last executing test programs: 47.218525908s ago: executing program 0 (id=13561): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e220064"], 0x0) 46.804221935s ago: executing program 4 (id=13573): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x400454a4, 0x0) 46.686356796s ago: executing program 4 (id=13576): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000400)) 46.666459838s ago: executing program 4 (id=13577): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, 0x0) 46.623584601s ago: executing program 2 (id=13578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001a000100000000000000000002000000000000000000000008000100ac1414aa080002006401010108000300", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x80d0) 46.565662406s ago: executing program 2 (id=13579): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000040)={0xa}, 0x4c) 46.385873643s ago: executing program 0 (id=13581): timerfd_create(0x8, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 46.298060761s ago: executing program 0 (id=13582): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x3, 0x9, 0x7, 0x7, 0xd}) 46.187290311s ago: executing program 1 (id=13583): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_FREEZE(0x23, &(0x7f0000000040)=r0, 0x4) 46.159434943s ago: executing program 2 (id=13586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 46.122194457s ago: executing program 2 (id=13587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044051) 46.070751472s ago: executing program 3 (id=13590): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x58cb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) 46.044640884s ago: executing program 1 (id=13591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001a000100000000000000000002000000000000000000000008000100ac1414aa080002006401010108000300", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x80d0) 46.044273934s ago: executing program 2 (id=13592): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(&(0x7f0000001a40)='./file0/file0\x00', &(0x7f0000001a80)) 46.044218994s ago: executing program 3 (id=13593): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106000000001700000009000080"], 0x1c}], 0x1}, 0x0) 46.028767385s ago: executing program 3 (id=13594): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000001580)) 46.010475557s ago: executing program 3 (id=13595): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 45.992421749s ago: executing program 3 (id=13596): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 45.97635548s ago: executing program 3 (id=13597): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0xfffffe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.943406163s ago: executing program 1 (id=13598): timerfd_create(0x8, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 45.903873537s ago: executing program 0 (id=13599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)) 45.900219897s ago: executing program 1 (id=13600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 45.831426973s ago: executing program 4 (id=13601): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x58cb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) 45.791364557s ago: executing program 0 (id=13602): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_FREEZE(0x23, &(0x7f0000000040)=r0, 0x4) 45.791051757s ago: executing program 1 (id=13603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 45.764572959s ago: executing program 4 (id=13604): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106000000001700000009000080"], 0x1c}], 0x1}, 0x0) 45.763490919s ago: executing program 1 (id=13605): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_continue}, {@gid}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@utf8}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 45.750456621s ago: executing program 0 (id=13606): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000000d40)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000006a80)="95", 0x1}], 0x1, 0x6c80, 0x10000, 0xa) 45.744920581s ago: executing program 2 (id=13607): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 35.989029354s ago: executing program 4 (id=13608): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 29.249592154s ago: executing program 32 (id=13606): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000000d40)="$eJzs3M1rI2UYAPB32u1+dNe1iAdvO7AILWxC049Fb1V38QO7lFUPnjRNpiG7SaY0aVp78uBRPHjy3xAFTx79Gzx49iYeFG+CknmnutUVlKaN3f5+MHlm3nnzzPOGUnhmQgJwbs2lv/yUhOvhSghhOoRwLYRiPym3wloMz5Xnph7ZknL8j4GLIYTZEML1UfKYMylPfXpreHP1xzd+/vrbSxeufv7Vd5NbNTBpz4cQuttxf68bY96K8UE5Xh+2i9hdGZYxnug+LI/zGPeyzSLDXv1wXr2Iy604P9/e7Y/iVqfeGMVWe6sY3+7FC/aHrcM8xRse1HeK42a2WcR2Py9i6yDWtX8Q/7cd9AcxT7PM90GRPgwGhzGOZ/tZXM/2wyI2eoNyPObNm9n+KA7LWF4uNPJOs6hj8zif9P/bm+3e7n46zHb67byXrlZrL1Rrtyu1nbyZDbKVSr3bvL2Szrc6o2mVQVbvrrXyvNXJqo28u5DOtxqNSq2Wzt/JNtv1XlqrVZeri5XVhXLvVvrqvXfSTjOdH8WX273dQbvTT7fynTS+YyFdqi6/uJDerKVvrW+kG/fv3l3fePu9O+/ee2n99VfKSX8rK51fWlxaqtQWK0u1hXO0/o/Kose4fjiWZNIFAJw9/7X/v6H/B8bgOP3/Z7Px/OP7/537IZx8/x/0/2Nxpvrf897/n8D64Vj0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59b3M1+8VuzMxeOr5fhT5dAz5XESQpgKIfz2GNPh4pGc02WemX+YP/OXGr5JQpFhdI1L5TYbQlgrt1+fPulPAQAAAJ5cX35445PYrceXuUkXxGmKN22mrr0/pnxJCGFm7ocxZZsavTw7pmTF3/eFsD+mbMUNrMtjShZvuV0YV7Z/ZfpIuPxISGKYOtVyAACAU3G0EzjdLgQAAIDT9PGkC2AyknD4KPPwWXDxzfs/HwheOXIEAAAAnEHJpAsAAAAATlzR//v9PwAAAHiyxd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/ZuYPctIEoDMDPBhfaUhVV3fcq3cExeoQus4zYZZNLcARyhVwgZyC7HCGCCI+DQkKy8Rgr6Psk8xgL/cwgvJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7dV6v5zeWf67Y5m207eUYDAAAAHLOuVvP6zTS1vzf3fzS3fjXtIiLKiDg2dx/El4PMQZNTvfP56lUfbiPqhN13jJrrW0T8ba7Hn13/CgAAAHC+7hbLWZqtp5dp3x3iFK4mqaZFm3LyL1NuERHV9CFTWrnL+50prP5/D+MiU1q9gDXOFJaW3Ia50t46El0/7vtVu/GLUqRSfhyZbewAAMAJDQ5Kh7MQAAAAeva/7w7QjyKetzL3W4GjVJrtva8HLQAAAOATKvruAAAAANC5ev7v/D8AAAA4b+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq0rlbzarGctc3ZbNvJMxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgif15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu6eN44iDADw7O3tBQcQxiAXRggkCmiIcwkJ6RAFyKLgJyBZziWYXPhIXJAoQnJDh1ynQVAihAQyXf5D6kRKE7oUVwSJhiZo9iOeGCMOEu9e4ueRZue9vfXMO3uS5Xd3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI3JuztxHjfzVdyr9924e2Ut9jd39dG1rVtLscU4azPpx8PL6YtssbtEAAAAODjypr4PIdwutldi35sv6/+iOSbW/N89W8VNPb+77m/6pvaP7ddf7rx4f6L5ap446Jn18ejo31Pp798qZ9tz/3pEvzzz5bWXvPxAeh9svjApyvOZfXP9+nuDMjzURrYAwP9xpOnroPl7KPbDLhMD4MDoJ4V3U//n893mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCGyWZ4uomzEMJSfyeObt69srZXf23r1lLTTl69upWOGYcoQghn1sejoy2uZdZdvHT53Op4PLrQfvBKCKGr2d+pl3/uoykODqGT8yN4REGv/rBnJZ+HCYp6Lfs2xVyog45+IQEA8MQq6hbr+tvF9krcly2EcO/7B+v/15M4TFn/3/n45I10rrT+H7a2wtm3vHH+8+WLly6/uX5+9ezo7OjTt44N3x4eP3XixKnl8lrJsismAAAAPJxB3dL6f7DrmPje4SQOU9b/X3w7/CodJ1f/72nn7l/XmQAAABxsz7/6x+/ZHvuzwSB8ubqxcWFYbe+/PlZtO0j1PztUt7T+zxe6zgoAAABow2Qze+D5/9NJHKa8///MDy/9lI6ZhxDm6vv/R9Y+G59ubzkzrY1/Xe56jQAAALSg989vzdUtvf9fLMT6v5elP/7Ga1Vcfw3gVPV//v7XP6Zzpc//H9+HZT5OeovV+Sj7xRD6i11nBAAAwJPqz3shPBWqFov934rtlU9+PvzhwPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG37KwAA///KUDmd") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000006a80)="95", 0x1}], 0x1, 0x6c80, 0x10000, 0xa) 26.391010252s ago: executing program 33 (id=13605): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_continue}, {@gid}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@utf8}]}, 0x1, 0x152d, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 20.099180501s ago: executing program 34 (id=13607): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000015c0)=""/4096, 0x26, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 8.166762731s ago: executing program 35 (id=13597): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0xfffffe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 36 (id=13608): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) kernel console output (not intermixed with test programs): or -2 [ 493.434353][T27451] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.12563: invalid indirect mapped block 8 (level 2) [ 493.475842][T27451] EXT4-fs (loop1): Remounting filesystem read-only [ 493.485804][T27451] EXT4-fs (loop1): 1 truncate cleaned up [ 493.497553][T27451] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x0000000000009676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 493.521676][T27473] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.529298][T27473] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.550657][T27474] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.557514][T27474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.565484][T27474] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.572345][T27474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.580810][T27474] device veth1_to_bond left promiscuous mode [ 493.610404][T27474] device erspan1 left promiscuous mode [ 493.632650][T27474] device ipip0 left promiscuous mode [ 493.644115][T27474] device ip6gretap1 left promiscuous mode [ 493.986875][ T429] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 494.210645][ T429] usb 3-1: Using ep0 maxpacket: 32 [ 494.322503][ T429] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 494.333216][ T429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.343856][ T429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.353374][ T429] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 494.366141][ T429] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 494.374982][ T429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.385087][ T429] usb 3-1: config 0 descriptor?? [ 494.406749][ T30] kauditd_printk_skb: 649 callbacks suppressed [ 494.406765][ T30] audit: type=1400 audit(2000067196.236:65775): avc: denied { ioctl } for pid=27484 comm="syz.2.12561" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 494.460081][ T30] audit: type=1326 audit(2000067196.236:65776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27477 comm="syz.1.12576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa403313719 code=0x7fc00000 [ 494.509707][ T30] audit: type=1400 audit(2000067196.279:65777): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.546329][ T30] audit: type=1400 audit(2000067196.279:65778): avc: denied { open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.572220][ T30] audit: type=1400 audit(2000067196.279:65779): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.619933][ T30] audit: type=1400 audit(2000067196.290:65780): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.649238][ T30] audit: type=1400 audit(2000067196.290:65781): avc: denied { open } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.677829][ T30] audit: type=1400 audit(2000067196.290:65782): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.706542][T27512] loop4: detected capacity change from 0 to 256 [ 494.713511][ T30] audit: type=1400 audit(2000067196.290:65783): avc: denied { prog_load } for pid=27492 comm="syz.1.12580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 494.733273][ T30] audit: type=1400 audit(2000067196.290:65784): avc: denied { bpf } for pid=27492 comm="syz.1.12580" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 494.762025][T27516] loop1: detected capacity change from 0 to 256 [ 494.796224][T27512] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 494.812721][T27520] tipc: Started in network mode [ 494.824497][T27520] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 494.835708][T27520] tipc: Enabling of bearer rejected, failed to enable media [ 494.884554][ T429] wacom 0003:056A:0315.00B2: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 494.909900][ T60] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 494.914608][ T429] wacom 0003:056A:0315.00B2: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.2-1/input0 [ 494.942682][T27528] loop4: detected capacity change from 0 to 512 [ 494.949658][ T429] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.00B2/input/input158 [ 495.033381][T27528] EXT4-fs (loop4): 1 truncate cleaned up [ 495.038853][T27528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 495.078599][T27528] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 495.089868][ T544] usb 3-1: USB disconnect, device number 16 [ 495.101780][ T683] udevd[683]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 495.195880][T27540] loop1: detected capacity change from 0 to 512 [ 495.214206][T27544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.221276][T27544] IPv6: NLM_F_CREATE should be set when creating new route [ 495.255813][T27548] loop4: detected capacity change from 0 to 256 [ 495.263222][T27540] EXT4-fs (loop1): Ignoring removed orlov option [ 495.272004][T27540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 495.282819][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.295836][T27540] EXT4-fs (loop1): 1 truncate cleaned up [ 495.303135][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.308368][T27540] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 495.328637][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 495.356196][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.365629][ T60] usb 4-1: config 0 descriptor?? [ 495.401625][T27552] netlink: 264 bytes leftover after parsing attributes in process `syz.1.12618'. [ 495.595421][T27572] loop4: detected capacity change from 0 to 512 [ 495.612224][T27573] loop2: detected capacity change from 0 to 512 [ 495.650098][T27572] EXT4-fs (loop4): Ignoring removed orlov option [ 495.656369][T27572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 495.669498][T27573] EXT4-fs (loop2): 1 truncate cleaned up [ 495.675650][T27572] EXT4-fs (loop4): 1 truncate cleaned up [ 495.676146][T27573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 495.683094][T27572] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 495.721872][T27573] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 