last executing test programs: 13.61183632s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 12.574515848s ago: executing program 0 (id=2007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xfffffffb) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)) 12.479897286s ago: executing program 0 (id=2008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getgroups(0x1, &(0x7f0000000280)=[0xee01]) 9.112781494s ago: executing program 0 (id=2009): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "4f43c852"}]}}, 0x0}, 0x0) 8.655172622s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 7.191025367s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 6.078060592s ago: executing program 0 (id=2026): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x0, 0x2000000000903, 0x8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 5.540185378s ago: executing program 2 (id=2040): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221700000064905700a8452067164d0f51b1e6fa"], 0x0}, 0x0) 5.456066945s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 4.240002938s ago: executing program 0 (id=2041): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}], 0x1, 0x2040001) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 4.239425358s ago: executing program 4 (id=2042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd(r2, &(0x7f00000006c0), 0x8) 4.2266374s ago: executing program 0 (id=2043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 3.785096567s ago: executing program 3 (id=2046): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000cc"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000800)={0xb0000010}) 3.75086283s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 2.436677892s ago: executing program 2 (id=2047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000080)={[{@nomblk_io_submit}]}, 0x1, 0x4ef, &(0x7f0000000a00)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 2.435790102s ago: executing program 4 (id=2048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff004d564b"]) 2.435606112s ago: executing program 3 (id=2049): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)={0x2a, 0x29, 0x0, {0x0, [{{0x0, 0x3, 0x4}, 0x9, 0x28, 0x7, './file2'}]}}, 0x2a) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) 2.273629326s ago: executing program 4 (id=2050): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 2.149959107s ago: executing program 4 (id=2051): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 2.030205657s ago: executing program 2 (id=2052): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0a00ffff0000", 0x6}]) 1.837142653s ago: executing program 2 (id=2053): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="7c5331fc9356b5b10006000081001a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.804481696s ago: executing program 3 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x6) 1.664033308s ago: executing program 3 (id=2055): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000840)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$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") syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/pid_for_children\x00') 1.663472638s ago: executing program 2 (id=2065): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)={0x2a, 0x29, 0x0, {0x0, [{{0x0, 0x3, 0x4}, 0x9, 0x28, 0x7, './file2'}]}}, 0x2a) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) 1.483805183s ago: executing program 3 (id=2056): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 1.462434605s ago: executing program 4 (id=2057): r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) keyctl$chown(0x4, r0, 0x0, 0x0) 1.430206168s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 809.45µs ago: executing program 2 (id=2058): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x6, {0x2, 0x4e20, @multicast2}, 'ip6tnl0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 452.12µs ago: executing program 3 (id=2059): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @local}, 0x10) 0s ago: executing program 4 (id=2060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 130.083647][ T4567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 130.098549][ T4567] EXT4-fs (loop2): Remounting filesystem read-only [ 130.289048][ T516] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 130.289168][ T30] audit: type=1400 audit(1729029519.736:1448): avc: denied { ioctl } for pid=4580 comm="syz.0.1713" path="/22/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.298000][ T516] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 130.329569][ T516] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 130.339881][ T516] plantronics 0003:047F:FFFF.0050: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.428189][ T296] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 130.589259][ T695] usb 4-1: USB disconnect, device number 35 [ 130.658218][ T26] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:3d:64:d0:51:4c [ 130.669654][ T26] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 130.676279][ T26] usb 5-1: USB disconnect, device number 27 [ 130.808292][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.819165][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.828717][ T296] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 130.837540][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.846282][ T296] usb 3-1: config 0 descriptor?? [ 131.104660][ T30] audit: type=1400 audit(1729029520.546:1449): avc: denied { write } for pid=4584 comm="syz.1.1705" name="mcfilter6" dev="proc" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.190606][ T4600] tipc: Started in network mode [ 131.196544][ T4600] tipc: Node identity ac1414bb, cluster identity 4711 [ 131.204055][ T4600] tipc: Enabling of bearer rejected, failed to enable media [ 131.275536][ T30] audit: type=1400 audit(1729029520.716:1450): avc: denied { mounton } for pid=4610 comm="syz.4.1718" path=2F3130362FE91F7189591E9233614B dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 131.309209][ T296] arvo 0003:1E7D:30D4.0051: item fetching failed at offset 5/7 [ 131.316747][ T296] arvo 0003:1E7D:30D4.0051: parse failed [ 131.324842][ T296] arvo: probe of 0003:1E7D:30D4.0051 failed with error -22 [ 131.357253][ T4596] loop3: detected capacity change from 0 to 40427 [ 131.385134][ T4596] F2FS-fs (loop3): invalid crc value [ 131.392277][ T4596] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.418221][ T695] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 131.435678][ T4596] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 131.442674][ T4596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.463213][ T4596] attempt to access beyond end of device [ 131.463213][ T4596] loop3: rw=2049, want=45112, limit=40427 [ 131.479924][ T1938] attempt to access beyond end of device [ 131.479924][ T1938] loop3: rw=2049, want=45120, limit=40427 [ 131.512078][ T312] usb 3-1: USB disconnect, device number 27 [ 131.558205][ T464] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 131.668247][ T695] usb 1-1: Using ep0 maxpacket: 16 [ 131.788220][ T695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.798964][ T695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.811546][ T695] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.820351][ T695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.829275][ T695] usb 1-1: config 0 descriptor?? [ 131.968210][ T464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.978948][ T464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.988469][ T464] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.001146][ T464] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.009979][ T464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.018429][ T464] usb 2-1: config 0 descriptor?? [ 132.312565][ T695] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0052/input/input41 [ 132.389190][ T695] microsoft 0003:045E:07DA.0052: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 132.479320][ T464] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 132.487123][ T464] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 132.494545][ T464] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 132.503496][ T464] plantronics 0003:047F:FFFF.0053: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 132.718980][ T464] usb 1-1: USB disconnect, device number 34 [ 132.749197][ T26] usb 2-1: USB disconnect, device number 28 [ 133.259752][ T4646] loop3: detected capacity change from 0 to 1024 [ 133.283576][ T4650] loop1: detected capacity change from 0 to 2048 [ 133.309478][ T4646] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.319986][ T4650] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 133.339878][ T4650] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 133.432073][ T4668] input: syz1 as /devices/virtual/input/input42 [ 133.451567][ T30] audit: type=1326 audit(1729029522.896:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc387dff9 code=0x7ffc0000 [ 133.488160][ T26] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 133.518334][ T695] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 133.738167][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 133.758155][ T695] usb 1-1: Using ep0 maxpacket: 32 [ 133.768365][ T312] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 133.868243][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.884056][ T4695] loop1: detected capacity change from 0 to 512 [ 133.888137][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.908168][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.917017][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.929162][ T4695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.939255][ T26] usb 3-1: config 0 descriptor?? [ 133.944050][ T4695] EXT4-fs (loop1): 1 orphan inode deleted [ 133.949990][ T4695] EXT4-fs (loop1): 1 truncate cleaned up [ 133.955498][ T4695] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,sb=0x0000000000000009,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 133.993435][ T4695] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 134.008231][ T26] hub 3-1:0.0: USB hub found [ 134.012938][ T4695] EXT4-fs (loop1): Remounting filesystem read-only [ 134.018136][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 134.048278][ T695] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 134.057135][ T695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.065158][ T695] usb 1-1: Product: syz [ 134.069468][ T695] usb 1-1: Manufacturer: syz [ 134.073863][ T695] usb 1-1: SerialNumber: syz [ 134.080592][ T695] usb 1-1: config 0 descriptor?? [ 134.109738][ T4703] loop1: detected capacity change from 0 to 2048 [ 134.149296][ T4703] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,grpjquota=,,errors=continue. Quota mode: none. [ 134.228202][ T26] hub 3-1:0.0: 16 ports detected [ 134.248212][ T26] hub 3-1:0.0: insufficient power available to use all downstream ports [ 134.298300][ T312] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 134.307161][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.315395][ T312] usb 4-1: Product: syz [ 134.319448][ T312] usb 4-1: Manufacturer: syz [ 134.323792][ T312] usb 4-1: SerialNumber: syz [ 134.328899][ T312] usb 4-1: config 0 descriptor?? [ 134.368691][ T312] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 134.376255][ T312] usb 4-1: Detected FT232H [ 134.398173][ T6] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 134.438208][ T26] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 134.444360][ T26] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 134.558193][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 134.563978][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.578217][ T312] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 134.598546][ T26] usb 3-1: USB disconnect, device number 28 [ 134.758241][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.768354][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 134.777438][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.785346][ T695] (unnamed net_device) (uninitialized): Assigned a random MAC address: a2:59:62:0e:6b:f7 [ 134.795504][ T6] usb 5-1: config 0 descriptor?? [ 134.801539][ T695] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 134.807972][ T695] usb 1-1: USB disconnect, device number 35 [ 134.838245][ T312] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 134.845428][ T312] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.042504][ T20] usb 4-1: USB disconnect, device number 36 [ 135.049118][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.058620][ T20] ftdi_sio 4-1:0.0: device disconnected [ 135.068220][ T6] usb 5-1: string descriptor 0 read error: -71 [ 135.074218][ T6] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 135.081067][ T6] usb 5-1: No valid video chain found. [ 135.086863][ T6] usb 5-1: USB disconnect, device number 28 [ 135.600986][ T4725] loop4: detected capacity change from 0 to 4096 [ 135.609500][ T4717] loop3: detected capacity change from 0 to 2048 [ 135.646555][ T4735] loop2: detected capacity change from 0 to 512 [ 135.653374][ T4717] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 135.663108][ T4735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.663779][ T4725] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.697793][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 135.697809][ T30] audit: type=1400 audit(1729029525.136:1459): avc: denied { create } for pid=4724 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.701744][ T4735] EXT4-fs (loop2): 1 truncate cleaned up [ 135.708148][ T30] audit: type=1400 audit(1729029525.156:1460): avc: denied { getopt } for pid=4724 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.724512][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 135.730002][ T4717] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 135.768292][ T30] audit: type=1400 audit(1729029525.216:1461): avc: denied { link } for pid=4734 comm="syz.2.1766" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.818013][ T30] audit: type=1400 audit(1729029525.216:1462): avc: denied { setattr } for