last executing test programs: 5.229149644s ago: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x2c}}, 0x0) 5.207412807s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x10000000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2}) read(r2, &(0x7f0000000080)=""/22, 0x16) 5.178270251s ago: executing program 0: unshare(0x4040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) 5.169154973s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000140)={[{@nobarrier, 0x3d}, {@noblock_validity}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$eJzs3UFvG1kdAPD/OHGbtClJBYdSiVLRoqSC2klD24hDAQnBqRJQ7iUkThTFiaPYaZuoglR8ACSEAIkTJy5IfAAk1I+AkCrBfbW72tVqt9097GG3Xnlsd9PUbhLVsaP495Om897M2P//c+Nnv5knTwB962JEXIuI59VqtVYfbWzPNJZIImK7ftyzpw/naksS1eqdD5N0V61eO2xix3Oerj8khiLiFz+N+HXyatzy5tbybLFYWG/U85WVtXx5c+vq0srsYmGxsDo9PXVj5ubM9ZnJjrRzJCJu/fjdP/3+7z+59e/v3n/r7vsTv0ka22NHOzqt3vRs+lo0DUbE+mEE64GBRnuyvU4EAIB9aX7P/1ZEXInRGEi/zQEAAADHSfUHI/FZElFtYajl1pedbLdjaO/HAgAAAN2RSefAJplcYx7ASGQyuVx9Du/X4lSmWCpXvrNQ2lidr8+VHYtsZmGpWJhszBUei2xSq0+l5S/r13bVpyPibET8cXR4OJaKhdxcqTjf65MfAAAA0CdO7xr/fzJaH/8DAAAAx8xYrxMAAAAADp3xPwAAABx/xv8AAABwrP3s9u3aUm3e/3r+3ubGcune1flCeTm3sjGXmyutr+UWS6XF9Df7VvZ6vmKptPa9WN14kK8UypV8eXPr7kppY7Vyd+mlW2ADAAAAXXT2m4//n0TE9veH06XmRK+TArpi8CAHv3N4eQDdN9DrBICeOdDnP3CsZHudANBzyR77207e+U/ncwEAAA7H+NdbX/9P9jw3sJ3pUorAIXH+D/qX6//Qv1z/h/6VjYEwkIf+dvjX/6vVAyUEAAB03Ei6JJlcRHoeYCQymVwu4kx6W4BssrBULExGxFci4n+j2ZO1+lT6yGTPMQMAAAAAAAAAAAAAAAAAAAAAAAAAUFetJlEFAAAAjrWIzHtJ4/5f46OXR3afHziRfDqariPi/l/v/PnBbKWyPlXb/tGL7ZW/NLZf68UZDAAAAGC35ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE569vThXHPpZtwPfhQRY63iD8ZQuh6KwYg49XGSrpuSiBjoQPztRxFxrlX8pJZWjDWyaBV/uIfxMxFxugPxoZ89rvU/P2z1/svExXTd+v13I+2h3lzb/i9pHjGU9nOt+p8z+4xx/sk/823jP4o4P9i6/2n2v0mb+Jf2Gf9Xv9zaarev+reI8ZafP8lLsfKVlbV8eXPr6tLK7GJhsbA6PT11Y+bmzPWZyfzCUrHQ+HdHl3zxRekP3/jX89e1/1Sb+GN7tP/yPtv/+ZMHT79aL2ZbxZ+41Prv71yb+JnGZ9+3G+Xa/vFmebte3unCP/574XXtn6+3f/Cg//8T+2z/lZ//7u19HgoAdEF5c2t5tlgsrPd14Y1ejdrXoiPRisMsDMeRSKPDhd8ejTSOZKG3/RIAANB5r46BAQAAAAAAAAAAAAAAAAAAgG7r5q/rNW33pqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK/1RQAAAP//2jzOsg==") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 4.996526659s ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) 4.895315725s ago: executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 2.994580005s ago: executing program 1: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 2.896108429s ago: executing program 1: syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122c92", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) 2.880914911s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 2.863428624s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}]}, 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004ab3eb40b00401031000011803010902120001000000000904"], 0x0) 2.56098887s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x553b, &(0x7f0000000280)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x20000) fallocate(r0, 0x8, 0x0, 0x2000) 2.080808443s ago: executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) 1.942673574s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff}}]}, 0x28}}, 0x0) 1.655094948s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) 1.5127846s ago: executing program 3: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 1.496138832s ago: executing program 4: syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122c92", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) 1.409575345s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000200000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xab, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000752b00fc010000000000000000000000000000fe8000000000000000000000000000aa87000000000000003b"], 0x0) 1.369132492s ago: executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x30) 1.358007624s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2008410, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5549, &(0x7f0000003d80)="$eJzs3EtvG9UXAPA7TpP++/xHiAW7jlQhJVJt1elDsAvQiodIFfFYsALHdiy3tieKHSeEDRIsEQu+CQKJFUs+AwvW7BALEDskkOeOKaE8WtmJk/b3k8Zn5s74zLkjK9GZsRyAJ9Zi+stPSbgYzoQQ5kII55OQryfFkluN4ZkQwqUQQulPS1KM/zGwEEI4G0K4OEoecybFrs+uDC/f+PG1n7/+9vSpc59/9d3sZg3M2rMhhO5WXN/txpi1YrxbjNeG7Tx2rw+LGHd07xXbWYy7zY08w25tfFwtj9da8fhsa6c/ipudWn0UW+3NfHyrF0/YH7bGefI33K1t59uN5kYe2/0sj639WNfefvzbtt8fxDyNIt/7efowGIxjHG/uNeN8tu7lsd4bFOMxb9Zo7o3isIjF6UI96zTyOjYmudLH2+vt3s5eOmxu99tZL71RqT5Xqd4sV7ezRnPQvF6udRs3r6dLrc7osPKgWeuutrKs1WlW6ll3OV1q1evlajVdutXcaNd6abVauVa5Wr6xXKxdSV++83baaaRLo/hiu7ez0O70081sO43vWE5XKteeX04vV9M319bT9Tdu315bf+vdW+/ceWHt1ZeKgx4oK11aubqyUq5eLa9Ul4/B/Ef/dx9y/oNJ5v9xUfQjzD+Z7PLAv3v0D9gHC4dSCMDJ8UD/H/T/wOE76f1/mGb/P2qp9P//3f+WJu//J+p/j2v/f4LnDxNxgwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In1/fwXr+Qri3H7XDF+oRh6qthOQgilEMJvf2MuLBzIOVfkmf+H4+f/UsM3ScgzjM5xuljOhhBWi+XX/x/2VQAAAIDH15cfXvo0duvxZXHWBXGU4k2b0vn3ppQvCSHML/4wpWyl0cvTU0qWf75Phb0pZctvYP1vSsniLbdT08r2UObG4aML9wfzCSUxlI60HAAA4EjMHQhH24UAAABwlD6ZdQHMRhLGjzLHz4Lzb97ff7R55sA+AAAA4ARKZl0AAAAAcOjy/t/v/wEAAMDjLf7+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzt3cJg6EYQD+bDA/+6NFq71vK3uDMraEPe4xUECaoATSQhqgBnJLCRFE2CMkRyCBsGOBnkfymLHR6xnw5RtLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vRSrGZPD78fr83Z7q7TzGwAAACAYzbFalZ+mFT9r+n493ToZ+pnEZFHxLHavReDWmYv5RQnvl98GMNzRJmwv8YwbV8i4k/a3n60/SsAAADA/VovltOqWq+aSdcD4jNVizb5t78N5WURUUxeG0rL982vhsLK+7sf/xtKKxewRg2FVUtu/ePnBueGjC+6ZK+2SzMZzcs/sezlF8UBAAA3oV4JnKhCAAAAuAP/uh4A3cgOzeE547DapQeC41oPAAAAuEFZ1wMAAAAAWlfW/97/BwAAAPetev8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbdoUq9l6sZyeOj8/M2e7u05zMwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Z3/ebQCEwRgMmjd0KPsPizwBZZq76tNvpQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK81ydLYGm+SvdfG0fNIcnZqXJ0ad+fG0wdj9icAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuX/eOIooAODv9m4vfwBhDHJhQEGigIbYl5CQEgqQRcFHQLKcczBcCCQuSGSB3ECFXKdBUCKEBDJdvkPqWEoTuhQujEQN2r1dZ5MYfFjH7sX+/aTZeXsezbzZO1l+3rUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABK2+/ES0kRt7PD1DAuX7uzs7aU9VuP9JlbG3dns5bFrf0W+ubt8Sc/2V6unpyaqZx8VX8yAAAAHA3tsr6PiHvp5kLWJ1N5/Z+WY7Ka//tnhnFZzz9a92/trB0vvjRb1v+//Xr/hd2FpobrZJMurwz684+n0vmftjjxnt13RCe/8vnvXtr5G5K8v/78dppfz9a3t2+/283DY3VkCwAcxOmyL4Ly56Gs7zWZGABHRqdSeJf1f3uq2ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6rC9Hk+VcSsiZjsP4szWztrSXv2tjbuzZTt/8+ZGdc5sijQillcG/bTGvUy6a9dvfLI4GPSvjhIk/2XwvsGpiBjrhAcJPhxhTMS/jyk+ntHcLv45aE1GGo0GSfH+TEo+4wzKz974Z27oGxIAAIdWWrSsrr+Xbi5kr7WmI/764eH6/7VKHCPW//c/On+nula1/u/VtsPJN7d6+bO5a9dvvLFyefFS/1L/0zfP9N7qnb1w7tyFuexazc8tR9KfbzpNAAAAnmDdolXr/2T68fv/JytxjFj/f/5d78vqWm31/54e3PRrOhMAAICjqLsbPffKn3+09hjR6nbji8XV1au94XH3/MzwWGu6B3SsaNX6vz3ddFYAAABAHbbXWw/d/79YiWPE+/9P//jiz9U52xFxIuJKRPRPL10ZXKxvOxOtjj9UzhfqNr1TAAAAmnKiaNX7/2n+/H+y+8hDEhGvvzqMy/91NUr9337v65+qa1Wf/z9b3xYnUjIzvB55PxPRmWk6IwAAAA6z40XLiv3f082Fj385+UHX8/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdfs7AAD//5X/Nho=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './bus'}, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.341427176s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}}) 1.308045141s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x553b, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x20000) fallocate(r0, 0x8, 0x0, 0x2000) 1.082072036s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x114) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0x100000530) 981.734711ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff}}]}, 0x28}}, 0x0) 962.123834ms ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x249, &(0x7f00000001c0)="$eJzs3c9LFGEYB/BH3fzRZSWCIIIWIui0qNDdiAJJKpIljJDWXENcERKEPKidgk5dOnb0ZgR16Fb/Q9ClS3SJjnnrEE7oxLrmWhq5E+7nc9mHmee7884s+87uYd+9c2pmemJ2bnJt7XN0d7dFbvDeepK0RW+0R0eklgMAOEy+JUl8TVJZjwUAaA73fwBoPXu8/19v4pAAgAP299//n46++ViuDJ7fQ2vSVSs/jO1/jADAvzUyeuvK+tuzPUPx6knEzKP50nwpfUz3X5iMqahGJfoiH98jkpq0vjw0fKmvsKEnojSz9DO/NF/q2J7vj3z0Rty8ujPfX0htzx+Jo/X5gcjH8cbHH2iY74xzZ+ryxcjHu7sxG9WY2PhIUpdf7C8ULl4b/iXftdkXKx2Zvj4AAAAAAAAAAAAAAAAAAAAAABxOxUJNb6P1e4rF3fan+b2vD7S1Ps/jzXwuTubiYbZnDwAAAAAAAAAAAAAAAAAAAP+HuQcL0+VqtXK/VozfmDq2fcufirb9NCsWpjcu/AEe4nREHPRZvFytvF8Zuz2S/cVsYtH4qr7IfGDjv+lpj4jN4sSzwfLrxU9fdvbEct17OZfOC+Vqg8mi0OTJCQAAAAAAAAAAAAAAAAAAWszWz4B360iaOyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyMDW///vu+isbVntSZ9sl+Z05/NMzxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb2IwAA///U1qw1") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r1, 0x0) ftruncate(r1, 0x8001) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4004e57e, &(0x7f0000000000)) 515.727242ms ago: executing program 2: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000b80)={[{@acl}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 306.268004ms ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 145.726199ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 145.047868ms ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 138.484229ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000120067fa"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002480)=@deltaction={0x18, 0x31, 0x2f07bfd930a03859, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x114) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0x100000530) kernel console output (not intermixed with test programs): empt to access beyond end of device [ 75.658873][ T2387] loop0: rw=2049, want=369, limit=128 [ 75.669881][ T2376] attempt to access beyond end of device [ 75.669881][ T2376] loop0: rw=2049, want=393, limit=128 [ 75.670906][ T2383] EXT4-fs (loop1): 1 orphan inode deleted [ 75.681107][ T2387] attempt to access beyond end of device [ 75.681107][ T2387] loop0: rw=2049, want=385, limit=128 [ 75.758453][ T2383] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 75.773015][ T2376] attempt to access beyond end of device [ 75.773015][ T2376] loop0: rw=2049, want=409, limit=128 [ 75.792546][ T2383] ext4 filesystem being mounted at /root/syzkaller-testdir1231836036/syzkaller.9f2MoN/19/file1 supports timestamps until 2038 (0x7fffffff) [ 75.810250][ T2387] attempt to access beyond end of device [ 75.810250][ T2387] loop0: rw=2049, want=401, limit=128 [ 75.948107][ T2376] attempt to access beyond end of device [ 75.948107][ T2376] loop0: rw=2049, want=425, limit=128 [ 75.968493][ T2387] attempt to access beyond end of device [ 75.968493][ T2387] loop0: rw=2049, want=417, limit=128 [ 76.143475][ T477] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 76.240938][ T23] audit: type=1400 audit(1985637272.931:11141): avc: denied { write } for pid=2414 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.341298][ T2419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.671916][ T23] audit: type=1400 