last executing test programs: 3.651941177s ago: executing program 3: symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) read$FUSE(r0, 0x0, 0x0) 3.62894892s ago: executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)={0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100), 0x0, 0x44048041) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0x80}, {@in6=@loopback, 0x1, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec}, {0x0, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, '\x00\x00'}}]}, 0x140}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [{@obj_role}, {@smackfshat={'smackfshat', 0x3d, '\x8f^'}}, {@fowner_lt}, {@appraise}], 0x2c}) 3.236777547s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x12}]}}}]}, 0x44}}, 0x0) 3.2151864s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) 2.619932395s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 1.916510085s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001900)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) 1.88194067s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 1.861876523s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x63, 0x4) 1.848286245s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xe03}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x360, 0x11, 0x148, 0x360, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00'}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000d6040)={0x0, 0x0, "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", "c766d088c6bcc74a0be8cb08c90ff5a44a16d26c7dd9e9d2a132ee057ae239643557deb78cbaf2367dc3a4da11e6861116fd5de9561be29a9a82038ed63d198f456a41108bd0f22f6b5b71134d761c7505b121efbe37cad7b4b85d4b6c4f9d8306555edc195ff970c0cf7ad687203e4132ba8ba782f7b30747aae3acf1f64bd311fe1544c99b6ad099fd50e1681531cdce2ae0dbe205057e4a929ec2c10ff019a972c04dcbd266a4a76ecdba54c660a5b6e28663b769c272ec24253df06d5817b1f5959f75f6ff189497b3552f596003a318b96db4d33a82041f9fa63775ddbfeedb23194eaadcc5432bb304798ff60160e7450cbdb8bd202930ade5d7dc3adc10715a8acb509e679ebaf28446c3830bfe4b4ceb3721a4522c66565c4e34da83229fe9f5586627b83235c9e44eae6ddc1c8e951f2bae5bf382d08b56fb5beec128097fe172cd71c7cda47ca36eb5695df1258ac4720002d7dbd1be82bc2e3fb555198d15bbaca58326ac06a4c8a3136b99689a2c6676dbd26a10f2430609d38c62703db39e94965a1de959f2798f78505aa6f48e3b2b4df966e5db4dbb1b40f7f038107c22c44c1db746551207f3242cc85aa17e2550ac4af84340c9cb951bc5e2094e941b478c85e9f5ea4894748d0d6b3151d7ff3cfb28a56bd5e71beef0f57b6d8a4f0e491bebf7e6a1931d795ae5273953a6602137861de65d8d2380d116fc5d2db44c2a8afa3c6c25c2e86489c2ea05cfecc0bdb6697d3fc73f0ab507ae491e393ded27dc7f38df0eb745a9738d8eeb64dd2249db56399013beb2b68362bf7e46a5dce3987a271192aecfc856351982cd8385923d29c8eed12afff03a30c3c1ad50803a4b0ebfa7d98791b1d289cc28850aeea47f46b614b18187010749c2771f27e658ad58950eeb032a8d1aea89bf5993ce802f31dc2177302f931ebdbb9bb77f5e2e5ab955d7f929c3d79145a91127cfb4ed9c01d51591c262a5772a812736bade1ec16c19731ac7e909d64d806db0d08bce4fd330cda2db3fe0479f0c81761b72690d9426f64c3efd4cbbbe1f5b486d5413c8657d95a862a30d930357e8871e78c7c6def4eaa1b254832587f982c1e51e0f9c771f62aa162f417c3bb77fa544e2bfd64b003195f7986bb9aac7028cee1128a9e09fd886452d22696269b105b288ff0f1f82ed958c4da9b7e44a048b045e9a04c1abd4f66a8b09a466a7730d98d323f9dce3bb7318ed82fb387c10ade572258d7874150427bb6c35f528b51edd71165db17c7ff9ff2ff5dd24d758974bd6424c2f292165e65e194e42f309a0cc604048fdd659c4e6e598f010e245602a7f6105368a145ab557038de65e3627e27b5970c2addcb95a65761010921c549d31b9f12b7d0bb720d1bd9639bebd204e6522296cbd89bf1b6bb731a246000fb146c063737a0143075a3d44acf730d86b31a1317facd3a8b056c73a5b5df967ad6f2511bf2235b46d476f4908914717dc2caa94866c0aab3e8abd4fe76d0956a481dee87cb6d618b0e68960341851519a382c13a0c7406ba3bf8707919cbc5866d4bf852c06df7bb90d1fbfb34178b9d82ee994412ed097dfcf15cc8e6c765fcd568a8c771cabfa7dcef5314557b64d9b0c4ea4c55782cd49d12ff9c4e18d9341274d6c97428f3eabb5b2579da31efd732f6ebc7341bccf34afb54e67c5c18c265f9e6911eca883c3d620c9b3d29096e164cb6fc5de639beb672a8c5a0fe4401687fa9f27d75e5d415b6dbfd287b2443bf5de12863a680fe2adeba71ff81851efcf9554058d34b9efaf8a75ec3efd7f6de0a179b84b732a06dfeb83edbd1eff8c58cda207953d950a55cdf1bc8394b445cc30912b323cfd9d771ebdca754118a2ab7b7dc4530ee6eb1fd15d5b68e324c90e8e720e72021516fca248809061bea6ae009291366fa30eb1528b5f7923dbd02d9b9e7a17a891cf3c32a7b936035dd7e7cb60b4a3d8e7c7204b50840e11bb428d2dd58da9b1a393e8879ff847e3a55ec4b52f449dddc8fa6c3b916276e6401b40376cef84d81c8c546c96a2a22e235b0d3330674837275b3e531bf6dbd25a6049597b4ccc5fc07146d25846c47f760807f243e3dbe28b57579d1fb50f2dc2b12ce5ac1ca7d05d8c363992972b1efd1a7d420e3ba7a04f6dfbfb2e9b2999e4b22f18922a5f521a9f889f9a58329e27ffcee6d803cca62882096dd2e223e5017ae6c99050e34e97fb8165de84d9d731e6febd5c0f37ea5dce5b0d577b8896907dc5d4e73a4e132952a25074a35b78956b897102ed10b50a7053414e3fb069ccf048df803e65de1ffad6ecade958e1d14af63f5ac0b0cb15d93e863b38014ddf89817c52ccbe4f1771856f33bd8d64b53d2075a98b64c261891d48bcb84a997edd8ad756f7850981878173cc2e1fce4d14dbc66373ceff9129ab141fd81a5b065244a2745f38e017f6710be2876d3ba0b0ead6d097f8c7dc8e667717b0fd111b8257acb79a66a82c5d8650610042a36ee9fe997cefabe57b133f8ed735b528922d8939b64ff877d5fe224a63f35cb5bf435098297ed2e215f1bf52536de8c8808cca3eabb66768918fac96c7e1c664fb887586f068ae418ff369403865361e1227c51143977846cc0ab9032d5093d986601219da756f0802d8dc183db2a0dbe6750c032a4e603bbce95bd62e0c5eaff524beeae7157cfbe975c8c8a8317d0d269d7b876a8dfdad698cf8fb51b07a19f08a05ff41a6daa43a3643e2cb9ca0b22ec4cb93841c8e79d85e2b65c94c1908402cde1d698c66281833d90dd34652fa9f7aaf7a417b1b60cece5c53cd55db7733ee1da55618371fa83841c18ff098287d2dddbf647a499b5bc51606705f93a26fdf3887f055782fa2989818b3d7e782bfae216b8801c7c871d07fd5307964d984a060baa1ff871fd313523e403ec6b615099dcce5f6dd92535cc3189817ec5ed1877e0e228799f3c0e92ccb4bd70e8815286d22a297380ccec62dfbd7638434388f69d34ceb37c7b4c706e89e56ea788cb578a54339c78aa78b7877706f51c8dbb45be407f7f489bdc5562db851f15f2adced4e3bcb6414f66adaa64c8108aef3255ad897a1775a7bc49a5077d9470b97b55fec3a8fb904f6dd87b7852714351db836ce8094d198e92b9f79a579b6e5f9880c5e5ccf6b8623ee1f87f62c27234595b90a3bf14630390d54978ccfa3bb00b56a707115684f912da8747f1c554e659ea3874bc93cab24780ed3bebaf9127ffab78e7e755efab6240c6446d2a634979a7584de570058f21de49fad4ad56a2bc942d519dadf9f15441f35c5ad796667ffe06d64ddbeb921b9d4dbc8952808e1283336a88830c550463a8ecc8e7a7d7214c2ea114e7db41f0d5404308d8c1661c2c9202345630dc6d7116adcfb0baabbdc4ea223161bdd7c66ddcbe45938d254a5f3079b6e608619695c1d0f7eb6ede89f62deb6e90df4075fab130b839f1bd5b8369e6f0fe7446535c7c7a00ab3cd6baacf3962aa97bcdcd3f5c46a2602faab2abb611de1d08e814502ce860328ab0ab773f473d8ca55fbebb7c7b973394dc0c01d2397389eb0bd3109a54806e9934505b5ab164bbaa285d410731020cf8313313128a3d943140a50ded720d8c3393f5d17211be59e772d9031dfab99cc46ae4715b600fab8cf264f70b2f589c10859496e99ed51f988d75706ae255ed6f79445bf44e7ad78197e38bf443a5c3898e819af238b21b8d35ee85fed66b310392c93804bebd816ee849fe3847d946610b7c27c6a1fab643621191552a8a2b221b458a9339800a96e393f7f75e3d1b70959d3b3158e3462206f4635a7f51d07cc1555c20476eff6dbba355b827690b8d8ab3f8c8389a7d79b0c6c1d661d8b823f83e34f137229353f47554a6534bbefdeaf060fc358116a8d54d873bb2077635288f805aebfd8ecc0bfd6910449c2222c731a98b4c50f9219755781807f90128148a5f2ef3bcf4fb0800d8c969a2455ed3c4900b2bd75722d40aac98450d6bdbcc14cbc74f0866bc1664d18280bd3bc12db685150a7472bf1dd7be7fc819844c2bec3b9dfaf56a08ab57fcc85cb7aad3c9538cd0a0e23599d928c0b7eff336eb8939fa82d99ea1b6ff76b4da6c00ce8a8d4a1185fa2ec31090c683e90ce53ff92d9fa979645ff4a7a7a404edbff22091a2194c60d1156bacb280e1a470b0bd999318d095c9ebefab267aad401366f9b79e0d740d352f3a415e90e398c0f02a61a9a7460b0c8ecb49d721ed6f96229353e1cd18673298e07b1a624212fbf6c8d4484a20eaa32b99883f7b0f6823ad6644bf2ead6bc97cdccf4206be99d88e9ddf8e5a9b808c4ac54f84e3c1e228b335d7d2b17de559ad28b2c8476d1f6bc9d1f0117f8aa1d938d04f37242784f887982c8733440304cbadc67ad1d15d19b45207cd2f98ce98845f7e923e7212f036b2b8ac8736fcf2b69f8265fc5f3dca59afec06ec76071e4513863ed70642c56c36dad16abc1c413376148ff294af93f8d5396efe95718595abc58587c1b331a905b58db489385e73e8722d281ee733ad5199e5fe0d9aebb8a703903e85255a343a4c2b3e1b1957d5691589bc7973bb546a9c70c61222bac69e228b4cc93b72176135ddd17df7f5b2d22d5b788707e9c144ae997c5041e73d2fd41f1259a04007676e71737b79cde94d907c92c58eba041a279a1b5ef4cac8da886297ced602d40c18837712c42af9b4860646ca33cae0d73e1617b2b517fd012d382cfdb06b2ac7bce0726bb032ffd1a58cce6fe98c7ebcb0ac079e20008397b9b3e3f215e93bd7194976bae51f81b5f6c40a567a1c015ec742fba63aa9e7b1a7933ec5b8e01fb873b0a6e791de6567e780db7f5b402147f2ff9d21fb14a7ff9c795185156ccfb9f2eff4139ff5f854c99d33f789ccc5e52191c942842db88c93da29e06b9eee711afd62cebe7d2142702c60f67528912fb37625c0f4a7f98c589c3e86d58489def7e6825c0c518de72ee91f35d610a2008ed5875ae247fa6a79d15056370a0a52e6b7e5ed316752e9d254f0b6ca610da10a8752194555bd94641b19e2e8e5b3bbb8351e189414050a391956308fd63d45b5cfd9722f42e6438bb7f3a660565e34c8fb2e7ee54e08682b8f7a3fe9a7340f0ff7015d1edbcc7801108c268386e2b36bef497367acdd42e9c0728dca94771b5573d507372fe4d13aea95fc8f3d41e93188c0e10fd7d2aa79eef05e2182b20fc9f33b58c0caaea4af0bb86077d2d84dcf3633a026c6c26e6a6e5abe9ed9bed7871288b2bc245566e7080f46f7c08f7e81a8d8b6453acd4ae2903957bab54eda87f76379dcf380a7815732a3bbd15f6bf11e223202282e1e1c5b30ee2ade59b34df68c03d1a20d436ca6aac2777f166"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 1.794250773s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.753610789s ago: executing program 3: socket$inet6(0xa, 0x0, 0x9) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syslog(0x2, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x540009a9) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_read_part_table(0x5f1, &(0x7f0000000000)="$eJzs3DGIk1cAB/CX9MihRcTNzWCGiBQiZKtE0BA/JGBCsOjQ2rp5Q5ZzcoixGBCH5pbIURcdlIMz1UEnEUEQMXEQMh2KdqjKcUM5uCVwHCmh33W6Qu9oBuH3g4+8l/d//F/I/L7AFy0Z/hyNRokQwspv29/93WLp5Kl09XjtTAiJ8EMI4Y/s7K/jlUScGE3//Xkwnn+I5/mnU/M/LkbX2509+x+n118n4/Wr8fO5f+v8v/cufb39szIJhy4dfn5gONj3pBzu9I71ju6un7vYzRab3TfVRyfupRc2//fchPofFl7uvdaajdqXCzNLUeNjtJxcW41Oz9/OpeaatezKkTj304T66xtnU/fvvii2Pu3KvypXKp0H725mGqVnrSuDfubt8MaFOPd+ekIHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf3Xo0uHnB4aDfU/K4U7vWO/o7vq5i91ssdl9U3104l564WCcy02o/2Hh5d5rrdmofbkwsxQ1PkbLybXV6PT87VxqrlnLrhyJc4kt9v4cRqPmTkoXpv4Z1jfOpu7ffVFsfdqVf1WuVDoP3t3MNErPWlcG/czb4Y0Lce799E6KAAAAAAAAAAAAAAAAAAAA4L8pnTyVrh6vnRmPvw8hfDPz7dx4PIrvu2/eu998D8CH8ffJEPJPp+q/LEbX2509+x+n11//Huevxs/n/q3zW/V9NfmfxDb8FQAA//8hjI7g") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) syz_open_dev$evdev(&(0x7f0000001180), 0x75c, 0x0) close(0xffffffffffffffff) 1.703262226s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@clear_death, @request_death], 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000008740)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@fat=@uid}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@utf8no}, {@nonumtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8}], [{@appraise}, {@context={'context', 0x3d, 'system_u'}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.648990263s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 953.909713ms ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x40000000}, 0x1c) 913.564419ms ago: executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 862.912846ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='track_foreign_dirty\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) 844.855958ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000013c0)={&(0x7f0000000140)='track_foreign_dirty\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) 794.400866ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) 790.614867ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@typedef={0x3, 0x2, 0x0, 0x13, 0x4}, @restrict={0x3}, @typedef={0x4}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x43}, 0x20) 766.7834ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) 760.945781ms ago: executing program 1: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) creat(&(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 746.346763ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000540)) timer_delete(0x0) 723.925956ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@journal_dev={'journal_dev', 0x3d, 0x1f}}, {@noacl}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dax}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@orlov}]}, 0x4, 0x775, &(0x7f0000000d80)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_open_dev$usbmon(&(0x7f0000000040), 0x71cb, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x31) 712.948878ms ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000f00)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) 632.972549ms ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x63, 0x4) 606.766213ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 602.408593ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 508.445837ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 469.397572ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@clear_death, @request_death], 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000008740)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@fat=@uid}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@rodir}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@utf8no}, {@nonumtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8}], [{@appraise}, {@context={'context', 0x3d, 'system_u'}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 0s ago: executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2=0xe0000008, @local}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @broadcast}, 0xc) close(r2) kernel console output (not intermixed with test programs): device number 21 [ 200.195678][ T5384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.205728][ T5384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.285673][ T5384] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.294577][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.302407][ T5384] usb 4-1: SerialNumber: syz [ 200.597688][ T5384] usb 4-1: 0:2 : does not exist [ 200.603894][ T5384] usb 4-1: USB disconnect, device number 20 [ 200.676744][ T6995] loop2: detected capacity change from 0 to 256 [ 200.699409][ T28] audit: type=1326 audit(1718577880.784:13027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a627cea9 code=0x7ffc0000 [ 200.738798][ T28] audit: type=1326 audit(1718577880.784:13028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a627cea9 code=0x7ffc0000 [ 200.763052][ T28] audit: type=1326 audit(1718577880.784:13029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a627cea9 code=0x7ffc0000 [ 200.788517][ T28] audit: type=1326 audit(1718577880.784:13030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a627cea9 code=0x7ffc0000 [ 200.814120][ T28] audit: type=1326 audit(1718577880.804:13031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a627cea9 code=0x7ffc0000 [ 200.839314][ T28] audit: type=1326 audit(1718577880.814:13032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa4a627cea9 code=0x7ffc0000 [ 200.863463][ T28] audit: type=1326 audit(1718577880.814:13033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4a627a627 code=0x7ffc0000 [ 200.887555][ T28] audit: type=1326 audit(1718577880.814:13034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4a6240309 code=0x7ffc0000 [ 200.911627][ T28] audit: type=1326 audit(1718577880.814:13035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4a627a627 code=0x7ffc0000 [ 200.937141][ T28] audit: type=1326 audit(1718577880.814:13036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4a6240309 code=0x7ffc0000 [ 200.965725][ T332] usbhid 2-1:0.0: can't add hid device: -71 [ 200.973075][ T332] usbhid: probe of 2-1:0.0 failed with error -71 [ 200.981179][ T332] usb 2-1: USB disconnect, device number 15 [ 201.870182][ T7033] bpf_get_probe_write_proto: 10 callbacks suppressed [ 201.870211][ T7033] syz-executor.3[7033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.875542][ T5384] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.877135][ T7033] syz-executor.3[7033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.922224][ T7037] loop3: detected capacity change from 0 to 1024 [ 201.943345][ T7037] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 201.954662][ T7037] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #4: comm syz-executor.3: blocks 32-33 from inode overlap system zone [ 202.033606][ T7037] EXT4-fs (loop3): failed to initialize system zone (-117) [ 202.041567][ T7037] EXT4-fs (loop3): mount failed [ 203.175467][ C0] sched: RT throttling activated [ 203.464401][ T5384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.474718][ T5384] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.509481][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.575707][ T5384] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.584865][ T5384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.592623][ T5384] usb 3-1: SerialNumber: syz [ 203.636005][ T5384] usb 3-1: bad CDC descriptors [ 203.811393][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.840744][ T5384] usb 3-1: USB disconnect, device number 22 [ 204.439683][ T7142] loop1: detected capacity change from 0 to 256 [ 204.449773][ T7142] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x17691978, utbl_chksum : 0xe619d30d) [ 204.980428][ T7183] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.990318][ T350] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.249927][ T7207] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.351787][ T7221] loop3: detected capacity change from 0 to 256 [ 205.355626][ T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.370236][ T350] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.399956][ T7221] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 205.413139][ T7221] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006005) [ 205.483901][ T350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.493132][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.501291][ T350] usb 3-1: SerialNumber: syz [ 205.556164][ T350] usb 3-1: bad CDC descriptors [ 205.650799][ T7237] fuse: Bad value for 'fd' [ 205.840858][ T332] usb 3-1: USB disconnect, device number 23 [ 205.971491][ T7239] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.048617][ T28] kauditd_printk_skb: 4885 callbacks suppressed [ 206.048641][ T28] audit: type=1326 audit(1718577886.134:17922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896c47cea9 code=0x7ffc0000 [ 206.055236][ T7246] loop3: detected capacity change from 0 to 256 [ 206.078932][ T28] audit: type=1326 audit(1718577886.134:17923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896c47cea9 code=0x7ffc0000 [ 206.089716][ T7246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x17691978, utbl_chksum : 0xe619d30d) [ 206.109409][ T28] audit: type=1326 audit(1718577886.134:17924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f896c47cea9 code=0x7ffc0000 [ 206.145155][ T28] audit: type=1326 audit(1718577886.134:17925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f896c47cee3 code=0x7ffc0000 [ 206.174408][ T28] audit: type=1326 audit(1718577886.134:17926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f896c47bbef code=0x7ffc0000 [ 206.198244][ T28] audit: type=1326 audit(1718577886.134:17927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f896c47cf37 code=0x7ffc0000 [ 206.222172][ T28] audit: type=1326 audit(1718577886.134:17928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f896c47baa0 code=0x7ffc0000 [ 206.246273][ T28] audit: type=1326 audit(1718577886.134:17929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f896c47cc0b code=0x7ffc0000 [ 206.286475][ T28] audit: type=1326 audit(1718577886.164:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f896c47bd9a code=0x7ffc0000 [ 206.310418][ T28] audit: type=1326 audit(1718577886.164:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f896c47bd9a code=0x7ffc0000 [ 206.568938][ T7250] loop1: detected capacity change from 0 to 40427 [ 206.577048][ T7250] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 206.584725][ T7250] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 206.596763][ T7250] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.645831][ T7250] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 206.660190][ T7250] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 206.667475][ T7250] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.698945][ T2537] syz-executor.1: attempt to access beyond end of device [ 206.698945][ T2537] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 206.755965][ T334] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.244221][ T7281] fuse: Bad value for 'fd' [ 207.987492][ T7291] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (2954) [ 208.005706][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 208.017200][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 208.028505][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.041506][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.050666][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.059244][ T334] usb 3-1: config 0 descriptor?? [ 208.075637][ T7263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.077589][ T7293] loop1: detected capacity change from 0 to 256 [ 208.094136][ T7293] FAT-fs (loop1): Directory bread(block 64) failed [ 208.096291][ T7295] overlayfs: statfs failed on './file0' [ 208.101641][ T7293] FAT-fs (loop1): Directory bread(block 65) failed [ 208.112341][ T7293] FAT-fs (loop1): Directory bread(block 66) failed [ 208.118966][ T7293] FAT-fs (loop1): Directory bread(block 67) failed [ 208.125379][ T7293] FAT-fs (loop1): Directory bread(block 68) failed [ 208.131684][ T7293] FAT-fs (loop1): Directory bread(block 69) failed [ 208.138139][ T7293] FAT-fs (loop1): Directory bread(block 70) failed [ 208.144520][ T7293] FAT-fs (loop1): Directory bread(block 71) failed [ 208.151261][ T7293] FAT-fs (loop1): Directory bread(block 72) failed [ 208.157991][ T7293] FAT-fs (loop1): Directory bread(block 73) failed [ 208.163252][ T7299] loop3: detected capacity change from 0 to 256 [ 208.173755][ T7299] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x17691978, utbl_chksum : 0xe619d30d) [ 208.503912][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.513843][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.071274][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.086291][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.100522][ T7312] fuse: Bad value for 'fd' [ 209.111033][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.138146][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.170663][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.188425][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.198528][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.206552][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.213955][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.221322][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.228804][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.236075][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.243216][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.250447][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.257646][ T334] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 209.265036][ T334] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 209.273359][ T334] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 209.304002][ T332] usb 3-1: USB disconnect, device number 24 [ 209.315188][ T7336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.348685][ T7341] device dummy0 entered promiscuous mode [ 209.354355][ T7341] device dummy0 left promiscuous mode [ 210.344116][ T7371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.417754][ T7380] loop2: detected capacity change from 0 to 256 [ 210.433275][ T7380] FAT-fs (loop2): Unrecognized mount option "utf8ª0" or missing value [ 210.893606][ T7399] loop1: detected capacity change from 0 to 1024 [ 210.990515][ T7399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.215478][ C0] bridge0: port 3(syz_tun) entered learning state [ 214.286329][ T2537] EXT4-fs (loop1): unmounting filesystem. [ 215.184105][ T28] kauditd_printk_skb: 4617 callbacks suppressed [ 215.184125][ T28] audit: type=1400 audit(1718577895.264:22549): avc: denied { relabelfrom } for pid=7444 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=48036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.219269][ T28] audit: type=1400 audit(1718577895.274:22550): avc: denied { relabelto } for pid=7444 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=48036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 215.280797][ T7454] loop2: detected capacity change from 0 to 512 [ 215.300546][ T7454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 215.312812][ T7454] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz-executor.2: Unimplemented hash flags: 0x0001 [ 215.355681][ T7454] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 215.926760][ T350] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 215.940426][ T7472] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 216.043237][ T7477] syz-executor.0[7477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.043327][ T7477] syz-executor.0[7477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.315879][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.344949][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.355215][ T350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.374828][ T350] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 216.384381][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.424445][ T350] usb 3-1: config 0 descriptor?? [ 216.689250][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.733451][ T7454] device wireguard0 entered promiscuous mode [ 217.155766][ T350] usbhid 3-1:0.0: can't add hid device: -71 [ 217.161797][ T350] usbhid: probe of 3-1:0.0 failed with error -71 [ 217.229461][ T350] usb 3-1: USB disconnect, device number 25 [ 218.410140][ T6143] EXT4-fs (loop2): unmounting filesystem. [ 219.268290][ T7546] syz-executor.3[7546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.268438][ T7546] syz-executor.3[7546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.747507][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.035670][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.042925][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.050537][ T7568] device bridge_slave_0 entered promiscuous mode [ 220.060456][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.067427][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.074749][ T7568] device bridge_slave_1 entered promiscuous mode [ 220.519145][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.527801][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.544576][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.554412][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.562599][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.569508][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.577628][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.586188][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.594422][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.601303][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.611438][ T1082] device bridge_slave_1 left promiscuous mode [ 220.618672][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.626293][ T1082] device bridge_slave_0 left promiscuous mode [ 220.632370][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.641065][ T1082] device veth1_macvtap left promiscuous mode [ 220.647213][ T1082] device veth0_vlan left promiscuous mode [ 220.765517][ T334] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.894684][ T7568] device veth0_vlan entered promiscuous mode [ 220.925828][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.934179][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.954398][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.961870][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.971311][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.979005][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.987120][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.996177][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.005009][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.113997][ T7593] Invalid ELF header magic: != ELF [ 221.165859][ T28] audit: type=1400 audit(1718577901.194:22551): avc: denied { module_load } for pid=7590 comm="syz-executor.2" path="/sys/kernel/notes" dev="sysfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 221.260796][ T7568] device veth1_macvtap entered promiscuous mode [ 221.265626][ T334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.280543][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.294759][ T334] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 221.304929][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.306176][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.313689][ T334] usb 2-1: config 0 descriptor?? [ 221.324974][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.334239][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.342871][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.366111][ T334] rndis_host: probe of 2-1:0.0 failed with error -22 [ 221.509305][ T28] audit: type=1400 audit(1718577901.594:22552): avc: denied { create } for pid=7616 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.954397][ T28] audit: type=1400 audit(1718577902.034:22553): avc: denied { map } for pid=7588 comm="syz-executor.1" path="socket:[48721]" dev="sockfs" ino=48721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 221.994508][ T28] audit: type=1400 audit(1718577902.074:22554): avc: denied { create } for pid=7626 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 222.667307][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.227200][ T7658] Invalid ELF header magic: != ELF [ 223.629325][ T19] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 223.648573][ T966] usb 2-1: USB disconnect, device number 