495.786558][ T429] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 495.824580][ T60] logitech-hidpp-device 0003:046D:C086.00B3: item fetching failed at offset 2/5 [ 495.833110][T27579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12621'. [ 495.844779][ T60] logitech-hidpp-device 0003:046D:C086.00B3: hidpp_probe:parse failed [ 495.859132][ T60] logitech-hidpp-device: probe of 0003:046D:C086.00B3 failed with error -22 [ 495.913089][T27583] loop4: detected capacity change from 0 to 8192 [ 495.928126][T27587] tipc: Enabling of bearer rejected, failed to enable media [ 496.025478][ T60] usb 4-1: USB disconnect, device number 18 [ 496.038338][ T429] usb 2-1: Using ep0 maxpacket: 16 [ 496.158744][ T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.169583][ T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.180122][ T429] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 496.189593][ T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.200620][ T429] usb 2-1: config 0 descriptor?? [ 496.522559][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 496.576318][T27609] loop4: detected capacity change from 0 to 512 [ 496.643670][ T429] hid (null): invalid report_size -1077625177 [ 496.669169][ T429] hid-generic 0003:1532:011B.00B4: invalid report_size -1077625177 [ 496.678297][ T429] hid-generic 0003:1532:011B.00B4: item 0 4 1 7 parsing failed [ 496.678324][T27609] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.12635: bg 0: block 393: padding at end of block bitmap is not set [ 496.686860][ T429] hid-generic: probe of 0003:1532:011B.00B4 failed with error -22 [ 496.724874][T27609] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 496.734580][T27609] EXT4-fs (loop4): 2 truncates cleaned up [ 496.741099][T27609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 496.752529][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 496.785068][T27609] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 496.852422][ T429] usb 2-1: USB disconnect, device number 10 [ 497.016362][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 497.025273][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 497.033131][ T6] usb 3-1: Product: syz [ 497.037171][ T6] usb 3-1: Manufacturer: syz [ 497.041512][ T6] usb 3-1: SerialNumber: syz [ 497.047398][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 497.091045][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 497.287049][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 497.358762][T27639] loop1: detected capacity change from 0 to 512 [ 497.436646][T27639] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 497.436646][T27639] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 497.436646][T27639] [ 497.455629][T27639] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 497.464235][T27639] EXT4-fs (loop1): 1 truncate cleaned up [ 497.469708][T27639] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 497.500875][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.521062][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.529389][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 497.537405][ T6] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 497.544896][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 497.564129][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.584247][ T60] usb 5-1: config 0 descriptor?? [ 497.700342][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12659'. [ 497.737729][T27667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12662'. [ 497.860233][T27683] loop0: detected capacity change from 0 to 1024 [ 497.893546][T27683] EXT4-fs (loop0): Test dummy encryption mode enabled [ 497.900198][T27683] EXT4-fs (loop0): Ignoring removed orlov option [ 497.909098][T27683] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,inlinecrypt,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 497.945996][T27683] /dev/loop0: Can't open blockdev [ 497.958110][ T544] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 498.025137][ T60] logitech-hidpp-device 0003:046D:C086.00B5: item fetching failed at offset 2/5 [ 498.035189][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12672'. [ 498.050825][ T60] logitech-hidpp-device 0003:046D:C086.00B5: hidpp_probe:parse failed [ 498.061192][T27693] loop1: detected capacity change from 0 to 1024 [ 498.065407][ T60] logitech-hidpp-device: probe of 0003:046D:C086.00B5 failed with error -22 [ 498.071219][T27697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12675'. [ 498.088194][T27699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.129350][T27693] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 498.169388][T27693] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000800343,,errors=continue. Quota mode: none. [ 498.218323][ T60] usb 5-1: USB disconnect, device number 16 [ 498.312553][ T544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.323618][ T544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 498.334391][ T544] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 498.347038][ T544] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 498.355863][ T544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.364804][ T544] usb 4-1: config 0 descriptor?? [ 498.386739][T27661] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 498.516700][ T429] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 498.797105][ T544] aureal 0003:0755:2626.00B6: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 498.806662][ T544] aureal 0003:0755:2626.00B6: unknown main item tag 0x6 [ 498.813424][ T544] aureal 0003:0755:2626.00B6: report_id 29495 is invalid [ 498.820334][ T544] aureal 0003:0755:2626.00B6: item 0 2 1 8 parsing failed [ 498.827367][ T544] aureal: probe of 0003:0755:2626.00B6 failed with error -22 [ 498.889656][ T429] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.935964][T27725] loop0: detected capacity change from 0 to 512 [ 498.964777][ T429] usb 2-1: config index 0 descriptor too short (expected 8224, got 36) [ 498.973233][ T429] usb 2-1: config 37 has too many interfaces: 112, using maximum allowed: 32 [ 498.981942][ T429] usb 2-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 498.983011][ T544] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 498.992013][ T429] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 112 [ 499.003893][ T365] usb 4-1: USB disconnect, device number 19 [ 499.015304][T27725] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 499.035090][T27725] EXT4-fs (loop0): 1 truncate cleaned up [ 499.041098][T27725] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 499.069926][T27725] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 499.080087][ T30] kauditd_printk_skb: 701 callbacks suppressed [ 499.080101][ T30] audit: type=1400 audit(2000067201.258:66486): avc: denied { ioctl } for pid=27713 comm="syz.1.12681" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.111990][ T30] audit: type=1400 audit(2000067201.258:66487): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 499.131736][ T30] audit: type=1400 audit(2000067201.268:66488): avc: denied { ioctl } for pid=27713 comm="syz.1.12681" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.156733][ T30] audit: type=1400 audit(2000067201.311:66489): avc: denied { ioctl } for pid=27713 comm="syz.1.12681" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.213374][ T30] audit: type=1400 audit(2000067201.386:66490): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.237562][ T544] usb 5-1: Using ep0 maxpacket: 16 [ 499.243375][ T30] audit: type=1400 audit(2000067201.386:66491): avc: denied { open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.253912][ T429] usb 2-1: string descriptor 0 read error: -22 [ 499.273377][ T30] audit: type=1400 audit(2000067201.386:66492): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.286204][ T429] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 499.308473][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.318815][ T30] audit: type=1400 audit(2000067201.408:66493): avc: denied { ioctl } for pid=27713 comm="syz.1.12681" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.346796][ T30] audit: type=1400 audit(2000067201.419:66494): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.373412][ T30] audit: type=1400 audit(2000067201.419:66495): avc: denied { open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.425455][T27737] loop0: detected capacity change from 0 to 512 [ 499.494072][T27737] EXT4-fs (loop0): 1 orphan inode deleted [ 499.508481][T27737] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 499.542321][T27737] ext4 filesystem being mounted at /2394/file1 supports timestamps until 2038 (0x7fffffff) [ 499.559666][T27745] loop2: detected capacity change from 0 to 2048 [ 499.589228][ T544] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 499.603520][ T544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 499.622864][ T544] usb 5-1: Product: syz [ 499.627192][ T544] usb 5-1: Manufacturer: syz [ 499.631524][T27745] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 499.632622][ T544] usb 5-1: SerialNumber: syz [ 499.654561][T27745] ext4 filesystem being mounted at /2450/file0 supports timestamps until 2038 (0x7fffffff) [ 499.666023][ T544] r8152-cfgselector 5-1: config 0 descriptor?? [ 499.694499][ T429] usb 2-1: USB disconnect, device number 11 [ 499.698337][T27745] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 499.875666][T27771] loop0: detected capacity change from 0 to 256 [ 499.896487][ T365] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 499.905523][T27771] FAT-fs (loop0): Unrecognized mount option "ut" or missing value [ 499.924785][ T544] r8152-cfgselector 5-1: Unknown version 0x0000 [ 500.017984][ T6] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 500.107723][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12714'. [ 500.166510][ T544] r8152-cfgselector 5-1: Unknown version 0x0000 [ 500.174585][ T544] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 500.241572][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 500.269502][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.292382][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.295371][T27800] syz.0.12720[27800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.302718][ T365] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 500.314728][T27800] syz.0.12720[27800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.324278][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.353781][ T6] usb 3-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 500.361689][ T365] usb 4-1: config 0 descriptor?? [ 500.377836][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 500.400986][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9728, setting to 1024 [ 500.401934][T27805] syz.0.12722[27805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.414475][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 500.424690][T27805] syz.0.12722[27805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.493911][ T6] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 500.515544][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.523666][ T6] usb 3-1: SerialNumber: syz [ 500.539860][T27761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 500.558965][ T6] hub 3-1:1.0: bad descriptor, ignoring hub [ 500.564703][ T6] hub: probe of 3-1:1.0 failed with error -5 [ 500.580461][ T6] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 500.804534][T27843] tipc: Enabling of bearer rejected, failed to enable media [ 500.829455][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.857662][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.864833][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.875086][ T6] usb 3-1: USB disconnect, device number 18 [ 500.889234][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.914602][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.921570][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.941986][ T365] zeroplus 0003:0C12:0030.00B7: unknown main item tag 0x0 [ 500.948896][T27854] loop4: detected capacity change from 0 to 256 [ 500.962927][ T365] zeroplus 0003:0C12:0030.00B7: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 500.975483][ T365] zeroplus 0003:0C12:0030.00B7: no inputs found [ 500.978336][T27854] exfat: Deprecated parameter 'utf8' [ 500.986920][T27854] exfat: Deprecated parameter 'namecase' [ 500.992510][T27854] exfat: Deprecated parameter 'namecase' [ 500.998127][T27854] exfat: Deprecated parameter 'utf8' [ 501.003401][T27854] exfat: Deprecated parameter 'utf8' [ 501.021986][ T365] usb 4-1: USB disconnect, device number 20 [ 501.033849][T27854] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 501.212191][T27869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.219258][T27869] IPv6: NLM_F_CREATE should be set when creating new route [ 501.226837][T27867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12751'. [ 501.236355][T27867] tipc: Invalid UDP bearer configuration [ 501.236379][T27867] tipc: Enabling of bearer rejected, failed to enable media [ 501.285446][T27873] syz.1.12763[27873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.285526][T27873] syz.1.12763[27873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.565177][ T365] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 501.946862][ T544] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 501.956540][ T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.967438][ T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.976999][ T365] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 501.985967][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.994982][ T365] usb 3-1: config 0 descriptor?? [ 502.291977][ T544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.302675][ T544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.312235][ T544] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 502.321066][ T544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.330140][ T544] usb 5-1: config 0 descriptor?? [ 502.451048][ T365] logitech-hidpp-device 0003:046D:C086.00B8: item fetching failed at offset 2/5 [ 502.460041][ T365] logitech-hidpp-device 0003:046D:C086.00B8: hidpp_probe:parse failed [ 502.468010][ T365] logitech-hidpp-device: probe of 0003:046D:C086.00B8 failed with error -22 [ 502.640405][ T365] usb 3-1: USB disconnect, device number 19 [ 502.796140][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.803120][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.810067][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.816996][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.823943][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.830862][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.838061][ T544] zeroplus 0003:0C12:0030.00B9: unknown main item tag 0x0 [ 502.845503][ T544] zeroplus 0003:0C12:0030.00B9: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 502.856650][ T544] zeroplus 0003:0C12:0030.00B9: no inputs found [ 502.985338][ T544] usb 5-1: USB disconnect, device number 18 [ 503.279383][T27969] loop2: detected capacity change from 0 to 256 [ 503.299064][T27969] exfat: Deprecated parameter 'utf8' [ 503.304203][T27969] exfat: Deprecated parameter 'namecase' [ 503.310528][T27969] exfat: Deprecated parameter 'namecase' [ 503.316139][T27969] exfat: Deprecated parameter 'utf8' [ 503.322149][T27969] exfat: Deprecated parameter 'utf8' [ 503.339658][T27973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12801'. [ 503.348642][T27973] tipc: Invalid UDP bearer configuration [ 503.348663][T27973] tipc: Enabling of bearer rejected, failed to enable media [ 503.349084][T27969] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 503.369480][T27975] syz.3.12802[27975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.374243][T27975] syz.3.12802[27975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.465644][T27979] loop2: detected capacity change from 0 to 1024 [ 503.548439][T27979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 503.637751][T28005] syz.4.12814[28005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.637853][T28005] syz.4.12814[28005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.681532][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12815'. [ 503.750805][ T30] kauditd_printk_skb: 796 callbacks suppressed [ 503.750821][ T30] audit: type=1400 audit(2000067206.257:67292): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.780872][ T30] audit: type=1400 audit(2000067206.257:67293): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.804897][ T30] audit: type=1400 audit(2000067206.257:67294): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.837812][ T30] audit: type=1400 audit(2000067206.354:67295): avc: denied { read write } for pid=295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.861993][ T30] audit: type=1400 audit(2000067206.354:67296): avc: denied { open } for pid=295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.886032][ T30] audit: type=1400 audit(2000067206.354:67297): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.954570][ T30] audit: type=1400 audit(2000067206.408:67298): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.980534][ T30] audit: type=1400 audit(2000067206.408:67299): avc: denied { open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.046864][ T30] audit: type=1400 audit(2000067206.408:67300): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.077512][ T30] audit: type=1400 audit(2000067206.440:67301): avc: denied { create } for pid=28021 comm="syz.1.12822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.186128][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12832'. [ 504.328647][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12848'. [ 504.350385][T28059] netlink: 'syz.2.12839': attribute type 2 has an invalid length. [ 504.500132][T28077] netlink: 'syz.4.12847': attribute type 1 has an invalid length. [ 504.530252][T28079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12845'. [ 504.565486][T28084] overlayfs: failed to resolve './file0': -2 [ 504.675527][T28095] loop2: detected capacity change from 0 to 16 [ 504.741847][T28095] erofs: (device loop2): mounted with root inode @ nid 36. [ 504.827341][ T544] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 504.939130][T28110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12864'. [ 504.950862][T28065] loop1: detected capacity change from 0 to 40427 [ 504.968428][T28110] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12864'. [ 505.009601][T28117] loop0: detected capacity change from 0 to 512 [ 505.025597][T28065] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 505.038876][T28065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 505.051345][T28117] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.12867: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 505.115193][T28117] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.12867: couldn't read orphan inode 15 (err -117) [ 505.131724][T28100] loop4: detected capacity change from 0 to 40427 [ 505.140506][T28117] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 505.141551][T28065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 505.152137][T28117] ext4 filesystem being mounted at /2437/file0 supports timestamps until 2038 (0x7fffffff) [ 505.210268][ T544] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.226020][ T544] usb 4-1: config 0 has no interface number 0 [ 505.239218][T28100] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 505.257998][ T544] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.262118][T28100] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 505.270034][ T544] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.287502][ T544] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 505.296549][T28065] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 505.303949][T28065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 505.321186][ T544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.334993][ T544] usb 4-1: config 0 descriptor?? [ 505.364318][T28065] F2FS-fs (loop1): Unrecognized mount option "noload" or missing value [ 505.398184][T28100] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 505.494598][T28100] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 505.507806][T28100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 505.540373][ T295] attempt to access beyond end of device [ 505.540373][ T295] loop4: rw=2049, want=45104, limit=40427 [ 505.704607][T28154] loop1: detected capacity change from 0 to 512 [ 505.750221][T28154] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 505.759590][T28154] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 505.768319][ T544] hid (null): global environment stack underflow [ 505.778453][ T544] uclogic 0003:5543:0522.00BA: global environment stack underflow [ 505.782187][T28154] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 505.786139][ T544] uclogic 0003:5543:0522.00BA: item 0 1 1 11 parsing failed [ 505.795542][ T6] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 505.802660][ T544] uclogic 0003:5543:0522.00BA: parse failed [ 505.812110][T28154] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.12881: iget: bogus i_mode (5) [ 505.815783][ T544] uclogic: probe of 0003:5543:0522.00BA failed with error -22 [ 505.827256][T28154] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.12881: couldn't read orphan inode 16 (err -117) [ 505.846206][T28154] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,jqfmt=vfsold,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,,errors=continue. Quota mode: writeback. [ 505.876439][T28154] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 505.930511][T28159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12882'. [ 505.959988][T28161] loop1: detected capacity change from 0 to 512 [ 505.965933][ T544] usb 4-1: USB disconnect, device number 21 [ 505.980884][T28161] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 505.990758][T28161] EXT4-fs (loop1): Ignoring removed orlov option [ 506.003468][T28161] EXT4-fs (loop1): 1 orphan inode deleted [ 506.009021][T28161] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,nodiscard,noquota,jqfmt=vfsv0,stripe=0x0000000000000079,bsdgroups,sysvgroups,orlov,usrquota,,errors=continue. Quota mode: writeback. [ 506.029177][T28161] ext4 filesystem being mounted at /2436/file1 supports timestamps until 2038 (0x7fffffff) [ 506.030596][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 506.150781][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.161642][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.175122][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 506.184322][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.202204][ T6] usb 3-1: config 0 descriptor?? [ 506.244555][ T6] hub 3-1:0.0: USB hub found [ 506.254643][T28167] loop1: detected capacity change from 0 to 40427 [ 506.337659][T28167] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 506.343960][T28167] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 506.358682][T28167] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 506.380878][T28167] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 506.387791][T28167] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 506.416859][ T293] attempt to access beyond end of device [ 506.416859][ T293] loop1: rw=2049, want=45104, limit=40427 [ 506.449467][ T6] hub 3-1:0.0: 4 ports detected [ 506.581920][T28191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12892'. [ 506.617370][T28196] netlink: 'syz.3.12896': attribute type 6 has an invalid length. [ 506.646806][T28198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12898'. [ 506.653672][ T6] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 506.669291][ T6] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 506.678660][T28198] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12898'. [ 506.775266][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 506.781118][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 506.822971][ T6] usb 3-1: USB disconnect, device number 20 [ 506.998386][ T429] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 507.222635][ T429] usb 2-1: Using ep0 maxpacket: 16 [ 507.236693][T28227] netlink: 'syz.4.12909': attribute type 6 has an invalid length. [ 507.262995][T28230] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12908'. [ 507.338209][ T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.369995][ T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.379680][ T429] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 507.388586][ T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.408146][ T429] usb 2-1: config 0 descriptor?? [ 507.484324][T28241] loop4: detected capacity change from 0 to 512 [ 507.520998][T28241] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 507.539882][T28241] EXT4-fs (loop4): Ignoring removed orlov option [ 507.578425][T28241] EXT4-fs (loop4): 1 orphan inode deleted [ 507.583981][T28241] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,nodiscard,noquota,jqfmt=vfsv0,stripe=0x0000000000000079,bsdgroups,sysvgroups,orlov,usrquota,,errors=continue. Quota mode: writeback. [ 507.605040][T28241] ext4 filesystem being mounted at /2574/file1 supports timestamps until 2038 (0x7fffffff) [ 507.853424][T28237] loop2: detected capacity change from 0 to 40427 [ 507.857749][ T429] hid-led 0003:1294:1320.00BB: unbalanced collection at end of report description [ 507.875827][ T429] hid-led: probe of 0003:1294:1320.00BB failed with error -22 [ 507.931368][T28237] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 507.939029][T28237] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 507.950634][T28237] F2FS-fs (loop2): Found nat_bits in checkpoint [ 507.979031][T28237] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 507.985877][T28237] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 508.017222][T28237] F2FS-fs (loop2): Unrecognized mount option "noload" or missing value [ 508.047888][ T544] usb 2-1: USB disconnect, device number 12 [ 508.301809][T28260] loop2: detected capacity change from 0 to 2048 [ 508.342776][T28260] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 508.353538][T28260] ext4 filesystem being mounted at /2489/bus supports timestamps until 2038 (0x7fffffff) [ 508.432699][ T30] kauditd_printk_skb: 642 callbacks suppressed [ 508.432713][ T30] audit: type=1400 audit(2000067211.278:67944): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.463473][ T30] audit: type=1400 audit(2000067211.321:67945): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.489770][ T30] audit: type=1400 audit(2000067211.321:67946): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.489865][ T365] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 508.523577][ T30] audit: type=1400 audit(2000067211.375:67947): avc: denied { map_create } for pid=28272 comm="syz.2.12928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 508.543516][ T30] audit: type=1400 audit(2000067211.375:67948): avc: denied { bpf } for pid=28272 comm="syz.2.12928" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 508.564353][ T429] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 508.599478][ T30] audit: type=1400 audit(2000067211.375:67949): avc: denied { map_read map_write } for pid=28272 comm="syz.2.12928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 508.599738][T28279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12931'. [ 508.619518][ T30] audit: type=1400 audit(2000067211.407:67950): avc: denied { ioctl } for pid=28252 comm="syz.3.12921" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 508.685496][ T30] audit: type=1400 audit(2000067211.407:67951): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.727717][ T30] audit: type=1400 audit(2000067211.407:67952): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.753964][ T30] audit: type=1400 audit(2000067211.407:67953): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.779415][ T365] usb 4-1: Using ep0 maxpacket: 8 [ 508.834628][ T429] usb 5-1: Using ep0 maxpacket: 16 [ 508.901125][ T365] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 508.911960][ T365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 508.925856][ T365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9728, setting to 1024 [ 508.937465][ T365] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 508.956939][ T429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.981626][ T429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.004716][ T429] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.018513][ T429] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.021466][ T365] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 509.027835][ T429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.036885][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.062198][ T365] usb 4-1: SerialNumber: syz [ 509.072349][ T429] usb 5-1: config 0 descriptor?? [ 509.086727][T28255] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 509.105284][ T365] hub 4-1:1.0: bad descriptor, ignoring hub [ 509.111031][ T365] hub: probe of 4-1:1.0 failed with error -5 [ 509.117214][ T365] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 509.180751][T28311] loop1: detected capacity change from 0 to 40427 [ 509.218553][T28311] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 509.226235][T28311] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 509.237552][T28311] F2FS-fs (loop1): Found nat_bits in checkpoint [ 509.260140][T28311] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 509.267012][T28311] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 509.287690][T28311] F2FS-fs (loop1): Inconsistent error blkaddr:5663, sit bitmap:0 [ 509.295356][T28311] CPU: 0 PID: 28311 Comm: syz.1.12947 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 509.305504][T28311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 509.315404][T28311] Call Trace: [ 509.318546][T28311] [ 509.321303][T28311] dump_stack_lvl+0x151/0x1c0 [ 509.325815][T28311] ? io_uring_drop_tctx_refs+0x190/0x190 [ 509.331278][T28311] ? arch_stack_walk+0xf3/0x140 [ 509.335971][T28311] dump_stack+0x15/0x20 [ 509.339963][T28311] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 509.345169][T28311] f2fs_map_blocks+0x1622/0x3ab0 [ 509.349941][T28311] ? __stack_depot_save+0x34/0x470 [ 509.354890][T28311] ? f2fs_do_map_lock+0x70/0x70 [ 509.359571][T28311] ? debug_smp_processor_id+0x17/0x20 [ 509.364775][T28311] ? try_charge_memcg+0x213/0x1550 [ 509.369726][T28311] f2fs_mpage_readpages+0xc9a/0x21a0 [ 509.374849][T28311] ? dquot_release_reservation_block+0xa0/0xa0 [ 509.380842][T28311] f2fs_readahead+0xfd/0x250 [ 509.385261][T28311] ? blk_start_plug+0x5a/0x170 [ 509.389861][T28311] read_pages+0x15e/0xb00 [ 509.394027][T28311] ? lru_cache_add+0x279/0x540 [ 509.398626][T28311] ? page_cache_ra_unbounded+0x920/0x920 [ 509.404092][T28311] ? add_to_page_cache_lru+0x225/0x2c0 [ 509.409414][T28311] ? add_to_page_cache_locked+0x40/0x40 [ 509.414770][T28311] ? debug_smp_processor_id+0x17/0x20 [ 509.419979][T28311] page_cache_ra_unbounded+0x6cb/0x920 [ 509.425325][T28311] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 509.431609][T28311] ? putname+0xfa/0x150 [ 509.435608][T28311] force_page_cache_ra+0x3c0/0x420 [ 509.440551][T28311] generic_fadvise+0x593/0x880 [ 509.445149][T28311] ? dump_task+0x520/0x520 [ 509.449402][T28311] ? __fdget+0x1bc/0x240 [ 509.453484][T28311] __x64_sys_fadvise64+0x13f/0x180 [ 509.458428][T28311] x64_sys_call+0x5ca/0x9a0 [ 509.459112][ T365] usb 4-1: USB disconnect, device number 22 [ 509.462770][T28311] do_syscall_64+0x3b/0xb0 [ 509.462792][T28311] ? clear_bhb_loop+0x35/0x90 [ 509.477269][T28311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.483006][T28311] RIP: 0033:0x7fa403313719 [ 509.487244][T28311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.506688][T28311] RSP: 002b:00007fa401f8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 509.514928][T28311] RAX: ffffffffffffffda RBX: 00007fa4034caf80 RCX: 00007fa403313719 [ 509.522738][T28311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 509.530551][T28311] RBP: 00007fa40338639e R08: 0000000000000000 R09: 0000000000000000 [ 509.538378][T28311] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 509.546176][T28311] R13: 0000000000000000 R14: 00007fa4034caf80 R15: 00007ffed3e0f5b8 [ 509.553993][T28311] [ 509.557974][ T6] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 509.715854][T28324] loop1: detected capacity change from 0 to 1024 [ 509.767885][ T429] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0 [ 509.775007][ T429] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0 [ 509.782179][ T429] microsoft 0003:045E:07DA.00BC: No inputs registered, leaving [ 509.794882][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 509.799214][T28324] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,noinit_itable,,errors=continue. Quota mode: writeback. [ 509.800015][ T429] microsoft 0003:045E:07DA.00BC: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 509.842035][ T429] microsoft 0003:045E:07DA.00BC: no inputs found [ 509.848949][ T429] microsoft 0003:045E:07DA.00BC: could not initialize ff, continuing anyway [ 509.953100][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.976342][ T6] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 509.990580][T28339] binder: 28336:28339 ioctl c018620b 0 returned -14 [ 509.997165][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.011797][ T429] usb 5-1: USB disconnect, device number 19 [ 510.018872][ T6] usb 3-1: config 0 descriptor?? [ 510.091427][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12963'. [ 510.401035][ T365] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 510.491422][ T6] hid-multitouch 0003:1FD2:6007.00BD: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 510.553688][T28376] loop1: detected capacity change from 0 to 512 [ 510.637700][T28376] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.12973: invalid indirect mapped block 256 (level 2) [ 510.654536][T28376] EXT4-fs (loop1): 2 truncates cleaned up [ 510.660099][T28376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 510.677129][ T6] usb 3-1: USB disconnect, device number 21 [ 510.736634][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.747996][ T365] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 510.756903][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.768373][ T365] usb 4-1: config 0 descriptor?? [ 510.959942][ T544] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 511.174783][T28410] loop2: detected capacity change from 0 to 512 [ 511.183836][ T544] usb 5-1: Using ep0 maxpacket: 16 [ 511.205183][T28410] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.12991: invalid indirect mapped block 256 (level 2) [ 511.213089][ T365] hid-generic 0003:10C4:8ACF.00BE: item fetching failed at offset 0/1 [ 511.238056][ T365] hid-generic: probe of 0003:10C4:8ACF.00BE failed with error -22 [ 511.252558][T28410] EXT4-fs (loop2): 2 truncates cleaned up [ 511.265842][T28410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 511.295792][ T544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.311110][ T544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.321389][ T544] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 511.331000][ T544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.341473][ T544] usb 5-1: config 0 descriptor?? [ 511.412071][ T400] usb 4-1: USB disconnect, device number 23 [ 511.612302][ T60] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 511.649469][ T365] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 511.789469][ T544] hid (null): invalid report_count 65975791 [ 511.795312][ T544] hid (null): report_id 2882780393 is invalid [ 511.803971][ T544] lenovo 0003:17EF:60A3.00BF: invalid report_count 65975791 [ 511.811182][ T544] lenovo 0003:17EF:60A3.00BF: item 0 4 1 9 parsing failed [ 511.818430][ T544] lenovo 0003:17EF:60A3.00BF: hid_parse failed [ 511.824431][ T544] lenovo: probe of 0003:17EF:60A3.00BF failed with error -22 [ 511.980355][ T6] usb 5-1: USB disconnect, device number 20 [ 511.985479][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 512.022117][ T365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 512.031617][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 512.106534][ T365] usb 3-1: config index 0 descriptor too short (expected 8224, got 36) [ 512.114871][ T365] usb 3-1: config 37 has too many interfaces: 112, using maximum allowed: 32 [ 512.123626][ T60] usb 2-1: config 2 has an invalid interface number: 112 but max is 0 [ 512.133989][ T60] usb 2-1: config 2 has no interface number 0 [ 512.146657][ T60] usb 2-1: config 2 interface 112 has no altsetting 0 [ 512.153313][ T365] usb 3-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 512.163292][ T365] usb 3-1: config 37 has 0 interfaces, different from the descriptor's value: 112 [ 512.385709][ T60] usb 2-1: string descriptor 0 read error: -22 [ 512.391802][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=30.0e [ 512.400759][ T365] usb 3-1: string descriptor 0 read error: -22 [ 512.406748][ T365] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 512.415576][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.423349][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.471381][ T60] usb 2-1: Found UVC 0.00 device (046d:08d3) [ 512.478429][ T60] usb 2-1: No valid video chain found. [ 512.664024][ T429] usb 3-1: USB disconnect, device number 22 [ 512.671797][ T60] usb 2-1: USB disconnect, device number 13 [ 513.098569][ T30] kauditd_printk_skb: 633 callbacks suppressed [ 513.098586][ T30] audit: type=1400 audit(2000067216.289:68587): avc: denied { read write } for pid=28491 comm="syz.4.13030" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.098958][T28492] loop4: detected capacity change from 0 to 128 [ 513.105603][ T30] audit: type=1400 audit(2000067216.289:68588): avc: denied { open } for pid=28491 comm="syz.4.13030" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.158952][ T30] audit: type=1400 audit(2000067216.289:68589): avc: denied { ioctl } for pid=28491 comm="syz.4.13030" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.187232][T28495] loop1: detected capacity change from 0 to 256 [ 513.221395][ T30] audit: type=1400 audit(2000067216.353:68590): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.254667][ T30] audit: type=1400 audit(2000067216.353:68591): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.278986][ T30] audit: type=1400 audit(2000067216.353:68592): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.304987][ T30] audit: type=1400 audit(2000067216.385:68593): avc: denied { read write } for pid=28493 comm="syz.1.13031" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.330319][ T30] audit: type=1400 audit(2000067216.385:68594): avc: denied { open } for pid=28493 comm="syz.1.13031" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.371627][ T30] audit: type=1400 audit(2000067216.385:68595): avc: denied { ioctl } for pid=28493 comm="syz.1.13031" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.373220][T28508] loop4: detected capacity change from 0 to 512 [ 513.406675][ T30] audit: type=1400 audit(2000067216.385:68596): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.430702][T28495] FAT-fs (loop1): Directory bread(block 64) failed [ 513.430731][T28495] FAT-fs (loop1): Directory bread(block 65) failed [ 513.430760][T28495] FAT-fs (loop1): Directory bread(block 66) failed [ 513.459036][T28495] FAT-fs (loop1): Directory bread(block 67) failed [ 513.474930][T28495] FAT-fs (loop1): Directory bread(block 68) failed [ 513.490210][T28495] FAT-fs (loop1): Directory bread(block 69) failed [ 513.498967][T28495] FAT-fs (loop1): Directory bread(block 70) failed [ 513.507678][T28495] FAT-fs (loop1): Directory bread(block 71) failed [ 513.512905][T28508] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 513.515148][T28495] FAT-fs (loop1): Directory bread(block 72) failed [ 513.528460][T28495] FAT-fs (loop1): Directory bread(block 73) failed [ 513.539159][T28508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 513.559660][T28508] System zones: 1-12 [ 513.579717][T28508] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 513.589518][T28508] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 513.598074][T28508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 513.620847][T28508] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 513.886589][ T365] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 513.979462][ T429] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 514.110070][ T365] usb 4-1: Using ep0 maxpacket: 16 [ 514.221972][ T365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.232723][ T365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 514.242859][ T365] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 514.255652][ T365] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.264431][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.287355][T28517] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 514.306260][ T365] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 514.399141][ T429] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.408568][T28533] option changes via remount are deprecated (pid=28532 comm=syz.1.13047) [ 514.416941][T28533] cgroup: option or name mismatch, new: 0x0 "memory", old: 0x0 "" [ 514.450864][T28536] loop1: detected capacity change from 0 to 16 [ 