audit(1985637273.361:11142): avc: denied { read } for pid=2420 comm="syz-executor.4" path="socket:[21637]" dev="sockfs" ino=21637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.033520][ T2409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.108255][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.126795][ T2409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.145313][ T2440] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.178953][ T2440] device bridge_slave_0 entered promiscuous mode [ 77.185896][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.208599][ T2440] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.223687][ T2440] device bridge_slave_1 entered promiscuous mode [ 77.371446][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.378310][ T2440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.385436][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.392194][ T2440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.433106][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.441459][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.457226][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.479466][ T2443] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.487002][ T2443] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.496719][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.504981][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.511837][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.520690][ T2443] F2FS-fs (loop3): invalid crc value [ 77.525956][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.534426][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.541408][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.560048][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.570841][ T2443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.578436][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.608667][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.638805][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.649373][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.693461][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.698243][ T2443] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.705095][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.809839][ T2443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.239783][ T7] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 78.575492][ T2486] overlayfs: statfs failed on './file0' [ 78.746400][ T2500] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.753262][ T2500] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.761563][ T2483] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 78.769561][ T2500] device bridge_slave_0 entered promiscuous mode [ 78.775985][ T2483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.784824][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.791746][ T2500] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.805350][ T2500] device bridge_slave_1 entered promiscuous mode [ 78.807097][ T2483] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.874141][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.881031][ T2500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.888103][ T2500] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.894882][ T2500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.948993][ T2483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.955943][ T2483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.222239][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.229442][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.262212][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.269701][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.281197][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.289556][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.297988][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.298785][ T2521] fscrypt (sda1, inode 1956): Direct key flag not allowed with different contents and filenames modes [ 79.304853][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.327269][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.336881][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.345315][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.352166][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.369107][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.376992][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.385317][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.393491][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.414062][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.423290][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.442035][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.450158][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.471868][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.488407][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.504523][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.513110][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.889471][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.897672][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.978691][ T7] device bridge_slave_1 left promiscuous mode [ 79.985100][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.996357][ T7] device bridge_slave_0 left promiscuous mode [ 80.004430][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.392881][ T2545] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 80.529386][ T2544] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 80.536981][ T2544] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 80.567523][ T2544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.613558][ T2544] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 80.620761][ T2544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.006534][ T402] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.398474][ T402] usb 4-1: Using ep0 maxpacket: 32 [ 81.745271][ T402] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.756037][ T402] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.765677][ T402] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 81.774553][ T23] audit: type=1400 audit(1985637278.461:11143): avc: denied { read } for pid=2574 comm="syz-executor.0" name="rtc0" dev="devtmpfs" ino=9246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.776012][ T2575] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.797924][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.798716][ T23] audit: type=1400 audit(1985637278.461:11144): avc: denied { open } for pid=2574 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=9246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.836964][ T23] audit: type=1400 audit(1985637278.461:11145): avc: denied { ioctl } for pid=2574 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=9246 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.879660][ T402] hub 4-1:4.0: USB hub found [ 81.948257][ T23] audit: type=1400 audit(1985637278.631:11146): avc: denied { read write } for pid=2581 comm="syz-executor.4" name="uhid" dev="devtmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.972784][ T23] audit: type=1400 audit(1985637278.631:11147): avc: denied { open } for pid=2581 comm="syz-executor.4" path="/dev/uhid" dev="devtmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.974269][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.003747][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.011321][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.018703][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.026051][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.028824][ T2571] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.039438][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039451][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039465][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039478][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039491][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039504][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039517][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.039530][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.097593][ T402] hub 4-1:4.0: 2 ports detected [ 82.102737][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.110466][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.118844][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.120481][ T2571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.126128][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.147155][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.157517][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.167268][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.175280][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.182805][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.190315][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.197548][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.204773][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.205040][ T2500] handle_bad_sector: 13 callbacks suppressed [ 82.205050][ T2500] attempt to access beyond end of device [ 82.205050][ T2500] loop2: rw=2049, want=45104, limit=40427 [ 82.211962][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.211974][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.211986][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.211999][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.212012][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.212024][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.274288][ T2579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.286794][ T121] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.318818][ T121] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 82.340556][ T2579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.354771][ T2293] attempt to access beyond end of device [ 82.354771][ T2293] loop0: rw=2049, want=45104, limit=40427 [ 82.459986][ T2598] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 82.792976][ T2618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.808411][ T2516] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 83.170392][ T2615] F2FS-fs (loop0): Test dummy encryption mode enabled [ 83.178568][ T2516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.189680][ T2615] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.193098][ T2516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 83.206715][ T2516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.219752][ T2516] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.228561][ T2615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.235931][ T2516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.244535][ T2516] usb 3-1: config 0 descriptor?? [ 83.268469][ T2603] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 83.418493][ T124] hub 4-1:4.0: activate --> -90 [ 83.718645][ T124] hub 4-1:4.0: hub_ext_port_status failed (err = 0) [ 83.729278][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.736638][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.743948][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.751372][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.758680][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.767517][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.775129][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.783164][ T2516] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 83.793405][ T2516] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 83.802450][ T2516] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.919276][ T1309] usb 4-1: USB disconnect, device number 4 [ 83.955434][ T23] audit: type=1400 audit(1985637280.641:11148): avc: denied { name_bind } for pid=2642 comm="syz-executor.0" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 83.978199][ T2643] binder: 2642:2643 ioctl 84009422 200023c0 returned -22 [ 84.369472][ T2646] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 84.377054][ T2646] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.388343][ T2646] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.413809][ T2646] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.420752][ T2646] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.438143][ T2646] attempt to access beyond end of device [ 84.438143][ T2646] loop0: rw=2049, want=45112, limit=40427 [ 84.546515][ T2661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.688602][ T23] audit: type=1400 audit(1985637281.371:11149): avc: denied { write } for pid=2666 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.298439][ T124] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.400158][ T2672] F2FS-fs (loop4): Test dummy encryption mode enabled [ 85.409268][ T2672] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.435184][ T2672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.548409][ T124] usb 4-1: Using ep0 maxpacket: 32 [ 85.668492][ T124] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.685936][ T124] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.707173][ T124] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 85.717974][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.740877][ T2699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.768926][ T124] hub 4-1:4.0: USB hub found [ 85.797681][ T2691] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 85.810408][ T2691] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 85.824323][ T2691] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.839020][ T1309] usb 3-1: USB disconnect, device number 5 [ 85.880688][ T2691] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.887783][ T2691] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.009329][ T2691] attempt to access beyond end of device [ 86.009329][ T2691] loop2: rw=2049, want=45112, limit=40427 [ 86.015541][ T2710] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 86.030478][ T124] hub 4-1:4.0: 2 ports detected [ 86.034053][ T2710] ext4 filesystem being mounted at /root/syzkaller-testdir1231836036/syzkaller.9f2MoN/38/file0 supports timestamps until 2038 (0x7fffffff) [ 86.522686][ T2727] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 86.533706][ T2727] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 86.626997][ T2735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.768445][ T2516] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 86.919421][ T2748] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.929627][ T2739] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.940258][ T2748] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 86.958719][ T2748] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 86.971291][ T2748] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 86.984992][ T2739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.994644][ T2293] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 4: comm syz-executor.0: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=65, rec_len=12, size=4096 fake=1 [ 87.015844][ T2293] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 87.030922][ T2293] Quota error (device loop0): write_blk: dquota write failed [ 87.038259][ T2293] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 87.128539][ T2516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.139310][ T2516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 87.149910][ T2516] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.162850][ T2516] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.171692][ T2516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.180080][ T2516] usb 2-1: config 0 descriptor?? [ 87.198688][ T2723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 87.255719][ T2758] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 87.266690][ T2758] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 87.298480][ T5] hub 4-1:4.0: activate --> -90 [ 87.366400][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.373303][ T2764] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.380571][ T2764] device bridge_slave_0 entered promiscuous mode [ 87.388812][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.395685][ T2764] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.403343][ T2764] device bridge_slave_1 entered promiscuous mode [ 87.451851][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.458826][ T2764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.465913][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.472722][ T2764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.496054][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.503811][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.511195][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.522366][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.530388][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.537202][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.547364][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.555694][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.562545][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.608525][ T5] hub 4-1:4.0: hub_ext_port_status failed (err = 0) [ 87.615916][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.627087][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.635188][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.649964][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.652500][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.657183][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.665951][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.672927][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.688093][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.698529][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.812146][ T1644] usb 4-1: USB disconnect, device number 5 [ 87.851945][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.859195][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.866368][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.873670][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.880840][ T2516] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 87.888397][ T2516] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 87.894605][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.904506][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.912616][ T2516] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 87.919923][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.933250][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.934247][ T2516] usb 2-1: USB disconnect, device number 4 [ 87.941832][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.955381][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.964121][ T7] device bridge_slave_1 left promiscuous mode [ 87.970259][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.977487][ T7] device bridge_slave_0 left promiscuous mode [ 87.983517][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.425143][ T2793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.468664][ T2516] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.737254][ T402] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.839919][ T2803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 88.895058][ T2808] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.978549][ T2516] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 88.991150][ T2516] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 89.000043][ T2516] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.008937][ T2516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.098520][ T402] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 89.108574][ T402] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 89.117446][ T402] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.126383][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.348451][ T1644] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 89.478454][ T361] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.511332][ T2831] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 89.526931][ T2833] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.565225][ T23] audit: type=1400 audit(1985637286.251:11150): avc: denied { ioctl } for pid=2838 comm="syz-executor.4" path="socket:[23932]" dev="sockfs" ino=23932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.660034][ T2843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 89.688467][ T2516] usb 1-1: string descriptor 0 read error: -32 [ 89.748480][ T1644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.759329][ T1644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 89.769905][ T1644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.783086][ T1644] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.792026][ T1644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.803448][ T1644] usb 2-1: config 0 descriptor?? [ 89.858627][ T361] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.869081][ T361] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.919342][ T2821] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 89.927373][ T2848] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.927690][ T402] usb 3-1: string