16 [ 223.798427][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.902131][ T7684] overlayfs: failed to clone upperpath [ 224.285609][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 224.297025][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 224.784147][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.798866][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.809388][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.819051][ T19] usb 3-1: config 0 descriptor?? [ 224.835628][ T7651] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 225.019874][ T28] audit: type=1400 audit(1718577905.104:22555): avc: denied { ioctl } for pid=7713 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.225638][ T40] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 225.276869][ T19] plantronics 0003:047F:FFFF.002C: unknown main item tag 0xd [ 225.286647][ T19] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 225.297467][ T19] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 225.465601][ T40] usb 4-1: Using ep0 maxpacket: 8 [ 225.725648][ T40] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 225.736386][ T40] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 225.749543][ T40] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.872879][ T7762] loop4: detected capacity change from 0 to 512 [ 225.880532][ T7762] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.898738][ T7762] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz-executor.4: iget: bad i_size value: -6917529027641081756 [ 225.912522][ T7762] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 225.925098][ T7762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.950883][ T7568] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 4: comm syz-executor.4: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=65, rec_len=12, size=4096 fake=1 [ 225.971592][ T7568] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 65: padding at end of block bitmap is not set [ 225.988228][ T7568] Quota error (device loop4): write_blk: dquota write failed [ 225.995766][ T40] usb 4-1: string descriptor 0 read error: -22 [ 226.001889][ T40] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.003326][ T7767] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 226.011397][ T7568] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 226.021211][ T28] audit: type=1400 audit(1718577906.104:22556): avc: denied { relabelto } for pid=7766 comm="syz-executor.1" name="file0" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 226.031189][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.104385][ T28] audit: type=1400 audit(1718577906.184:22557): avc: denied { rmdir } for pid=2537 comm="syz-executor.1" name="file0" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 226.108251][ T40] usb 4-1: 0:2 : does not exist [ 226.149827][ T7568] EXT4-fs (loop4): unmounting filesystem. [ 226.355852][ T40] usb 4-1: USB disconnect, device number 21 [ 226.592116][ T7780] tipc: Failed to remove unknown binding: 66,1,1/0:2798194492/2798194494 [ 226.600790][ T7780] tipc: Failed to remove unknown binding: 66,1,1/0:2798194492/2798194494 [ 226.633750][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.640896][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.648515][ T7779] device bridge_slave_0 entered promiscuous mode [ 226.658391][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.665605][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.673355][ T7779] device bridge_slave_1 entered promiscuous mode [ 226.735065][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.741977][ T7779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.749074][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.755844][ T7779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.789056][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.797745][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.805144][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.826144][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.834297][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.841201][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.856997][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.865108][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.871970][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.879317][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.892150][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.911171][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.925000][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.933010][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.940384][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.952448][ T7779] device veth0_vlan entered promiscuous mode [ 226.964774][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.974349][ T7779] device veth1_macvtap entered promiscuous mode [ 226.985092][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.006927][ T339] device bridge_slave_1 left promiscuous mode [ 227.013006][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.028190][ T339] device bridge_slave_0 left promiscuous mode [ 227.036223][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.045285][ T339] device veth1_macvtap left promiscuous mode [ 227.051329][ T339] device veth0_vlan left promiscuous mode [ 227.069140][ T28] audit: type=1400 audit(1718577907.154:22558): avc: denied { setopt } for pid=7799 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 227.093360][ T334] usb 3-1: USB disconnect, device number 26 [ 227.225361][ T7810] device pim6reg1 entered promiscuous mode [ 227.238736][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.644461][ T7821] device syzkaller0 entered promiscuous mode [ 227.836834][ T7830] loop2: detected capacity change from 0 to 40427 [ 227.847070][ T7830] F2FS-fs (loop2): Found nat_bits in checkpoint [ 227.885330][ T7830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.024631][ T7845] tipc: Failed to remove unknown binding: 66,1,1/0:4272698822/4272698824 [ 228.033088][ T7845] tipc: Failed to remove unknown binding: 66,1,1/0:4272698822/4272698824 [ 228.580940][ T7862] device syzkaller0 entered promiscuous mode [ 228.594864][ T7866] device pim6reg1 entered promiscuous mode [ 228.635636][ T28] audit: type=1400 audit(1718577908.704:22559): avc: denied { ioctl } for pid=7869 comm="syz-executor.0" path="socket:[51679]" dev="sockfs" ino=51679 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.667787][ T7872] loop4: detected capacity change from 0 to 512 [ 228.676878][ T7872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.694347][ T7872] fs-verity: sha512 using implementation "sha512-avx2" [ 228.709340][ T7779] EXT4-fs (loop4): unmounting filesystem. [ 228.727964][ T7878] loop4: detected capacity change from 0 to 512 [ 228.742662][ T7878] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 228.786422][ T7878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 228.803083][ T7878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 228.816563][ T7878] EXT4-fs (loop4): 1 orphan inode deleted [ 228.829422][ T7878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.922682][ T7880] loop1: detected capacity change from 0 to 40427 [ 228.974549][ T7880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 229.022826][ T7880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.424390][ T7779] EXT4-fs (loop4): unmounting filesystem. [ 229.575463][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 229.581964][ C0] bridge0: topology change detected, propagating [ 229.666611][ T7915] bridge0: port 3(gretap0) entered blocking state [ 229.673034][ T7915] bridge0: port 3(gretap0) entered disabled state [ 229.682676][ T7915] device gretap0 entered promiscuous mode [ 229.688924][ T7915] bridge0: port 3(gretap0) entered blocking state [ 229.695408][ T7915] bridge0: port 3(gretap0) entered forwarding state [ 229.732280][ T7915] device gretap0 left promiscuous mode [ 229.738294][ T7915] bridge0: port 3(gretap0) entered disabled state [ 230.009414][ T7920] loop1: detected capacity change from 0 to 512 [ 230.040783][ T7920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.051151][ T7924] SELinux: Context  is not valid (left unmapped). [ 230.110014][ T2537] EXT4-fs (loop1): unmounting filesystem. [ 230.407678][ T7938] loop2: detected capacity change from 0 to 512 [ 230.417198][ T7938] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 230.431470][ T7938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 230.443720][ T40] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.451584][ T2975] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 230.459182][ T7938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 230.474307][ T7938] EXT4-fs (loop2): 1 orphan inode deleted [ 230.480401][ T7938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.713300][ T6143] EXT4-fs (loop2): unmounting filesystem. [ 230.855900][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.866898][ T2975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.876905][ T2975] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 230.886034][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.895813][ T2975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.903772][ T40] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.920745][ T2975] usb 5-1: config 0 descriptor?? [ 230.926241][ T40] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 230.935521][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.974364][ T40] usb 4-1: config 0 descriptor?? [ 230.988069][ T2975] rndis_host 5-1:0.0: skipping garbage [ 230.994220][ T2975] rndis_host: probe of 5-1:0.0 failed with error -22 [ 231.030747][ T2975] cdc_acm 5-1:0.0: skipping garbage [ 231.069187][ T2975] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 231.098761][ T7950] overlayfs: unrecognized mount option "r [ 231.098761][ T7950] conntrack [ 231.098761][ T7950] conntrack [ 231.098761][ T7950] conntrack [ 231.098761][ T7950] connlimit [ 231.098761][ T7950] connbytes [ 231.098761][ T7950] comment [ 231.098761][ T7950] bpf [ 231.098761][ T7950] bpf [ 231.098761][ T7950] connmark [ 231.098761][ T7950] mark [ 231.098761][ T7950] icmp [ 231.098761][ T7950] socket [ 231.098761][ T7950] socket [ 231.098761][ T7950] socket [ 231.098761][ T7950] socket [ 231.098761][ T7950] quota2 [ 231.098761][ T7950] policy [ 231.098761][ T7950] multiport [ 231.098761][ T7950] length [ 231.098761][ T7950] l2tp [ 231.098761][ T7950] iprange [ 231.098761][ T7950] ttl [ 231.098761][ T7950] hashlimit [ 231.098761][ T7950] hashlimit [ 231.098761][ T7950] hashlimit [ 231.098761][ T7950] esp [ 231.098761][ T7950] ecn [ 231.098761][ T7950] tos [ 231.098761][ T7950] dscp [ 231.098761][ T7950] udplite [ 231.098761][ T7950] udp [ 231.098761][ T7950] tcp [ 231.191338][ T2975] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 231.197753][ T2975] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 231.206584][ T2975] usb 5-1: USB disconnect, device number 16 [ 231.231703][ T7956] loop1: detected capacity change from 0 to 512 [ 231.240032][ T7956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.264702][ T2537] EXT4-fs (loop1): unmounting filesystem. [ 232.202830][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.209679][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.219007][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.225815][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.232564][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.237033][ T28] audit: type=1400 audit(1718577912.314:22560): avc: denied { create } for pid=7968 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 232.239645][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.266766][ T40] wacom 0003:056A:0094.002D: unknown main item tag 0x0 [ 232.272217][ T28] audit: type=1400 audit(1718577912.354:22561): avc: denied { write } for pid=7968 comm="syz-executor.2" path="socket:[50599]" dev="sockfs" ino=50599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 232.273847][ T40] wacom 0003:056A:0094.002D: Using device in hidraw-only mode [ 232.298550][ T28] audit: type=1400 audit(1718577912.354:22562): avc: denied { nlmsg_read } for pid=7968 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 232.306602][ T40] wacom 0003:056A:0094.002D: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 232.371632][ T332] usb 4-1: USB disconnect, device number 22 [ 232.392093][ T7977] loop4: detected capacity change from 0 to 2048 [ 232.406868][ T7980] overlayfs: unrecognized mount option "/file0" or missing value [ 232.436425][ T7977] loop4: p1 < > p2 p3 < p5 > p4 [ 232.441278][ T7977] loop4: partition table partially beyond EOD, truncated [ 232.448591][ T7977] loop4: p1 start 4278190080 is beyond EOD, truncated [ 232.455253][ T7977] loop4: p2 start 16908800 is beyond EOD, truncated [ 232.462232][ T7977] loop4: p4 start 11326 is beyond EOD, truncated [ 232.468522][ T7977] loop4: p5 start 16908800 is beyond EOD, truncated [ 232.537610][ T28] audit: type=1400 audit(1718577912.624:22563): avc: denied { getattr } for pid=7989 comm="syz-executor.4" name="[io_uring]" dev="anon_inodefs" ino=51842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.453804][ T8032] loop2: detected capacity change from 0 to 512 [ 235.505407][ T8032] EXT4-fs (loop2): 1 orphan inode deleted [ 235.515578][ T8032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 235.546412][ T8032] ext4 filesystem being mounted at /root/syzkaller-testdir600815426/syzkaller.RvkKB2/101/file1 supports timestamps until 2038 (0x7fffffff) [ 235.640641][ T6143] EXT4-fs (loop2): unmounting filesystem. [ 235.664070][ T28] audit: type=1400 audit(1718577915.744:22564): avc: denied { append } for pid=8040 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 235.665574][ T19] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.858995][ T8047] loop2: detected capacity change from 0 to 512 [ 235.891972][ T8047] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 235.919573][ T8047] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 235.935526][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 235.956239][ T8047] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 235.985596][ T334] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 235.991825][ T8047] EXT4-fs (loop2): 1 orphan inode deleted [ 236.009663][ T8047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 236.055857][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 236.085545][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 236.125130][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.154115][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.187465][ T19] usb 5-1: config 0 descriptor?? [ 236.205583][ T8020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.226159][ T19] hub 5-1:0.0: USB hub found [ 236.355659][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.371016][ T334] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.383349][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.389662][ T8067] loop3: detected capacity change from 0 to 256 [ 236.392914][ T334] usb 2-1: config 0 descriptor?? [ 236.407212][ T8067] FAT-fs (loop3): Directory bread(block 64) failed [ 236.413615][ T8067] FAT-fs (loop3): Directory bread(block 65) failed [ 236.420151][ T8067] FAT-fs (loop3): Directory bread(block 66) failed [ 236.429209][ T8067] FAT-fs (loop3): Directory bread(block 67) failed [ 236.435786][ T19] hub 5-1:0.0: 2 ports detected [ 236.436743][ T8067] FAT-fs (loop3): Directory bread(block 68) failed [ 236.446988][ T8067] FAT-fs (loop3): Directory bread(block 69) failed [ 236.453371][ T8067] FAT-fs (loop3): Directory bread(block 70) failed [ 236.459821][ T8067] FAT-fs (loop3): Directory bread(block 71) failed [ 236.466257][ T8067] FAT-fs (loop3): Directory bread(block 72) failed [ 236.468785][ T6143] EXT4-fs (loop2): unmounting filesystem. [ 236.472669][ T8067] FAT-fs (loop3): Directory bread(block 73) failed [ 236.526635][ T8073] loop3: detected capacity change from 0 to 256 [ 236.533197][ T8073] exfat: Deprecated parameter 'utf8' [ 236.538633][ T8073] exfat: Deprecated parameter 'utf8' [ 236.547055][ T8073] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 236.880050][ T334] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 236.966385][ T334] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002E/input/input42 [ 237.159398][ T334] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 237.330373][ T8083] tipc: Failed to remove unknown binding: 66,1,1/0:2080512979/2080512981 [ 237.338839][ T8083] tipc: Failed to remove unknown binding: 66,1,1/0:2080512979/2080512981 [ 237.638567][ T19] hub 5-1:0.0: set hub depth failed [ 237.687268][ T19] usb 5-1: USB disconnect, device number 17 [ 237.715871][ T334] usb 2-1: USB disconnect, device number 17 [ 237.739047][ T8086] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 237.745542][ T28] audit: type=1400 audit(1718577917.824:22565): avc: denied { nlmsg_write } for pid=8087 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 238.261701][ T8105] fuse: Bad value for 'fd' [ 238.266471][ T8105] fuse: Bad value for 'fd' [ 238.336487][ T8100] loop3: detected capacity change from 0 to 40427 [ 238.343650][ T8100] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 238.351311][ T8100] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 238.381858][ T8100] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.417271][ T8100] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 238.423899][ T8117] loop4: detected capacity change from 0 to 256 [ 238.424276][ T8100] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 238.431593][ T8117] exfat: Deprecated parameter 'utf8' [ 238.447906][ T8117] exfat: Deprecated parameter 'utf8' [ 238.460305][ T8117] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 238.472386][ T8093] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 238.482113][ T8093] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 238.707716][ T8124] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 239.486241][ T28] audit: type=1400 audit(1718577919.564:22566): avc: denied { sqpoll } for pid=8158 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 239.555722][ T19] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 239.965561][ T1043] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 239.982897][ T8170] loop4: detected capacity change from 0 to 40427 [ 239.994075][ T8170] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 240.001784][ T8170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.012552][ T8170] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.055154][ T966] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 240.066200][ T8170] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 240.073086][ T8170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 240.107267][ T8161] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 240.116811][ T8161] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 240.155528][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 240.425526][ T1043] usb 4-1: Using ep0 maxpacket: 32 [ 240.455943][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 240.467485][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 240.478585][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.487564][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.496533][ T19] usb 2-1: config 0 descriptor?? [ 240.515604][ T8136] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.536395][ T19] hub 2-1:0.0: USB hub found [ 240.545600][ T1043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 240.557081][ T1043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 240.568195][ T1043] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.577292][ T1043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.595707][ T1043] usb 4-1: config 0 descriptor?? [ 240.615942][ T966] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.626370][ T8142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.633441][ T966] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 240.643038][ T1043] hub 4-1:0.0: USB hub found [ 240.647589][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.664853][ T966] usb 3-1: config 0 descriptor?? [ 240.706089][ T966] rndis_host 3-1:0.0: skipping garbage [ 240.711528][ T966] rndis_host: probe of 3-1:0.0 failed with error -22 [ 240.718287][ T966] cdc_acm 3-1:0.0: skipping garbage [ 240.723377][ T966] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 240.731035][ T966] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 240.737270][ T966] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 240.835553][ T19] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 240.872896][ T1043] hub 4-1:0.0: 2 ports detected [ 240.915669][ T966] usb 3-1: USB disconnect, device number 27 [ 241.125596][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 241.131419][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 241.166425][ T19] usb 2-1: USB disconnect, device number 18 [ 241.365351][ T28] audit: type=1326 audit(1718577921.444:22567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.389374][ T28] audit: type=1326 audit(1718577921.444:22568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.413710][ T28] audit: type=1326 audit(1718577921.454:22569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.446442][ T28] audit: type=1326 audit(1718577921.454:22570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.454298][ T8199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8199 comm=syz-executor.4 [ 241.476352][ T28] audit: type=1326 audit(1718577921.454:22571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.483565][ T1043] hub 4-1:0.0: set hub depth failed [ 241.512950][ T28] audit: type=1326 audit(1718577921.454:22572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.543669][ T28] audit: type=1326 audit(1718577921.494:22573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.567467][ T1043] usb 4-1: USB disconnect, device number 23 [ 241.578120][ T28] audit: type=1326 audit(1718577921.504:22574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f221e47cea9 code=0x7ffc0000 [ 241.593872][ T8204] loop4: detected capacity change from 0 to 256 [ 241.609311][ T8204] exfat: Deprecated parameter 'utf8' [ 241.625622][ T8204] exfat: Deprecated parameter 'utf8' [ 241.631476][ T8206] loop1: detected capacity change from 0 to 256 [ 241.641653][ T8204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 241.759241][ T8213] loop1: detected capacity change from 0 to 128 [ 242.477017][ T8219] loop2: detected capacity change from 0 to 16 [ 242.507887][ T8219] erofs: (device loop2): mounted with root inode @ nid 36. [ 242.579921][ T8219] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 242.589920][ T8219] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 242.849856][ T8226] overlayfs: failed to clone upperpath [ 242.882808][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 242.882830][ T28] audit: type=1326 audit(1718577922.964:22584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 242.928420][ T28] audit: type=1326 audit(1718577922.964:22585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 242.952603][ T28] audit: type=1326 audit(1718577922.964:22586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 243.542816][ T28] audit: type=1326 audit(1718577922.964:22587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 243.567580][ T28] audit: type=1326 audit(1718577922.964:22588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 243.592048][ T28] audit: type=1326 audit(1718577922.984:22589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 243.616838][ T28] audit: type=1326 audit(1718577922.994:22590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0390e7cea9 code=0x7ffc0000 [ 243.640969][ T28] audit: type=1326 audit(1718577923.004:22591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0390e7a627 code=0x7ffc0000 [ 243.665271][ T28] audit: type=1326 audit(1718577923.004:22592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0390e40309 code=0x7ffc0000 [ 243.690272][ T1043] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.692975][ T28] audit: type=1326 audit(1718577923.004:22593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0390e7a627 code=0x7ffc0000 [ 243.766172][ T8253] bridge0: port 3(veth1_macvtap) entered blocking state [ 243.773140][ T8253] bridge0: port 3(veth1_macvtap) entered disabled state [ 244.115602][ T1043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.126633][ T1043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.136217][ T1043] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.145059][ T1043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.153593][ T1043] usb 5-1: config 0 descriptor?? [ 244.582614][ T8276] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 244.705541][ T5914] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 244.945503][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 245.065566][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 245.076879][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 245.087882][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.096711][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.105236][ T5914] usb 2-1: config 0 descriptor?? [ 245.125630][ T8263] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.135615][ T1043] usb 5-1: string descriptor 0 read error: -71 [ 245.146105][ T5914] hub 2-1:0.0: USB hub found [ 245.165608][ T1043] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #200: -71 [ 245.174249][ T1043] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71 [ 245.182188][ T1043] uclogic 0003:256C:006D.002F: failed probing pen v2 parameters: -71 [ 245.190074][ T1043] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 245.197540][ T1043] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 245.208451][ T1043] usb 5-1: USB disconnect, device number 18 [ 245.365611][ T5914] hub 2-1:0.0: 2 ports detected [ 245.494484][ T8298] loop2: detected capacity change from 0 to 256 [ 245.508365][ T8298] exfat: Deprecated parameter 'utf8' [ 245.515987][ T8298] exfat: Deprecated parameter 'utf8' [ 245.527999][ T8298] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 245.640756][ T8294] overlayfs: failed to clone lowerpath [ 245.673459][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.681187][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.688602][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.230458][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.237784][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.244980][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.252264][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.259410][ T8311] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.418784][ T8316] loop3: detected capacity change from 0 to 16 [ 246.432184][ T8316] erofs: (device loop3): mounted with root inode @ nid 36. [ 246.455754][ T8316] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 246.466796][ T8316] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 246.585942][ T5914] hub 2-1:0.0: set hub depth failed [ 246.666658][ T8319] loop2: detected capacity change from 0 to 512 [ 246.717797][ T8319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.761734][ T8319] EXT4-fs (loop2): 1 truncate cleaned up [ 246.768321][ T8319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 246.786482][ T5914] usb 2-1: USB disconnect, device number 19 [ 246.815803][ T6143] EXT4-fs (loop2): unmounting filesystem. [ 246.831500][ T8340] loop2: detected capacity change from 0 to 256 [ 247.305575][ T1043] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 247.340796][ T8351] Dead loop on virtual device ip6_vti0, fix it urgently! [ 247.437609][ T6143] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 247.445338][ T6143] FAT-fs (loop2): Filesystem has been set read-only [ 247.452109][ T6143] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 247.496832][ T2537] bridge0: port 3(syz_tun) entered disabled state [ 247.515311][ T2537] device syz_tun left promiscuous mode [ 247.520942][ T2537] bridge0: port 3(syz_tun) entered disabled state [ 247.615648][ T966] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 247.681674][ T8379] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 247.690913][ T8379] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 247.740106][ T1043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.760975][ T1043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.770761][ T1043] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.779723][ T1043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.790283][ T1043] usb 4-1: config 0 descriptor?? [ 247.792506][ T8367] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.803226][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.810915][ T8367] device bridge_slave_0 entered promiscuous mode [ 250.156312][ T966] usb 5-1: Using ep0 maxpacket: 32 [ 250.221057][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.228455][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.235787][ T966] usb 5-1: device descriptor read/all, error -71 [ 250.244578][ T8367] device bridge_slave_1 entered promiscuous mode [ 250.255737][ T1043] usbhid 4-1:0.0: can't add hid device: -71 [ 250.272596][ T1043] usbhid: probe of 4-1:0.0 failed with error -71 [ 250.301049][ T1043] usb 4-1: USB disconnect, device number 24 [ 250.765373][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.772361][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.779841][ T8385] device bridge_slave_0 entered promiscuous mode [ 250.788406][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.795301][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.802869][ T8385] device bridge_slave_1 entered promiscuous mode [ 250.810530][ T339] device bridge_slave_1 left promiscuous mode [ 250.816590][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.823839][ T339] device bridge_slave_0 left promiscuous mode [ 250.829880][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.837690][ T339] device veth1_macvtap left promiscuous mode [ 250.843529][ T339] device veth0_vlan left promiscuous mode [ 250.989865][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.996985][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.004106][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.010937][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.033968][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.042205][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.050313][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.058178][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.076534][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.084742][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.092766][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.099613][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.106978][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.115137][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.147240][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.154301][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.161878][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.189319][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.198289][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.222953][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.230457][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.239191][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.247452][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.255863][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.262815][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.270617][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.279396][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.295710][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.302628][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.328012][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.338874][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.350195][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.358364][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.363113][ T8436] loop4: detected capacity change from 0 to 256 [ 251.385633][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.393817][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.404766][ T8367] device veth0_vlan entered promiscuous mode [ 251.417870][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.420453][ T8444] loop4: detected capacity change from 0 to 512 [ 251.426388][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.436158][ T8444] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 251.453081][ T8444] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 251.455760][ T339] tipc: Left network mode [ 251.465058][ T332] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 251.477185][ T8444] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 251.480828][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.496321][ T8444] EXT4-fs (loop4): 1 orphan inode deleted [ 251.502459][ T8444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.505901][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.518428][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.576694][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.585297][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.593715][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.604650][ T8367] device veth1_macvtap entered promiscuous mode [ 251.618209][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.625959][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.633948][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.642717][ T8385] device veth0_vlan entered promiscuous mode [ 251.650764][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.659031][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.675059][ T8385] device veth1_macvtap entered promiscuous mode [ 251.690032][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.698850][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.708212][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.715928][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.724783][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.733575][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.742111][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.769405][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.784514][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.795132][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.804686][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.865666][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.881489][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.891601][ T332] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.901201][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.915921][ T332] usb 4-1: config 0 descriptor?? [ 252.208396][ T339] device bridge_slave_1 left promiscuous mode [ 252.214623][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.223502][ T339] device bridge_slave_0 left promiscuous mode [ 252.229952][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.238316][ T339] device veth1_macvtap left promiscuous mode [ 252.244248][ T339] device veth0_vlan left promiscuous mode [ 252.302449][ T7779] EXT4-fs (loop4): unmounting filesystem. [ 252.305540][ T8482] loop1: detected capacity change from 0 to 1024 [ 252.327219][ T8482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.351677][ T8367] EXT4-fs (loop1): unmounting filesystem. [ 252.367047][ T8492] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 252.376628][ T8492] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 252.393409][ T8492] loop1: detected capacity change from 0 to 2048 [ 252.438057][ T8492] Alternate GPT is invalid, using primary GPT. [ 252.444619][ T8492] loop1: p1 p2 p3 [ 252.561105][ T8493] device veth0_vlan left promiscuous mode [ 252.575764][ T8493] device veth0_vlan entered promiscuous mode [ 252.726901][ T4820] bridge0: port 3(syz_tun) entered disabled state [ 252.734952][ T4820] device syz_tun left promiscuous mode [ 252.740558][ T4820] bridge0: port 3(syz_tun) entered disabled state [ 252.777361][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 252.924812][ T8529] loop2: detected capacity change from 0 to 512 [ 252.935635][ T332] usb 4-1: string descriptor 0 read error: -71 [ 252.955605][ T332] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 252.969854][ T332] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 252.979412][ T8529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.983943][ T332] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 252.996552][ T332] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 253.002869][ T8529] ext4 filesystem being mounted at /root/syzkaller-testdir1668711621/syzkaller.nHqhwD/7/bus supports timestamps until 2038 (0x7fffffff) [ 253.003989][ T332] uclogic: probe of 0003:256C:006D.0030 failed with error -71 [ 253.023113][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 253.023134][ T28] audit: type=1400 audit(1718577933.104:22655): avc: denied { setattr } for pid=8528 comm="syz-executor.2" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.027217][ T332] usb 4-1: USB disconnect, device number 25 [ 253.063725][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 253.100624][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.109088][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.116438][ T8530] device bridge_slave_0 entered promiscuous mode [ 253.132409][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.135641][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.139441][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.149413][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 253.157241][ T8530] device bridge_slave_1 entered promiscuous mode [ 253.165065][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.179778][ T24] usb 2-1: config 0 descriptor?? [ 253.190817][ T8552] 9pnet: p9_errstr2errno: server reported unknown error œæçæÿÎsŧ‘̼§6µ‡’ÎRý†ýï [ 253.293047][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.299976][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.307188][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.314036][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.340038][ T28] audit: type=1400 audit(1718577933.424:22656): avc: denied { listen } for pid=8559 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.387815][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.395809][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.418563][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.452244][ T5384] usb 2-1: USB disconnect, device number 20 [ 253.459900][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.465618][ T8565] loop3: detected capacity change from 0 to 512 [ 253.469931][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.480672][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.488668][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.498620][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.505518][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.675982][ T8565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 253.746400][ T8565] ext4 filesystem being mounted at /root/syzkaller-testdir87804767/syzkaller.qav0DP/150/bus supports timestamps until 2038 (0x7fffffff) [ 253.830715][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.839295][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.857272][ T6772] EXT4-fs (loop3): unmounting filesystem. [ 253.865727][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.874095][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.892589][ T8530] device veth0_vlan entered promiscuous mode [ 253.909057][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.918413][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.940609][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.952269][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.960949][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.970441][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.981151][ T339] device bridge_slave_1 left promiscuous mode [ 253.988550][ T28] audit: type=1400 audit(1718577934.074:22657): avc: denied { write } for pid=8571 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 254.012019][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.019669][ T339] device bridge_slave_0 left promiscuous mode [ 254.025974][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.051794][ T339] device veth1_macvtap left promiscuous mode [ 254.058215][ T339] device veth0_vlan left promiscuous mode [ 254.261622][ T8530] device veth1_macvtap entered promiscuous mode [ 254.301564][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.310539][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.318825][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.327542][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.335913][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.442730][ T8577] device veth0_vlan left promiscuous mode [ 254.467232][ T8577] device veth0_vlan entered promiscuous mode [ 254.555261][ T8584] device veth0_vlan left promiscuous mode [ 254.585220][ T8584] device veth0_vlan entered promiscuous mode [ 254.671188][ T8596] input: syz0 as /devices/virtual/input/input43 [ 254.724657][ T8596] loop2: detected capacity change from 0 to 512 [ 254.756816][ T8596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.885315][ T8596] EXT4-fs (loop2): 1 truncate cleaned up [ 254.890912][ T8596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.029378][ T8604] loop0: detected capacity change from 0 to 256 [ 255.350191][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 255.375505][ T8624] serio: Serial port pts0 [ 255.778346][ T8643] syz-executor.3[8643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.778448][ T8643] syz-executor.3[8643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.055486][ T8654] device veth0_vlan left promiscuous mode [ 256.086464][ T8654] device veth0_vlan entered promiscuous mode [ 257.175654][ T332] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 257.276843][ T8696] device veth0_vlan left promiscuous mode [ 257.282901][ T8696] device veth0_vlan entered promiscuous mode [ 257.301108][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.314575][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.339263][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.416409][ T332] usb 4-1: Using ep0 maxpacket: 8 [ 257.555603][ T332] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 257.572766][ T332] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 257.596010][ T332] usb 4-1: config 135 has no interface number 0 [ 257.602134][ T332] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.775976][ T332] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 257.792859][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.811067][ T332] usb 4-1: Product: syz [ 257.815222][ T332] usb 4-1: Manufacturer: syz [ 257.831253][ T332] usb 4-1: SerialNumber: syz [ 257.886263][ T332] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 257.895517][ T332] usb 4-1: No valid video chain found. [ 258.089302][ T1043] usb 4-1: USB disconnect, device number 26 [ 258.104569][ T8719] input: syz1 as /devices/virtual/input/input44 [ 258.385498][ T350] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 258.485559][ T332] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 258.619664][ T8727] loop3: detected capacity change from 0 to 512 [ 258.626099][ T350] usb 2-1: Using ep0 maxpacket: 8 [ 258.647256][ T8727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.668061][ T8727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 258.678115][ T8727] ext4 filesystem being mounted at /root/syzkaller-testdir87804767/syzkaller.qav0DP/166/file1 supports timestamps until 2038 (0x7fffffff) [ 258.805567][ T350] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 258.813687][ T350] usb 2-1: config 179 has no interface number 0 [ 258.825599][ T350] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 258.844638][ T350] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 258.954930][ T350] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 259.058319][ T350] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 259.138379][ T332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.148002][ T332] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 259.157587][ T332] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.159551][ T350] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.208385][ T350] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 259.227658][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.245633][ T332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.254668][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.265599][ T8719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.272672][ T8719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.280118][ T332] usb 1-1: SerialNumber: syz [ 259.287236][ T350] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input45 [ 259.325360][ T8732] loop2: detected capacity change from 0 to 40427 [ 259.332781][ T8732] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 259.341330][ T8732] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 259.346081][ T332] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 259.357562][ T8732] F2FS-fs (loop2): Found nat_bits in checkpoint [ 259.403363][ T8732] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 259.419090][ T8732] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 259.426261][ T8732] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 259.497943][ T6772] EXT4-fs (loop3): unmounting filesystem. [ 259.504597][ T28] audit: type=1326 audit(1718577939.584:22658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.532404][ T28] audit: type=1326 audit(1718577939.614:22659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.571785][ T28] audit: type=1326 audit(1718577939.614:22660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.597507][ T28] audit: type=1326 audit(1718577939.614:22661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.641717][ T28] audit: type=1326 audit(1718577939.614:22662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.666486][ T28] audit: type=1326 audit(1718577939.614:22663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.691281][ T28] audit: type=1326 audit(1718577939.644:22664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29947cea9 code=0x7ffc0000 [ 259.740622][ T28] audit: type=1326 audit(1718577939.644:22665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe29947a627 code=0x7ffc0000 [ 259.770476][ T28] audit: type=1326 audit(1718577939.644:22666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe299440309 code=0x7ffc0000 [ 259.794728][ T28] audit: type=1326 audit(1718577939.644:22667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe29947a627 code=0x7ffc0000 [ 259.850749][ T966] usb 2-1: USB disconnect, device number 21 [ 259.855501][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 259.864840][ T966] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 259.996071][ T8750] loop2: detected capacity change from 0 to 256 [ 260.224817][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.246539][ T8763] tipc: Started in network mode [ 260.251248][ T8763] tipc: Node identity 7, cluster identity 6 [ 260.270104][ T8763] tipc: Node number set to 7 [ 260.274632][ T8763] tipc: Cannot configure node identity twice [ 260.517682][ T8774] syz-executor.1[8774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.517780][ T8774] syz-executor.1[8774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.153065][ T8779] loop1: detected capacity change from 0 to 128 [ 261.429433][ T966] usb 1-1: USB disconnect, device number 20 [ 261.661207][ T8792] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 261.748375][ T8796] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 261.770900][ T8788] loop3: detected capacity change from 0 to 40427 [ 261.778938][ T8788] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 261.786719][ T8788] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 261.796000][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.829804][ T8788] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.855508][ T966] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.955545][ T8788] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 261.977027][ T8788] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 261.991452][ T8788] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 262.545652][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.576029][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.596254][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.615888][ T966] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 262.635250][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.658129][ T966] usb 1-1: config 0 descriptor?? [ 262.784321][ T8824] loop3: detected capacity change from 0 to 512 [ 262.813813][ T8824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.866344][ T8824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.885317][ T8824] ext4 filesystem being mounted at /root/syzkaller-testdir87804767/syzkaller.qav0DP/175/file1 supports timestamps until 2038 (0x7fffffff) [ 262.982642][ T8837] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 263.005565][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.453810][ T966] prodikeys 0003:041E:2801.0031: unexpected long global item [ 263.465697][ T966] prodikeys 0003:041E:2801.0031: hid parse failed [ 263.472097][ T966] prodikeys: probe of 0003:041E:2801.0031 failed with error -22 [ 263.490455][ T8846] kernel profiling enabled (shift: 7) [ 263.496624][ T966] usb 1-1: USB disconnect, device number 21 [ 263.651089][ T6772] EXT4-fs (loop3): unmounting filesystem. [ 265.522907][ T8530] block device autoloading is deprecated and will be removed. [ 265.567669][ T8870] loop1: detected capacity change from 0 to 256 [ 265.574512][ T8870] FAT-fs (loop1): Unrecognized mount option "00000000000000000007ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿ18446744073709551615t‹ˆìä;×s™í·›nŒóÎE±sT]&QBÐç‡åÅÅ)A©êÏú Cô ß¾²Û\\nuâÐÕ–Ì\Udèڋõ„ŽNe Ñ&_œ&RÊF:Ü×\~NŠ‘" or missing value [ 265.599863][ T8875] loop0: detected capacity change from 0 to 2048 [ 265.621006][ T8875] EXT4-fs: test_dummy_encryption requires encrypt feature [ 265.667497][ T8881] loop2: detected capacity change from 0 to 512 [ 265.696010][ T8881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.752232][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.766532][ T8881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 265.775331][ T8881] ext4 filesystem being mounted at /root/syzkaller-testdir1668711621/syzkaller.nHqhwD/46/file1 supports timestamps until 2038 (0x7fffffff) [ 266.448268][ T8896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 267.143744][ T8907] loop1: detected capacity change from 0 to 2048 [ 267.281884][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 267.305596][ T40] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.390770][ T8917] loop0: detected capacity change from 0 to 256 [ 267.412895][ T8917] FAT-fs (loop0): Unrecognized mount option "00000000000000000007ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿ18446744073709551615t‹ˆìä;×s™í·›nŒóÎE±sT]&QBÐç‡åÅÅ)A©êÏú Cô ß¾²Û\\nuâÐÕ–Ì\Udèڋõ„ŽNe Ñ&_œ&RÊF:Ü×\~NŠ‘" or missing value [ 267.457184][ T8926] loop3: detected capacity change from 0 to 2048 [ 267.468489][ T8928] loop2: detected capacity change from 0 to 512 [ 267.477317][ T8926] EXT4-fs: test_dummy_encryption requires encrypt feature [ 267.486717][ T8928] EXT4-fs (loop2): orphan cleanup on readonly fs [ 267.495651][ T8928] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 267.524689][ T8928] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 267.555571][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 267.588765][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 267.588787][ T28] audit: type=1400 audit(1718577947.674:22812): avc: denied { watch } for pid=8930 comm="syz-executor.0" path="/root/syzkaller-testdir2914088555/syzkaller.GaFZ2J/24/file0/file0" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 267.638269][ T8928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.681805][ T8928] EXT4-fs (loop2): unmounting filesystem. [ 267.695586][ T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51350, setting to 1024 [ 267.716263][ T40] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 267.749375][ T40] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.766236][ T8941] loop2: detected capacity change from 0 to 512 [ 267.829165][ T8941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.907469][ T8941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.916391][ T8941] ext4 filesystem being mounted at /root/syzkaller-testdir1668711621/syzkaller.nHqhwD/50/file1 supports timestamps until 2038 (0x7fffffff) [ 267.935538][ T40] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 268.025995][ T40] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 268.045742][ T40] usb 2-1: Product: syz [ 268.049813][ T40] usb 2-1: Manufacturer: syz [ 268.054185][ T40] usb 2-1: SerialNumber: syz [ 268.085785][ T8910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.209757][ T40] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 268.571691][ T8973] tmpfs: Bad value for 'huge' [ 268.620965][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 268.675838][ T8975] device syzkaller0 entered promiscuous mode [ 269.040751][ T8984] loop2: detected capacity change from 0 to 512 [ 269.056397][ T8986] loop0: detected capacity change from 0 to 256 [ 270.360200][ T8984] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 270.374628][ T8984] EXT4-fs (loop2): Remounting filesystem read-only [ 270.381170][ T8984] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) [ 270.395731][ T8984] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 1 (level 1) [ 270.410508][ T2975] usb 2-1: USB disconnect, device number 22 [ 270.410552][ T8984] EXT4-fs (loop2): 1 truncate cleaned up [ 270.421712][ T8984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.727251][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 270.743540][ T28] audit: type=1326 audit(1718577950.824:22813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf807cea9 code=0x7ffc0000 [ 270.820466][ T9016] device syzkaller0 entered promiscuous mode [ 270.834299][ T28] audit: type=1326 audit(1718577950.824:22814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cf807cea9 code=0x7ffc0000 [ 270.925641][ T2975] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 271.045865][ T5384] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 271.053455][ T28] audit: type=1326 audit(1718577950.824:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf807cea9 code=0x7ffc0000 [ 271.077487][ T28] audit: type=1326 audit(1718577950.824:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0cf807cea9 code=0x7ffc0000 [ 271.101637][ T28] audit: type=1326 audit(1718577950.824:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf807cea9 code=0x7ffc0000 [ 271.295600][ T2975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.316734][ T2975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.336948][ T2975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.364221][ T2975] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 271.382823][ T2975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.400895][ T2975] usb 2-1: config 0 descriptor?? [ 271.416943][ T5384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.435477][ T5384] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.461231][ T5384] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.478860][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.526162][ T5384] usb 4-1: config 0 descriptor?? [ 271.616339][ T9028] device syzkaller0 entered promiscuous mode [ 271.796082][ T9034] device pim6reg1 entered promiscuous mode [ 271.824962][ T9036] device veth0_vlan left promiscuous mode [ 271.831810][ T9036] device veth0_vlan entered promiscuous mode [ 271.866593][ T9039] Invalid ELF header magic: != ELF [ 271.886712][ T2975] prodikeys 0003:041E:2801.0032: unexpected long global item [ 271.894145][ T2975] prodikeys 0003:041E:2801.0032: hid parse failed [ 271.900843][ T2975] prodikeys: probe of 0003:041E:2801.0032 failed with error -22 [ 271.996695][ T5384] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 272.016008][ T5384] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 272.023612][ T5384] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 272.046190][ T5384] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 272.166267][ T9044] loop0: detected capacity change from 0 to 512 [ 272.327112][ T9044] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 272.342294][ T9044] EXT4-fs (loop0): Remounting filesystem read-only [ 272.349049][ T9044] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 4278190080 (level 0) [ 272.365257][ T9044] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 272.378996][ T9044] EXT4-fs (loop0): 1 truncate cleaned up [ 272.384485][ T9044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 272.394784][ T5384] usb 2-1: USB disconnect, device number 23 [ 272.416610][ T966] usb 4-1: USB disconnect, device number 27 [ 272.806350][ T8530] EXT4-fs (loop0): unmounting filesystem. [ 272.950616][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.159776][ T9065] loop3: detected capacity change from 0 to 256 [ 273.638550][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.885564][ T5384] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 274.199084][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.268042][ T9112] loop0: detected capacity change from 0 to 256 [ 274.275672][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.287529][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.302245][ T9112] exFAT-fs (loop0): invalid fs_name [ 274.310357][ T5384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.331518][ T9112] exFAT-fs (loop0): failed to read boot sector [ 274.339627][ T5384] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 274.349515][ T9112] exFAT-fs (loop0): failed to recognize exfat type [ 274.364754][ T5384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.375899][ T5384] usb 3-1: config 0 descriptor?? [ 274.466959][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.601197][ T28] audit: type=1400 audit(1718577954.684:22818): avc: denied { mounton } for pid=9142 comm="syz-executor.1" path="/root/syzkaller-testdir2522650726/syzkaller.fZRg4i/71/file0" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 274.866736][ T5384] prodikeys 0003:041E:2801.0034: unexpected long global item [ 274.878643][ T5384] prodikeys 0003:041E:2801.0034: hid parse failed [ 274.891600][ T5384] prodikeys: probe of 0003:041E:2801.0034 failed with error -22 [ 275.070087][ T966] usb 3-1: USB disconnect, device number 28 [ 275.115508][ T332] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 275.485623][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.502472][ T332] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.521402][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.539483][ T332] usb 2-1: config 0 descriptor?? [ 275.790641][ T9169] loop0: detected capacity change from 0 to 40427 [ 275.811895][ T9169] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 275.826735][ T9169] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 275.835675][ T9186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=9186 comm=syz-executor.2 [ 275.866130][ T9169] F2FS-fs (loop0): invalid crc value [ 275.882982][ T9169] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.950377][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.974651][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.982319][ T9187] device bridge_slave_0 entered