacity change from 0 to 128 [ 117.920701][ T1859] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.937282][ T1859] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.505716][ T1861] loop2: detected capacity change from 0 to 40427 [ 118.523968][ T1874] devpts: called with bogus options [ 118.530797][ T1861] F2FS-fs (loop2): invalid crc value [ 118.597515][ T1875] loop1: detected capacity change from 0 to 256 [ 118.625209][ T1875] FAT-fs (loop1): bogus number of FAT sectors [ 118.631352][ T1875] FAT-fs (loop1): Can't find a valid FAT filesystem [ 118.744262][ T1861] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 118.784640][ T1875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 119.099150][ T1878] 9pnet: Insufficient options for proto=fd [ 119.416161][ T1881] loop4: detected capacity change from 0 to 512 [ 119.422670][ T1861] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:83886083,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 119.490575][ T1861] F2FS-fs (loop2): Failed to read root inode [ 119.524897][ T1881] EXT4-fs (loop4): Unrecognized mount option "appraise" or missing value [ 119.582673][ T30] audit: type=1400 audit(1766075706.538:457): avc: denied { watch watch_reads } for pid=1882 comm="syz.0.417" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 119.698248][ T1874] loop5: detected capacity change from 0 to 40427 [ 119.778472][ T1874] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 119.799647][ T1874] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 119.920469][ T1874] F2FS-fs (loop5): invalid crc value [ 120.146671][ T30] audit: type=1400 audit(1766075707.128:458): avc: denied { create } for pid=1896 comm="syz.2.421" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.150592][ T1874] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.170760][ T30] audit: type=1400 audit(1766075707.158:459): avc: denied { mounton } for pid=1896 comm="syz.2.421" path="/78/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.283535][ T1874] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 120.291910][ T1874] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.361055][ T30] audit: type=1400 audit(1766075707.338:460): avc: denied { execute } for pid=1896 comm="syz.2.421" path="pipe:[2897]" dev="pipefs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 120.388039][ T1874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.434449][ T30] audit: type=1400 audit(1766075707.358:461): avc: denied { ioctl } for pid=1871 comm="syz.5.414" path="/25/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.461060][ T30] audit: type=1400 audit(1766075707.358:462): avc: denied { setattr } for pid=1871 comm="syz.5.414" name="11000000000000000000000000000000" dev="loop5" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.659066][ T30] audit: type=1400 audit(1766075707.638:463): avc: denied { read append } for pid=1905 comm="syz.0.423" name="file1" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 120.728376][ T30] audit: type=1400 audit(1766075707.638:464): avc: denied { ioctl open } for pid=1905 comm="syz.0.423" path="/83/file0/file1" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 120.817630][ T30] audit: type=1400 audit(1766075707.798:465): avc: denied { create } for pid=1919 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.837403][ T30] audit: type=1400 audit(1766075707.828:466): avc: denied { relabelfrom } for pid=1919 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 121.350324][ T1927] tmpfs: Unsupported parameter 'mpol' [ 121.376437][ T1929] loop0: detected capacity change from 0 to 512 [ 121.437254][ T1911] loop1: detected capacity change from 0 to 131072 [ 121.443955][ T1929] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 121.452954][ T1929] EXT4-fs (loop0): invalid journal inode [ 121.458653][ T1929] EXT4-fs (loop0): can't get journal size [ 121.467652][ T1911] F2FS-fs (loop1): Test dummy encryption mode enabled [ 121.467956][ T1929] EXT4-fs (loop0): 1 truncate cleaned up [ 121.480150][ T1929] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 121.489181][ T1911] F2FS-fs (loop1): invalid crc value [ 121.506083][ T1929] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 1073741833 (only 1 groups) [ 121.526373][ T1911] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.573270][ T1911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.607488][ T1939] loop0: detected capacity change from 0 to 256 [ 121.665999][ T1939] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 122.094069][ T1946] loop5: detected capacity change from 0 to 131072 [ 122.149490][ T1946] F2FS-fs (loop5): invalid crc value [ 122.200756][ T1946] F2FS-fs (loop5): Found nat_bits in checkpoint [ 122.267534][ T1946] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 123.002864][ T1958] fuse: Bad value for 'fd' [ 123.285291][ T1965] loop0: detected capacity change from 0 to 4096 [ 123.307201][ T1967] loop2: detected capacity change from 0 to 256 [ 123.377219][ T1965] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.392958][ T1967] exfat: Deprecated parameter 'namecase' [ 123.398786][ T1967] exfat: Deprecated parameter 'namecase' [ 123.412261][ T1967] exfat: Unknown parameter 'keep_last_dots' [ 124.152860][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.251642][ T1982] loop2: detected capacity change from 0 to 4096 [ 124.279201][ T1982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.304442][ T1982] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 124.344524][ T1992] loop5: detected capacity change from 0 to 512 [ 124.376411][ T1992] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.392289][ T1992] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 124.401741][ T1992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 124.410304][ T1992] System zones: 0-2, 18-18, 34-34 [ 124.416288][ T1992] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.451: inode #15: comm syz.5.451: iget: illegal inode # [ 124.431291][ T1992] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.451: couldn't read orphan inode 15 (err -117) [ 124.445283][ T1992] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.563101][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.573699][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 124.584678][ T58] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 124.595230][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.651657][ T58] usb 2-1: config 0 descriptor?? [ 124.783871][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 124.783890][ T30] audit: type=1326 audit(1766075711.768:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2003 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e761749 code=0x7ffc0000 [ 124.850707][ T30] audit: type=1326 audit(1766075711.768:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2003 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e761749 code=0x7ffc0000 [ 124.902494][ T30] audit: type=1326 audit(1766075711.798:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2003 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f1e7e761749 code=0x7ffc0000 [ 124.926396][ T30] audit: type=1326 audit(1766075711.798:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2003 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e761749 code=0x7ffc0000 [ 124.950276][ T30] audit: type=1326 audit(1766075711.798:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2003 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e761749 code=0x7ffc0000 [ 125.005740][ T2013] loop2: detected capacity change from 0 to 256 [ 125.019643][ T2013] exfat: Deprecated parameter 'namecase' [ 125.036257][ T2013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 125.247571][ T30] audit: type=1400 audit(1766075712.228:484): avc: denied { mounton } for pid=2028 comm="syz.0.465" path="/syzcgroup/unified/syz0/syz1/bus" dev="cgroup2" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 125.248308][ T2029] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 126.238516][ T30] audit: type=1326 audit(1766075713.218:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 