descriptor 0 read error: -32 [ 89.978563][ T361] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.987632][ T361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.995629][ T361] usb 4-1: SerialNumber: syz [ 90.219716][ T517] usb 1-1: USB disconnect, device number 6 [ 90.279118][ T361] usb 4-1: 0:2 : does not exist [ 90.285320][ T361] usb 4-1: USB disconnect, device number 6 [ 90.399259][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.406686][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.413895][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.421072][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.428235][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.437839][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.445391][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.452615][ T1644] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 90.483978][ T1644] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 90.493226][ T519] usb 3-1: USB disconnect, device number 6 [ 90.501206][ T1644] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 90.606193][ T2863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.628429][ T517] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.639666][ T2865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.693594][ T2855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.737247][ T2855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.868452][ T517] usb 1-1: Using ep0 maxpacket: 32 [ 90.919604][ T2883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 90.988458][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.999658][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 91.010773][ T517] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 91.019553][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.027893][ T517] usb 1-1: config 0 descriptor?? [ 91.038480][ T402] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.048710][ T2853] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 91.095588][ T2891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.189648][ T517] hub 1-1:0.0: USB hub found [ 91.288531][ T517] hub 1-1:0.0: 2 ports detected [ 91.338440][ T519] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.408516][ T402] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 91.418476][ T402] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 91.427218][ T402] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.436154][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.698570][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.709444][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.719419][ T519] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 91.729568][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.738789][ T519] usb 3-1: config 0 descriptor?? [ 92.208440][ T402] usb 4-1: string descriptor 0 read error: -32 [ 92.219852][ T519] uclogic 0003:28BD:0042.000B: unknown main item tag 0x0 [ 92.226753][ T519] uclogic 0003:28BD:0042.000B: unknown main item tag 0x0 [ 92.233609][ T519] uclogic 0003:28BD:0042.000B: unknown main item tag 0x0 [ 92.240457][ T519] uclogic 0003:28BD:0042.000B: unknown main item tag 0x0 [ 92.247285][ T519] uclogic 0003:28BD:0042.000B: unknown main item tag 0x0 [ 92.254402][ T519] uclogic 0003:28BD:0042.000B: No inputs registered, leaving [ 92.262255][ T519] uclogic 0003:28BD:0042.000B: hidraw1: USB HID v0.00 Device [HID 28bd:0042] on usb-dummy_hcd.2-1/input0 [ 92.422770][ T402] usb 3-1: USB disconnect, device number 7 [ 92.558699][ T1309] usb 2-1: USB disconnect, device number 5 [ 93.149369][ T402] usb 4-1: USB disconnect, device number 7 [ 93.174495][ T2907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.238654][ T1309] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.266250][ T2911] netlink: 560 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.275644][ T2911] netlink: 467 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.284782][ T2911] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.300175][ T2913] 9pnet_virtio: no channels available for device syz [ 93.371388][ T2913] EXT4-fs (loop3): first meta block group too large: 4128768 (group descriptor block count 1) [ 93.384228][ T1644] usb 1-1: USB disconnect, device number 7 [ 93.413341][ T23] audit: type=1400 audit(1985637290.101:11151): avc: denied { ioctl } for pid=2917 comm="syz-executor.2" path="socket:[23416]" dev="sockfs" ino=23416 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.471344][ T2913] mmap: syz-executor.3 (2913) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 93.488700][ T1309] usb 2-1: Using ep0 maxpacket: 16 [ 93.608645][ T1309] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 93.646987][ T1309] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 93.675913][ T1309] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 93.784066][ T1309] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 93.792094][ T1309] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.800769][ T1309] usb 2-1: config 0 has no interface number 0 [ 93.806669][ T1309] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 93.817538][ T1309] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 93.819474][ T2935] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 93.827180][ T1309] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.845519][ T1309] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.858342][ T1309] usb 2-1: config 0 interface 125 has no altsetting 0 [ 93.864931][ T1309] usb 2-1: config 0 interface 125 has no altsetting 2 [ 93.894668][ T2935] EXT4-fs error (device loop4): ext4_free_blocks:4791: comm syz-executor.4: Freeing blocks not in datazone - block = 160, count = 1 [ 93.909493][ T2935] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 93.910954][ T402] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 93.926339][ T2935] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 93.939313][ T2935] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 93.952648][ T2935] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 93.971736][ T2943] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 93.980314][ T2440] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.4: lblock 0 mapped to illegal pblock 16 (length 1) [ 93.995296][ T2440] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 94.008312][ T2440] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 94.020190][ T7] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 94.033081][ T1309] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 94.042452][ T1309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.050293][ T1309] usb 2-1: Product: syz [ 94.054347][ T1309] usb 2-1: Manufacturer: syz [ 94.058790][ T1309] usb 2-1: SerialNumber: syz [ 94.063928][ T1309] usb 2-1: config 0 descriptor?? [ 94.265951][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.272906][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.280200][ T2947] device bridge_slave_0 entered promiscuous mode [ 94.286940][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.293780][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.300787][ T402] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 94.311333][ T2947] device bridge_slave_1 entered promiscuous mode [ 94.318517][ T402] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 94.327252][ T402] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.336151][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.398344][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.405211][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.412489][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.419266][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.009031][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.016520][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.028481][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.045567][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.054132][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.060979][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.068923][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.079942][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.722758][ T393] usb 2-1: USB disconnect, device number 6 [ 95.751813][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.760532][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.776024][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.784365][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.800139][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.808474][ T402] usb 4-1: string descriptor 0 read error: -32 [ 95.809728][ T2964] 9pnet_virtio: no channels available for device syz [ 95.821970][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.843510][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.852182][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.871270][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.891372][ T1309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.901521][ T2964] EXT4-fs (loop2): first meta block group too large: 4128768 (group descriptor block count 1) [ 95.911759][ T7] device bridge_slave_1 left promiscuous mode [ 95.917722][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.932893][ T7] device bridge_slave_0 left promiscuous mode [ 95.939142][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.033467][ T23] audit: type=1400 audit(1985637292.721:11152): avc: denied { bind } for pid=2975 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.054346][ T23] audit: type=1400 audit(1985637292.731:11153): avc: denied { listen } for pid=2975 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.074643][ T23] audit: type=1400 audit(1985637292.731:11154): avc: denied { accept } for pid=2975 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.117707][ T2986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.429130][ T393] usb 4-1: USB disconnect, device number 8 [ 96.452891][ T3001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.467052][ T23] audit: type=1400 audit(1985637293.151:11155): avc: denied { write } for pid=3000 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.468769][ T3001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3001 comm=syz-executor.0 [ 96.533336][ T3007] 9pnet_virtio: no channels available for device syz [ 96.568483][ T1644] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.577389][ T3007] EXT4-fs (loop0): first meta block group too large: 4128768 (group descriptor block count 1) [ 96.770553][ T3010] F2FS-fs (loop2): invalid crc value [ 96.777503][ T3010] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.803144][ T3010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 