pid=4734 comm="syz.2.1766" name="#20" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.868053][ T4742] syz.4.1768[4742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.868230][ T4742] syz.4.1768[4742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.879424][ T26] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 135.900220][ T1250] tipc: Left network mode [ 135.932409][ T4744] loop4: detected capacity change from 0 to 2048 [ 135.968183][ T6] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 135.978669][ T4744] loop4: p1 < > p4 [ 135.983348][ T4744] loop4: p4 size 8388608 extends beyond EOD, truncated [ 136.079543][ T30] audit: type=1400 audit(1729029525.526:1463): avc: denied { unmount } for pid=3425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.103253][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.110875][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.119490][ T4746] device bridge_slave_0 entered promiscuous mode [ 136.131518][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.138381][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 136.218191][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 136.278153][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.285897][ T4746] device bridge_slave_1 entered promiscuous mode [ 136.609104][ T1250] device bridge_slave_1 left promiscuous mode [ 136.615060][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.658587][ T1250] device bridge_slave_0 left promiscuous mode [ 136.664545][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.729150][ T1250] device veth1_macvtap left promiscuous mode [ 136.734987][ T1250] device veth0_vlan left promiscuous mode [ 137.712360][ T30] audit: type=1400 audit(1729029527.156:1464): avc: denied { setattr } for pid=4760 comm="syz.3.1777" name="file0" dev="incremental-fs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.768207][ T26] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 137.782567][ T4767] loop4: detected capacity change from 0 to 2048 [ 137.797103][ T26] usb 2-1: can't read configurations, error -71 [ 137.798248][ T6] usb 1-1: device descriptor read/all, error -71 [ 137.839997][ T4767] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 137.840553][ T4767] loop4: p3 start 4259840 is beyond EOD, truncated [ 137.934197][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.941642][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.959672][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.967855][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.976140][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.983014][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.990945][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.999201][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.007256][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.014118][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.030426][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.038601][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.053047][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.065151][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.078505][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.098998][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.106356][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.113659][ T20] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 138.122168][ T4746] device veth0_vlan entered promiscuous mode [ 138.136366][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.144766][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.154536][ T4746] device veth1_macvtap entered promiscuous mode [ 138.165167][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.172965][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.181313][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.200825][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.208970][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.341475][ T4778] syz.0.1784[4778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.341549][ T4778] syz.0.1784[4778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.358535][ T4780] overlayfs: missing 'workdir' [ 138.397616][ T311] udevd[311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 138.397639][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.409917][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 138.417666][ T3317] udevd[3317]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 138.427590][ T445] udevd[445]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 138.453540][ T338] udevd[338]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 138.454220][ T3846] udevd[3846]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 138.481076][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.517006][ T4785] udevd[4785]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 138.524167][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 138.534314][ T4788] udevd[4788]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 138.546078][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.574245][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 138.609411][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.654220][ T20] usb 4-1: config 0 descriptor?? [ 138.742101][ T26] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 138.760423][ T4794] netem: change failed [ 138.988175][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 139.108512][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.124733][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.128152][ T6] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 139.199819][ T20] lg-g15 0003:046D:C222.0054: unknown main item tag 0x0 [ 139.207433][ T20] lg-g15 0003:046D:C222.0054: item fetching failed at offset 10/11 [ 139.215829][ T20] lg-g15: probe of 0003:046D:C222.0054 failed with error -22 [ 139.248230][ T26] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 139.257087][ T26] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 139.265517][ T26] usb 2-1: Product: syz [ 139.269799][ T26] usb 2-1: Manufacturer: syz [ 139.274881][ T26] usb 2-1: config 0 descriptor?? [ 139.317077][ T30] audit: type=1326 audit(1729029528.756:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.2.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 139.345724][ T30] audit: type=1326 audit(1729029528.756:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.2.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 139.370335][ T30] audit: type=1326 audit(1729029528.756:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.2.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 139.393911][ T30] audit: type=1326 audit(1729029528.756:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.2.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 139.422588][ T20] usb 4-1: USB disconnect, device number 37 [ 139.568210][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.578238][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.658268][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.667161][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.674983][ T6] usb 5-1: SerialNumber: syz [ 139.708151][ T296] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 139.715574][ T464] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 139.778875][ T26] kovaplus 0003:1E7D:2D50.0055: item fetching failed at offset 6/7 [ 139.786734][ T26] kovaplus 0003:1E7D:2D50.0055: parse failed [ 139.792579][ T26] kovaplus: probe of 0003:1E7D:2D50.0055 failed with error -22 [ 139.939921][ T1250] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.958187][ T464] usb 1-1: Using ep0 maxpacket: 8 [ 139.968765][ T6] usb 5-1: 0:2 : does not exist [ 139.973578][ T6] usb 5-1: unit 32 not found! [ 139.983612][ T6] usb 5-1: USB disconnect, device number 29 [ 139.991318][ T20] usb 2-1: USB disconnect, device number 30 [ 140.078237][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.089036][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.099756][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.109269][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.118854][ T296] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 140.127638][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.135492][ T464] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 140.144330][ T464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.153348][ T296] usb 3-1: config 0 descriptor?? [ 140.158353][ T464] usb 1-1: config 0 descriptor?? [ 140.639213][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.648163][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.655474][ T296] hid-rmi 0003:06CB:81A7.0057: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 140.667475][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.674807][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.682215][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.689421][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.696593][ T464] playstation 0003:054C:0CE6.0056: unknown main item tag 0x0 [ 140.704644][ T464] playstation 0003:054C:0CE6.0056: hidraw1: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 140.841330][ T516] usb 3-1: USB disconnect, device number 29 [ 140.848149][ T296] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 140.858195][ T464] playstation 0003:054C:0CE6.0056: Invalid byte count transferred, expected 20 got 0 [ 140.867455][ T464] playstation 0003:054C:0CE6.0056: Failed to retrieve DualSense pairing info: -22 [ 140.876629][ T464] playstation 0003:054C:0CE6.0056: Failed to get MAC address from DualSense [ 140.885203][ T464] playstation 0003:054C:0CE6.0056: Failed to create dualsense. [ 140.893252][ T464] playstation: probe of 0003:054C:0CE6.0056 failed with error -22 [ 141.061858][ T20] usb 1-1: USB disconnect, device number 38 [ 141.118263][ T296] usb 2-1: Using ep0 maxpacket: 8 [ 141.278271][ T296] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 141.287160][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.304113][ T296] usb 2-1: config 0 descriptor?? [ 141.358629][ T296] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 141.373324][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 141.373338][ T30] audit: type=1326 audit(1729029530.816:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 141.422150][ T30] audit: type=1326 audit(1729029530.816:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 141.446546][ T30] audit: type=1326 audit(1729029530.816:1481): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 141.470409][ T30] audit: type=1326 audit(1729029530.856:1482): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 141.991386][ T464] Bluetooth: hci0: command 0x1003 tx timeout [ 142.008187][ T296] usb 2-1: Detected FT8U232AM [ 142.017188][ T296] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 142.025370][ T2212] Bluetooth: hci0: sending frame failed (-49) [ 142.050151][ T296] usb 2-1: USB disconnect, device number 31 [ 142.063600][ T296] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 142.073267][ T296] ftdi_sio 2-1:0.0: device disconnected [ 142.083427][ T4869] loop2: detected capacity change from 0 to 1024 [ 142.229776][ T4869] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.244230][ T4869] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 142.259037][ T4869] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 142.268170][ T20] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 142.271458][ T4869] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.271458][ T4869] [ 142.288023][ T4869] EXT4-fs (loop2): Total free blocks count 0 [ 142.293812][ T4869] EXT4-fs (loop2): Free/Dirty block details [ 142.299828][ T4869] EXT4-fs (loop2): free_blocks=68451041280 [ 142.305452][ T4869] EXT4-fs (loop2): dirty_blocks=64 [ 142.310471][ T695] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 142.310652][ T4869] EXT4-fs (loop2): Block reservation details [ 142.323774][ T4869] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 142.385130][ T30] audit: type=1326 audit(1729029531.826:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 142.408949][ T30] audit: type=1326 audit(1729029531.826:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 142.432814][ T30] audit: type=1326 audit(1729029531.826:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 142.456921][ T30] audit: type=1326 audit(1729029531.826:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 142.480433][ T30] audit: type=1326 audit(1729029531.826:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 142.504035][ T30] audit: type=1326 audit(1729029531.826:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 142.528668][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 142.544523][ T4878] loop2: detected capacity change from 0 to 512 [ 142.555808][ T4880] loop1: detected capacity change from 0 to 512 [ 142.610462][ T4880] EXT4-fs (loop1): 1 orphan inode deleted [ 142.616147][ T4880] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 142.637063][ T4880] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038 (0x7fffffff) [ 142.648306][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.679460][ T4878] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 142.698583][ T695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.716229][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.728270][ T4878] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 142.736205][ T695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.757688][ T20] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 142.767573][ T695] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 142.778432][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.787597][ T20] usb 1-1: config 0 descriptor?? [ 142.792557][ T695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.801165][ T695] usb 5-1: config 0 descriptor?? [ 142.821169][ T4890] loop1: detected capacity change from 0 to 512 [ 142.888962][ T4890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.903287][ T4890] EXT4-fs (loop1): 1 truncate cleaned up [ 142.908910][ T4890] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 