514.474816][T28536] erofs: (device loop1): mounted with root inode @ nid 36. [ 514.483111][ T429] usb 5-1: config index 0 descriptor too short (expected 8224, got 36) [ 514.497572][ T429] usb 5-1: config 37 has too many interfaces: 112, using maximum allowed: 32 [ 514.507727][ T429] usb 5-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 514.512397][ T365] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 514.517954][ T429] usb 5-1: config 37 has 0 interfaces, different from the descriptor's value: 112 [ 514.553084][ T365] usb 4-1: USB disconnect, device number 24 [ 514.697371][ T60] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 514.800257][ T429] usb 5-1: string descriptor 0 read error: -22 [ 514.806330][ T429] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 514.809021][ T400] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 514.815117][ T429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.930630][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 515.042531][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 515.047537][ T60] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 515.055444][ T60] usb 3-1: config 0 has no interface number 0 [ 515.062048][ T60] usb 3-1: config 0 interface 33 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 515.072084][ T60] usb 3-1: config 0 interface 33 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 515.089340][ T60] usb 3-1: config 0 interface 33 has no altsetting 0 [ 515.117229][ T365] usb 5-1: USB disconnect, device number 21 [ 515.164238][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.180509][ T400] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 515.198017][T28551] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 515.213990][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.224168][ T400] usb 2-1: config 0 descriptor?? [ 515.229858][ T544] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.247648][ T60] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 515.254459][T28555] loop0: detected capacity change from 0 to 256 [ 515.256499][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.256521][ T60] usb 3-1: Product: syz [ 515.294235][ T60] usb 3-1: Manufacturer: syz [ 515.298636][ T60] usb 3-1: SerialNumber: syz [ 515.306641][T28555] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 515.314052][ T60] usb 3-1: config 0 descriptor?? [ 515.340909][T28534] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 515.347686][T28534] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 515.511117][T28586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13075'. [ 515.547707][T28534] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 515.555545][T28534] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 515.608397][T28598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13081'. [ 515.617510][T28598] netlink: 116 bytes leftover after parsing attributes in process `syz.0.13081'. [ 515.687226][ T400] hid-multitouch 0003:1FD2:6007.00C0: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 515.702161][T28607] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 515.770857][T28614] usb usb8: usbfs: process 28614 (syz.4.13089) did not claim interface 0 before use [ 515.796013][T28614] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 515.799933][T28616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13088'. [ 515.803999][ T400] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.863842][T28619] loop4: detected capacity change from 0 to 256 [ 515.892545][ T400] usb 2-1: USB disconnect, device number 14 [ 515.983992][ T60] CoreChips: probe of 3-1:0.33 failed with error -71 [ 515.991787][ T60] usb 3-1: USB disconnect, device number 23 [ 516.179546][ T26] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 516.235324][ T429] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 516.400741][T28635] loop1: detected capacity change from 0 to 256 [ 516.450849][T28643] loop0: detected capacity change from 0 to 256 [ 516.462902][T28635] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 516.502805][T28643] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 516.521616][T28649] loop2: detected capacity change from 0 to 256 [ 516.552280][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 516.564949][T28649] FAT-fs (loop2): Directory bread(block 64) failed [ 516.571895][T28649] FAT-fs (loop2): Directory bread(block 65) failed [ 516.578266][T28649] FAT-fs (loop2): Directory bread(block 66) failed [ 516.584669][T28649] FAT-fs (loop2): Directory bread(block 67) failed [ 516.598858][T28649] FAT-fs (loop2): Directory bread(block 68) failed [ 516.605232][T28649] FAT-fs (loop2): Directory bread(block 69) failed [ 516.613012][ T429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.633657][ T429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.636328][ T26] usb 4-1: config index 0 descriptor too short (expected 8224, got 36) [ 516.651417][T28649] FAT-fs (loop2): Directory bread(block 70) failed [ 516.672816][ T429] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 516.682314][T28649] FAT-fs (loop2): Directory bread(block 71) failed [ 516.693003][ T26] usb 4-1: config 37 has too many interfaces: 112, using maximum allowed: 32 [ 516.708786][ T429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.716730][T28649] FAT-fs (loop2): Directory bread(block 72) failed [ 516.729863][ T26] usb 4-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 516.745996][ T429] usb 5-1: config 0 descriptor?? [ 516.751444][T28649] FAT-fs (loop2): Directory bread(block 73) failed [ 516.764092][ T26] usb 4-1: config 37 has 0 interfaces, different from the descriptor's value: 112 [ 516.878700][T28674] tipc: Enabling of bearer rejected, failed to enable media [ 516.894334][T28676] loop1: detected capacity change from 0 to 256 [ 516.908496][T28676] exfat: Deprecated parameter 'utf8' [ 516.913796][T28676] exfat: Deprecated parameter 'utf8' [ 516.933648][T28682] loop2: detected capacity change from 0 to 256 [ 516.959712][T28682] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 516.974333][T28676] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207e, chksum : 0x82b5a916, utbl_chksum : 0xe619d30d) [ 517.008948][ T26] usb 4-1: string descriptor 0 read error: -22 [ 517.014983][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 517.031478][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.075782][T28688] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13124'. [ 517.104771][T28692] loop0: detected capacity change from 0 to 256 [ 517.149398][T28696] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 517.176647][T28692] FAT-fs (loop0): Directory bread(block 64) failed [ 517.183134][T28692] FAT-fs (loop0): Directory bread(block 65) failed [ 517.191161][T28692] FAT-fs (loop0): Directory bread(block 66) failed [ 517.198003][T28692] FAT-fs (loop0): Directory bread(block 67) failed [ 517.204402][T28692] FAT-fs (loop0): Directory bread(block 68) failed [ 517.205444][ T429] smartjoyplus 0003:0925:0005.00C1: unknown main item tag 0x0 [ 517.231349][ T429] smartjoyplus 0003:0925:0005.00C1: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.4-1/input0 [ 517.238773][T28692] FAT-fs (loop0): Directory bread(block 69) failed [ 517.251426][T28692] FAT-fs (loop0): Directory bread(block 70) failed [ 517.258751][ T429] smartjoyplus 0003:0925:0005.00C1: no output reports found [ 517.258825][T28692] FAT-fs (loop0): Directory bread(block 71) failed [ 517.281806][T28706] tipc: Enabling of bearer rejected, failed to enable media [ 517.295742][T28692] FAT-fs (loop0): Directory bread(block 72) failed [ 517.302879][T28692] FAT-fs (loop0): Directory bread(block 73) failed [ 517.332874][ T60] usb 4-1: USB disconnect, device number 25 [ 517.407364][ T26] usb 5-1: USB disconnect, device number 22 [ 517.781874][ T30] kauditd_printk_skb: 783 callbacks suppressed [ 517.781890][ T30] audit: type=1400 audit(2000067221.310:69380): avc: denied { read write } for pid=28734 comm="syz.0.13147" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.782367][T28735] loop0: detected capacity change from 0 to 40427 [ 517.788035][ T30] audit: type=1400 audit(2000067221.310:69381): avc: denied { open } for pid=28734 comm="syz.0.13147" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.862844][T28735] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 517.884461][T28742] loop1: detected capacity change from 0 to 40427 [ 517.890467][T28735] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 517.891009][ T30] audit: type=1400 audit(2000067221.310:69382): avc: denied { ioctl } for pid=28734 comm="syz.0.13147" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.930139][ T30] audit: type=1400 audit(2000067221.374:69383): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.961000][T28735] F2FS-fs (loop0): invalid crc value [ 517.961155][T28742] F2FS-fs (loop1): fault_injection options not supported [ 517.975678][T28742] F2FS-fs (loop1): fault_type options not supported [ 517.983365][T28742] F2FS-fs (loop1): invalid crc value [ 517.990324][T28742] F2FS-fs (loop1): Found nat_bits in checkpoint [ 517.996918][ T30] audit: type=1400 audit(2000067221.374:69384): avc: denied { open } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.021232][ T30] audit: type=1400 audit(2000067221.374:69385): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.047182][ T30] audit: type=1400 audit(2000067221.396:69386): avc: denied { prog_load } for pid=28748 comm="syz.3.13154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 518.066831][ T30] audit: type=1400 audit(2000067221.396:69387): avc: denied { create } for pid=28748 comm="syz.3.13154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.090677][T28735] F2FS-fs (loop0): Found nat_bits in checkpoint [ 518.105499][T28746] loop2: detected capacity change from 0 to 40427 [ 518.111976][ T30] audit: type=1400 audit(2000067221.396:69388): avc: denied { write } for pid=28748 comm="syz.3.13154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.132798][ T30] audit: type=1400 audit(2000067221.396:69389): avc: denied { nlmsg_write } for pid=28748 comm="syz.3.13154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.133025][T28742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 518.180563][T28735] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 518.188728][T28735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 518.209305][T28746] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 518.225231][ T293] attempt to access beyond end of device [ 518.225231][ T293] loop1: rw=2049, want=45104, limit=40427 [ 518.248826][T28746] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 518.268076][T28746] F2FS-fs (loop2): invalid crc value [ 518.289712][ T8645] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 518.308165][ T8645] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 518.319024][T28746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 518.383276][T28746] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 518.390220][T28746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 518.416782][ T8645] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 518.418804][T28753] loop4: detected capacity change from 0 to 40427 [ 518.435979][ T8645] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 518.461885][T28753] F2FS-fs (loop4): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 518.481917][T28753] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 518.530961][T28753] F2FS-fs (loop4): Found nat_bits in checkpoint [ 518.556138][ T60] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 518.565494][T28782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13161'. [ 518.618310][T28753] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 518.637587][T28753] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 518.667308][T28753] F2FS-fs (loop4): Can't flush 4 in 0 for segs_per_sec 1 != 1 [ 518.699432][ T295] attempt to access beyond end of device [ 518.699432][ T295] loop4: rw=2049, want=45104, limit=40427 [ 518.741852][T28796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13171'. [ 518.910333][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.929932][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.941809][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.954977][ T60] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 518.965452][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.992548][ T60] usb 4-1: config 0 descriptor?? [ 519.005704][T28822] loop2: detected capacity change from 0 to 256 [ 519.056537][T28822] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 519.259219][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13202'. [ 519.306909][T28866] netlink: 'syz.2.13204': attribute type 11 has an invalid length. [ 519.315538][T28866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13204'. [ 519.349340][T28872] Dead loop on virtual device ip6_vti0, fix it urgently! [ 519.375429][T28874] devtmpfs: Too few inodes for current use [ 519.442434][ T60] holtek_mouse 0003:04D9:A070.00C2: item fetching failed at offset 1/5 [ 519.452419][ T60] holtek_mouse 0003:04D9:A070.00C2: hid parse failed: -22 [ 519.459365][ T60] holtek_mouse: probe of 0003:04D9:A070.00C2 failed with error -22 [ 519.486266][T28887] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13214'. [ 519.496786][T28887] tipc: Enabled bearer , priority 0 [ 519.631173][ T400] usb 4-1: USB disconnect, device number 26 [ 519.674688][ T429] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 519.777435][ T60] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 519.777435][ T6] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 519.917200][ T429] usb 2-1: Using ep0 maxpacket: 32 [ 520.009877][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 520.010317][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 520.029162][ T429] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 520.037172][ T429] usb 2-1: config 0 has no interface number 0 [ 520.043168][ T429] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 520.122291][ T60] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 520.131690][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.136896][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.142947][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.162751][ T6] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 520.168017][ T60] usb 5-1: config 0 has no interface number 0 [ 520.172482][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.190077][ T6] usb 3-1: config 0 descriptor?? [ 520.224891][ T429] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 520.235855][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.244300][ T429] usb 2-1: Product: syz [ 520.248271][ T429] usb 2-1: Manufacturer: syz [ 520.252899][ T429] usb 2-1: SerialNumber: syz [ 520.258600][ T429] usb 2-1: config 0 descriptor?? [ 520.336623][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 520.345558][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.353293][ T60] usb 5-1: Product: syz [ 520.357330][ T60] usb 5-1: Manufacturer: syz [ 520.361695][ T60] usb 5-1: SerialNumber: syz [ 520.368130][ T60] usb 5-1: config 0 descriptor?? [ 520.403109][ T60] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 520.409313][ T60] usb 5-1: No valid video chain found. [ 520.448230][ T26] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 520.561282][ T429] usb 2-1: USB disconnect, device number 15 [ 520.598889][ T60] usb 5-1: USB disconnect, device number 23 [ 520.625905][ T6] steelseries_srws1 0003:1038:1410.00C3: unknown main item tag 0xd [ 520.633706][ T6] steelseries_srws1 0003:1038:1410.00C3: item fetching failed at offset 6/7 [ 520.642405][ T6] steelseries_srws1 0003:1038:1410.00C3: parse failed [ 520.649037][ T6] steelseries_srws1: probe of 0003:1038:1410.00C3 failed with error -22 [ 520.783438][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.794348][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.803929][ T26] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 520.812764][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.820099][ T429] usb 3-1: USB disconnect, device number 24 [ 520.829599][ T26] usb 4-1: config 0 descriptor?? [ 521.155629][T28917] loop4: detected capacity change from 0 to 512 [ 521.231748][T28917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.244273][T28917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.13227: invalid indirect mapped block 4294967295 (level 0) [ 521.258592][T28917] EXT4-fs (loop4): Remounting filesystem read-only [ 521.265202][T28917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.13227: invalid indirect mapped block 4294967295 (level 1) [ 521.278451][ T26] petalynx 0003:18B1:0037.00C4: unknown main item tag 0x0 [ 521.280936][T28917] EXT4-fs (loop4): 1 orphan inode deleted [ 521.292063][T28917] EXT4-fs (loop4): 1 truncate cleaned up [ 521.298096][T28917] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 521.307061][ T26] petalynx 0003:18B1:0037.00C4: unknown main item tag 0x0 [ 521.334219][ T26] petalynx 0003:18B1:0037.00C4: unknown main item tag 0x0 [ 521.341317][ T26] petalynx 0003:18B1:0037.00C4: unknown main item tag 0x0 [ 521.349110][ T26] petalynx 0003:18B1:0037.00C4: unknown main item tag 0x0 [ 521.352754][ T429] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 521.363764][ T26] petalynx 0003:18B1:0037.00C4: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 521.481536][ T400] usb 4-1: USB disconnect, device number 27 [ 521.594295][ T429] usb 2-1: Using ep0 maxpacket: 32 [ 521.632264][ T6] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 521.659718][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 521.725437][ T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.736178][ T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.745741][ T429] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 521.754644][ T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.764695][ T429] usb 2-1: config 0 descriptor?? [ 521.883526][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 521.883667][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 522.004769][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.023442][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.023441][ T26] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 522.023471][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.042292][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.045109][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.085423][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.088710][ T26] usb 5-1: config 0 descriptor?? [ 522.095299][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.109207][ T6] usb 3-1: config 0 descriptor?? [ 522.223604][ T429] thrustmaster 0003:044F:B324.00C5: hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.1-1/input0 [ 522.254420][ T429] thrustmaster 0003:044F:B324.00C5: no inputs found [ 522.415740][ T400] usb 2-1: USB disconnect, device number 16 [ 522.508102][ T60] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 522.526707][ T30] kauditd_printk_skb: 550 callbacks suppressed [ 522.526723][ T30] audit: type=1400 audit(2000067226.406:69940): avc: denied { ioctl } for pid=28941 comm="syz.3.13237" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.565489][ T26] hid-multitouch 0003:1FD2:6007.00C6: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 522.574769][ T30] audit: type=1400 audit(2000067226.449:69941): avc: denied { ioctl } for pid=28922 comm="syz.2.13229" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.603105][ T6] microsoft 0003:045E:07DA.00C7: unknown main item tag 0x0 [ 522.610674][ T6] microsoft 0003:045E:07DA.00C7: unknown main item tag 0x0 [ 522.617819][ T6] microsoft 0003:045E:07DA.00C7: No inputs registered, leaving [ 522.626231][ T6] microsoft 0003:045E:07DA.00C7: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 522.637712][ T6] microsoft 0003:045E:07DA.00C7: no inputs found [ 522.643868][ T6] microsoft 0003:045E:07DA.00C7: could not initialize ff, continuing anyway [ 522.731706][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 522.750578][ T30] audit: type=1400 audit(2000067226.653:69942): avc: denied { ioctl } for pid=28941 comm="syz.3.13237" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.778936][ T400] usb 5-1: USB disconnect, device number 24 [ 522.790498][ T30] audit: type=1400 audit(2000067226.696:69943): avc: denied { ioctl } for pid=28941 comm="syz.3.13237" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.824399][ T26] usb 3-1: USB disconnect, device number 25 [ 522.825280][ T30] audit: type=1400 audit(2000067226.707:69944): avc: denied { ioctl } for pid=28941 comm="syz.3.13237" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.843326][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.857037][ T30] audit: type=1400 audit(2000067226.739:69945): avc: denied { ioctl } for pid=28941 comm="syz.3.13237" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.869021][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.893769][ T30] audit: type=1400 audit(2000067226.771:69946): avc: denied { ioctl } for pid=28941 comm="syz.3.13237" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.902539][ T60] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 522.937695][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.942098][ T30] audit: type=1400 audit(2000067226.836:69947): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.958712][ T60] usb 4-1: config 0 descriptor?? [ 522.974489][ T30] audit: type=1400 audit(2000067226.836:69948): avc: denied { open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 523.009868][ T30] audit: type=1400 audit(2000067226.836:69949): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 523.083129][T28953] loop1: detected capacity change from 0 to 256 [ 523.099204][T28955] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13243'. [ 523.150078][T28953] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 523.226890][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13253'. [ 523.245267][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13253'. [ 523.416038][T28994] loop2: detected capacity change from 0 to 512 [ 523.441766][ T60] samsung 0003:0419:0001.00C8: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 523.507167][T28994] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 523.522471][T28994] ext4 filesystem being mounted at /2551/file0 supports timestamps until 2038 (0x7fffffff) [ 523.547431][T29004] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13267'. [ 523.609773][T29010] loop4: detected capacity change from 0 to 512 [ 523.791591][ T60] usb 4-1: USB disconnect, device number 28 [ 523.826174][T29018] loop4: detected capacity change from 0 to 1024 [ 523.877591][T29020] loop2: detected capacity change from 0 to 512 [ 523.937067][T29018] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 523.963590][T29020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 524.009344][T29020] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.13275: invalid indirect mapped block 4294967295 (level 0) [ 524.044536][T29020] EXT4-fs (loop2): Remounting filesystem read-only [ 524.051881][T29020] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.13275: invalid indirect mapped block 4294967295 (level 1) [ 524.066691][T29020] EXT4-fs (loop2): 1 orphan inode deleted [ 524.083385][T29020] EXT4-fs (loop2): 1 truncate cleaned up [ 524.088972][T29020] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 524.114134][T29031] loop1: detected capacity change from 0 to 2048 [ 524.145918][T29037] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13281'. [ 524.186472][T29031] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.433569][T29068] loop4: detected capacity change from 0 to 2048 [ 524.554942][T29068] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.605401][T29099] loop1: detected capacity change from 0 to 128 [ 524.661817][T29099] EXT4-fs (loop1): Ignoring removed bh option [ 524.667817][T29099] EXT4-fs (loop1): Ignoring removed orlov option [ 524.687490][T29099] EXT4-fs (loop1): Ignoring removed oldalloc option [ 524.696872][T29099] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bh,resuid=0x0000000000000000,orlov,norecovery,stripe=0x0000000000000200,oldalloc,data_err=abort,,errors=continue. Quota mode: none. [ 524.716519][T29099] ext4 filesystem being mounted at /2548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 524.893790][ T26] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 525.052582][ T60] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 525.117535][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 525.229401][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.240287][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.252981][ T26] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 525.261864][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.270852][ T26] usb 4-1: config 0 descriptor?? [ 525.276344][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 525.388099][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.389299][T29120] loop1: detected capacity change from 0 to 512 [ 525.404083][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 525.420818][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.439617][T29120] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 525.439874][ T60] usb 5-1: config 0 descriptor?? [ 525.453894][T29120] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.471110][T29120] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.13329: casefold flag without casefold feature [ 525.484749][T29120] EXT4-fs (loop1): Remounting filesystem read-only [ 525.491862][T29120] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.13329: couldn't read orphan inode 15 (err -117) [ 525.504224][T29120] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,nodelalloc,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,. Quota mode: writeback. [ 525.535735][T29120] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #2: comm syz.1.13329: invalid size [ 525.546426][T29120] EXT4-fs (loop1): Remounting filesystem read-only [ 525.571679][T29128] loop2: detected capacity change from 0 to 2048 [ 525.613250][T29132] loop1: detected capacity change from 0 to 512 [ 525.641226][T29128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.715940][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.722731][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.757245][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.782362][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.796088][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.812094][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.819846][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.826912][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.839336][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.846989][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.858765][ T26] kye 0003:0458:5015.00C9: unknown main item tag 0x0 [ 525.869333][ T26] kye 0003:0458:5015.00C9: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 525.884414][T29154] loop2: detected capacity change from 0 to 512 [ 525.885852][ T26] kye 0003:0458:5015.00C9: tablet-enabling feature report not found [ 525.899350][ T26] kye 0003:0458:5015.00C9: tablet enabling failed [ 525.911024][ T60] logitech 0003:046D:C295.00CA: item fetching failed at offset 0/3 [ 525.911180][T29154] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 525.929401][ T60] logitech 0003:046D:C295.00CA: parse failed [ 525.935325][T29154] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.939042][ T26] usb 4-1: USB disconnect, device number 