126.281223][ T30] audit: type=1326 audit(1766075713.218:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 126.364443][ T30] audit: type=1326 audit(1766075713.218:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 126.392571][ T30] audit: type=1326 audit(1766075713.218:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 126.442906][ T371] usb 2-1: USB disconnect, device number 8 [ 127.027019][ T2079] device erspan0 entered promiscuous mode [ 127.402301][ T2067] loop5: detected capacity change from 0 to 131072 [ 127.411285][ T2089] loop1: detected capacity change from 0 to 256 [ 127.523748][ T2089] exfat: Unknown parameter 'sys_tz' [ 127.529943][ T2067] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 127.538542][ T2067] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 127.548780][ T2067] F2FS-fs (loop5): invalid crc value [ 127.647337][ T2067] F2FS-fs (loop5): Found nat_bits in checkpoint [ 127.747990][ T2067] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 127.755141][ T2067] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 128.320672][ T2110] loop2: detected capacity change from 0 to 128 [ 128.527034][ T2110] attempt to access beyond end of device [ 128.527034][ T2110] loop2: rw=2049, want=188, limit=128 [ 128.681065][ T2117] loop1: detected capacity change from 0 to 1024 [ 128.745483][ T2117] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,resuid=0x0000000000000000,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 128.804586][ T2117] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.874836][ T2126] netlink: 96 bytes leftover after parsing attributes in process `syz.5.499'. [ 129.107493][ T2132] loop5: detected capacity change from 0 to 1024 [ 129.172861][ T2132] EXT4-fs (loop5): Ignoring removed bh option [ 129.200957][ T2132] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 129.242256][ T2119] loop2: detected capacity change from 0 to 40427 [ 129.295663][ T2132] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2756: inode #15: comm syz.5.502: corrupted in-inode xattr [ 129.309967][ T2132] EXT4-fs (loop5): Remounting filesystem read-only [ 129.316834][ T2132] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.360798][ T2119] F2FS-fs (loop2): fault_injection options not supported [ 129.381038][ T2119] F2FS-fs (loop2): fault_type options not supported [ 129.406510][ T2119] F2FS-fs (loop2): invalid crc value [ 129.427192][ T2119] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.514317][ T2119] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.556795][ T2119] attempt to access beyond end of device [ 129.556795][ T2119] loop2: rw=2049, want=45104, limit=40427 [ 129.626230][ T285] attempt to access beyond end of device [ 129.626230][ T285] loop2: rw=2049, want=45112, limit=40427 [ 130.082132][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 130.082148][ T30] audit: type=1326 audit(1766075717.058:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.2.506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b8a3b6749 code=0x0 [ 130.206581][ T2167] loop1: detected capacity change from 0 to 256 [ 130.242040][ T2169] loop4: detected capacity change from 0 to 512 [ 130.257003][ T2167] FAT-fs (loop1): Directory bread(block 64) failed [ 130.264169][ T2167] FAT-fs (loop1): Directory bread(block 65) failed [ 130.270816][ T2167] FAT-fs (loop1): Directory bread(block 66) failed [ 130.277612][ T2169] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 130.277728][ T2167] FAT-fs (loop1): Directory bread(block 67) failed [ 130.291481][ T2169] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.297697][ T2167] FAT-fs (loop1): Directory bread(block 68) failed [ 130.314520][ T2167] FAT-fs (loop1): Directory bread(block 69) failed [ 130.321253][ T2167] FAT-fs (loop1): Directory bread(block 70) failed [ 130.328320][ T2167] FAT-fs (loop1): Directory bread(block 71) failed [ 130.334940][ T2167] FAT-fs (loop1): Directory bread(block 72) failed [ 130.341489][ T2167] FAT-fs (loop1): Directory bread(block 73) failed [ 130.456999][ T2177] loop1: detected capacity change from 0 to 2048 [ 130.574643][ T2177] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,,errors=continue. Quota mode: none. [ 130.587982][ T2177] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.162891][ T2183] fs-verity: sha512 using implementation "sha512-avx2" [ 131.411859][ T2183] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 131.523083][ T2191] loop4: detected capacity change from 0 to 2048 [ 131.553408][ T2191] loop4: p2 < > p4 [ 131.558199][ T2191] loop4: p4 size 262144 extends beyond EOD, truncated [ 131.640065][ T30] audit: type=1400 audit(1766075718.618:500): avc: denied { write } for pid=2190 comm="syz.4.522" name="loop4p2" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.662826][ T30] audit: type=1400 audit(1766075718.618:501): avc: denied { open } for pid=2190 comm="syz.4.522" path="/dev/loop4p2" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.727654][ T2187] loop5: detected capacity change from 0 to 40427 [ 131.788608][ T2187] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 131.807263][ T2187] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 131.873968][ T1626] udevd[1626]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 131.873998][ T354] udevd[354]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 131.914259][ T2187] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.050121][ T2216] kvm: pic: level sensitive irq not supported [ 132.230647][ T2187] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 132.300126][ T2187] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 132.476605][ T2185] attempt to access beyond end of device [ 132.476605][ T2185] loop5: rw=10241, want=45104, limit=40427 [ 132.662088][ T10] attempt to access beyond end of device [ 132.662088][ T10] loop5: rw=1, want=45104, limit=40427 [ 132.872650][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.873657][ T2234] usb usb8: usbfs: process 2234 (syz.2.532) did not claim interface 0 before use [ 132.952776][ T2241] loop4: detected capacity change from 0 to 1024 [ 132.971234][ T2241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.991862][ T2241] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.998837][ T2241] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.539: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.024825][ T2241] EXT4-fs (loop4): 1 orphan inode deleted [ 133.030628][ T2241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.044286][ T2241] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 133.144552][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 133.274708][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.289626][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.533756][ T30] audit: type=1400 audit(1766075720.508:502): avc: denied { create } for pid=2255 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.571840][ T20] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 133.581616][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.590563][ T20] usb 2-1: config 0 descriptor?? [ 133.832734][ T733] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 133.932119][ T2265] input: syz1 as /devices/virtual/input/input10 [ 133.992434][ T2259] loop2: detected capacity change from 0 to 40427 [ 134.055042][ T2259] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 134.064172][ T20] hid-generic 0003:0403:6030.0003: unknown main item tag 0x7 [ 134.086190][ T2259] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 134.094892][ T20] hid-generic 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 134.107765][ T2259] F2FS-fs (loop2): invalid crc value [ 134.137975][ T2259] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.191792][ T2259] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 134.202748][ T733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 134.211110][ T2259] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 134.228705][ T733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.774885][ T2277] loop5: detected capacity change from 0 to 131072 [ 134.784253][ T30] audit: type=1326 audit(1766075721.768:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 134.823815][ T2277] F2FS-fs (loop5): Test dummy encryption mode enabled [ 134.832992][ T2277] F2FS-fs (loop5): invalid crc value [ 134.856206][ T2277] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.918793][ T2277] F2FS-fs (loop5): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 134.929167][ T2277] F2FS-fs (loop5): Failed to read root inode [ 134.935548][ T733] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 134.959977][ T733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.999086][ T733] usb 5-1: Product: syz [ 135.162786][ T733] usb 5-1: Manufacturer: syz [ 135.167598][ T733] usb 5-1: SerialNumber: syz [ 135.180342][ T733] usb 5-1: config 0 descriptor?? [ 135.185858][ T30] audit: type=1326 audit(1766075721.768:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 135.283638][ T2292] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 135.293208][ T2292] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 136.232659][ T30] audit: type=1326 audit(1766075721.768:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 136.261596][ T733] snd-usb-audio: probe of 5-1:0.0 failed with error -90 [ 136.343058][ T30] audit: type=1326 audit(1766075721.768:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 136.370089][ T733] usb 2-1: USB disconnect, device number 9 [ 136.376426][ T30] audit: type=1326 audit(1766075721.768:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 136.424452][ T6] usb 5-1: USB disconnect, device number 2 [ 136.478177][ T30] audit: type=1326 audit(1766075721.768:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 136.727336][ T367] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.736227][ T30] audit: type=1326 audit(1766075721.768:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2281 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548391e749 code=0x7ffc0000 [ 136.771528][ T30] audit: type=1400 audit(1766075721.958:510): avc: denied { append } for pid=2276 comm="syz.5.552" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.856068][ T30] audit: type=1400 audit(1766075723.788:511): avc: denied { sys_admin } for pid=2304 comm="syz.1.560" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 136.912903][ T2313] loop2: detected capacity change from 0 to 2048 [ 136.927588][ T30] audit: type=1400 audit(1766075723.798:512): avc: denied { getopt } for pid=2306 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.999642][ T30] audit: type=1400 audit(1766075723.878:513): avc: denied { create } for pid=2311 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.707047][ T367] usb 6-1: Using ep0 maxpacket: 8 [ 137.828329][ T2313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.846712][ T367] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.867234][ T367] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.935313][ T2336] loop4: detected capacity change from 0 to 512 [ 137.973279][ T2336] EXT4-fs (loop4): Ignoring removed oldalloc option [ 137.992722][ T2336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.019002][ T2336] EXT4-fs (loop4): 1 truncate cleaned up [ 138.028077][ T2336] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 138.146094][ T10] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 234: padding at end of block bitmap is not set [ 138.180933][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 138.402328][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.402328][ T10] [ 138.450698][ T10] EXT4-fs (loop2): Total free blocks count 0 [ 138.468831][ T10] EXT4-fs (loop2): Free/Dirty block details [ 138.476617][ T10] EXT4-fs (loop2): free_blocks=0 [ 138.491817][ T10] EXT4-fs (loop2): dirty_blocks=4944 [ 138.525255][ T10] EXT4-fs (loop2): Block reservation details [ 138.531293][ T10] EXT4-fs (loop2): i_reserved_data_blocks=309 [ 138.567553][ T2356] loop0: detected capacity change from 0 to 16 [ 138.597309][ T2356] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.605945][ T2356] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 138.615712][ T2356] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 138.622765][ T367] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 138.625435][ T2356] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 138.642622][ T2356] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 138.652387][ T367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.654524][ T2356] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 138.670329][ T2356] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 138.680048][ T2356] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 138.688340][ T2356] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 138.701967][ T367] usb 6-1: config 0 descriptor?? [ 138.711673][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 138.724552][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.724552][ T10] [ 138.742734][ T367] usb 6-1: can't set config #0, error -71 [ 138.759222][ T367] usb 6-1: USB disconnect, device number 3 [ 138.805364][ T2354] loop5: detected capacity change from 0 to 40427 [ 138.958616][ T2354] F2FS-fs (loop5): fault_injection options not supported [ 139.003054][ T2354] F2FS-fs (loop5): Unrecognized mount option "errors=continue" or missing value [ 139.295986][ T2396] loop5: detected capacity change from 0 to 512 [ 139.525564][ T2396] EXT4-fs (loop5): Ignoring removed orlov option [ 139.569738][ T2396] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.660579][ T2396] EXT4-fs (loop5): 1 orphan inode deleted [ 139.666464][ T2396] EXT4-fs (loop5): 1 truncate cleaned up [ 139.673349][ T2396] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 139.711549][ T2396] EXT4-fs error (device loop5): ext4_check_all_de:667: inode #12: block 7: comm syz.5.593: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 139.943779][ T2393] loop4: detected capacity change from 0 to 40427 [ 140.120464][ T2393] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 140.154290][ T2417] tipc: Started in network mode [ 140.154303][ T2417] tipc: Node identity , cluster identity 4711 [ 140.278926][ T2422] 9pnet: Could not find request transport: rdma [ 140.932276][ T2439] loop2: detected capacity change from 0 to 1024 [ 140.953558][ T2439] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.972362][ T2439] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 141.215668][ T2446] tmpfs: Unknown parameter 'grpquota' [ 142.625677][ T2460] loop4: detected capacity change from 0 to 4096 [ 142.633469][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 142.633484][ T30] audit: type=1400 audit(1766075729.618:516): avc: denied { read } for pid=2461 comm="syz.5.619" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.687769][ T2464] loop5: detected capacity change from 0 to 256 [ 142.713972][ T2460] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nogrpid,journal_ioprio=0x0000000000000007,errors=remount-ro,nolazytime,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,. Quota mode: writeback. [ 142.741140][ T30] audit: type=1400 audit(1766075729.648:517): avc: denied { open } for pid=2461 comm="syz.5.619" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.885584][ T2459] loop1: detected capacity change from 0 to 40427 [ 142.908596][ T2464] exFAT-fs (loop5): Invalid exboot-signature(sector = 6): 0x00000000 [ 143.568600][ T2464] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x8d19ab2d) [ 143.588428][ T2459] F2FS-fs (loop1): fault_injection options not supported [ 143.604739][ T2464] exFAT-fs (loop5): invalid boot region [ 143.611457][ T2464] exFAT-fs (loop5): failed to recognize exfat type [ 143.615647][ T2459] F2FS-fs (loop1): fault_type options not supported [ 143.684994][ T2459] F2FS-fs (loop1): invalid crc value [ 143.720373][ T2459] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.014953][ T2459] F2FS-fs (loop1): Start checkpoint disabled! [ 144.062314][ T2459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 144.298494][ T30] audit: type=1400 audit(1766075731.278:518): avc: denied { bind } for pid=2483 