143.074357][ T4895] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.081356][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.088641][ T4895] device bridge_slave_0 entered promiscuous mode [ 143.098733][ T4895] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.105575][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.108171][ T6] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 143.112949][ T4895] device bridge_slave_1 entered promiscuous mode [ 143.159762][ T4895] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.166612][ T4895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.173726][ T4895] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.180500][ T4895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.199666][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.207056][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.214266][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.225005][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.233021][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.239860][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.252880][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.260849][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.267674][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.269443][ T20] lua 0003:1E7D:2C2E.0058: global environment stack underflow [ 143.283987][ T695] petalynx 0003:18B1:0037.0059: collection stack underflow [ 143.291060][ T695] petalynx 0003:18B1:0037.0059: item 0 1 0 12 parsing failed [ 143.301015][ T20] lua 0003:1E7D:2C2E.0058: item 0 0 1 11 parsing failed [ 143.307928][ T695] petalynx 0003:18B1:0037.0059: parse failed [ 143.314153][ T20] lua 0003:1E7D:2C2E.0058: parse failed [ 143.314219][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.319569][ T695] petalynx: probe of 0003:18B1:0037.0059 failed with error -22 [ 143.334653][ T20] lua: probe of 0003:1E7D:2C2E.0058 failed with error -22 [ 143.349319][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.361065][ T4895] device veth0_vlan entered promiscuous mode [ 143.371036][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.378842][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.386004][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.393382][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.407546][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.416752][ T4895] device veth1_macvtap entered promiscuous mode [ 143.426412][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.438409][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.467803][ T8] device bridge_slave_1 left promiscuous mode [ 143.474190][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.481138][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.498153][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.511961][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.515280][ T516] usb 5-1: USB disconnect, device number 30 [ 143.521044][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.524394][ T6] usb 3-1: config 0 descriptor?? [ 143.527047][ T8] device bridge_slave_0 left promiscuous mode [ 143.546220][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.546750][ T695] usb 1-1: USB disconnect, device number 39 [ 143.569021][ T8] device veth1_macvtap left promiscuous mode [ 143.574858][ T8] device veth0_vlan left promiscuous mode [ 143.623102][ T4905] loop1: detected capacity change from 0 to 2048 [ 143.689472][ T4905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.700009][ T4905] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 143.713075][ T4905] xt_hashlimit: size too large, truncated to 1048576 [ 144.009044][ T6] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0 [ 144.016433][ T6] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 144.025334][ T6] plantronics 0003:047F:FFFF.005A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 144.068367][ T296] Bluetooth: hci0: command 0x1001 tx timeout [ 144.074534][ T2212] Bluetooth: hci0: sending frame failed (-49) [ 144.122506][ T4934] loop4: detected capacity change from 0 to 256 [ 144.191202][ T4934] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 144.288589][ T296] usb 3-1: USB disconnect, device number 30 [ 144.351990][ T4962] syz.0.1856[4962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.352039][ T4962] syz.0.1856[4962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.386687][ T4967] loop0: detected capacity change from 0 to 128 [ 144.438186][ T6] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 144.450132][ T4967] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 144.462230][ T4967] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038 (0x7fffffff) [ 144.549486][ T4978] loop0: detected capacity change from 0 to 256 [ 144.678157][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 144.678153][ T516] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 144.808314][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.828137][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.841888][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.864713][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.884004][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.893253][ T6] usb 2-1: config 0 descriptor?? [ 144.924526][ T4985] capability: warning: `syz.0.1865' uses 32-bit capabilities (legacy support in use) [ 144.974911][ T4982] loop2: detected capacity change from 0 to 40427 [ 145.003559][ T4982] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 145.012369][ T4982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.022481][ T4982] F2FS-fs (loop2): invalid crc value [ 145.029247][ T4982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.058344][ T516] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.071169][ T516] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 145.082728][ T516] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 145.094189][ T516] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.103348][ T4982] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.103411][ T516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.111776][ T4982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.128247][ T4969] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.198617][ T5010] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.208042][ T5010] SELinux: failed to load policy [ 145.267192][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 145.324685][ T5027] loop0: detected capacity change from 0 to 1024 [ 145.357881][ T464] usb 5-1: USB disconnect, device number 31 [ 145.371016][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.005B/input/input43 [ 145.398729][ T5027] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.412770][ T5027] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x000000000000b930,commit=0x0000000000000005,user_xattr,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 145.450626][ T6] microsoft 0003:045E:07DA.005B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 145.558191][ T20] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 145.576588][ T516] usb 2-1: USB disconnect, device number 32 [ 145.778172][ T6] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 145.798180][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 145.992441][ T5040] loop4: detected capacity change from 0 to 512 [ 146.058739][ T5040] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 146.058739][ T5040] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 146.058739][ T5040] [ 146.076289][ T5040] EXT4-fs (loop4): Ignoring removed bh option [ 146.078280][ T20] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 146.082189][ T5040] EXT4-fs (loop4): Ignoring removed nobh option [ 146.091425][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.097259][ T5040] EXT4-fs (loop4): Unrecognized mount option "euid<00000000000000000000" or missing value [ 146.114734][ T20] usb 3-1: Product: syz [ 146.119966][ T20] usb 3-1: Manufacturer: syz [ 146.124383][ T20] usb 3-1: SerialNumber: syz [ 146.138558][ T20] usb 3-1: config 0 descriptor?? [ 146.148395][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.158159][ T516] Bluetooth: hci0: command 0x1009 tx timeout [ 146.159784][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 146.176721][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.205878][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.215030][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.248538][ T6] usb 1-1: config 0 descriptor?? [ 146.268224][ T5032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.306619][ T5056] loop4: detected capacity change from 0 to 256 [ 146.344755][ T5056] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 146.359560][ T5056] exFAT-fs (loop4): hint_cluster is invalid (17) [ 146.380406][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.386219][ T5056] exFAT-fs (loop4): Filesystem has been set read-only [ 146.393225][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 8, err : -5) [ 146.403172][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.409141][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 8, err : -5) [ 146.419047][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.424838][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 9, err : -5) [ 146.434878][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.440855][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 10, err : -5) [ 146.450877][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.456696][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 11, err : -5) [ 146.466724][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.473953][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 12, err : -5) [ 146.483987][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.489994][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 13, err : -5) [ 146.500156][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.505983][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 14, err : -5) [ 146.516056][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.522011][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 15, err : -5) [ 146.532132][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.538041][ T5056] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811a6e4dc0 iblock : 8, err : -5) [ 146.547784][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.554376][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.560500][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.566428][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.572473][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.578576][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.584421][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.590592][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.596424][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.602567][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.608676][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.614579][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.620548][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.626478][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.632883][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.639452][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.645298][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.651420][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.657250][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.663641][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.669632][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.675550][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.681627][ T5056] exFAT-fs (loop4): error, broken FAT chain. [ 146.729141][ T6] plantronics 0003:047F:FFFF.005C: unknown main item tag 0xd [ 146.737392][ T6] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving [ 146.771277][ T6] plantronics 0003:047F:FFFF.005C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 146.848222][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: 32:61:09:76:1e:b6 [ 146.860191][ T20] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 146.867386][ T20] usb 3-1: USB disconnect, device number 31 [ 147.028606][ T516] usb 1-1: USB disconnect, device number 40 [ 147.365318][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 147.365332][ T30] audit: type=1400 audit(1729029536.806:1552): avc: denied { read } for pid=5092 comm="syz.1.1909" name="/" dev="configfs" ino=2652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.393463][ T30] audit: type=1400 audit(1729029536.806:1553): avc: denied { open } for pid=5092 comm="syz.1.1909" path="/15/file0" dev="configfs" ino=2652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.416301][ T30] audit: type=1400 audit(1729029536.846:1554): avc: denied { unmount } for pid=4895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 147.498968][ T5104] netlink: 'syz.1.1903': attribute type 6 has an invalid length. [ 147.728357][ T30] audit: type=1400 audit(1729029537.176:1555): avc: denied { unmount } for pid=3997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 147.812629][ T5135] binder: 5134:5135 ioctl c0306201 0 returned -14 [ 147.828669][ T5135] binder: 5134:5135 ioctl c0306201 20000480 returned -22 [ 147.878174][ T296] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 147.987334][ T5140] loop1: detected capacity change from 0 to 512 [ 148.089182][ T5140] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.108275][ T5140] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 148.128163][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 148.133163][ T516] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 148.158752][ T5097] loop2: detected capacity change from 0 to 131072 [ 148.173563][ T30] audit: type=1400 audit(1729029537.616:1556): avc: denied { unlink } for pid=4895 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 148.215218][ T5097] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.258287][ T296] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.272706][ T296] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.282366][ T5097] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.318483][ T5150] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.376376][ T30] audit: type=1400 audit(1729029537.816:1557): avc: denied { read } for pid=5154 comm="syz.1.