96.810466][ T1644] usb 2-1: Using ep0 maxpacket: 16 [ 96.840364][ T3010] attempt to access beyond end of device [ 96.840364][ T3010] loop2: rw=2049, want=45160, limit=40427 [ 96.857200][ T2500] attempt to access beyond end of device [ 96.857200][ T2500] loop2: rw=2049, want=45168, limit=40427 [ 96.928504][ T1644] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 96.936853][ T1644] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 96.944877][ T1644] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 96.953169][ T1644] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 96.961582][ T1644] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.970465][ T1644] usb 2-1: config 0 has no interface number 0 [ 96.976365][ T1644] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 96.987220][ T1644] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 96.996855][ T1644] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.006501][ T1644] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.019580][ T1644] usb 2-1: config 0 interface 125 has no altsetting 0 [ 97.026144][ T1644] usb 2-1: config 0 interface 125 has no altsetting 2 [ 97.067801][ T3025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.128791][ T23] audit: type=1400 audit(1985637293.821:11156): avc: denied { getopt } for pid=3030 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.178522][ T3035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.188896][ T1644] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 97.197828][ T1644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.206714][ T1644] usb 2-1: Product: syz [ 97.210806][ T1644] usb 2-1: Manufacturer: syz [ 97.215164][ T1644] usb 2-1: SerialNumber: syz [ 97.221978][ T1644] usb 2-1: config 0 descriptor?? [ 97.229360][ T3040] 9pnet_virtio: no channels available for device syz [ 97.269626][ T3040] EXT4-fs (loop2): first meta block group too large: 4128768 (group descriptor block count 1) [ 97.309873][ T3046] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 97.330385][ T3046] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,jqfmt=vfsv0,grpjquota=,lazytime,nojournal_checksum,,errors=continue [ 97.344161][ T3046] ext4 filesystem being mounted at /root/syzkaller-testdir1427141931/syzkaller.3zDgfw/8/file1 supports timestamps until 2038 (0x7fffffff) [ 97.361102][ T23] audit: type=1400 audit(1985637294.051:11157): avc: denied { setattr } for pid=3045 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.373547][ T3046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 99.239319][ T1644] usb 2-1: USB disconnect, device number 7 [ 99.375172][ T3086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.389865][ T23] audit: type=1400 audit(1985637296.081:11158): avc: denied { wake_alarm } for pid=3087 comm="syz-executor.4" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.424625][ T3081] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.433884][ T3081] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 99.469750][ T3093] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 99.490990][ T3093] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,jqfmt=vfsv0,grpjquota=,lazytime,nojournal_checksum,,errors=continue [ 99.505046][ T3093] ext4 filesystem being mounted at /root/syzkaller-testdir2001969854/syzkaller.42LaFC/18/file1 supports timestamps until 2038 (0x7fffffff) [ 99.522358][ T3093] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 99.768413][ T1644] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.148409][ T1644] usb 2-1: Using ep0 maxpacket: 16 [ 100.268534][ T1644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.279275][ T1644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.288834][ T1644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.301569][ T1644] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 100.860547][ T1644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.878858][ T1644] usb 2-1: config 0 descriptor?? [ 101.001705][ T23] audit: type=1400 audit(1985637297.691:11159): avc: denied { unlink } for pid=1334 comm="syz-executor.3" name="file1" dev="sda1" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 101.059985][ T3131] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.068262][ T3131] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 101.221422][ T3138] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.229968][ T3138] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 101.359659][ T1644] ryos 0003:1E7D:31CE.000C: unknown main item tag 0x0 [ 101.361090][ T3136] F2FS-fs (loop4): invalid crc value [ 101.366266][ T1644] ryos 0003:1E7D:31CE.000C: nested delimiters [ 101.366281][ T1644] ryos 0003:1E7D:31CE.000C: item 0 4 2 10 parsing failed [ 101.384805][ T1644] ryos 0003:1E7D:31CE.000C: parse failed [ 101.386167][ T3136] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.390313][ T1644] ryos: probe of 0003:1E7D:31CE.000C failed with error -22 [ 101.418338][ T3136] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 101.425023][ T3136] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.598604][ T23] audit: type=1400 audit(1985637298.181:11160): avc: denied { read } for pid=3144 comm="syz-executor.3" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.647247][ T1309] usb 2-1: USB disconnect, device number 8 [ 101.652969][ T23] audit: type=1400 audit(1985637298.181:11161): avc: denied { open } for pid=3144 comm="syz-executor.3" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.677334][ T23] audit: type=1400 audit(1985637298.191:11162): avc: denied { create } for pid=3144 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 101.698140][ T2947] attempt to access beyond end of device [ 101.698140][ T2947] loop4: rw=2049, want=45104, limit=40427 [ 101.880869][ T3155] FAT-fs (loop0): Directory bread(block 64) failed [ 101.887216][ T3155] FAT-fs (loop0): Directory bread(block 65) failed [ 101.898467][ T3155] FAT-fs (loop0): Directory bread(block 66) failed [ 101.904888][ T3155] FAT-fs (loop0): Directory bread(block 67) failed [ 101.911259][ T3155] FAT-fs (loop0): Directory bread(block 68) failed [ 101.917636][ T3155] FAT-fs (loop0): Directory bread(block 69) failed [ 101.924044][ T3155] FAT-fs (loop0): Directory bread(block 70) failed [ 101.930449][ T3155] FAT-fs (loop0): Directory bread(block 71) failed [ 101.936796][ T3155] FAT-fs (loop0): Directory bread(block 72) failed [ 101.943271][ T3155] FAT-fs (loop0): Directory bread(block 73) failed [ 101.997236][ T23] audit: type=1400 audit(1985637298.681:11163): avc: denied { mounton } for pid=3154 comm="syz-executor.0" path="/root/syzkaller-testdir2001969854/syzkaller.42LaFC/25/file0/file0" dev="loop0" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 102.149942][ T3158] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 102.157667][ T3158] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 102.173439][ T3158] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.204502][ T3163] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 102.509534][ T3163] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,norecovery,dioread_lock,journal_dev=0x0000000000000005,,errors=continue [ 102.545499][ T3163] ext4 filesystem being mounted at /root/syzkaller-testdir1427141931/syzkaller.3zDgfw/15/file0 supports timestamps until 2038 (0x7fffffff) [ 102.572315][ T3158] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 102.579533][ T3158] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.769577][ T3210] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 104.216389][ T3210] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,norecovery,dioread_lock,journal_dev=0x0000000000000005,,errors=continue [ 104.233237][ T3210] ext4 filesystem being mounted at /root/syzkaller-testdir2001969854/syzkaller.42LaFC/31/file0 supports timestamps until 2038 (0x7fffffff) [ 104.238402][ T393] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.464737][ T3221] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 104.588782][ T3221] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #18: block 62218: comm syz-executor.1: lblock 0 mapped to illegal pblock 62218 (length 1) [ 105.485707][ T3249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.494875][ T3249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.503954][ T3249] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.513128][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.530073][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.540184][ T393] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.549474][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.589986][ T393] usb 4-1: config 0 descriptor?? [ 105.674401][ T3261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 105.686727][ T3261] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #18: block 62218: comm syz-executor.4: lblock 0 mapped to illegal pblock 62218 (length 1) [ 105.691617][ T3269] syz-executor.2[3269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.691667][ T3269] syz-executor.2[3269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.810373][ T3272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 106.518470][ T393] wacom 0003:056A:0331.000D: unknown main item tag 0x0 [ 106.526950][ T393] wacom 0003:056A:0331.000D: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 106.600076][ T393] usb 4-1: USB disconnect, device number 9 [ 106.651838][ T3296] syz-executor.4 (3296): /proc/3295/oom_adj is deprecated, please use /proc/3295/oom_score_adj instead. [ 107.119933][ T3297] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 107.127593][ T3297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 107.200745][ T3297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.359604][ T3316] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 107.368976][ T3297] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.376100][ T3297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.451952][ T3333] overlayfs: missing 'lowerdir' [ 107.468437][ T23] audit: type=1400 audit(1985637304.146:11164): avc: denied { mount } for pid=3329 comm="syz-executor.3" name="/" dev="configfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.504009][ T23] audit: type=1400 audit(1985637304.146:11165): avc: denied { mounton } for pid=3329 comm="syz-executor.3" path="/root/syzkaller-testdir2462138840/syzkaller.82SDE9/118/file0" dev="configfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.537131][ T23] audit: type=1400 audit(1985637304.156:11166): avc: denied { search } for pid=3329 comm="syz-executor.3" name="/" dev="configfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.766539][ T23] audit: type=1400 audit(1985637304.456:11167): avc: denied { unmount } for pid=1334 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.842779][ T3346] overlayfs: missing 'lowerdir' [ 108.159840][ T3351] overlayfs: missing 'lowerdir' [ 108.202491][ T3353] overlayfs: missing 'lowerdir' [ 108.569129][ T1644] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.675844][ T393] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.799693][ T3372] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 108.968558][ T3377] loop_set_block_size: loop0 () has still dirty pages (nrpages=256) [ 109.048465][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.067703][ T393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.080404][ T393] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.088496][ T1644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.089304][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.100190][ T1644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.112100][ T393] usb 3-1: config 0 descriptor?? [ 109.119066][ T1644] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 109.167597][ T1644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.176554][ T1644] usb 1-1: config 0 descriptor?? [ 109.430295][ T3379] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 109.432169][ T3391] overlayfs: missing 'lowerdir' [ 109.437889][ T3379] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.627150][ T3379] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.663573][ T393] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 109.671212][ T393] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 109.680574][ T393] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.681100][ T1644] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 109.702027][ T1644] wacom 0003:056A:0331.000F: hidraw1: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 109.726318][ T3379] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.733185][ T3379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.776353][ T3400] overlayfs: missing 'lowerdir' [ 110.070002][ T393] usb 3-1: USB disconnect, device number 8 [ 110.082453][ T23] audit: type=1400 audit(1985637306.776:11168): avc: denied { read } for pid=3401 comm="syz-executor.1" name="msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.088800][ T1644] usb 1-1: USB disconnect, device number 8 [ 110.112437][ T23] audit: type=1400 audit(1985637306.776:11169): avc: denied { open } for pid=3401 comm="syz-executor.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.524414][ T3420] FAT-fs (loop4): Directory bread(block 64) failed [ 110.530993][ T3420] FAT-fs (loop4): Directory bread(block 65) failed [ 110.537519][ T3420] FAT-fs (loop4): Directory bread(block 66) failed [ 110.544009][ T3420] FAT-fs (loop4): Directory bread(block 67) failed [ 110.550380][ T3420] FAT-fs (loop4): Directory bread(block 68) failed [ 110.556767][ T3420] FAT-fs (loop4): Directory bread(block 69) failed [ 110.563149][ T3420] FAT-fs (loop4): Directory bread(block 70) failed [ 110.569464][ T3420] FAT-fs (loop4): Directory bread(block 71) failed [ 110.575795][ T3420] FAT-fs (loop4): Directory bread(block 72) failed [ 110.582716][ T3420] FAT-fs (loop4): Directory bread(block 73) failed [ 110.592336][ T3425] overlayfs: overlapping lowerdir path [ 110.728205][ T3434] overlayfs: missing 'lowerdir' [ 110.814206][ T3442] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 110.829545][ T23] audit: type=1400 audit(1985637307.526:11170): avc: denied { relabelto } for pid=3437 comm="syz-executor.0" name="file0" dev="overlay" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 111.149950][ T23] audit: type=1400 audit(1985637307.846:11171): avc: denied { unlink } for pid=2764 comm="syz-executor.0" name="file0" dev="sda1" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 111.196923][ T3457] overlayfs: overlapping lowerdir path [ 111.198226][ T3454] FAT-fs (loop4): Directory bread(block 64) failed [ 111.208948][ T3454] FAT-fs (loop4): Directory bread(block 65) failed [ 111.215464][ T3454] FAT-fs (loop4): Directory bread(block 66) failed [ 111.221854][ T3454] FAT-fs (loop4): Directory bread(block 67) failed [ 111.228247][ T3454] FAT-fs (loop4): Directory bread(block 68) failed [ 111.234918][ T3454] FAT-fs (loop4): Directory bread(block 69) failed [ 111.241815][ T3454] FAT-fs (loop4): Directory bread(block 70) failed [ 111.248114][ T3454] FAT-fs (loop4): Directory bread(block 71) failed [ 111.254802][ T3454] FAT-fs (loop4): Directory bread(block 72) failed [ 111.261260][ T3454] FAT-fs (loop4): Directory bread(block 73) failed [ 111.468475][ T393] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.478411][ T2516] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 111.708499][ T393] usb 1-1: Using ep0 maxpacket: 8 [ 111.803045][ T23] audit: type=1400 audit(1985637308.496:11172): avc: denied { mounton } for pid=3483 comm="syz-executor.1" path="/root/syzkaller-testdir1231836036/syzkaller.9f2MoN/83/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 111.809847][ T3487] overlayfs: overlapping lowerdir path [ 111.858491][ T393] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.868562][ T2516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.879700][ T2516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.889539][ T2516] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 111.898483][ T2516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.907091][ T2516] usb 4-1: config 0 descriptor?? [ 111.968492][ T393] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 111.977585][ T393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 111.985678][ T393] usb 1-1: SerialNumber: syz [ 111.990996][ T393] usb 1-1: config 0 descriptor?? [ 112.085209][ T3503] PF_BRIDGE: br_mdb_parse() with invalid entry [ 112.238498][ T393] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 112.245371][ T393] uvcvideo: No valid video chain found. [ 112.379712][ T2516] wacom 0003:056A:0331.0010: unknown main item tag 0x0 [ 112.387732][ T2516] wacom 0003:056A:0331.0010: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 112.440829][ T2629] usb 1-1: USB disconnect, device number 9 [ 112.583559][ T2516] usb 4-1: USB disconnect, device number 10 [ 113.183154][ T3528] PF_BRIDGE: br_mdb_parse() with invalid entry [ 113.340456][ T3533] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.348259][ T3533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 113.356243][ T3533] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.362090][ T3533] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.368326][ T3533] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 113.377409][ T3533] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.391688][ T3533] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 113.398274][ T3533] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz-executor.3: bad orphan inode 16 [ 113.408657][ T3533] ext4_test_bit(bit=15, block=18) = 1 [ 113.413873][ T3533] is_bad_inode(inode)=0 [ 113.417814][ T3533] NEXT_ORPHAN(inode)=0 [ 113.421761][ T3533] max_ino=32 [ 113.424763][ T3533] i_nlink=2 [ 113.427737][ T3533] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 113.438690][ T3533] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 113.758409][ T2516] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 113.860729][ T3550] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 113.893620][ T3550] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 114.008409][ T2516] usb 4-1: Using ep0 maxpacket: 8 [ 114.058418][ T393] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.128469][ T2516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.218460][ T2516] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 114.227381][ T2516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 114.235334][ T2516] usb 4-1: SerialNumber: syz [ 114.241190][ T2516] usb 4-1: config 0 descriptor?? [ 114.428504][ T393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.440323][ T393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.451203][ T393] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 114.460523][ T393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.472109][ T393] usb 1-1: config 0 descriptor?? [ 114.488508][ T2516] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 114.495427][ T2516] uvcvideo: No valid video chain found. [ 114.539456][ T3565] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.547370][ T3565] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 114.555500][ T3565] System zones: 0-1, 15-15, 18-18, 34-34 [ 114.561585][ T3565] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.567962][ T3565] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 114.577249][ T3565] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.591743][ T3565] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 114.598557][ T3565] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz-executor.4: bad orphan inode 16 [ 114.608990][ T3565] ext4_test_bit(bit=15, block=18) = 1 [ 114.614308][ T3565] is_bad_inode(inode)=0 [ 114.618328][ T3565] NEXT_ORPHAN(inode)=0 [ 114.622251][ T3565] max_ino=32 [ 114.625336][ T3565] i_nlink=2 [ 114.628252][ T3565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 114.639602][ T3565] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 114.694208][ T2516] usb 4-1: USB disconnect, device number 11 [ 114.711748][ T23] audit: type=1400 audit(1985637311.406:11173): avc: denied { bind } for pid=3570 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.756603][ T3573] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.949739][ T393] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 114.957512][ T393] wacom 0003:056A:0331.0011: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 114.994390][ T23] audit: type=1400 audit(1985637311.686:11174): avc: denied { getopt } for pid=3580 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.153308][ T1644] usb 1-1: USB disconnect, device number 10 [ 115.690982][ T3593] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.698833][ T3593] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 115.706790][ T3593] System zones: 0-1, 15-15, 18-18, 34-34 [ 115.712908][ T3593] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.719268][ T3593] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 115.728594][ T3593] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.742890][ T3593] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 115.749496][ T3593] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz-executor.1: bad orphan inode 16 [ 115.759779][ T3593] ext4_test_bit(bit=15, block=18) = 1 [ 115.764946][ T3593] is_bad_inode(inode)=0 [ 115.768972][ T3593] NEXT_ORPHAN(inode)=0 [ 115.772840][ T3593] max_ino=32 [ 