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.410163][ T30] audit: type=1400 audit(1766075731.308:519): avc: denied { listen } for pid=2483 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.532954][ T10] attempt to access beyond end of device [ 144.532954][ T10] loop1: rw=2049, want=40976, limit=40427 [ 144.773595][ T30] audit: type=1400 audit(1766075731.308:520): avc: denied { connect } for pid=2483 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.662752][ T30] audit: type=1400 audit(1766075732.618:521): avc: denied { write } for pid=2516 comm="syz.2.635" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.895534][ T30] audit: type=1400 audit(1766075732.628:522): avc: denied { ioctl } for pid=2516 comm="syz.2.635" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.924527][ T2523] loop2: detected capacity change from 0 to 1024 [ 146.063730][ T2523] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x000000000000044e,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 146.642697][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.868059][ T2540] loop5: detected capacity change from 0 to 1024 [ 146.882742][ T733] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 147.006972][ T2540] EXT4-fs (loop5): Ignoring removed orlov option [ 147.053663][ T2540] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 147.242861][ T30] audit: type=1400 audit(1766075734.228:523): avc: denied { rename } for pid=2539 comm="syz.5.643" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.543104][ T733] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.607829][ T733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.637320][ T733] usb 2-1: Product: syz [ 147.660943][ T733] usb 2-1: Manufacturer: syz [ 147.667412][ T733] usb 2-1: SerialNumber: syz [ 147.679320][ T733] usb 2-1: config 0 descriptor?? [ 147.763019][ T2562] loop4: detected capacity change from 0 to 4096 [ 147.787415][ T2562] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.788975][ T2564] kvm: pic: non byte write [ 147.817447][ T2562] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 147.835591][ T2562] System zones: 0-5 [ 147.840243][ T2562] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 147.884836][ T2570] loop0: detected capacity change from 0 to 512 [ 147.910849][ T2570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.652: error while reading EA inode 32 err=-116 [ 147.927964][ T2570] EXT4-fs (loop0): Remounting filesystem read-only [ 147.933118][ T2575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 147.935116][ T2570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.652: error while reading EA inode 32 err=-116 [ 147.959947][ T2570] EXT4-fs (loop0): Remounting filesystem read-only [ 147.966927][ T2570] EXT4-fs (loop0): 1 orphan inode deleted [ 147.972960][ T2570] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,discard,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,data_err=ignore,. Quota mode: none. [ 148.004550][ T2570] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.652: deleted inode referenced: 15 [ 148.016498][ T2570] EXT4-fs (loop0): Remounting filesystem read-only [ 148.079171][ T2586] loop4: detected capacity change from 0 to 256 [ 148.557101][ T2593] loop4: detected capacity change from 0 to 512 [ 148.596540][ T2593] EXT4-fs (loop4): dax option not supported [ 148.608861][ T30] audit: type=1400 audit(1766075735.588:524): avc: denied { read write } for pid=2594 comm="syz.5.662" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 148.748489][ T30] audit: type=1400 audit(1766075735.618:525): avc: denied { open } for pid=2594 comm="syz.5.662" path="/74/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.021971][ T371] usb 2-1: USB disconnect, device number 10 [ 149.211782][ T30] audit: type=1400 audit(1766075736.108:526): avc: denied { name_bind } for pid=2601 comm="syz.2.664" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.317377][ T2612] loop4: detected capacity change from 0 to 256 [ 149.324045][ T30] audit: type=1400 audit(1766075736.128:527): avc: denied { connect } for pid=2601 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.349932][ T30] audit: type=1400 audit(1766075736.258:528): avc: denied { remount } for pid=2592 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.525016][ T2612] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 149.568473][ T2617] netlink: 48 bytes leftover after parsing attributes in process `syz.1.670'. [ 149.712770][ T2625] loop2: detected capacity change from 0 to 2048 [ 149.809615][ T2630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.667'. [ 149.829292][ T2629] loop4: detected capacity change from 0 to 2048 [ 149.835954][ T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.890361][ T2634] usb usb8: usbfs: process 2634 (syz.0.677) did not claim interface 0 before use [ 149.925860][ T2625] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 149.947501][ T2629] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c01d, mo2=0002] [ 149.956141][ T2629] System zones: 0-4 [ 149.960514][ T2629] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,noinit_itable,bsdgroups,bsdgroups,dioread_lock,,errors=continue. Quota mode: none. [ 149.964486][ T2625] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.976880][ T2629] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.092648][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 150.131226][ T2652] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.675: bg 0: block 345: padding at end of block bitmap is not set [ 150.146055][ T2652] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 150.159709][ T2652] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.159709][ T2652] [ 150.160439][ T2654] loop2: detected capacity change from 0 to 256 [ 150.187824][ T2654] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 150.202782][ T1445] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1198 with error 28 [ 150.212834][ T6] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 150.215683][ T1445] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.215683][ T1445] [ 150.230899][ T6] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.235073][ T1445] EXT4-fs (loop4): Total free blocks count 0 [ 150.249736][ T1445] EXT4-fs (loop4): Free/Dirty block details [ 150.256497][ T1445] EXT4-fs (loop4): free_blocks=0 [ 150.258726][ T6] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.261638][ T1445] EXT4-fs (loop4): dirty_blocks=1200 [ 150.271484][ T6] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.277464][ T1445] EXT4-fs (loop4): Block reservation details [ 150.286937][ T6] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.293269][ T1445] EXT4-fs (loop4): i_reserved_data_blocks=75 [ 150.306307][ T30] audit: type=1400 audit(1766075737.278:529): avc: denied { mounton } for pid=2653 comm="syz.2.683" path="/136/file2/bus" dev="loop2" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.336227][ T6] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.342757][ T371] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.345385][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.384083][ T2654] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 150.418256][ T30] audit: type=1400 audit(1766075737.398:530): avc: denied { rmdir } for pid=285 comm="syz-executor" name="file0" dev="loop2" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.441117][ T30] audit: type=1400 audit(1766075737.398:531): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop2" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.574160][ T30] audit: type=1400 audit(1766075737.558:532): avc: denied { connect } for pid=2659 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.602758][ T371] usb 2-1: Using ep0 maxpacket: 8 [ 150.802770][ T371] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.814907][ T371] usb 2-1: config 0 has no interface number 0 [ 150.872665][ T371] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 150.883516][ T371] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 150.894277][ T371] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.907303][ T371] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.912635][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.916364][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.932474][ T371] usb 2-1: config 0 descriptor?? [ 151.176157][ T371] usb 2-1: USB disconnect, device number 11 [ 151.282782][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.292734][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 151.304040][ T6] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 151.313523][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.325945][ T6] usb 1-1: config 0 descriptor?? [ 151.689596][ T371] usb 1-1: USB disconnect, device number 6 [ 152.047240][ T2695] loop2: detected capacity change from 0 to 512 [ 152.178997][ T2695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.217777][ T2695] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.550726][ T2719] netlink: 'syz.2.704': attribute type 4 has an invalid length. [ 152.565743][ T733] usb 6-1: USB disconnect, device number 4 [ 152.774075][ T30] audit: type=1326 audit(1766075739.758:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2736 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8a3b6749 code=0x7ffc0000 [ 152.862876][ T2745] loop1: detected capacity change from 0 to 256 [ 153.007946][ T733] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 153.016846][ T733] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.249690][ T2752] fido_id[2752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.634624][ T2758] loop1: detected capacity change from 0 to 512 [ 153.828755][ T2763] capability: warning: `syz.2.725' uses deprecated v2 capabilities in a way that may be insecure [ 153.843922][ T2758] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.861289][ T2758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 153.894726][ T2758] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.912686][ T2758] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.722: bad orphan inode 267 [ 153.923612][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 153.923625][ T30] audit: type=1326 audit(1766075740.908:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.2.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b8a3b6749 code=0x0 [ 153.963993][ T2758] EXT4-fs (loop1): Remounting filesystem read-only [ 153.977832][ T2758] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 154.027417][ T2758] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.722: dx entry: limit 0 != root limit 125 [ 154.051094][ T2758] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.722: Corrupt directory, running e2fsck is recommended [ 154.223162][ T2759] loop4: detected capacity change from 0 to 262144 [ 154.268521][ T30] audit: type=1400 audit(1766075741.248:541): avc: denied { accept } for pid=2780 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.294808][ T2759] F2FS-fs (loop4): invalid crc value [ 154.480839][ T2759] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.519885][ T2759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 154.941150][ T2800] loop2: detected capacity change from 0 to 40427 [ 154.983158][ T2800] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 154.990939][ T2800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.999361][ T2800] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000000184467440737095516151844674407370955161518446744073709551615" or missing value [ 155.279569][ T30] audit: type=1400 audit(1766075742.258:542): avc: denied { write } for pid=2805 comm="syz.0.740" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.448169][ T30] audit: type=1400 audit(1766075742.318:543): avc: denied { open } for pid=2805 comm="syz.0.740" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.525949][ T2815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 157.232261][ T2840] loop5: detected capacity change from 0 to 512 [ 157.413431][ T2840] EXT4-fs (loop5): Unsupported blocksize for fs-verity [ 157.970642][ T2870] loop0: detected capacity change from 0 to 256 [ 159.711694][ T2877] loop5: detected capacity change from 0 to 40427 [ 159.733620][ T2877] F2FS-fs (loop5): invalid crc value [ 159.821688][ T2877] F2FS-fs (loop5): Found nat_bits in checkpoint [ 160.182477][ T2877] F2FS-fs (loop5): Start checkpoint disabled! [ 160.202781][ T2877] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 160.364065][ T2911] loop4: detected capacity change from 0 to 128 [ 160.402382][ T1445] attempt to access beyond end of device [ 160.402382][ T1445] loop5: rw=2049, want=40968, limit=40427 [ 160.423357][ T1445] attempt to access beyond end of device [ 160.423357][ T1445] loop5: rw=2049, want=41000, limit=40427 [ 160.781852][ T45] attempt to access beyond end of device [ 160.781852][ T45] loop4: rw=1, want=1041, limit=128 [ 160.872961][ T2918] loop2: detected capacity change from 0 to 2048 [ 160.882763][ T30] audit: type=1400 audit(1766075747.848:544): avc: denied { create } for pid=2913 comm="syz.2.776" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.025539][ T30] audit: type=1400 audit(1766075747.848:545): avc: denied { rename } for pid=2913 comm="syz.2.776" name="file0" dev="tmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.107458][ T30] audit: type=1400 audit(1766075747.848:546): avc: denied { unlink } for pid=2913 comm="syz.2.776" name="file0" dev="tmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.166685][ T2924] loop5: detected capacity change from 0 to 7 [ 161.203468][ T2924] loop5: [ 161.798292][ T2944] loop2: detected capacity change from 0 to 1 [ 161.964926][ T2930] loop4: detected capacity change from 0 to 32768 [ 162.072679][ T733] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 162.205609][ T2958] loop4: detected capacity change from 0 to 16 [ 162.222697][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.263958][ T2958] erofs: Unknown parameter 'ŸcCð;5÷ÝÆN¾èd)÷Oß2F³‚ÂT@÷o¦FÚ<œßÄê+.LCŽÀ‚né°¾ÎW5аáÕ69´–~Vsºh“TÎïÇ[¿énˆ¨5@¢¬«¬¥£ÞA´ßO@ßÏ´W/À˜Ç°¾ãNF»H¡Y@Ñ”ÊÕí˜ù¦ÓÄýH¯'Õè_@58y#Ù' [ 162.332654][ T733] usb 6-1: Using ep0 maxpacket: 16 [ 162.452840][ T733] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.452900][ T733] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.452953][ T733] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.453009][ T733] usb 6-1: config 1 interface 0 has no altsetting 0 [ 162.612971][ T6] usb 2-1: config 0 has no interfaces? [ 162.619292][ T6] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 162.763005][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.777035][ T6] usb 2-1: config 0 descriptor?? [ 162.812549][ T733] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 162.821825][ T733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.830218][ T733] usb 6-1: Product: syz [ 162.843253][ T733] usb 6-1: Manufacturer: syz [ 162.848008][ T733] usb 6-1: SerialNumber: syz [ 163.049176][ T2952] kvm [2951]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 163.061293][ T2952] kvm [2951]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 163.082654][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.087201][ T2952] APIC base relocation is unsupported by KVM [ 163.146000][ T733] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 163.348327][ T30] audit: type=1400 audit(1766075750.328:547): avc: denied { read write } for pid=2943 comm="syz.5.787" name="lp0" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 163.358011][ T733] usb 2-1: USB disconnect, device number 12 [ 163.383372][ T6] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 163.391403][ T30] audit: type=1400 audit(1766075750.358:548): avc: denied { open } for pid=2943 comm="syz.5.787" path="/dev/usb/lp0" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 163.401072][ T290] usb 6-1: USB disconnect, device number 5 [ 163.539603][ T290] usblp0: removed [ 163.612720][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.621949][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.632845][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.470852][ T2982] loop1: detected capacity change from 0 to 1024 [ 164.487670][ T30] audit: type=1400 