29 [ 525.951045][T29154] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.13335: casefold flag without casefold feature [ 525.953006][ T60] logitech: probe of 0003:046D:C295.00CA failed with error -22 [ 525.966664][T29154] EXT4-fs (loop2): Remounting filesystem read-only [ 525.979511][T29154] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.13335: couldn't read orphan inode 15 (err -117) [ 525.991718][T29154] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,nodelalloc,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,. Quota mode: writeback. [ 526.024004][T29154] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #2: comm syz.2.13335: invalid size [ 526.034780][T29154] EXT4-fs (loop2): Remounting filesystem read-only [ 526.074581][T29157] loop2: detected capacity change from 0 to 16 [ 526.083741][T29157] erofs: (device loop2): mounted with root inode @ nid 36. [ 526.112610][ T60] usb 5-1: USB disconnect, device number 25 [ 526.130618][T29160] loop0: detected capacity change from 0 to 2048 [ 526.137048][T29157] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 526.165300][T29157] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 526.190495][T29160] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.195949][T29172] loop1: detected capacity change from 0 to 512 [ 526.213639][T29172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 526.235672][T29172] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.13342: invalid indirect mapped block 4294967295 (level 0) [ 526.250391][T29172] EXT4-fs (loop1): Remounting filesystem read-only [ 526.263254][T29172] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.13342: invalid indirect mapped block 4294967295 (level 1) [ 526.278028][T29172] EXT4-fs (loop1): 1 orphan inode deleted [ 526.283994][T29172] EXT4-fs (loop1): 1 truncate cleaned up [ 526.295606][T29172] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 526.419770][T29185] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 526.428906][T29185] SELinux: duplicate or incompatible mount options [ 526.618370][ T60] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 526.674481][ T26] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 526.703857][T29199] netlink: 512 bytes leftover after parsing attributes in process `syz.4.13352'. [ 526.841908][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 526.953748][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.964478][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.974210][ T60] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 526.983073][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.993305][ T60] usb 2-1: config 0 descriptor?? [ 527.009635][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.019701][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.033300][ T26] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.046081][ T26] usb 4-1: config 1 interface 1 has no altsetting 0 [ 527.194512][T29228] xt_hashlimit: size too large, truncated to 1048576 [ 527.196601][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.211104][ T30] kauditd_printk_skb: 787 callbacks suppressed [ 527.211119][ T30] audit: type=1400 audit(2000067231.417:70737): avc: denied { ioctl } for pid=29186 comm="syz.3.13347" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.258447][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.266358][ T26] usb 4-1: Product: syz [ 527.271728][ T26] usb 4-1: Manufacturer: syz [ 527.276201][ T26] usb 4-1: SerialNumber: syz [ 527.280635][ T30] audit: type=1400 audit(2000067231.438:70738): avc: denied { module_request } for pid=29227 comm="syz.2.13367" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 527.315235][ T30] audit: type=1400 audit(2000067231.470:70739): avc: denied { read write } for pid=295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.355172][ T26] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 527.372434][ T26] cdc_ncm 4-1:1.0: bind() failure [ 527.386532][ T30] audit: type=1400 audit(2000067231.470:70740): avc: denied { open } for pid=295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.416573][ T30] audit: type=1400 audit(2000067231.470:70741): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.450003][ T60] steelseries_srws1 0003:1038:1410.00CB: unknown main item tag 0xd [ 527.461288][ T60] steelseries_srws1 0003:1038:1410.00CB: item fetching failed at offset 6/7 [ 527.478461][ T60] steelseries_srws1 0003:1038:1410.00CB: parse failed [ 527.485133][ T60] steelseries_srws1: probe of 0003:1038:1410.00CB failed with error -22 [ 527.494029][ T30] audit: type=1400 audit(2000067231.481:70742): avc: denied { search } for pid=29226 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.531458][ T30] audit: type=1400 audit(2000067231.481:70743): avc: denied { mounton } for pid=29231 comm="syz.4.13368" path="/2660/file0" dev="tmpfs" ino=13659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 527.541972][T29247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.555422][T29250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.562018][T29248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.632784][ T429] usb 2-1: USB disconnect, device number 17 [ 527.794208][ T26] usb 4-1: USB disconnect, device number 30 [ 527.815185][T29276] loop2: detected capacity change from 0 to 128 [ 527.842847][T29276] EXT4-fs (loop2): Ignoring removed bh option [ 527.850930][T29276] EXT4-fs (loop2): Ignoring removed orlov option [ 527.857108][T29276] EXT4-fs (loop2): Ignoring removed oldalloc option [ 527.886439][T29276] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bh,resuid=0x0000000000000000,orlov,norecovery,stripe=0x0000000000000200,oldalloc,data_err=abort,,errors=continue. Quota mode: none. [ 527.908214][T29276] ext4 filesystem being mounted at /2591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 528.147531][T29312] loop4: detected capacity change from 0 to 128 [ 528.216831][T29312] EXT4-fs (loop4): Test dummy encryption mode enabled [ 528.243765][T29312] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 528.266427][T29312] ext4 filesystem being mounted at /2682/bus supports timestamps until 2038 (0x7fffffff) [ 528.327639][T29327] netlink: 84 bytes leftover after parsing attributes in process `syz.3.13407'. [ 528.522489][T29316] loop1: detected capacity change from 0 to 40427 [ 528.576830][T29316] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 528.584873][T29316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 528.601216][T29316] F2FS-fs (loop1): invalid crc value [ 528.615651][T29316] F2FS-fs (loop1): Found nat_bits in checkpoint [ 528.622438][ T60] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 528.642968][T29316] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 528.649817][T29316] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 528.664036][T29316] attempt to access beyond end of device [ 528.664036][T29316] loop1: rw=2051, want=131072, limit=40427 [ 528.667830][ T26] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 528.675707][T29316] F2FS-fs (loop1): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 528.784080][T29369] netlink: 'syz.1.13426': attribute type 5 has an invalid length. [ 528.910973][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 528.976315][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.996746][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.006771][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 529.015717][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.023936][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.043503][ T60] usb 4-1: config 0 descriptor?? [ 529.048304][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.050362][T29392] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 529.058075][ T26] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 529.075621][T29392] SELinux: security_context_str_to_sid(Eá…) failed for (dev cgroup2, type cgroup2) errno=-22 [ 529.092518][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.101509][ T26] usb 5-1: config 0 descriptor?? [ 529.401698][T29406] netlink: 512 bytes leftover after parsing attributes in process `syz.2.13444'. [ 529.443166][ T400] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 529.500405][ T60] logitech 0003:046D:C294.00CC: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 529.512198][ T60] logitech 0003:046D:C294.00CC: no inputs found [ 529.555556][ T26] steelseries_srws1 0003:1038:1410.00CD: unknown main item tag 0xd [ 529.564226][ T26] steelseries_srws1 0003:1038:1410.00CD: item fetching failed at offset 6/7 [ 529.576597][ T26] steelseries_srws1 0003:1038:1410.00CD: parse failed [ 529.589562][ T26] steelseries_srws1: probe of 0003:1038:1410.00CD failed with error -22 [ 529.675728][ T400] usb 2-1: Using ep0 maxpacket: 8 [ 529.686694][ T26] usb 4-1: USB disconnect, device number 31 [ 529.705484][T29424] loop0: detected capacity change from 0 to 40427 [ 529.742860][T29424] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 529.749072][T29424] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 529.770662][ T60] usb 5-1: USB disconnect, device number 26 [ 529.782164][T29424] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 529.787116][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.804595][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.812414][T29424] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 529.815699][ T400] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 529.821501][T29424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 529.830547][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.859850][ T400] usb 2-1: config 0 descriptor?? [ 529.868729][ T294] attempt to access beyond end of device [ 529.868729][ T294] loop0: rw=2049, want=45104, limit=40427 [ 530.311896][ T400] logitech 0003:046D:C24F.00CE: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 530.330486][ T400] logitech 0003:046D:C24F.00CE: no inputs found [ 530.384180][T29477] netlink: 'syz.2.13475': attribute type 5 has an invalid length. [ 530.562275][ T400] usb 2-1: USB disconnect, device number 18 [ 530.822742][T29525] loop4: detected capacity change from 0 to 40427 [ 530.897404][T29525] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 530.904879][T29525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 530.914988][T29525] F2FS-fs (loop4): invalid crc value [ 530.922233][T29525] F2FS-fs (loop4): Found nat_bits in checkpoint [ 530.944993][T29525] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 530.951885][T29525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 530.973200][T29525] attempt to access beyond end of device [ 530.973200][T29525] loop4: rw=2051, want=131072, limit=40427 [ 530.984390][T29525] F2FS-fs (loop4): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 531.387755][T29579] loop2: detected capacity change from 0 to 128 [ 531.402898][T29551] loop1: detected capacity change from 0 to 40427 [ 531.411712][T29551] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 531.417545][T29579] EXT4-fs (loop2): Test dummy encryption mode enabled [ 531.418405][T29551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 531.436950][ T400] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 531.442648][T29579] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 531.457477][T29579] ext4 filesystem being mounted at /2629/bus supports timestamps until 2038 (0x7fffffff) [ 531.458599][T29551] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 531.497746][T29551] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 531.504619][T29551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 531.537593][ T293] attempt to access beyond end of device [ 531.537593][ T293] loop1: rw=2049, want=45104, limit=40427 [ 531.567816][ T60] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 531.636099][T29589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13525'. [ 531.697851][ T400] usb 5-1: Using ep0 maxpacket: 16 [ 531.809937][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.820672][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 531.825511][ T400] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.838193][ T400] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 531.847026][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.857305][ T400] usb 5-1: config 0 descriptor?? [ 531.884536][ T30] kauditd_printk_skb: 938 callbacks suppressed [ 531.884551][ T30] audit: type=1400 audit(2000067236.449:71673): avc: denied { ioctl } for pid=29558 comm="syz.4.13511" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 531.902801][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 531.940440][ T30] audit: type=1400 audit(2000067236.502:71674): avc: denied { ioctl } for pid=29570 comm="syz.3.13518" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 531.968130][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.979050][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.988632][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 531.997455][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.007459][ T60] usb 4-1: config 0 descriptor?? [ 532.033648][ T30] audit: type=1400 audit(2000067236.610:71675): avc: denied { ioctl } for pid=29570 comm="syz.3.13518" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.106890][ T30] audit: type=1400 audit(2000067236.685:71676): avc: denied { ioctl } for pid=29558 comm="syz.4.13511" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.154688][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 532.266389][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.276038][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 532.284788][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.294003][ T6] usb 2-1: config 0 descriptor?? [ 532.313307][ T30] audit: type=1400 audit(2000067236.910:71677): avc: denied { ioctl } for pid=29590 