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.396113][ T516] usb 1-1: Using ep0 maxpacket: 8 [ 148.410686][ T296] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.428135][ T296] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 148.436349][ T296] usb 5-1: Product: syz [ 148.440782][ T296] usb 5-1: Manufacturer: syz [ 148.488709][ T296] hub 5-1:4.0: USB hub found [ 148.517541][ T30] audit: type=1400 audit(1729029537.956:1558): avc: denied { mounton } for pid=5160 comm="syz.1.1928" path="/proc/74/cgroup" dev="proc" ino=38393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 148.540370][ T516] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 148.558137][ T516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.570095][ T516] usb 1-1: config 0 descriptor?? [ 148.618703][ T516] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 148.630831][ T5168] SELinux: failed to load policy [ 148.671451][ T30] audit: type=1400 audit(1729029538.116:1559): avc: denied { mounton } for pid=5172 comm="syz.1.1933" path="/proc/80/task" dev="proc" ino=37726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 148.688251][ T5176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1934'. [ 148.705680][ T5176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1934'. [ 148.714879][ T296] hub 5-1:4.0: 2 ports detected [ 148.739937][ T5182] loop1: detected capacity change from 0 to 256 [ 148.800464][ T5182] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 148.828222][ T516] usb 1-1: Detected FT8U232AM [ 148.833282][ T516] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.841882][ T516] usb 1-1: USB disconnect, device number 41 [ 148.848023][ T516] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.857655][ T516] ftdi_sio 1-1:0.0: device disconnected [ 148.890107][ T30] audit: type=1326 audit(1729029538.336:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bed5aff9 code=0x7ffc0000 [ 148.913433][ T30] audit: type=1326 audit(1729029538.336:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bed5aff9 code=0x7ffc0000 [ 149.008214][ T495] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 149.066992][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.073925][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.081084][ T5200] device bridge_slave_0 entered promiscuous mode [ 149.087984][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.095094][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.102557][ T5200] device bridge_slave_1 entered promiscuous mode [ 149.144744][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.151593][ T5200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.158719][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.165466][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.186479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.193942][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.201407][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.210708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.218734][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.225551][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.235881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.244198][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.251054][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.258524][ T495] usb 3-1: Using ep0 maxpacket: 16 [ 149.268270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.279180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.292671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.300927][ T296] hub 5-1:4.0: set hub depth failed [ 149.304472][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.313966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.321455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.330199][ T5200] device veth0_vlan entered promiscuous mode [ 149.341668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.350312][ T296] usb 5-1: USB disconnect, device number 32 [ 149.370589][ T5200] device veth1_macvtap entered promiscuous mode [ 149.384166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.394312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.398237][ T495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.413445][ T495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.423118][ T495] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.436482][ T495] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 149.445478][ T495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.454858][ T495] usb 3-1: config 0 descriptor?? [ 149.617959][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.624956][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.632362][ T5208] device bridge_slave_0 entered promiscuous mode [ 149.640002][ T514] device bridge_slave_1 left promiscuous mode [ 149.646013][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.653653][ T514] device bridge_slave_0 left promiscuous mode [ 149.659680][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.667853][ T514] device veth1_macvtap left promiscuous mode [ 149.673864][ T514] device veth0_vlan left promiscuous mode [ 149.771536][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.778397][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.785582][ T5208] device bridge_slave_1 entered promiscuous mode [ 149.849733][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.856570][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.863812][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.870657][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.899246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.906621][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.914004][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.922911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.931537][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.938390][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.947523][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.956093][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.956303][ T495] koneplus 0003:1E7D:2E22.005D: unknown main item tag 0x0 [ 149.962957][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.976447][ T495] koneplus 0003:1E7D:2E22.005D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 149.989598][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.005583][ T5208] device veth0_vlan entered promiscuous mode [ 150.015915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.024159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.032207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.040552][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.048863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.056634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.065710][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.073112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.084982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.093036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.102182][ T5208] device veth1_macvtap entered promiscuous mode [ 150.111819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.119405][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.127455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.140451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.148622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.178401][ T495] koneplus 0003:1E7D:2E22.005D: couldn't init struct koneplus_device [ 150.189253][ T5214] sch_fq: defrate 0 ignored. [ 150.193730][ T495] koneplus 0003:1E7D:2E22.005D: couldn't install mouse [ 150.223598][ T495] koneplus: probe of 0003:1E7D:2E22.005D failed with error -5 [ 150.254328][ T5221] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1953'. [ 150.286541][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.293588][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.301105][ T5215] device bridge_slave_0 entered promiscuous mode [ 150.309455][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.316335][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.323848][ T5215] device bridge_slave_1 entered promiscuous mode [ 150.383346][ T515] usb 3-1: USB disconnect, device number 32 [ 150.433991][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.440854][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.447945][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.454745][ T5215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.462525][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.469894][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.477068][ T5230] device bridge_slave_0 entered promiscuous mode [ 150.484811][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.491728][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.498864][ T5230] device bridge_slave_1 entered promiscuous mode [ 150.528325][ T20] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 150.538215][ T695] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 150.576979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.584447][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.591705][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.609567][ T514] device bridge_slave_1 left promiscuous mode [ 150.615520][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.622977][ T514] device bridge_slave_0 left promiscuous mode [ 150.628998][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.636483][ T514] device veth1_macvtap left promiscuous mode [ 150.642603][ T514] device veth0_vlan left promiscuous mode [ 150.711371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.719391][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.726325][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.733715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.742271][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.749124][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.764278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.771369][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 150.782039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.790230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.802498][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.810673][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.817532][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.824910][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.833159][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.840031][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.847443][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.863366][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.876381][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.884797][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.888228][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.904828][ T695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.909477][ T5215] device veth0_vlan entered promiscuous mode [ 150.921663][ T695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.931420][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.941054][ T695] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 150.941245][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.957427][ T20] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 150.972917][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.974617][ T695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.981024][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.994845][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.003349][ T695] usb 5-1: config 0 descriptor?? [ 151.012186][ T5215] device veth1_macvtap entered promiscuous mode [ 151.030496][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.038427][ T20] usb 1-1: config 0 descriptor?? [ 151.041620][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.059946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.074690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.087321][ T5230] device veth0_vlan entered promiscuous mode [ 151.093591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.101546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.109765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.117748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.126103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.133608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.165726][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.175456][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.185240][ T5230] device veth1_macvtap entered promiscuous mode [ 151.203334][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.211006][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.219472][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.244193][ T5250] loop2: detected capacity change from 0 to 512 [ 151.244280][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.258721][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.283100][ T5250] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.297509][ T5250] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1962: invalid block [ 151.309632][ T5250] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1962: invalid indirect mapped block 4294967295 (level 1) [ 151.323826][ T5250] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1962: invalid indirect mapped block 4294967295 (level 1) [ 151.338622][ T5250] EXT4-fs (loop2): 2 truncates cleaned up [ 151.344186][ T5250] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 151.372406][ T5250] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.384386][ T5250] EXT4-fs error (device loop2): ext4_remount:5845: comm syz.2.1962: Abort forced by user [ 151.395150][ T5250] EXT4-fs (loop2): Remounting filesystem read-only [ 151.499203][ T695] lg-g15 0003:046D:C222.005E: unknown main item tag 0x0 [ 151.513511][ T695] lg-g15 