promiscuous mode [ 275.995402][ T9169] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 276.003018][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.003018][ T9169] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 276.003043][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.024850][ T9187] device bridge_slave_1 entered promiscuous mode [ 276.031872][ T332] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 276.046736][ T332] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0035/input/input46 [ 276.137752][ T332] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 276.534938][ T339] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 276.555941][ T339] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 276.709836][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.724228][ T9193] loop2: detected capacity change from 0 to 40427 [ 276.731262][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.738829][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.748343][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.757044][ T9193] F2FS-fs (loop2): project quota file already specified [ 276.764407][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.771301][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.778802][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.787159][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.795356][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.802249][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.809971][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.840378][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.858459][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.885973][ T1082] device bridge_slave_1 left promiscuous mode [ 276.892079][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.920067][ T1082] device bridge_slave_0 left promiscuous mode [ 276.939810][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.961204][ T1082] device veth1_macvtap left promiscuous mode [ 276.975548][ T1082] device veth0_vlan left promiscuous mode [ 277.137782][ T5914] usb 2-1: USB disconnect, device number 24 [ 277.164542][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.175869][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.199588][ T9187] device veth0_vlan entered promiscuous mode [ 277.206615][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.214856][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.223485][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.231666][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.248589][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.256152][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.263501][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.272037][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.282009][ T9187] device veth1_macvtap entered promiscuous mode [ 277.295288][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.303927][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.305542][ T5384] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 277.324548][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.333089][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.393863][ T9210] loop3: detected capacity change from 0 to 2048 [ 277.408083][ T9210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.431183][ T9210] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 277.446859][ T9210] EXT4-fs (loop3): Remounting filesystem read-only [ 277.480697][ T9187] EXT4-fs (loop3): unmounting filesystem. [ 277.500328][ T9216] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 277.509020][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=9216 comm=syz-executor.3 [ 277.522541][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9216 comm=syz-executor.3 [ 277.536217][ T9216] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.545324][ T9216] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.695742][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.712678][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.722869][ T5384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.736763][ T5384] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 277.745912][ T5384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.755495][ T5384] usb 3-1: config 0 descriptor?? [ 277.954294][ T9246] device veth0_vlan left promiscuous mode [ 277.960581][ T9246] device veth0_vlan entered promiscuous mode [ 277.968557][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.978081][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.991158][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.219184][ T5384] prodikeys 0003:041E:2801.0036: unexpected long global item [ 278.234790][ T5384] prodikeys 0003:041E:2801.0036: hid parse failed [ 278.248473][ T5384] prodikeys: probe of 0003:041E:2801.0036 failed with error -22 [ 278.320268][ T9256] loop0: detected capacity change from 0 to 2048 [ 278.360761][ T9258] loop1: detected capacity change from 0 to 128 [ 278.373086][ T9258] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.386363][ T9258] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.426828][ T5384] usb 3-1: USB disconnect, device number 29 [ 278.625516][ T5914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.660204][ T9280] loop1: detected capacity change from 0 to 256 [ 278.669929][ T9280] exfat: Deprecated parameter 'namecase' [ 278.678527][ T9280] exfat: Deprecated parameter 'utf8' [ 278.683693][ T9280] exfat: Deprecated parameter 'namecase' [ 278.694015][ T9280] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 278.724814][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.732203][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.739687][ T9277] device bridge_slave_0 entered promiscuous mode [ 278.752582][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.759601][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.767129][ T9277] device bridge_slave_1 entered promiscuous mode [ 278.828127][ T1082] device bridge_slave_1 left promiscuous mode [ 278.834140][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.842829][ T1082] device bridge_slave_0 left promiscuous mode [ 278.849276][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.859876][ T1082] device veth1_macvtap left promiscuous mode [ 278.866514][ T1082] device veth0_vlan left promiscuous mode [ 278.948081][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 279.066458][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51350, setting to 1024 [ 279.154391][ T5914] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 279.185504][ T5914] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.297600][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.304924][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.317307][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.325701][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.333746][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.340625][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.348253][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.356894][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.365060][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.371917][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.379126][ T5914] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 279.388171][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 279.396438][ T5914] usb 1-1: Product: syz [ 279.400495][ T5914] usb 1-1: Manufacturer: syz [ 279.404883][ T5914] usb 1-1: SerialNumber: syz [ 279.410342][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.421146][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.429089][ T9256] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 279.429441][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.444407][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.452919][ T5914] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 279.461443][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.479984][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.489067][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.498983][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.507124][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.515904][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.523345][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.532052][ T9277] device veth0_vlan entered promiscuous mode [ 279.544963][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.553626][ T9277] device veth1_macvtap entered promiscuous mode [ 279.564375][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.572691][ T1043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.583966][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.619036][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.795547][ T5384] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 279.925551][ T5914] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 280.045543][ T5384] usb 3-1: Using ep0 maxpacket: 32 [ 280.165535][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 280.175709][ T5384] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 280.184756][ T5384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.193622][ T5384] usb 3-1: config 0 descriptor?? [ 280.246027][ T5384] rndis_host: probe of 3-1:0.0 failed with error -22 [ 280.285782][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.296824][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.307495][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.316452][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.324953][ T5914] usb 2-1: config 0 descriptor?? [ 280.331164][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.397172][ T5914] hub 2-1:0.0: USB hub found [ 280.448446][ T966] usb 3-1: USB disconnect, device number 30 [ 280.595803][ T5914] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 280.885563][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 280.891523][ T5914] usbhid: probe of 2-1:0.0 failed with error -71 [ 280.925866][ T5914] usb 2-1: USB disconnect, device number 25 [ 281.044390][ T24] usb 1-1: USB disconnect, device number 22 [ 281.161579][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.218565][ T9336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9336 comm=syz-executor.0 [ 281.256318][ T9336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=9336 comm=syz-executor.0 [ 281.289426][ T9340] loop0: detected capacity change from 0 to 128 [ 281.316172][ T9340] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.341238][ T9332] loop2: detected capacity change from 0 to 40427 [ 281.349708][ T9332] F2FS-fs (loop2): invalid crc value [ 281.403065][ T9332] F2FS-fs (loop2): Found nat_bits in checkpoint [ 281.452142][ T9332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 281.895565][ T9354] loop1: detected capacity change from 0 to 256 [ 282.199359][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.199359][ T9356] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 282.214262][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.214262][ T9356] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 282.228803][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.228803][ T9356] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.243551][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.243551][ T9356] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 282.258003][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.258003][ T9356] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 282.272714][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.272714][ T9356] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 282.287016][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.287016][ T9356] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 282.301777][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.301777][ T9356] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 282.316103][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.316103][ T9356] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 282.330708][ T9356] syz-executor.2: attempt to access beyond end of device [ 282.330708][ T9356] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 282.688423][ T9361] loop0: detected capacity change from 0 to 512 [ 282.772824][ T9361] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters [ 282.797567][ T9361] EXT4-fs (loop0): 1 orphan inode deleted [ 282.807289][ T9361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.823005][ T339] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 282.866012][ T9361] ext4 filesystem being mounted at /root/syzkaller-testdir2914088555/syzkaller.GaFZ2J/63/file0 supports timestamps until 2038 (0x7fffffff) [ 282.898857][ T28] audit: type=1400 audit(1718577962.984:22819): avc: denied { mounton } for pid=9380 comm="syz-executor.4" path="/proc/9380/task" dev="proc" ino=58875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 283.539250][ T8530] EXT4-fs (loop0): unmounting filesystem. [ 283.559770][ T9409] device pim6reg1 entered promiscuous mode [ 283.707227][ T9425] loop3: detected capacity change from 0 to 1024 [ 283.718376][ T9425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 283.755675][ T9187] EXT4-fs (loop3): unmounting filesystem. [ 283.778125][ T9431] bridge0: port 3(syz_tun) entered blocking state [ 283.784476][ T9431] bridge0: port 3(syz_tun) entered disabled state [ 283.791398][ T9431] device syz_tun entered promiscuous mode [ 283.798452][ T9431] bridge0: port 3(syz_tun) entered blocking state [ 283.804698][ T9431] bridge0: port 3(syz_tun) entered forwarding state [ 283.820603][ T9431] net_ratelimit: 5 callbacks suppressed [ 283.820642][ T9431] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 283.875719][ T40] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 284.120900][ T9445] device pim6reg1 entered promiscuous mode [ 284.159724][ T9454] loop1: detected capacity change from 0 to 1024 [ 284.171127][ T9454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.191505][ T8367] EXT4-fs (loop1): unmounting filesystem. [ 284.211141][ T9458] loop2: detected capacity change from 0 to 1024 [ 284.221749][ T9458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.245627][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.262891][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.290143][ T40] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.309707][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.331479][ T40] usb 5-1: config 0 descriptor?? [ 284.430760][ T9465] loop1: detected capacity change from 0 to 512 [ 284.459805][ T9465] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 284.475312][ T9465] EXT4-fs (loop1): Remounting filesystem read-only [ 284.482324][ T9465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 284.541937][ T9465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 284.588845][ T9465] EXT4-fs (loop1): 1 truncate cleaned up [ 284.594415][ T9465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.898710][ T3922] kernel write not supported for file bpf-prog (pid: 3922 comm: kworker/1:8) [ 284.919013][ T9413] IPv6: sit1: Disabled Multicast RS [ 285.027134][ T9458] syz-executor.2 (9458) used greatest stack depth: 17672 bytes left [ 285.040968][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 285.114984][ T8367] EXT4-fs (loop1): unmounting filesystem. [ 285.163721][ T9489] device veth0_vlan left promiscuous mode [ 285.170224][ T9489] device veth0_vlan entered promiscuous mode [ 285.230385][ T9492] device pim6reg1 entered promiscuous mode [ 285.236573][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 285.242523][ T40] usbhid: probe of 5-1:0.0 failed with error -71 [ 285.254523][ T40] usb 5-1: USB disconnect, device number 21 [ 285.394085][ T3922] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 285.645654][ T3922] usb 4-1: Using ep0 maxpacket: 32 [ 285.765867][ T3922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.776820][ T3922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.786465][ T3922] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.795350][ T3922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.137557][ T3922] usb 4-1: config 0 descriptor?? [ 286.190160][ T3922] hub 4-1:0.0: USB hub found [ 286.222750][ T9513] loop2: detected capacity change from 0 to 2048 [ 286.237388][ T9513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 286.268976][ T9518] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 286.284040][ T9518] EXT4-fs (loop2): Remounting filesystem read-only [ 286.295984][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 286.405590][ T3922] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 286.641289][ T9534] loop2: detected capacity change from 0 to 512 [ 286.650028][ T9534] EXT4-fs (loop2): orphan cleanup on readonly fs [ 286.657239][ T9534] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 286.666179][ T9534] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 286.676492][ T9534] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 286.685341][ T9534] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 286.697811][ T9534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 64: padding at end of block bitmap is not set [ 286.712571][ T9534] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 286.721598][ T9534] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 286.730653][ T9534] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 286.740326][ T9534] EXT4-fs (loop2): 1 orphan inode deleted [ 286.764111][ T3922] usbhid 4-1:0.0: can't add hid device: -71 [ 286.770209][ T3922] usbhid: probe of 4-1:0.0 failed with error -71 [ 286.784594][ T9534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.800656][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 286.805954][ T3922] usb 4-1: USB disconnect, device number 28 [ 286.998425][ T9547] loop2: detected capacity change from 0 to 256 [ 287.229272][ T9557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.370463][ T9570] loop2: detected capacity change from 0 to 2048 [ 287.472892][ T9570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.680213][ T9570] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 287.703998][ T9570] EXT4-fs (loop2): Remounting filesystem read-only [ 287.759341][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 287.778412][ T9587] bridge0: port 3(syz_tun) entered blocking state [ 287.784771][ T9587] bridge0: port 3(syz_tun) entered disabled state [ 287.791818][ T9587] device syz_tun entered promiscuous mode [ 287.797752][ T9587] bridge0: port 3(syz_tun) entered blocking state [ 287.804017][ T9587] bridge0: port 3(syz_tun) entered forwarding state [ 287.812303][ T9587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 287.947241][ T9594] loop2: detected capacity change from 0 to 1024 [ 287.974735][ T9594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.996811][ T9585] loop1: detected capacity change from 0 to 40427 [ 288.014690][ T9585] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 288.029704][ T9585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 288.039118][ T9585] F2FS-fs (loop1): invalid crc value [ 288.053176][ T9585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 288.139738][ T9606] loop4: detected capacity change from 0 to 16 [ 288.161787][ T9606] erofs: (device loop4): mounted with root inode @ nid 36. [ 288.169389][ T9585] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 288.178913][ T9585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 288.189328][ T9606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 288.215935][ T9606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 288.229540][ T9606] incfs_lookup_dentry err:-117 [ 288.236407][ T9606] incfs: Can't find or create .index dir in ./file0 [ 288.245297][ T9606] incfs: mount failed -117 [ 288.921743][ T9616] loop4: detected capacity change from 0 to 2048 [ 288.949856][ T9616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.966703][ T9616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 288.991948][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 288.998149][ T9616] EXT4-fs (loop4): Remounting filesystem read-only [ 289.102342][ T339] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 289.115745][ T339] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 289.137959][ T9277] EXT4-fs (loop4): unmounting filesystem. [ 289.151928][ T9632] input: syz0 as /devices/virtual/input/input47 [ 289.199213][ T9638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.240015][ T9648] device pim6reg1 entered promiscuous mode [ 289.379146][ T9658] loop2: detected capacity change from 0 to 2048 [ 289.713387][ T9663] loop0: detected capacity change from 0 to 256 [ 289.821917][ T9658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 290.074895][ T9668] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.095804][ T9668] EXT4-fs (loop2): Remounting filesystem read-only [ 290.106463][ T9669] loop3: detected capacity change from 0 to 2048 [ 290.120135][ T8385] EXT4-fs (loop2): unmounting filesystem. [ 290.298174][ T9689] loop2: detected capacity change from 0 to 2048 [ 290.305837][ T9689] ext4: Unknown parameter 'noacl' [ 290.386804][ T9695] syz-executor.0[9695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.386900][ T9695] syz-executor.0[9695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.431534][ T9697] loop2: detected capacity change from 0 to 2048 [ 290.449643][ T3922] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 290.475699][ T9684] loop1: detected capacity change from 0 to 40427 [ 290.490072][ T9697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 290.492909][ T9684] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 290.519429][ T9684] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 290.565542][ T332] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 290.597913][ T9697] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.600913][ T9684] F2FS-fs (loop1): Found nat_bits in checkpoint [ 290.664406][ T9684] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 290.673113][ T9684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 290.715694][ T3922] usb 4-1: Using ep0 maxpacket: 32 [ 290.756943][ T9710] loop0: detected capacity change from 0 to 256 [ 290.954530][ T1082] ------------[ cut here ]------------ [ 290.960171][ T1082] kernel BUG at fs/ext4/inode.c:2749! [ 290.965593][ T3922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51350, setting to 1024 [ 290.983202][ T1082] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 290.989141][ T1082] CPU: 0 PID: 1082 Comm: kworker/u4:4 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 290.990620][ T3922] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 290.998850][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 290.998870][ T1082] Workqueue: writeback wb_workfn (flush-7:2) [ 291.024369][ T1082] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 291.029920][ T1082] Code: ce 80 ff 31 ff 89 de e8 b3 ce 80 ff 45 84 f6 75 2a e8 19 cc 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 05 cc 80 ff <0f> 0b e8 fe cb 80 ff e8 05 d8 0b ff e9 46 c3 ff ff e8 ef cb 80 ff [ 291.049254][ T3922] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.049361][ T1082] RSP: 0000:ffffc90000787000 EFLAGS: 00010293 [ 291.067944][ T1082] RAX: ffffffff81f4a7fb RBX: 0000008000000000 RCX: ffff888116e7a880 [ 291.075750][ T1082] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 291.083562][ T1082] RBP: ffffc90000787410 R08: ffffffff81f46f5b R09: ffffed10200df0c2 [ 291.091383][ T1082] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812af78000 [ 291.099183][ T1082] R13: ffff8881006f8748 R14: 000000c410000000 R15: ffffc900007872e0 [ 291.106995][ T1082] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 291.115759][ T1082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.122179][ T1082] CR2: 0000001b30847000 CR3: 000000012ef79000 CR4: 00000000003506b0 [ 291.129993][ T1082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.137803][ T1082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.145613][ T1082] Call Trace: [ 291.148746][ T1082] [ 291.151530][ T1082] ? __die_body+0x62/0xb0 [ 291.155685][ T1082] ? die+0x88/0xb0 [ 291.159240][ T1082] ? do_trap+0x103/0x330 [ 291.163321][ T1082] ? ext4_writepages+0x3fab/0x3fd0 [ 291.168267][ T1082] ? handle_invalid_op+0x95/0xc0 [ 291.173038][ T1082] ? ext4_writepages+0x3fab/0x3fd0 [ 291.177988][ T1082] ? exc_invalid_op+0x32/0x50 [ 291.182503][ T1082] ? asm_exc_invalid_op+0x1b/0x20 [ 291.187365][ T1082] ? ext4_writepages+0x70b/0x3fd0 [ 291.192307][ T1082] ? ext4_writepages+0x3fab/0x3fd0 [ 291.197257][ T1082] ? ext4_writepages+0x3fab/0x3fd0 [ 291.202207][ T1082] ? __kasan_check_write+0x14/0x20 [ 291.207148][ T1082] ? _raw_spin_lock+0xa4/0x1b0 [ 291.211744][ T1082] ? _raw_spin_trylock_bh+0x190/0x190 [ 291.216960][ T1082] ? __switch_to+0x62c/0x1190 [ 291.221469][ T1082] ? __switch_to+0x62c/0x1190 [ 291.226067][ T1082] ? ext4_read_folio+0x240/0x240 [ 291.230841][ T1082] ? sched_clock_cpu+0x71/0x2b0 [ 291.235528][ T1082] ? compat_start_thread+0x20/0x20 [ 291.240472][ T1082] ? __sched_clock_gtod_offset+0x100/0x100 [ 291.245609][ T3922] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 291.246124][ T1082] ? __schedule+0xcaf/0x1550 [ 291.256200][ T3922] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 291.260436][ T1082] ? ext4_read_folio+0x240/0x240 [ 291.268786][ T3922] usb 4-1: Product: syz [ 291.273371][ T1082] do_writepages+0x385/0x620 [ 291.277402][ T3922] usb 4-1: Manufacturer: syz [ 291.281786][ T1082] ? __writepage+0x130/0x130 [ 291.281807][ T1082] ? preempt_schedule+0xd9/0xe0 [ 291.286355][ T3922] usb 4-1: SerialNumber: syz [ 291.290646][ T1082] ? __kasan_check_read+0x11/0x20 [ 291.304705][ T1082] ? preempt_schedule_common+0xbe/0xf0 [ 291.309907][ T1082] ? preempt_schedule+0xd9/0xe0 [ 291.314603][ T1082] ? schedule_preempt_disabled+0x20/0x20 [ 291.315790][ T9669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.320064][ T1082] ? __schedule+0xcaf/0x1550 [ 291.331445][ T1082] ? preempt_schedule_thunk+0x16/0x18 [ 291.336505][ T3922] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 291.336650][ T1082] ? writeback_sb_inodes+0x6f1/0x1910 [ 291.348978][ T1082] __writeback_single_inode+0xdc/0xb80 [ 291.354273][ T1082] writeback_sb_inodes+0xb32/0x1910 [ 291.359385][ T1082] ? irqentry_exit+0x30/0x40 [ 291.363817][ T1082] ? _raw_spin_lock+0xa4/0x1b0 [ 291.368414][ T1082] ? queue_io+0x520/0x520 [ 291.372576][ T1082] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 291.377865][ T1082] ? __schedule+0xcaf/0x1550 [ 291.382295][ T1082] ? queue_io+0x3d0/0x520 [ 291.386459][ T1082] ? memset+0x35/0x40 [ 291.390278][ T1082] wb_writeback+0x3b9/0x9f0 [ 291.394619][ T1082] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 291.400430][ T1082] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 291.406419][ T1082] ? irqentry_exit+0x30/0x40 [ 291.410843][ T1082] ? sysvec_reschedule_ipi+0x80/0x160 [ 291.416161][ T1082] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 291.421814][ T1082] ? wb_workfn+0x38c/0x1030 [ 291.426153][ T1082] wb_workfn+0x399/0x1030 [ 291.430408][ T1082] ? inode_wait_for_writeback+0x280/0x280 [ 291.435952][ T1082] ? preempt_schedule+0xd9/0xe0 [ 291.440635][ T1082] ? __kasan_check_read+0x11/0x20 [ 291.445500][ T1082] ? preempt_schedule_common+0xbe/0xf0 [ 291.450896][ T1082] ? preempt_schedule+0xd9/0xe0 [ 291.455564][ T1082] ? schedule_preempt_disabled+0x20/0x20 [ 291.461035][ T1082] ? sysvec_reschedule_ipi+0x80/0x160 [ 291.466246][ T1082] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 291.471709][ T1082] ? preempt_schedule_thunk+0x16/0x18 [ 291.476916][ T1082] process_one_work+0x73d/0xcb0 [ 291.481609][ T1082] worker_thread+0xa60/0x1260 [ 291.486131][ T1082] kthread+0x26d/0x300 [ 291.490025][ T1082] ? worker_clr_flags+0x1a0/0x1a0 [ 291.494888][ T1082] ? kthread_blkcg+0xd0/0xd0 [ 291.499403][ T1082] ret_from_fork+0x1f/0x30 [ 291.503664][ T1082] [ 291.506522][ T1082] Modules linked in: [ 291.511604][ T8367] bio_check_eod: 38 callbacks suppressed [ 291.511623][ T8367] syz-executor.1: attempt to access beyond end of device [ 291.511623][ T8367] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 291.531886][ T1082] ---[ end trace 0000000000000000 ]--- [ 291.537357][ T1082] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 2024/06/16 22:46:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 291.543016][ T1082] Code: ce 80 ff 31 ff 89 de e8 b3 ce 80 ff 45 84 f6 75 2a e8 19 cc 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 05 cc 80 ff <0f> 0b e8 fe cb 80 ff e8 05 d8 0b ff e9 46 c3 ff ff e8 ef cb 80 ff [ 291.562558][ T1082] RSP: 0000:ffffc90000787000 EFLAGS: 00010293 [ 291.568621][ T332] usb 5-1: Using ep0 maxpacket: 32 [ 291.573583][ T1082] RAX: ffffffff81f4a7fb RBX: 0000008000000000 RCX: ffff888116e7a880 [ 291.605654][ T1082] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 291.613676][ T1082] RBP: ffffc90000787410 R08: ffffffff81f46f5b R09: ffffed10200df0c2 [ 291.653218][ T1082] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812af78000 [ 291.677176][ T1082] R13: ffff8881006f8748 R14: 000000c410000000 R15: ffffc900007872e0 [ 291.685614][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.693898][ T1082] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 291.707277][ T1082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.715183][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.716255][ T1082] CR2: 0000555556635858 CR3: 0000000137d21000 CR4: 00000000003506a0 [ 291.732757][ T332] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 291.741890][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.750591][ T332] usb 5-1: config 0 descriptor?? [ 291.755725][ T1082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.763525][ T1082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.774316][ T1082] Kernel panic - not syncing: Fatal exception [ 291.780591][ T1082] Kernel Offset: disabled [ 291.784819][ T1082] Rebooting in 86400 seconds..