comm="syz.1.13526" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.338385][ T30] audit: type=1400 audit(2000067236.910:71678): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.363198][ T30] audit: type=1400 audit(2000067236.910:71679): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.363951][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.393962][ T30] audit: type=1400 audit(2000067236.910:71680): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.394638][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.420778][ T30] audit: type=1400 audit(2000067236.910:71681): avc: denied { ioctl } for pid=29558 comm="syz.4.13511" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.426013][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.457675][ T30] audit: type=1400 audit(2000067237.060:71682): avc: denied { ioctl } for pid=29570 comm="syz.3.13518" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.457704][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.489146][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.496881][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.503551][ T60] logitech 0003:046D:C24F.00D0: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 532.514722][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.521196][ T60] logitech 0003:046D:C24F.00D0: no inputs found [ 532.527408][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.535045][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.541637][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.548089][ T400] kye 0003:0458:5015.00CF: unknown main item tag 0x0 [ 532.555319][ T400] kye 0003:0458:5015.00CF: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 532.566038][ T400] kye 0003:0458:5015.00CF: tablet-enabling feature report not found [ 532.573794][ T400] kye 0003:0458:5015.00CF: tablet enabling failed [ 532.583254][ T400] usb 5-1: USB disconnect, device number 27 [ 532.685774][ T60] usb 4-1: USB disconnect, device number 32 [ 532.742507][ T6] logitech 0003:046D:C295.00D1: item fetching failed at offset 0/3 [ 532.750424][ T6] logitech 0003:046D:C295.00D1: parse failed [ 532.756273][ T6] logitech: probe of 0003:046D:C295.00D1 failed with error -22 [ 532.939869][ T60] usb 2-1: USB disconnect, device number 19 [ 533.475360][T29615] xt_hashlimit: size too large, truncated to 1048576 [ 533.752453][T29617] loop2: detected capacity change from 0 to 40427 [ 533.844717][T29617] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 533.850887][T29617] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 533.880929][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13547'. [ 533.939293][T29617] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 533.943043][T29624] loop1: detected capacity change from 0 to 40427 [ 534.049838][T29617] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 534.062443][T29617] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 534.096248][T29671] xt_hashlimit: size too large, truncated to 1048576 [ 534.109879][T29624] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 534.130851][ T291] attempt to access beyond end of device [ 534.130851][ T291] loop2: rw=2049, want=45104, limit=40427 [ 534.140329][T29624] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 534.174622][T29624] F2FS-fs (loop1): Found nat_bits in checkpoint [ 534.203516][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13565'. [ 534.255322][T29624] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 534.267457][T29624] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 534.379887][ T293] attempt to access beyond end of device [ 534.379887][ T293] loop1: rw=2049, want=45104, limit=40427 [ 534.411323][T29693] loop2: detected capacity change from 0 to 256 [ 534.701255][T29714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13578'. [ 534.767546][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.774811][T29716] loop1: detected capacity change from 0 to 512 [ 534.787995][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.795900][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.811501][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.818800][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.827651][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.844771][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.852627][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.853693][T29716] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.13580: casefold flag without casefold feature [ 534.860632][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.879863][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.887225][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.894428][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.901654][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.908842][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.918168][T29716] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.13580: couldn't read orphan inode 16 (err -117) [ 534.927523][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.937229][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.947171][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.954191][T29716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 534.954416][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.972674][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.979896][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 534.986762][T29716] ext4 filesystem being mounted at /2596/file1 supports timestamps until 2038 (0x7fffffff) [ 534.987077][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.004617][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.012192][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.019719][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.026948][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.035040][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.042249][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.065740][T29726] loop0: detected capacity change from 0 to 512 [ 535.071905][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.079072][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.086377][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.095366][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.102614][ T6] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 535.115676][ T6] hid-generic 0000:0000:0000.00D2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.134691][T29726] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 535.156408][T29726] EXT4-fs (loop0): invalid journal inode [ 535.161895][T29726] EXT4-fs (loop0): can't get journal size [ 535.201124][T29726] EXT4-fs (loop0): 1 truncate cleaned up [ 535.232266][T29726] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 535.300397][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13591'. [ 535.310801][T29748] loop2: detected capacity change from 0 to 256 [ 535.325316][T29726] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 535.411491][T29748] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 545.273002][ T30] kauditd_printk_skb: 446 callbacks suppressed [ 545.273018][ T30] audit: type=1400 audit(2000067250.815:72129): avc: denied { read write } for pid=295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.753029][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 628.759810][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29755 [ 628.767004][ C0] (detected by 0, t=10003 jiffies, g=112717, q=2419) [ 628.773600][ C0] task:syz.3.13597 state:R running task stack:26256 pid:29755 ppid: 292 flags:0x00004000 [ 628.784188][ C0] Call Trace: [ 628.787315][ C0] [ 628.790093][ C0] __schedule+0xcd4/0x1590 [ 628.794346][ C0] ? irqentry_exit+0x30/0x40 [ 628.798767][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 628.804410][ C0] ? irqentry_exit+0x30/0x40 [ 628.808836][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 628.814480][ C0] ? irqentry_exit+0x30/0x40 [ 628.818903][ C0] ? bpf_internal_load_pointer_neg_helper+0x186/0x200 [ 628.825503][ C0] ? bpf_skb_load_helper_8_no_cache+0x241/0x300 [ 628.831577][ C0] ? __kasan_check_read+0x11/0x20 [ 628.836442][ C0] ? bpf_test_timer_continue+0x140/0x460 [ 628.841908][ C0] ? bpf_test_run+0x652/0xa10 [ 628.846422][ C0] ? convert___skb_to_skb+0x570/0x570 [ 628.851627][ C0] ? eth_type_trans+0x2e4/0x620 [ 628.856315][ C0] ? eth_get_headlen+0x240/0x240 [ 628.861086][ C0] ? convert___skb_to_skb+0x44/0x570 [ 628.866207][ C0] ? bpf_prog_test_run_skb+0xb41/0x1420 [ 628.871594][ C0] ? anon_inode_getfd+0x33/0x40 [ 628.876289][ C0] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 628.882005][ C0] ? __kasan_check_write+0x14/0x20 [ 628.886952][ C0] ? fput_many+0x160/0x1b0 [ 628.891206][ C0] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 628.896933][ C0] ? bpf_prog_test_run+0x3b0/0x630 [ 628.901878][ C0] ? bpf_prog_query+0x220/0x220 [ 628.906568][ C0] ? selinux_bpf+0xd2/0x100 [ 628.910905][ C0] ? security_bpf+0x82/0xb0 [ 628.915248][ C0] ? __sys_bpf+0x525/0x760 [ 628.919498][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 628.924710][ C0] ? __kasan_check_write+0x14/0x20 [ 628.929652][ C0] ? switch_fpu_return+0x15f/0x2e0 [ 628.934601][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 628.939027][ C0] ? x64_sys_call+0x87f/0x9a0 [ 628.943544][ C0] ? do_syscall_64+0x3b/0xb0 [ 628.947964][ C0] ? clear_bhb_loop+0x35/0x90 [ 628.952483][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.958389][ C0] [ 629.032704][ T17] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P29755 } 10029 jiffies s: 25121 root: 0x0/T [ 629.044394][ T17] rcu: blocking rcu_node structures (internal RCU debug): [ 643.057034][ T30] audit: type=1400 audit(2000067255.557:72130): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 670.048908][ T31] INFO: task jbd2/sda1-8:64 blocked for more than 123 seconds. [ 670.064131][ T31] Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 681.193372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.787459][ T30] audit: type=1400 audit(2000067255.557:72131): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 717.920121][ T31] task:jbd2/sda1-8 state:D stack:25680 pid: 64 ppid: 2 flags:0x00004000 [ 724.474937][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 202s! [ 724.483633][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 200s! [ 724.492517][ C0] Showing busy workqueues and worker pools: [ 724.498220][ C0] workqueue events: flags=0x0 [ 724.502731][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.502769][ C0] pending: kfree_rcu_monitor [ 724.502799][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 724.502839][ C0] pending: vmstat_shepherd, psi_avgs_work [ 724.502870][ C0] workqueue events_long: flags=0x0 [ 724.533390][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 724.533432][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 724.533492][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.533528][ C0] pending: br_fdb_cleanup [ 724.533549][ C0] workqueue events_unbound: flags=0x2 [ 724.566837][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 724.566872][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 724.566916][ C0] workqueue events_power_efficient: flags=0x80 [ 724.587242][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 724.587280][ C0] pending: neigh_periodic_work, neigh_periodic_work, gc_worker, check_lifetime [ 724.587337][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.587370][ C0] pending: wg_ratelimiter_gc_entries [ 724.587392][ C0] workqueue mm_percpu_wq: flags=0x8 [ 724.621897][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.621935][ C0] pending: vmstat_update [ 724.621960][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.621993][ C0] pending: vmstat_update [ 724.622015][ C0] workqueue kblockd: flags=0x18 [ 724.650363][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=4/256 refcnt=5 [ 724.650401][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_requeue_work [ 724.650472][ C0] workqueue wg-kex-wg0: flags=0x6 [ 724.673284][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 724.673321][ C0] pending: wg_packet_handshake_send_worker [ 724.673349][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 724.691426][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.691462][ C0] pending: wg_packet_encrypt_worker [ 724.691489][ C0] workqueue wg-kex-wg1: flags=0x6 [ 724.709134][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 724.709166][ C0] pending: wg_packet_handshake_send_worker [ 724.709190][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 724.727275][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 724.727310][ C0] pending: wg_packet_encrypt_worker [ 724.727338][ C0] workqueue wg-kex-wg0: flags=0x6 [ 724.744979][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 724.745013][ C0] pending: wg_packet_handshake_send_worker [ 724.745047][ C0] workqueue wg-kex-wg2: flags=0x6 [ 724.762846][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 724.762877][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 724.762919][ C0] workqueue wg-kex-wg0: flags=0x6 [ 724.783601][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 724.783636][ C0] pending: wg_queued_expired_zero_key_material, wg_packet_handshake_send_worker [ 724.783682][ C0] workqueue wg-kex-wg2: flags=0x6 [ 724.804689][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 724.804721][ C0] pending: wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material, wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 724.804800][ C0] workqueue wg-kex-wg1: flags=0x6 [ 724.831859][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 724.831893][ C0] pending: wg_queued_expired_zero_key_material, wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 727.204101][ T31] Call Trace: [ 728.156225][ T31] [ 732.907102][ T31] __schedule+0xccc/0x1590