0003:046D:C222.005E: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 151.525357][ T20] hid-multitouch 0003:1FD2:6007.005F: unknown global tag 0xc [ 151.533859][ T20] hid-multitouch 0003:1FD2:6007.005F: item 0 0 1 12 parsing failed [ 151.541817][ T20] hid-multitouch: probe of 0003:1FD2:6007.005F failed with error -22 [ 151.718474][ T20] usb 5-1: USB disconnect, device number 33 [ 151.733295][ T516] usb 1-1: USB disconnect, device number 42 [ 151.742496][ T514] device bridge_slave_1 left promiscuous mode [ 151.748904][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.756282][ T514] device bridge_slave_0 left promiscuous mode [ 151.762337][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.770397][ T514] device bridge_slave_1 left promiscuous mode [ 151.776331][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.783668][ T514] device bridge_slave_0 left promiscuous mode [ 151.789808][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.797520][ T514] device veth1_macvtap left promiscuous mode [ 151.803627][ T514] device veth1_macvtap left promiscuous mode [ 151.809539][ T514] device veth0_vlan left promiscuous mode [ 152.048707][ T5257] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.055558][ T5257] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.062838][ T5257] device bridge_slave_0 entered promiscuous mode [ 152.071016][ T5257] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.077937][ T5257] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.085295][ T5257] device bridge_slave_1 entered promiscuous mode [ 152.091536][ T695] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 152.153306][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.160584][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.170412][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.178505][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.186572][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.193415][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.201658][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.210312][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.218510][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.226516][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.233388][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.255002][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.263024][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.294343][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.315098][ T5257] device veth0_vlan entered promiscuous mode [ 152.315602][ T5277] loop3: detected capacity change from 0 to 512 [ 152.321475][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.337534][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.345450][ T695] usb 3-1: Using ep0 maxpacket: 16 [ 152.355824][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.367960][ T5281] loop4: detected capacity change from 0 to 512 [ 152.376228][ T5257] device veth1_macvtap entered promiscuous mode [ 152.383091][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.400496][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.420546][ T5277] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1970: bad orphan inode 17 [ 152.432114][ T5277] ext4_test_bit(bit=16, block=4) = 1 [ 152.437224][ T5277] is_bad_inode(inode)=0 [ 152.441580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.448638][ T5277] NEXT_ORPHAN(inode)=0 [ 152.453407][ T5277] max_ino=32 [ 152.455383][ T5281] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 152.456504][ T5277] i_nlink=1 [ 152.473276][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.495658][ T5277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1970: bg 0: block 7: invalid block bitmap [ 152.508843][ T5281] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038 (0x7fffffff) [ 152.541585][ T5288] kvm: pic: non byte write [ 152.545911][ T5288] kvm: pic: non byte write [ 152.550537][ T5288] kvm: pic: non byte write [ 152.554923][ T5288] kvm: pic: non byte write [ 152.561217][ T5288] kvm: pic: non byte write [ 152.566894][ T5288] kvm: pic: non byte write [ 152.571523][ T5288] kvm: pic: non byte write [ 152.575859][ T5288] kvm: pic: non byte write [ 152.580576][ T5288] kvm: pic: non byte write [ 152.585012][ T5288] kvm: pic: non byte write [ 152.632111][ T695] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 152.642143][ T695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.652461][ T695] usb 3-1: Product: syz [ 152.656449][ T695] usb 3-1: Manufacturer: syz [ 152.661110][ T695] usb 3-1: SerialNumber: syz [ 152.666020][ T695] usb 3-1: config 0 descriptor?? [ 152.709711][ T695] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 152.717284][ T695] usb 3-1: Detected FT232H [ 152.918243][ T695] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 153.018832][ T514] device bridge_slave_1 left promiscuous mode [ 153.024745][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.032333][ T514] device bridge_slave_0 left promiscuous mode [ 153.038518][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.045957][ T514] device veth1_macvtap left promiscuous mode [ 153.051826][ T514] device veth0_vlan left promiscuous mode [ 153.139458][ T5299] loop0: detected capacity change from 0 to 256 [ 153.169134][ T5301] loop4: detected capacity change from 0 to 1024 [ 153.178300][ T695] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 153.188993][ T695] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.201831][ T695] usb 3-1: USB disconnect, device number 33 [ 153.215041][ T695] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 153.233088][ T695] ftdi_sio 3-1:0.0: device disconnected [ 153.279197][ T5301] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.328547][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.335409][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.343167][ T5302] device bridge_slave_0 entered promiscuous mode [ 153.352605][ T5302] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.359617][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.372905][ T5302] device bridge_slave_1 entered promiscuous mode [ 153.381807][ T5301] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.397096][ T5301] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 153.409381][ T5301] EXT4-fs (loop4): This should not happen!! Data will be lost [ 153.409381][ T5301] [ 153.419080][ T5301] EXT4-fs (loop4): Total free blocks count 0 [ 153.425050][ T5301] EXT4-fs (loop4): Free/Dirty block details [ 153.431177][ T5301] EXT4-fs (loop4): free_blocks=68451041280 [ 153.436814][ T5301] EXT4-fs (loop4): dirty_blocks=16 [ 153.442185][ T5301] EXT4-fs (loop4): Block reservation details [ 153.448000][ T5301] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 153.494249][ T5302] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.501118][ T5302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.508259][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.515088][ T5302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.554542][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.555913][ T5319] loop4: detected capacity change from 0 to 2048 [ 153.567877][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.575043][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.586144][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.594225][ T6] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 153.594457][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.602312][ T5319] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 153.608468][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.626641][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.634901][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.642984][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.649827][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.657047][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.665299][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.669543][ T5319] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.687066][ T464] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 153.696153][ T5319] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop4, type ext4) errno=-22 [ 153.700609][ T5302] device veth0_vlan entered promiscuous mode [ 153.714487][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.723131][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.730684][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.747335][ T5302] device veth1_macvtap entered promiscuous mode [ 153.754137][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.767289][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.793206][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.948867][ T514] device bridge_slave_1 left promiscuous mode [ 153.954831][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.962135][ T514] device bridge_slave_0 left promiscuous mode [ 153.968040][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.975767][ T514] device veth1_macvtap left promiscuous mode [ 153.981686][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.981703][ T514] device veth0_vlan left promiscuous mode [ 153.981718][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.007676][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 154.016586][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.024395][ T695] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 154.032477][ T6] usb 4-1: config 0 descriptor?? [ 154.069727][ T20] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 154.108266][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.119311][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.128882][ T464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.141578][ T464] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.150943][ T464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.159735][ T464] usb 1-1: config 0 descriptor?? [ 154.268167][ T695] usb 3-1: Using ep0 maxpacket: 32 [ 154.308442][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 154.388287][ T695] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.399266][ T695] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.438211][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.452281][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.462113][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.475055][ T20] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.483956][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.496100][ T20] usb 5-1: config 0 descriptor?? [ 154.509277][ T6] lg-g15 0003:046D:C222.0060: unknown main item tag 0x0 [ 154.518956][ T6] lg-g15 0003:046D:C222.0060: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 154.530073][ T695] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.545746][ T695] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 154.554944][ T695] usb 3-1: Product: syz [ 154.558985][ T695] usb 3-1: Manufacturer: syz [ 154.569043][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.575962][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.583181][ T5330] device bridge_slave_0 entered promiscuous mode [ 154.591758][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.598893][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.599164][ T695] hub 3-1:4.0: USB hub found [ 154.606300][ T5330] device bridge_slave_1 entered promiscuous mode [ 154.629776][ T464] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 154.637099][ T464] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 154.644543][ T464] plantronics 0003:047F:FFFF.0061: No inputs registered, leaving [ 154.656478][ T464] plantronics 0003:047F:FFFF.0061: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 154.691428][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.698298][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.705358][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.712187][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.726226][ T464] usb 4-1: USB disconnect, device number 38 [ 154.741530][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.749884][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.757079][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.768184][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.776162][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.783019][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.792242][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.800578][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.807413][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.814697][ T695] hub 3-1:4.0: 2 ports detected [ 154.823117][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.833160][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.845857][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.854899][ T514] device bridge_slave_1 left promiscuous mode [ 154.860889][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.867967][ T514] device bridge_slave_0 left promiscuous mode [ 154.874150][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.881976][ T514] device veth1_macvtap left promiscuous mode [ 154.887771][ T514] device veth0_vlan left promiscuous mode [ 154.899460][ T296] usb 1-1: USB disconnect, device number 43 [ 154.962804][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.970796][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.972513][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 154.978360][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.986589][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 154.994166][ T5330] device veth0_vlan entered promiscuous mode [ 154.999209][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.011249][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.019658][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.022279][ T5330] device veth1_macvtap entered promiscuous mode [ 155.026718][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.038849][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.039915][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.054872][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.062150][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.064280][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.069270][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.084269][ T20] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 155.105130][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0062/input/input45 [ 155.121434][ T20] microsoft 0003:045E:07DA.0062: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 155.177594][ T5327] UDC core: couldn't find an available UDC or it's busy: -16 [ 155.184852][ T5327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.197420][ T20] usb 5-1: USB disconnect, device number 34 [ 155.368180][ T695] hub 3-1:4.0: set hub depth failed [ 155.412337][ T695] usb 3-1: USB disconnect, device number 34 [ 155.848640][ T514] device bridge_slave_1 left promiscuous mode [ 155.854582][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.861922][ T514] device bridge_slave_0 left promiscuous mode [ 155.867848][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.875974][ T514] device veth1_macvtap left promiscuous mode [ 155.881818][ T514] device veth0_vlan left promiscuous mode [ 156.008363][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.015286][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.023038][ T5345] device bridge_slave_0 entered promiscuous mode [ 156.030431][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.041653][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.049064][ T5345] device bridge_slave_1 entered promiscuous mode [ 156.112384][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.119270][ T5345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.126352][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.133156][ T5345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.148727][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.156825][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.181955][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.189870][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.198269][ T296] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 156.208383][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.216755][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.224811][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.231661][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.240277][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.248192][ T312] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 156.255885][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.263926][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.270769][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.278061][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.286228][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.294264][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.302166][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.318436][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.326626][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.336375][ T5345] device veth0_vlan entered promiscuous mode [ 156.350958][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.358896][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.366748][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.375051][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.387145][ T5345] device veth1_macvtap entered promiscuous mode [ 156.408489][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.416535][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.425374][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.442248][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.450596][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.459011][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.467291][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.475580][ T296] usb 1-1: Using ep0 maxpacket: 32 [ 156.488313][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 156.573499][ T5355] loop2: detected capacity change from 0 to 131072 [ 156.608210][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.618275][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.619106][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.631615][ T5355] F2FS-fs (loop2): invalid crc value [ 156.640533][ T312] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 156.644501][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.662925][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.663106][ T296] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 156.672401][ T312] usb 5-1: config 0 descriptor?? [ 156.683380][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.685278][ T5355] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 156.697285][ T296] usb 1-1: config 0 descriptor?? [ 156.714939][ T5355] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 157.078640][ T310] device bridge_slave_1 left promiscuous mode [ 157.084555][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.091905][ T310] device bridge_slave_0 left promiscuous mode [ 157.097812][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.105497][ T310] device veth1_macvtap left promiscuous mode [ 157.111341][ T310] device veth0_vlan left promiscuous mode [ 157.169091][ T296] lua 0003:1E7D:2C2E.0063: global environment stack underflow [ 157.169232][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.176374][ T296] lua 0003:1E7D:2C2E.0063: item 0 0 1 11 parsing failed [ 157.176542][ T296] lua 0003:1E7D:2C2E.0063: parse failed [ 157.184000][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.194912][ T296] lua: probe of 0003:1E7D:2C2E.0063 failed with error -22 [ 157.197171][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.217249][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.224452][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.231629][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.239427][ T312] playstation 0003:054C:0CE6.0064: unknown main item tag 0x0 [ 157.247431][ T312] playstation 0003:054C:0CE6.0064: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 157.391855][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 157.391871][ T30] audit: type=1400 audit(1729029546.836:1592): avc: denied { write } for pid=5369 comm="syz.2.1997" name="task" dev="proc" ino=41204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 157.409049][ T5367] loop2: detected capacity change from 0 to 256 [ 157.435162][ T30] audit: type=1400 audit(1729029546.836:1593): avc: denied { add_name } for pid=5369 comm="syz.2.1997" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 157.458176][ T30] audit: type=1400 audit(1729029546.836:1594): avc: denied { create } for pid=5369 comm="syz.2.1997" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 157.458205][ T312] playstation 0003:054C:0CE6.0064: Invalid byte count transferred, expected 20 got 0 [ 157.508486][ T30] audit: type=1400 audit(1729029546.836:1595): avc: denied { associate } for pid=5369 comm="syz.2.1997" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.513443][ T312] playstation 0003:054C:0CE6.0064: Failed to retrieve DualSense pairing info: -22 [ 157.538266][ T312] playstation 0003:054C:0CE6.0064: Failed to get MAC address from DualSense [ 157.546685][ T312] playstation 0003:054C:0CE6.0064: Failed to create dualsense. [ 157.554969][ T60] usb 1-1: USB disconnect, device number 44 [ 157.561920][ T312] playstation: probe of 0003:054C:0CE6.0064 failed with error -22 [ 157.583317][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.589616][ T5379] loop2: detected capacity change from 0 to 2048 [ 157.596858][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.604770][ T5371] device bridge_slave_0 entered promiscuous mode [ 157.612566][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.616758][ T5379] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 157.620013][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.627061][ T5379] EXT4-fs (loop2): mount failed [ 157.633649][ T5371] device bridge_slave_1 entered promiscuous mode [ 157.687161][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.694042][ T5371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.701165][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.707904][ T5371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.715309][ T20] usb 5-1: USB disconnect, device number 35 [ 157.735765][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.746789][ T30] audit: type=1326 audit(1729029547.186:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.2.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x0 [ 157.769992][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.778069][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.791936][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.800898][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.814265][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.825131][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.833258][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.840620][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.848520][ T695] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 157.848998][ T5371] device veth0_vlan entered promiscuous mode [ 157.866356][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.875671][ T5371] device veth1_macvtap entered promiscuous mode [ 157.884945][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.894993][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.238177][ T695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.248935][ T695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.258460][ T695] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 158.267279][ T695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.276002][ T695] usb 4-1: config 0 descriptor?? [ 158.428934][ T514] device bridge_slave_1 left promiscuous mode [ 158.434874][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.442195][ T514] device bridge_slave_0 left promiscuous mode [ 158.448340][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.455972][ T514] device veth1_macvtap left promiscuous mode [ 158.461888][ T514] device veth0_vlan left promiscuous mode [ 158.761421][ T695] sony 0003:054C:0268.0065: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 158.773174][ T695] sony 0003:054C:0268.0065: failed to claim input [ 158.878934][ T30] audit: type=1326 audit(1729029548.326:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687beb2ff9 code=0x7ffc0000 [ 158.932933][ T30] audit: type=1326 audit(1729029548.326:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687beb2ff9 code=0x7ffc0000 [ 158.972949][ T30] audit: type=1326 audit(1729029548.326:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687beb2ff9 code=0x7ffc0000 [ 158.997572][ T30] audit: type=1326 audit(1729029548.326:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687beb2ff9 code=0x7ffc0000 [ 159.021114][ T30] audit: type=1326 audit(1729029548.326:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.0.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687beb2ff9 code=0x7ffc0000 [ 159.023904][ T5401] loop4: detected capacity change from 0 to 256 [ 159.051050][ T296] usb 4-1: USB disconnect, device number 39 [ 159.076545][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.083544][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.095926][ T5395] device bridge_slave_0 entered promiscuous mode [ 159.198146][ T695] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 162.444693][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.449891][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 162.449905][ T30] audit: type=1400 audit(1729029551.896:1609): avc: denied { getopt } for pid=5397 comm="syz.4.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.477527][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.488548][ T5395] device bridge_slave_1 entered promiscuous mode [ 162.531180][ T5421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2013'. [ 162.586712][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.594044][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.605016][ T5425] loop3: detected capacity change from 0 to 256 [ 162.612362][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.620691][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.629008][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.629679][ T5425] exfat: Deprecated parameter 'namecase' [ 162.635856][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.641875][ T5425] exfat: Deprecated parameter 'utf8' [ 162.649247][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.657424][ T5425] exfat: Deprecated parameter 'namecase' [ 162.661760][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.674985][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.681840][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.700294][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.700592][ T5425] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 162.714654][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.727774][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.748476][ T5395] device veth0_vlan entered promiscuous mode [ 162.755104][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.758536][ T464] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 162.763548][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.780138][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.787373][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.788349][ T296] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 162.809993][ T5395] device veth1_macvtap entered promiscuous mode [ 162.816705][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.834867][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.854661][ T5433] loop3: detected capacity change from 0 to 128 [ 162.855248][ T5434] loop2: detected capacity change from 0 to 128 [ 162.861306][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.138219][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.148987][ T464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.158633][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.171407][ T464] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 163.180316][ T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.193106][ T464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.201228][ T296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.210592][ T464] usb 1-1: config 0 descriptor?? [ 163.215431][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.224047][ T296] usb 5-1: config 0 descriptor?? [ 163.368685][ T310] device bridge_slave_1 left promiscuous mode [ 163.374595][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.381945][ T310] device bridge_slave_0 left promiscuous mode [ 163.387848][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.395590][ T310] device veth1_macvtap left promiscuous mode [ 163.401425][ T310] device veth0_vlan left promiscuous mode [ 163.688697][ T464] hid (null): report_id 1388856143 is invalid [ 163.696062][ T464] hid-led 0003:27B8:01ED.0066: report_id 1388856143 is invalid [ 163.703490][ T464] hid-led 0003:27B8:01ED.0066: item 0 4 1 8 parsing failed [ 163.711316][ T296] plantronics 0003:047F:FFFF.0067: item fetching failed at offset 14/15 [ 163.719620][ T464] hid-led: probe of 0003:27B8:01ED.0066 failed with error -22 [ 163.728152][ T296] plantronics 0003:047F:FFFF.0067: parse failed [ 163.734213][ T296] plantronics: probe of 0003:047F:FFFF.0067 failed with error -22 [ 163.894603][ T296] usb 1-1: USB disconnect, device number 45 [ 163.917673][ T516] usb 5-1: USB disconnect, device number 36 [ 164.024488][ T5451] binfmt_misc: register: failed to install interpreter file ./file0 [ 164.036367][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.044051][ T5444] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.051492][ T5444] device bridge_slave_0 entered promiscuous mode [ 164.058545][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.065384][ T5444] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.074222][ T5444] device bridge_slave_1 entered promiscuous mode [ 164.119402][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.126276][ T5444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.133399][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.140150][ T5444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.159774][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.167181][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.174368][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.183715][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.191859][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.198709][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.207322][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.215376][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.222225][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.234392][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.243263][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.256048][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.267640][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.275703][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.283201][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.291355][ T5444] device veth0_vlan entered promiscuous mode [ 164.301459][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.310549][ T5444] device veth1_macvtap entered promiscuous mode [ 164.318514][ T464] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 164.326720][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.335098][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.558206][ T464] usb 3-1: Using ep0 maxpacket: 8 [ 164.698238][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.709002][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.718532][ T464] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 164.727362][ T464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.735784][ T464] usb 3-1: config 0 descriptor?? [ 164.818697][ T514] device bridge_slave_1 left promiscuous mode [ 164.824616][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.832131][ T514] device bridge_slave_0 left promiscuous mode [ 164.838046][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.845817][ T514] device veth1_macvtap left promiscuous mode [ 164.851722][ T514] device veth0_vlan left promiscuous mode [ 165.229039][ T464] kone 0003:1E7D:2CED.0068: collection stack underflow [ 165.235731][ T464] kone 0003:1E7D:2CED.0068: item 0 1 0 12 parsing failed [ 165.242755][ T464] kone 0003:1E7D:2CED.0068: parse failed [ 165.248220][ T464] kone: probe of 0003:1E7D:2CED.0068 failed with error -22 [ 165.431319][ T464] usb 3-1: USB disconnect, device number 36 [ 165.561757][ T5473] tmpfs: Unsupported parameter 'mpol' [ 165.567993][ T5473] sock: sock_timestamping_bind_phc: sock not bind to device [ 165.600300][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.609723][ T5481] loop4: detected capacity change from 0 to 256 [ 165.618837][ T5481] exfat: Deprecated parameter 'namecase' [ 165.619197][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.624312][ T5481] exfat: Deprecated parameter 'utf8' [ 165.631659][ T5467] device bridge_slave_0 entered promiscuous mode [ 165.644316][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.652995][ T5481] exfat: Deprecated parameter 'namecase' [ 165.658471][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.658904][ T5467] device bridge_slave_1 entered promiscuous mode [ 165.674308][ T5481] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 165.768122][ T6] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 165.781861][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.788725][ T5467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.820225][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.827918][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.835337][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.850479][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.858666][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.866645][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.873518][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.881230][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.889634][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.896490][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.911339][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.919047][ T5490] loop4: detected capacity change from 0 to 40427 [ 165.919358][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.937110][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.949611][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.957623][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.966450][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.968140][ T5490] F2FS-fs (loop4): fault_injection options not supported [ 165.975591][ T5494] loop2: detected capacity change from 0 to 256 [ 165.986056][ T5490] F2FS-fs (loop4): fault_type options not supported [ 165.994085][ T5490] F2FS-fs (loop4): invalid crc value [ 165.994414][ T5467] device veth0_vlan entered promiscuous mode [ 166.000477][ T5490] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.011328][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.031171][ T5467] device veth1_macvtap entered promiscuous mode [ 166.042045][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.052216][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.053720][ T5490] F2FS-fs (loop4): Start checkpoint disabled! [ 166.071660][ T516] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 166.081922][ T5490] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 166.102826][ T5490] attempt to access beyond end of device [ 166.102826][ T5490] loop4: rw=2049, want=45104, limit=40427 [ 166.128173][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.132084][ T310] attempt to access beyond end of device [ 166.132084][ T310] loop4: rw=2049, want=40992, limit=40427 [ 166.138150][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.228322][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.237311][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.245387][ T6] usb 1-1: SerialNumber: syz [ 166.358155][ T464] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 166.448206][ T516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.458936][ T516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.468651][ T516] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 166.477444][ T516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.486020][ T516] usb 4-1: config 0 descriptor?? [ 166.528710][ T6] usb 1-1: 0:2 : does not exist [ 166.535353][ T6] usb 1-1: USB disconnect, device number 46 [ 166.543304][ T4786] udevd[4786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.599572][ T514] device bridge_slave_1 left promiscuous mode [ 166.605514][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.612807][ T514] device bridge_slave_0 left promiscuous mode [ 166.618806][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.626201][ T514] device veth1_macvtap left promiscuous mode [ 166.632038][ T514] device veth0_vlan left promiscuous mode [ 166.738198][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.748975][ T464] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.761875][ T464] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.770765][ T464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.779264][ T464] usb 3-1: config 0 descriptor?? [ 166.978973][ T516] pyra 0003:1E7D:2CF6.0069: item fetching failed at offset 5/7 [ 166.986670][ T516] pyra 0003:1E7D:2CF6.0069: parse failed [ 166.992162][ T516] pyra: probe of 0003:1E7D:2CF6.0069 failed with error -22 [ 167.181073][ T516] usb 4-1: USB disconnect, device number 40 [ 167.259060][ T464] plantronics 0003:047F:FFFF.006A: item fetching failed at offset 14/15 [ 167.267331][ T464] plantronics 0003:047F:FFFF.006A: parse failed [ 167.273402][ T464] plantronics: probe of 0003:047F:FFFF.006A failed with error -22 [ 167.353552][ T514] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.390773][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.397607][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.405194][ T5507] device bridge_slave_0 entered promiscuous mode [ 167.412128][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.419036][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.426182][ T5507] device bridge_slave_1 entered promiscuous mode [ 167.462132][ T6] usb 3-1: USB disconnect, device number 37 [ 167.477069][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.483924][ T5507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.491195][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.498023][ T5507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.520419][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.528107][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.535344][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.544880][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.552943][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.559879][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.568988][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.576952][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.583806][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.596270][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.606175][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.619704][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.627846][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.639857][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.647501][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.655326][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.662645][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.671184][ T5507] device veth0_vlan entered promiscuous mode [ 167.682219][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.690372][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.699681][ T5507] device veth1_macvtap entered promiscuous mode [ 167.716551][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.724474][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.733017][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.743449][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.751580][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.298642][ T514] device bridge_slave_1 left promiscuous mode [ 168.304592][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.312410][ T514] device bridge_slave_0 left promiscuous mode [ 168.318634][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.326179][ T514] device veth1_macvtap left promiscuous mode [ 168.332103][ T514] device veth0_vlan left promiscuous mode [ 169.141962][ T30] audit: type=1326 audit(1729029558.586:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 169.148571][ T5521] loop2: detected capacity change from 0 to 512 [ 169.173264][ T5525] loop3: detected capacity change from 0 to 1024 [ 169.191713][ T30] audit: type=1326 audit(1729029558.586:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f319ea4dff9 code=0x7ffc0000 [ 169.235224][ T30] audit: type=1326 audit(1729029558.586:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f319ea4e033 code=0x7ffc0000 [ 169.244878][ T5521] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 169.266277][ T30] audit: type=1326 audit(1729029558.586:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f319ea4cadf code=0x7ffc0000 [ 169.290868][ T30] audit: type=1326 audit(1729029558.586:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f319ea4e087 code=0x7ffc0000 [ 169.314399][ T30] audit: type=1326 audit(1729029558.586:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f319ea4c990 code=0x7ffc0000 [ 169.342777][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.352985][ T5525] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.363774][ T5521] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 169.376124][ T30] audit: type=1326 audit(1729029558.586:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f319ea4dbfb code=0x7ffc0000 [ 