audit(1766075751.468:549): avc: denied { write } for pid=2984 comm="syz.0.803" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 164.554344][ T30] audit: type=1400 audit(1766075751.488:550): avc: denied { ioctl } for pid=2984 comm="syz.0.803" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 164.580684][ T2982] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.604699][ T2982] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 164.722706][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.731703][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.762619][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.809283][ T30] audit: type=1326 audit(1766075751.788:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f531af2e749 code=0x0 [ 164.835845][ T3004] loop1: detected capacity change from 0 to 512 [ 164.849039][ T3004] EXT4-fs (loop1): Ignoring removed orlov option [ 164.855618][ T3004] EXT4-fs (loop1): Ignoring removed bh option [ 164.856914][ T2993] loop0: detected capacity change from 0 to 40427 [ 164.862067][ T3004] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 164.868236][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.868268][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.868296][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.878483][ T3004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 164.911239][ T3004] System zones: 1-12 [ 164.915663][ T3004] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.811: inode #15: comm syz.1.811: iget: illegal inode # [ 164.928359][ T3004] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.811: couldn't read orphan inode 15 (err -117) [ 164.940601][ T3004] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,quota,debug,noload,norecovery,bh,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000008000000,,errors=continue. Quota mode: writeback. [ 164.942636][ T2993] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 164.975969][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.979256][ T2993] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.985331][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.004343][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.012238][ T2993] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.041928][ T2993] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.049119][ T2993] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.052656][ T290] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 165.071299][ T30] audit: type=1400 audit(1766075752.048:552): avc: denied { create } for pid=2992 comm="syz.0.807" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.084909][ T2993] attempt to access beyond end of device [ 165.084909][ T2993] loop0: rw=10241, want=45104, limit=40427 [ 165.091743][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.115456][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.126648][ T30] audit: type=1400 audit(1766075752.048:553): avc: denied { read write open } for pid=2992 comm="syz.0.807" path="/172/bus/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.156641][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.732700][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.741986][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.790146][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.801576][ T3028] loop4: detected capacity change from 0 to 1024 [ 165.872747][ T6] usb 3-1: unable to read config index 6 descriptor/start: -71 [ 165.881209][ T6] usb 3-1: can't read configurations, error -71 [ 165.897959][ T3028] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.913291][ T3028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.933380][ T3028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.819: bg 0: block 10: padding at end of block bitmap is not set [ 165.952772][ T290] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.961856][ T290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.992932][ T3028] __quota_error: 3 callbacks suppressed [ 165.992951][ T3028] Quota error (device loop4): write_blk: dquota write failed [ 166.006991][ T290] usb 6-1: config 0 descriptor?? [ 166.032647][ T3028] Quota error (device loop4): find_free_dqentry: Can't remove block (3) from entry free list [ 166.072692][ T3028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 166.086731][ T3033] loop2: detected capacity change from 0 to 40427 [ 166.095194][ T3028] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.819: Failed to acquire dquot type 0 [ 166.108703][ T3033] F2FS-fs (loop2): invalid crc value [ 166.132925][ T3028] Quota error (device loop4): write_blk: dquota write failed [ 166.141777][ T3028] Quota error (device loop4): find_free_dqentry: Can't remove block (3) from entry free list [ 166.153396][ T3033] F2FS-fs (loop2): Found nat_bits in checkpoint [ 166.162843][ T3028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 166.182834][ T3028] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.819: Failed to acquire dquot type 0 [ 166.204646][ T3028] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.819: Freeing blocks not in datazone - block = 0, count = 4096 [ 166.235033][ T3033] F2FS-fs (loop2): Start checkpoint disabled! [ 166.241706][ T3028] Quota error (device loop4): write_blk: dquota write failed [ 166.254954][ T3028] Quota error (device loop4): find_free_dqentry: Can't remove block (3) from entry free list [ 166.265286][ T3033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 166.293927][ T3028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 166.330760][ T30] audit: type=1400 audit(1766075753.308:557): avc: denied { setopt } for pid=3035 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.351288][ T3028] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.819: Failed to acquire dquot type 0 [ 166.373348][ T3028] EXT4-fs (loop4): 1 orphan inode deleted [ 166.379918][ T3028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.443283][ T10] attempt to access beyond end of device [ 166.443283][ T10] loop2: rw=2049, want=40976, limit=40427 [ 167.619162][ T733] usb 6-1: USB disconnect, device number 6 [ 167.669199][ T3018] loop0: detected capacity change from 0 to 131072 [ 167.714341][ T3054] loop5: detected capacity change from 0 to 16 [ 167.744251][ T3018] F2FS-fs (loop0): invalid crc value [ 167.763403][ T3054] erofs: dax options not supported [ 167.795638][ T3018] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.872666][ T3018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 168.188713][ T3083] loop5: detected capacity change from 0 to 4096 [ 168.219494][ T3083] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.243575][ T3083] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 168.258778][ T3087] loop4: detected capacity change from 0 to 256 [ 168.297517][ T3087] FAT-fs (loop4): Directory bread(block 64) failed [ 168.305605][ T3087] FAT-fs (loop4): Directory bread(block 65) failed [ 168.312238][ T3087] FAT-fs (loop4): Directory bread(block 66) failed [ 168.336410][ T3087] FAT-fs (loop4): Directory bread(block 67) failed [ 168.344954][ T3087] FAT-fs (loop4): Directory bread(block 68) failed [ 168.351621][ T3087] FAT-fs (loop4): Directory bread(block 69) failed [ 168.360032][ T3087] FAT-fs (loop4): Directory bread(block 70) failed [ 168.367462][ T3089] loop5: detected capacity change from 0 to 128 [ 168.372249][ T3087] FAT-fs (loop4): Directory bread(block 71) failed [ 168.381066][ T3087] FAT-fs (loop4): Directory bread(block 72) failed [ 168.388826][ T3087] FAT-fs (loop4): Directory bread(block 73) failed [ 169.145065][ T3103] loop2: detected capacity change from 0 to 512 [ 170.050409][ T3107] loop1: detected capacity change from 0 to 131072 [ 170.093204][ T3107] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 170.101771][ T3107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 170.111705][ T3107] F2FS-fs (loop1): invalid crc value [ 170.138689][ T3111] loop0: detected capacity change from 0 to 512 [ 170.164149][ T3111] EXT4-fs (loop0): Ignoring removed bh option [ 170.164324][ T3103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.186640][ T3107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.225509][ T3107] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 170.226421][ T3103] EXT4-fs (loop2): 1 truncate cleaned up [ 170.232767][ T3107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 170.252093][ T3111] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 170.259962][ T3103] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 170.438185][ T3111] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.496951][ T3111] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.847: resize_inode disabled but reserved GDT blocks non-zero [ 170.533009][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.813540][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 170.953779][ T6] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 171.094072][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 171.094088][ T30] audit: type=1400 audit(1766075758.078:560): avc: denied { ioctl } for pid=3133 comm="syz.0.853" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.352820][ T30] audit: type=1400 audit(1766075758.338:561): avc: denied { append } for pid=3139 comm="syz.0.856" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.434770][ T3137] loop2: detected capacity change from 0 to 131072 [ 171.442476][ T6] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 171.492216][ T3137] F2FS-fs (loop2): invalid crc value [ 171.832563][ T6] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.832630][ T6] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.832671][ T6] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.832693][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.834721][ T3137] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.864309][ T3137] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 171.864701][ T30] audit: type=1400 audit(1766075758.478:562): avc: denied { read } for pid=3139 comm="syz.0.856" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.864888][ T30] audit: type=1400 audit(1766075758.478:563): avc: denied { open } for pid=3139 comm="syz.0.856" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.875419][ T3137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 172.104646][ T3154] loop0: detected capacity change from 0 to 2048 [ 172.659487][ T3162] loop4: detected capacity change from 0 to 131072 [ 172.670841][ T3154] loop0: p1 < > p4 < > [ 172.677988][ T3154] loop0: partition table partially beyond EOD, truncated [ 172.687837][ T3154] loop0: p1 start 8388352 is beyond EOD, truncated [ 172.701544][ T3162] F2FS-fs (loop4): Test dummy encryption mode enabled [ 172.711848][ T3162] F2FS-fs (loop4): invalid crc value [ 172.731625][ T3162] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.811603][ T3162] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.893849][ T30] audit: type=1400 audit(1766075759.878:564): avc: denied { rename } for pid=3161 comm="syz.4.862" name="file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 172.963539][ T30] audit: type=1400 audit(1766075759.878:565): avc: denied { unlink } for pid=3161 comm="syz.4.862" name="file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 173.022365][ T1626] udevd[1626]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 173.054635][ T1626] udevd[1626]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 173.103652][ T3176] loop0: detected capacity change from 0 to 128 [ 173.121172][ T3176] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.158464][ T3176] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.220837][ T3186] loop1: detected capacity change from 0 to 256 [ 173.228328][ T3186] exfat: Deprecated parameter 'namecase' [ 173.234582][ T3186] exfat: Deprecated parameter 'namecase' [ 173.240310][ T3186] exfat: Unknown parameter 'keep_last_dots' [ 173.447689][ T3197] loop4: detected capacity change from 0 to 512 [ 173.459190][ T3199] device syzkaller0 entered promiscuous mode [ 173.516485][ T3197] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 173.722653][ T290] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.741083][ T6] usb 6-1: USB disconnect, device number 7 [ 173.771244][ T3215] loop5: detected capacity change from 0 to 1024 [ 173.834638][ T3215] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.854238][ T3215] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,dioread_nolock,. Quota mode: none. [ 173.931125][ T3219] loop5: detected capacity change from 0 to 4096 [ 173.985159][ T3219] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.007721][ T30] audit: type=1400 audit(1766075760.978:566): avc: denied { rename } for pid=3218 comm="syz.5.880" name="#17" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.036797][ T30] audit: type=1400 audit(1766075760.978:567): avc: denied { unlink } for pid=3218 comm="syz.5.880" name="#18" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.072081][ T290] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 174.075594][ T30] audit: type=1400 audit(1766075760.988:568): avc: denied { mounton } for pid=3218 comm="syz.5.880" path="/108/file2/file0" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.083226][ T3223] loop2: detected capacity change from 0 to 128 [ 174.172745][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.182442][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.193977][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.277079][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.286557][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.297635][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.382731][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.405886][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.489039][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.694036][ T3239] loop4: detected capacity change from 0 to 128 [ 174.823920][ T45] attempt to access beyond end of device [ 174.823920][ T45] loop4: rw=1, want=188, limit=128 [ 174.972742][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.986128][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.008502][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.054369][ T3246] loop4: detected capacity change from 0 to 16 [ 175.064349][ T3246] erofs: (device loop4): erofs_init_devices: extra devices don't match (ondisk 128, given 0) [ 175.092689][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.101680][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.113613][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.193415][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.248749][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.293856][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.392771][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.440392][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.451076][ T3254] loop2: detected capacity change from 0 to 16 [ 175.466615][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.512996][ T3254] erofs: dax options not supported [ 175.547024][ T3257] loop0: detected capacity change from 0 to 512 [ 175.562953][ T290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.579502][ T290] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.661967][ T3257] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.893: dx entry: limit 1024 != root limit 124 [ 175.674126][ T3257] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.893: Corrupt directory, running e2fsck is recommended [ 175.674383][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.696826][ T3257] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 175.706197][ T3257] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.893: corrupted in-inode xattr [ 175.718645][ T3257] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.893: couldn't read orphan inode 15 (err -117) [ 175.730872][ T3257] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000003,jqfmt=vfsv1,jqfmt=vfsv1,noquota,grpjquota=.auto_da_alloc,usrjquota=,nobarrier,delalloc,,,errors=continue. Quota mode: writeback. [ 176.066996][ T30] audit: type=1400 audit(1766075763.048:569): avc: denied { connect } for pid=3259 comm="syz.5.