169.376142][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.376589][ T5527] device bridge_slave_0 entered promiscuous mode [ 169.399683][ T5521] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 169.431542][ T516] Bluetooth: hci0: command 0x1003 tx timeout [ 169.432015][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.444281][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.452127][ T2212] Bluetooth: hci0: sending frame failed (-49) [ 169.458408][ T30] audit: type=1326 audit(1729029558.666:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f319ea4cc8a code=0x7ffc0000 [ 169.481687][ T30] audit: type=1326 audit(1729029558.666:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f319ea4cc8a code=0x7ffc0000 [ 169.504632][ T30] audit: type=1326 audit(1729029558.676:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f319ea4c897 code=0x7ffc0000 [ 169.528283][ T5527] device bridge_slave_1 entered promiscuous mode [ 169.628135][ T5525] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.643283][ T5525] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 169.656730][ T5525] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.656730][ T5525] [ 169.666356][ T5525] EXT4-fs (loop3): Total free blocks count 0 [ 169.672277][ T5525] EXT4-fs (loop3): Free/Dirty block details [ 169.678058][ T5525] EXT4-fs (loop3): free_blocks=68451041280 [ 169.683815][ T5525] EXT4-fs (loop3): dirty_blocks=16 [ 169.688811][ T5525] EXT4-fs (loop3): Block reservation details [ 169.694565][ T5525] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 169.713944][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.751654][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.766633][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.769453][ T5540] loop4: detected capacity change from 0 to 40427 [ 169.775249][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.789643][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.796482][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.804045][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.812898][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.821947][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.825728][ T5540] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 169.828826][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.842722][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.842952][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.852741][ T5540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.868499][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.876784][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.884640][ T5540] F2FS-fs (loop4): invalid crc value [ 169.892062][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.908927][ T5527] device veth0_vlan entered promiscuous mode [ 169.916180][ T5551] loop2: detected capacity change from 0 to 1024 [ 169.923136][ T5540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.929542][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.937712][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.948928][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.956895][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.972188][ T5527] device veth1_macvtap entered promiscuous mode [ 169.982017][ T5551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.994129][ T5553] loop3: detected capacity change from 0 to 256 [ 169.994805][ T5540] F2FS-fs (loop4): Start checkpoint disabled! [ 170.009642][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.017913][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.025802][ T5540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 170.026032][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.038115][ T5540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 170.047719][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.055882][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.064141][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.087050][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.123549][ T310] attempt to access beyond end of device [ 170.123549][ T310] loop4: rw=2049, want=40992, limit=40427 [ 170.160937][ T5551] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 170.175891][ T5551] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 170.188236][ T5551] EXT4-fs (loop2): This should not happen!! Data will be lost [ 170.188236][ T5551] [ 170.208195][ T5551] EXT4-fs (loop2): Total free blocks count 0 [ 170.214211][ T5551] EXT4-fs (loop2): Free/Dirty block details [ 170.220095][ T5551] EXT4-fs (loop2): free_blocks=68451041280 [ 170.226023][ T5551] EXT4-fs (loop2): dirty_blocks=16 [ 170.231394][ T5551] EXT4-fs (loop2): Block reservation details [ 170.237338][ T5551] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 170.598716][ T310] device bridge_slave_1 left promiscuous mode [ 170.604802][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.612048][ T310] device bridge_slave_0 left promiscuous mode [ 170.617952][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.625643][ T310] device veth1_macvtap left promiscuous mode [ 170.631492][ T310] device veth0_vlan left promiscuous mode [ 171.508301][ T464] Bluetooth: hci0: command 0x1001 tx timeout [ 171.514164][ T2212] Bluetooth: hci0: sending frame failed (-49) [ 171.575185][ T26] ================================================================== [ 171.583072][ T26] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 171.590706][ T26] Read of size 8 at addr ffff8881047c4588 by task kworker/1:0/26 [ 171.598256][ T26] [ 171.600429][ T26] CPU: 1 PID: 26 Comm: kworker/1:0 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 171.611449][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.621353][ T26] Workqueue: events binder_deferred_func [ 171.626813][ T26] Call Trace: [ 171.629950][ T26] [ 171.632714][ T26] dump_stack_lvl+0x151/0x1c0 [ 171.637225][ T26] ? io_uring_drop_tctx_refs+0x190/0x190 [ 171.642692][ T26] ? panic+0x760/0x760 [ 171.646886][ T26] ? kasan_quarantine_put+0x34/0x1a0 [ 171.652080][ T26] print_address_description+0x87/0x3b0 [ 171.657463][ T26] kasan_report+0x179/0x1c0 [ 171.661796][ T26] ? _raw_spin_lock+0xa4/0x1b0 [ 171.666397][ T26] ? __list_del_entry_valid+0x2f/0x120 [ 171.671691][ T26] ? __list_del_entry_valid+0x2f/0x120 [ 171.676990][ T26] __asan_report_load8_noabort+0x14/0x20 [ 171.682453][ T26] __list_del_entry_valid+0x2f/0x120 [ 171.687574][ T26] binder_release_work+0xcd/0x680 [ 171.692441][ T26] binder_deferred_func+0x1847/0x1bc0 [ 171.697643][ T26] ? read_word_at_a_time+0x12/0x20 [ 171.702595][ T26] process_one_work+0x6bb/0xc10 [ 171.707367][ T26] worker_thread+0xad5/0x12a0 [ 171.711881][ T26] kthread+0x421/0x510 [ 171.715779][ T26] ? worker_clr_flags+0x180/0x180 [ 171.720646][ T26] ? kthread_blkcg+0xd0/0xd0 [ 171.725073][ T26] ret_from_fork+0x1f/0x30 [ 171.729323][ T26] [ 171.732186][ T26] [ 171.734357][ T26] Allocated by task 5568: [ 171.738526][ T26] ____kasan_kmalloc+0xdb/0x110 [ 171.743207][ T26] __kasan_kmalloc+0x9/0x10 [ 171.747546][ T26] kmem_cache_alloc_trace+0x115/0x210 [ 171.752755][ T26] binder_thread_write+0x9f5/0x6ec0 [ 171.757790][ T26] binder_ioctl_write_read+0x205/0x7300 [ 171.763169][ T26] binder_ioctl+0x371/0x2640 [ 171.767599][ T26] __se_sys_ioctl+0x114/0x190 [ 171.772110][ T26] __x64_sys_ioctl+0x7b/0x90 [ 171.776538][ T26] x64_sys_call+0x98/0x9a0 [ 171.780789][ T26] do_syscall_64+0x3b/0xb0 [ 171.785041][ T26] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.790771][ T26] [ 171.792940][ T26] Freed by task 26: [ 171.796587][ T26] kasan_set_track+0x4b/0x70 [ 171.801011][ T26] kasan_set_free_info+0x23/0x40 [ 171.805787][ T26] ____kasan_slab_free+0x126/0x160 [ 171.810734][ T26] __kasan_slab_free+0x11/0x20 [ 171.815336][ T26] slab_free_freelist_hook+0xbd/0x190 [ 171.820542][ T26] kfree+0xc8/0x220 [ 171.824185][ T26] binder_free_ref+0x128/0x260 [ 171.828788][ T26] binder_deferred_func+0x171c/0x1bc0 [ 171.833992][ T26] process_one_work+0x6bb/0xc10 [ 171.838679][ T26] worker_thread+0xad5/0x12a0 [ 171.843195][ T26] kthread+0x421/0x510 [ 171.847099][ T26] ret_from_fork+0x1f/0x30 [ 171.851362][ T26] [ 171.853525][ T26] The buggy address belongs to the object at ffff8881047c4580 [ 171.853525][ T26] which belongs to the cache kmalloc-64 of size 64 [ 171.867236][ T26] The buggy address is located 8 bytes inside of [ 171.867236][ T26] 64-byte region [ffff8881047c4580, ffff8881047c45c0) [ 171.880080][ T26] The buggy address belongs to the page: [ 171.885561][ T26] page:ffffea000411f100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1047c4 [ 171.895617][ T26] flags: 0x4000000000000200(slab|zone=1) [ 171.901093][ T26] raw: 4000000000000200 0000000000000000 0000001b00000001 ffff888100042780 [ 171.909514][ T26] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 171.917923][ T26] page dumped because: kasan: bad access detected [ 171.924177][ T26] page_owner tracks the page as allocated [ 171.929726][ T26] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 1818290169, free_ts 0 [ 171.944220][ T26] post_alloc_hook+0x1a3/0x1b0 [ 171.948820][ T26] prep_new_page+0x1b/0x110 [ 171.953333][ T26] get_page_from_freelist+0x3550/0x35d0 [ 171.958715][ T26] __alloc_pages+0x27e/0x8f0 [ 171.963140][ T26] new_slab+0x9a/0x4e0 [ 171.967261][ T26] ___slab_alloc+0x39e/0x830 [ 171.971646][ T26] __slab_alloc+0x4a/0x90 [ 171.975898][ T26] __kmalloc+0x16d/0x270 [ 171.979978][ T26] kobject_get_path+0xbc/0x1f0 [ 171.984577][ T26] kobject_uevent_env+0x27f/0x700 [ 171.989441][ T26] kobject_uevent+0x1f/0x30 [ 171.993781][ T26] device_del+0xcbd/0xe90 [ 171.997946][ T26] device_unregister+0x15/0x40 [ 172.002545][ T26] wakeup_source_sysfs_remove+0x3b/0x40 [ 172.007925][ T26] wakeup_source_unregister+0x170/0x190 [ 172.013307][ T26] device_wakeup_enable+0x11a/0x210 [ 172.018342][ T26] page_owner free stack trace missing [ 172.023549][ T26] [ 172.025717][ T26] Memory state around the buggy address: [ 172.031190][ T26] ffff8881047c4480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 172.039089][ T26] ffff8881047c4500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 172.046985][ T26] >ffff8881047c4580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 172.054886][ T26] ^ [ 172.059049][ T26] ffff8881047c4600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 172.066947][ T26] ffff8881047c4680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 172.074844][ T26] ================================================================== [ 172.082744][ T26] Disabling lock debugging due to kernel taint [ 172.088991][ T26] general protection fault, probably for non-canonical address 0xfd57fc5e40000003: 0000 [#1] PREEMPT SMP KASAN [ 172.100510][ T26] KASAN: maybe wild-memory-access in range [0xeac002f200000018-0xeac002f20000001f] [ 172.109624][ T26] CPU: 1 PID: 26 Comm: kworker/1:0 Tainted: G B W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 172.120642][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.130539][ T26] Workqueue: events binder_deferred_func [ 172.136004][ T26] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 172.141906][ T26] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 172.161348][ T26] RSP: 0018:ffffc900001b7c00 EFLAGS: 00010a06 [ 172.167252][ T26] RAX: 1d58005e40000003 RBX: ffff888123a45000 RCX: ffffffff826a1859 [ 172.175061][ T26] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff8881047c4580 [ 172.182873][ T26] RBP: ffffc900001b7c20 R08: ffffffff8141997b R09: 0000000000000003 [ 172.190684][ T26] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 172.198500][ T26] R13: ffff8881047c4580 R14: ffff8881047c4580 R15: eac002f20000001a [ 172.206306][ T26] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.215073][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.221494][ T26] CR2: 0000001b31d1cff8 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 172.229312][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000cdb2 [ 172.237119][ T26] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 172.244929][ T26] Call Trace: [ 172.248063][ T26] [ 172.250839][ T26] ? __die_body+0x62/0xb0 [ 172.254997][ T26] ? die_addr+0x9f/0xd0 [ 172.258994][ T26] ? exc_general_protection+0x311/0x4b0 [ 172.264379][ T26] ? check_panic_on_warn+0x65/0xb0 [ 172.269323][ T26] ? asm_exc_general_protection+0x27/0x30 [ 172.274876][ T26] ? check_panic_on_warn+0x5b/0xb0 [ 172.279822][ T26] ? __list_del_entry_valid+0x49/0x120 [ 172.285116][ T26] ? __list_del_entry_valid+0x75/0x120 [ 172.290411][ T26] binder_release_work+0xcd/0x680 [ 172.295272][ T26] binder_deferred_func+0x1847/0x1bc0 [ 172.300481][ T26] ? read_word_at_a_time+0x12/0x20 [ 172.305426][ T26] process_one_work+0x6bb/0xc10 [ 172.310114][ T26] worker_thread+0xad5/0x12a0 [ 172.314630][ T26] kthread+0x421/0x510 [ 172.318530][ T26] ? worker_clr_flags+0x180/0x180 [ 172.323393][ T26] ? kthread_blkcg+0xd0/0xd0 [ 172.327818][ T26] ret_from_fork+0x1f/0x30 [ 172.332073][ T26] [ 172.334934][ T26] Modules linked in: [ 172.339047][ T26] ---[ end trace 62a040fef5beeb35 ]--- [ 172.344745][ T26] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 172.350664][ T26] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 172.370095][ T26] RSP: 0018:ffffc900001b7c00 EFLAGS: 00010a06 [ 172.375977][ T26] RAX: 1d58005e40000003 RBX: ffff888123a45000 RCX: ffffffff826a1859 [ 172.383809][ T26] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff8881047c4580 [ 172.391631][ T26] RBP: ffffc900001b7c20 R08: ffffffff8141997b R09: 0000000000000003 [ 172.399462][ T26] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 172.407222][ T26] R13: ffff8881047c4580 R14: ffff8881047c4580 R15: eac002f20000001a [ 172.415058][ T26] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.423818][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.430237][ T26] CR2: 0000001b31d1cff8 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 172.438033][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000cdb2 [ 172.445863][ T26] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 172.453681][ T26] Kernel panic - not syncing: Fatal exception [ 172.459636][ T26] Kernel Offset: disabled [ 172.463724][ T26] Rebooting in 86400 seconds..