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.137766][ T3250] loop4: detected capacity change from 0 to 40427 [ 176.155011][ T3250] F2FS-fs (loop4): fault_injection options not supported [ 176.167089][ T3250] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 176.208565][ T290] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 176.217922][ T290] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.226658][ T290] usb 2-1: Product: syz [ 176.231116][ T290] usb 2-1: Manufacturer: syz [ 176.237435][ T290] usb 2-1: SerialNumber: syz [ 176.243743][ T290] usb 2-1: config 0 descriptor?? [ 176.379960][ T290] usb 2-1: USB disconnect, device number 13 [ 176.471340][ T3284] loop0: detected capacity change from 0 to 512 [ 176.666427][ T3289] loop2: detected capacity change from 0 to 256 [ 176.863165][ T3289] FAT-fs (loop2): Unrecognized mount option "rod" or missing value [ 176.927497][ T3284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01d, mo2=0002] [ 177.093650][ T3284] System zones: 1-12 [ 177.101324][ T3284] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.900: Directory hole found for htree index block 0 [ 177.119594][ T3284] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 177.140920][ T3284] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.900: Directory hole found for htree index block 0 [ 177.159115][ T3284] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 177.170417][ T3284] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,nombcache,bsdgroups,usrjquota="user_xattr,grpquota,,,errors=continue. Quota mode: writeback. [ 177.201684][ T3284] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.900: Directory hole found for htree index block 0 [ 177.218859][ T3284] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.900: Directory hole found for htree index block 0 [ 177.431667][ T3304] loop0: detected capacity change from 0 to 2048 [ 177.578021][ T3304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.586472][ T30] audit: type=1400 audit(1766075764.558:570): avc: denied { getopt } for pid=3311 comm="syz.2.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.595941][ T3304] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.652830][ T3320] loop4: detected capacity change from 0 to 256 [ 177.706900][ T3320] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 177.733199][ T3325] loop1: detected capacity change from 0 to 8192 [ 177.792015][ T3326] loop2: detected capacity change from 0 to 8192 [ 178.102733][ T30] audit: type=1400 audit(1766075765.038:571): avc: denied { read } for pid=3339 comm="syz.2.925" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.205199][ T30] audit: type=1400 audit(1766075765.068:572): avc: denied { view } for pid=3341 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 178.335486][ T3355] loop0: detected capacity change from 0 to 512 [ 178.361818][ T3355] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 178.380268][ T3355] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 178.390147][ T3355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.419661][ T3355] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.931: bad orphan inode 131083 [ 178.436086][ T3355] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,mblk_io_submit,noload,,errors=continue. Quota mode: none. [ 178.742006][ T3363] usb usb1: usbfs: process 3363 (syz.0.934) did not claim interface 0 before use [ 178.761335][ T3365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'. [ 178.788622][ T3365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'. [ 178.905494][ T3372] loop5: detected capacity change from 0 to 16 [ 179.014265][ T3372] erofs: (device loop5): mounted with root inode @ nid 36. [ 179.293486][ T30] audit: type=1400 audit(1766075766.268:573): avc: denied { bind } for pid=3389 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.329675][ T3391] loop4: detected capacity change from 0 to 512 [ 179.336474][ T30] audit: type=1400 audit(1766075766.268:574): avc: denied { node_bind } for pid=3389 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 179.391105][ T3393] loop0: detected capacity change from 0 to 8192 [ 179.404524][ T3391] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 179.421717][ T3391] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.945: invalid indirect mapped block 8 (level 2) [ 179.435450][ T3391] EXT4-fs (loop4): Remounting filesystem read-only [ 179.442140][ T3391] EXT4-fs (loop4): 1 truncate cleaned up [ 179.449765][ T3391] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x0000000000009676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 179.481594][ T3391] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.945: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 179.501962][ T3391] EXT4-fs (loop4): Remounting filesystem read-only [ 179.519434][ T3393] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 179.527261][ T3393] FAT-fs (loop0): Filesystem has been set read-only [ 179.542654][ T733] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 179.562685][ T3396] loop4: detected capacity change from 0 to 16 [ 179.614767][ T3396] erofs: (device loop4): mounted with root inode @ nid 36. [ 179.634546][ T3396] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 179.637127][ T3398] loop0: detected capacity change from 0 to 16 [ 179.643523][ T3396] BUG: scheduling while atomic: syz.4.947/3396/0x00000002 [ 179.656257][ T3396] Modules linked in: [ 179.656436][ T3398] erofs: (device loop0): mounted with root inode @ nid 36. [ 179.660171][ T3396] Preemption disabled at: [ 179.660178][ T3396] [] z_erofs_reload_indexes+0x310/0x410 [ 179.667882][ T3398] SELinux: (dev loop0, type erofs) getxattr errno 117 [ 179.671862][ T3396] CPU: 1 PID: 3396 Comm: syz.4.947 Not tainted syzkaller #0 [ 179.671885][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.703075][ T3396] Call Trace: [ 179.706357][ T3396] [ 179.709290][ T3396] __dump_stack+0x21/0x30 [ 179.713633][ T3396] dump_stack_lvl+0xee/0x150 [ 179.718227][ T3396] ? show_regs_print_info+0x20/0x20 [ 179.723427][ T3396] ? __kasan_check_read+0x11/0x20 [ 179.728461][ T3396] ? z_erofs_reload_indexes+0x310/0x410 [ 179.734009][ T3396] dump_stack+0x15/0x20 [ 179.738267][ T3396] __schedule_bug+0x174/0x230 [ 179.742944][ T3396] ? ttwu_queue_wakelist+0x490/0x490 [ 179.748229][ T3396] ? selinux_file_ioctl+0x377/0x480 [ 179.753435][ T3396] __schedule+0xc2f/0x14c0 [ 179.757854][ T3396] ? __fget_files+0x2c4/0x320 [ 179.762542][ T3396] ? release_firmware_map_entry+0x190/0x190 [ 179.768440][ T3396] ? __x64_sys_futex+0x100/0x100 [ 179.773381][ T3396] ? __kasan_check_write+0x14/0x20 [ 179.778493][ T3396] schedule+0x11e/0x1e0 [ 179.782652][ T3396] exit_to_user_mode_loop+0x50/0xe0 [ 179.787864][ T3396] exit_to_user_mode_prepare+0x87/0xd0 [ 179.793326][ T3396] syscall_exit_to_user_mode+0x1a/0x30 [ 179.798873][ T3396] do_syscall_64+0x58/0xa0 [ 179.803294][ T3396] ? clear_bhb_loop+0x50/0xa0 [ 179.807975][ T3396] ? clear_bhb_loop+0x50/0xa0 [ 179.812653][ T3396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.818555][ T3396] RIP: 0033:0x7f531af2e749 [ 179.822994][ T3396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.842694][ T3396] RSP: 002b:00007f53199960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.851128][ T3396] RAX: 0000000000000001 RBX: 00007f531b184fa8 RCX: 00007f531af2e749 [ 179.859111][ T3396] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f531b184fac [ 179.867083][ T3396] RBP: 00007f531b184fa0 R08: 00247ba7438cbe50 R09: 0000000000000000 [ 179.875143][ T3396] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 179.883126][ T3396] R13: 00007f531b185038 R14: 00007ffe9b5cdbf0 R15: 00007ffe9b5cdcd8 [ 179.891107][ T3396] [ 180.322720][ T733] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 180.331925][ T733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.339974][ T733] usb 2-1: Product: syz [ 180.344189][ T733] usb 2-1: Manufacturer: syz [ 180.348872][ T733] usb 2-1: SerialNumber: syz [ 180.354564][ T733] usb 2-1: config 0 descriptor?? [ 181.658447][ T58] usb 2-1: USB disconnect, device number 14