115.775879][ T3593] i_nlink=2 [ 115.778871][ T3593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 115.789849][ T3593] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 116.848416][ T391] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 116.927487][ T3634] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 116.935536][ T3634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.944583][ T3634] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 116.952782][ T3634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.980144][ T3638] virtio-fs: tag <(null)> not found [ 117.023293][ T3642] device syzkaller0 entered promiscuous mode [ 117.087960][ T23] audit: type=1400 audit(1985637313.776:11175): avc: denied { bind } for pid=3643 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.108670][ T391] usb 1-1: Using ep0 maxpacket: 8 [ 117.199727][ T3646] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 117.210143][ T3646] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsdgroups,nomblk_io_submit,nodelalloc,abort,,errors=continue [ 117.224360][ T3646] ext4 filesystem being mounted at /root/syzkaller-testdir1231836036/syzkaller.9f2MoN/103/file0 supports timestamps until 2038 (0x7fffffff) [ 117.242989][ T23] audit: type=1400 audit(1985637313.936:11176): avc: denied { setattr } for pid=3645 comm="syz-executor.1" path="/root/syzkaller-testdir1231836036/syzkaller.9f2MoN/103/file0/file0/cpuset.effective_cpus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.272521][ T391] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.281233][ T391] usb 1-1: config 1 has no interface number 1 [ 117.281273][ T391] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.376596][ T23] audit: type=1326 audit(1985637314.066:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e64fe8ee9 code=0x7ffc0000 [ 117.402902][ T23] audit: type=1326 audit(1985637314.096:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e64fe8ee9 code=0x7ffc0000 [ 117.432459][ T23] audit: type=1326 audit(1985637314.096:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4e64fe8ee9 code=0x7ffc0000 [ 117.469710][ T391] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.483071][ T391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.505263][ T391] usb 1-1: Product: syz [ 117.509572][ T391] usb 1-1: Manufacturer: syz [ 117.517282][ T391] usb 1-1: SerialNumber: syz [ 117.582736][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.590158][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.597295][ T3677] device bridge_slave_0 entered promiscuous mode [ 117.603952][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.610792][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.617965][ T3677] device bridge_slave_1 entered promiscuous mode [ 117.672023][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.678873][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.686037][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.692849][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.716052][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.719564][ T3684] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 117.730516][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.738044][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.759012][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.767027][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.773869][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.781191][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.788729][ T3684] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsdgroups,nomblk_io_submit,nodelalloc,abort,,errors=continue [ 117.789485][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.803207][ T3684] ext4 filesystem being mounted at /root/syzkaller-testdir2462138840/syzkaller.82SDE9/151/file0 supports timestamps until 2038 (0x7fffffff) [ 117.809659][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.810595][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.838728][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.853293][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.861388][ T391] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 117.869790][ T391] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 117.873139][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.892743][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.911768][ T391] usb 1-1: USB disconnect, device number 11 [ 117.919281][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.929521][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.973312][ T3691] device syzkaller0 entered promiscuous mode [ 118.103968][ T3702] input: syz1 as /devices/virtual/input/input25 [ 118.118410][ T124] Bluetooth: hci0: command 0x1003 tx timeout [ 118.124292][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 118.130663][ T7] device bridge_slave_1 left promiscuous mode [ 118.138161][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.149049][ T7] device bridge_slave_0 left promiscuous mode [ 118.156398][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.371992][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 118.372001][ T23] audit: type=1400 audit(1985637315.066:11191): avc: denied { read } for pid=3719 comm="syz-executor.0" name="file1" dev="incremental-fs" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.402074][ T2764] ------------[ cut here ]------------ [ 118.407365][ T2764] WARNING: CPU: 0 PID: 2764 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 118.416544][ T2764] Modules linked in: [ 118.417637][ T23] audit: type=1400 audit(1985637315.066:11192): avc: denied { open } for pid=3719 comm="syz-executor.0" path="/root/syzkaller-testdir2001969854/syzkaller.42LaFC/50/bus/file1" dev="incremental-fs" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.420278][ T2764] CPU: 0 PID: 2764 Comm: syz-executor.0 Not tainted 5.4.268-syzkaller-00001-g8322246edffa #0 [ 118.420281][ T2764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 118.420306][ T2764] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 118.420319][ T2764] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 1c 4d ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 69 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 118.493971][ T2764] RSP: 0018:ffff8881e8e8fb48 EFLAGS: 00010293 [ 118.499951][ T2764] RAX: ffffffff81e5dd2c RBX: 0000000000000000 RCX: ffff8881ed578000 [ 118.507762][ T2764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.515662][ T2764] RBP: ffff8881eded7330 R08: ffffffff81e5dab6 R09: ffffed103a2ae5a2 [ 118.523473][ T2764] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 118.531286][ T2764] R13: ffff8881d1572c68 R14: ffff8881d1572cb8 R15: ffff8881eded7360 [ 118.539185][ T2764] FS: 000055555593c480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 118.547948][ T2764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.554370][ T2764] CR2: 000000c00197d578 CR3: 00000001e8f91000 CR4: 00000000003406b0 [ 118.562271][ T2764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.570320][ T2764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.578123][ T2764] Call Trace: [ 118.581260][ T2764] ? __warn+0x162/0x250 [ 118.585244][ T2764] ? report_bug+0x3a1/0x4e0 [ 118.589583][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.594447][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.599301][ T2764] ? do_invalid_op+0x6e/0x110 [ 118.603821][ T2764] ? invalid_op+0x1e/0x30 [ 118.607982][ T2764] ? ovl_dir_modified+0x1e6/0x570 [ 118.612842][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.617701][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.622563][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.627423][ T2764] ? ovl_path_type+0x18e/0x2f0 [ 118.632026][ T2764] ovl_do_remove+0x6f0/0xc80 [ 118.636452][ T2764] ? ovl_set_redirect+0x5f0/0x5f0 [ 118.641311][ T2764] ? security_inode_rmdir+0xca/0x110 [ 118.646430][ T2764] vfs_rmdir+0x285/0x3c0 [ 118.650514][ T2764] incfs_kill_sb+0x105/0x200 [ 118.654965][ T2764] deactivate_locked_super+0xa8/0x110 [ 118.660148][ T2764] deactivate_super+0x1e2/0x2a0 [ 118.665008][ T2764] ? vfs_submount+0xb0/0xb0 [ 118.669346][ T2764] ? deactivate_locked_super+0x110/0x110 [ 118.674901][ T2764] ? lockref_put_return+0xbf/0xe0 [ 118.679763][ T2764] ? dput+0x294/0x2f0 [ 118.683581][ T2764] cleanup_mnt+0x44e/0x500 [ 118.687835][ T2764] task_work_run+0x140/0x170 [ 118.692263][ T2764] exit_to_usermode_loop+0x190/0x1a0 [ 118.697387][ T2764] prepare_exit_to_usermode+0x199/0x200 [ 118.702762][ T2764] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 118.708499][ T2764] ---[ end trace 9f90305aae747790 ]--- [ 118.721512][ T2764] ------------[ cut here ]------------ [ 118.726799][ T2764] WARNING: CPU: 0 PID: 2764 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 118.736071][ T2764] Modules linked in: [ 118.739812][ T2764] CPU: 0 PID: 2764 Comm: syz-executor.0 Tainted: G W 5.4.268-syzkaller-00001-g8322246edffa #0 [ 118.751188][ T2764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 118.761086][ T2764] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 118.766534][ T2764] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 1c 4d ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 69 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 118.786063][ T2764] RSP: 0018:ffff8881e8e8fb48 EFLAGS: 00010293 [ 118.792053][ T2764] RAX: ffffffff81e5dd2c RBX: 0000000000000000 RCX: ffff8881ed578000 [ 118.799865][ T2764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.807856][ T2764] RBP: ffff8881eded7330 R08: ffffffff81e5dab6 R09: ffffed103a2ae5a2 [ 118.815667][ T2764] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 118.823480][ T2764] R13: ffff8881d1572c68 R14: ffff8881d1572cb8 R15: ffff8881eded7360 [ 118.831293][ T2764] FS: 000055555593c480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 118.840058][ T2764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.846480][ T2764] CR2: 000000c00197d578 CR3: 00000001e8f91000 CR4: 00000000003406b0 [ 118.854293][ T2764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.862102][ T2764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.869913][ T2764] Call Trace: [ 118.873062][ T2764] ? __warn+0x162/0x250 [ 118.877044][ T2764] ? report_bug+0x3a1/0x4e0 [ 118.881376][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.886531][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.891391][ T2764] ? do_invalid_op+0x6e/0x110 [ 118.895903][ T2764] ? invalid_op+0x1e/0x30 [ 118.900070][ T2764] ? ovl_dir_modified+0x1e6/0x570 [ 118.905017][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.909875][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.914734][ T2764] ? ovl_dir_modified+0x45c/0x570 [ 118.919608][ T2764] ? ovl_path_type+0x18e/0x2f0 [ 118.924291][ T2764] ovl_do_remove+0x6f0/0xc80 [ 118.928713][ T2764] ? ovl_set_redirect+0x5f0/0x5f0 [ 118.933571][ T2764] ? security_inode_rmdir+0xca/0x110 [ 118.938692][ T2764] vfs_rmdir+0x285/0x3c0 [ 118.942773][ T2764] incfs_kill_sb+0x18d/0x200 [ 118.947286][ T2764] deactivate_locked_super+0xa8/0x110 [ 118.952500][ T2764] deactivate_super+0x1e2/0x2a0 [ 118.957185][ T2764] ? vfs_submount+0xb0/0xb0 [ 118.961518][ T2764] ? deactivate_locked_super+0x110/0x110 [ 118.966987][ T2764] ? lockref_put_return+0xbf/0xe0 [ 118.971847][ T2764] ? dput+0x294/0x2f0 [ 118.975667][ T2764] cleanup_mnt+0x44e/0x500 [ 118.979926][ T2764] task_work_run+0x140/0x170 [ 118.984348][ T2764] exit_to_usermode_loop+0x190/0x1a0 [ 118.989469][ T2764] prepare_exit_to_usermode+0x199/0x200 [ 118.995110][ T2764] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 119.000840][ T2764] ---[ end trace 9f90305aae747791 ]--- [ 119.162333][ T3736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.302775][ T3733] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.313398][ T96] Bluetooth: hci1: sending frame failed (-49) [ 119.628459][ T393] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 120.018445][ T393] usb 4-1: Using ep0 maxpacket: 8 [ 120.138486][ T393] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.147280][ T393] usb 4-1: config 1 has no interface number 1 [ 120.153214][ T393] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.198576][ T2516] Bluetooth: hci0: command 0x1001 tx timeout [ 120.204592][ T96] Bluetooth: hci0: sending frame failed (-49) [ 120.318539][ T393] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.327464][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.335345][ T393] usb 4-1: Product: syz [ 120.339416][ T393] usb 4-1: Manufacturer: syz [ 120.343828][ T393] usb 4-1: SerialNumber: syz [ 120.668512][ T393] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 120.676153][ T393] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 120.720478][ T393] usb 4-1: USB disconnect, device number 12 [ 120.858848][ T2516] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.098737][ T2516] usb 2-1: Using ep0 maxpacket: 8 [ 121.180324][ T3761] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 121.189102][ T3761] ext4 filesystem being mounted at /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0 supports timestamps until 2038 (0x7fffffff) [ 121.206177][ T23] audit: type=1400 audit(1985637317.896:11193): avc: denied { map } for pid=3760 comm="syz-executor.3" path="/root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0/bus" dev="devtmpfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.213688][ T3761] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 121.256200][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 121.258525][ T2516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.281429][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 121.291852][ T2516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.317261][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 121.326626][ T2516] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 121.352317][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 121.361042][ T2516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.385940][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 121.396150][ T2516] usb 2-1: config 0 descriptor?? [ 121.418289][ T391] Bluetooth: hci1: command 0x1003 tx timeout [ 121.428724][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 121.428978][ T96] Bluetooth: hci1: sending frame failed (-49) [ 121.454886][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 121.486307][ T1334] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.3: lblock 23 mapped to illegal pblock 18 (length 1) [ 121.501054][ T23] audit: type=1400 audit(1985637318.196:11194): avc: denied { unmount } for pid=1334 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 121.502131][ T1334] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor.3: path /root/syzkaller-testdir2462138840/syzkaller.82SDE9/161/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 121.545996][ T1334] EXT4-fs error (device loop3): ext4_empty_dir:3002: inode #12: block 32: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 121.564886][ T1334] EXT4-fs warning (device loop3): ext4_empty_dir:3004: inode #12: comm syz-executor.3: directory missing '.' [ 121.909262][ T2516] belkin 0003:1020:0006.0012: item fetching failed at offset 7/11 [ 121.917029][ T2516] belkin 0003:1020:0006.0012: parse failed [ 121.982946][ T3776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.105564][ T2516] belkin: probe of 0003:1020:0006.0012 failed with error -22 [ 122.133431][ T2516] usb 2-1: USB disconnect, device number 9 [ 122.288140][ T1644] Bluetooth: hci0: command 0x1009 tx timeout [ 122.703906][ T23] audit: type=1400 audit(1985637319.396:11195): avc: denied { nlmsg_write } for pid=3793 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 122.725711][ T23] audit: type=1326 audit(1985637319.416:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd268852ee9 code=0x0 [ 122.949213][ T3807] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 122.959996][ T3807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 122.968155][ T3807] System zones: 0-1, 4-36, 102-102 [ 122.973496][ T3807] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue [ 123.442594][ T3834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.478527][ T1644] Bluetooth: hci1: command 0x1001 tx timeout [ 123.485000][ T96] Bluetooth: hci1: sending frame failed (-49) [ 123.758425][ T2516] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.858417][ T393] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 124.003488][ T2516] usb 2-1: Using ep0 maxpacket: 16 [ 124.098426][ T393] usb 4-1: Using ep0 maxpacket: 16 [ 124.128500][ T2516] usb 2-1: config 0 has no interfaces? [ 124.218490][ T393] usb 4-1: config 0 has no interfaces? [ 124.288490][ T2516] usb 2-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 124.297385][ T2516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.305330][ T2516] usb 2-1: Product: syz [ 124.309297][ T2516] usb 2-1: Manufacturer: syz [ 124.313708][ T2516] usb 2-1: SerialNumber: syz [ 124.318826][ T2516] usb 2-1: config 0 descriptor?? [ 124.378474][ T393] usb 4-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 124.387361][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.395146][ T393] usb 4-1: Product: syz [ 124.399112][ T393] usb 4-1: Manufacturer: syz [ 124.403526][ T393] usb 4-1: SerialNumber: syz [ 124.408606][ T393] usb 4-1: config 0 descriptor?? [ 124.614191][ T1644] usb 2-1: USB disconnect, device number 10 [ 124.703274][ T393] usb 4-1: USB disconnect, device number 13 [ 125.323102][ T3847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 125.368993][ T3847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 125.377981][ T3847] System zones: 0-1, 4-36, 102-102 [ 125.383722][ T3847] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue [ 125.558522][ T519] Bluetooth: hci1: command 0x1009 tx timeout [ 126.208202][ T23] audit: type=1400 audit(1985637322.896:11197): avc: denied { read } for pid=3868 comm="syz-executor.1" name="usbmon0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.232480][ T23] audit: type=1400 audit(1985637322.896:11198): avc: denied { open } for pid=3868 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.068416][ T519] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.308410][ T519] usb 3-1: Using ep0 maxpacket: 32 [ 127.448556][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 127.463909][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.482608][ T519] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 127.497981][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.727077][ T519] usb 3-1: config 0 descriptor?? [ 127.748482][ T3883] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 127.768758][ T519] hub 3-1:0.0: USB hub found [ 129.338455][ T519] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 129.599940][ T519] hid-generic 0003:046D:C314.0013: unknown main item tag 0x0 [ 129.643412][ T519] hid-generic 0003:046D:C314.0013: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 129.900193][ T2629] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 130.028523][ T2516] usb 3-1: USB disconnect, device number 9 [ 130.138416][ T2629] usb 4-1: Using ep0 maxpacket: 16 [ 130.258477][ T2629] usb 4-1: config 0 has no interfaces? [ 130.418479][ T519] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.418487][ T2629] usb 4-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 130.418501][ T2629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.444262][ T2629] usb 4-1: Product: syz [ 130.448396][ T2629] usb 4-1: Manufacturer: syz [ 130.452790][ T2629] usb 4-1: SerialNumber: syz [ 130.458751][ T2629] usb 4-1: config 0 descriptor?? [ 130.698424][ T519] usb 1-1: Using ep0 maxpacket: 8 [ 130.888577][ T519] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.906165][ T519] usb 1-1: config 1 has no interface number 1 [ 130.913935][ T2629] usb 4-1: USB disconnect, device number 14 [ 130.918956][ T519] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.298494][ T519] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.307446][ T519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.315189][ T519] usb 1-1: Product: syz [ 131.319194][ T519] usb 1-1: Manufacturer: syz [ 131.323591][ T519] usb 1-1: SerialNumber: syz [ 131.419889][ T3953] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,noblock_validity,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue [ 131.459499][ T2947] EXT4-fs error (device loop4): ext4_empty_dir:2990: inode #11: comm syz-executor.4: invalid size [ 131.470623][ T2947] EXT4-fs warning (device loop4): ext4_rmdir:3274: inode #11: comm syz-executor.4: empty directory 'file1' has too many links (0) [ 131.478480][ T18] Bluetooth: hci0: command 0x1003 tx timeout [ 131.501730][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 131.531378][ T23] audit: type=1400 audit(1985637328.226:11199): avc: denied { mounton } for pid=3963 comm="syz-executor.4" path="/root/syzkaller-testdir1427141931/syzkaller.3zDgfw/66/file0" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 131.560552][ T3964] 9pnet: p9_fd_create_unix (3964): problem connecting socket: ./file0: -111 [ 131.599837][ T3966] EXT4-fs (loop3): Ignoring removed bh option [ 131.607304][ T3966] EXT4-fs (loop3): Ignoring removed nobh option [ 131.621052][ T3966] EXT4-fs (loop3): 1 orphan inode deleted [ 131.626595][ T3966] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noquota,resuid=0x0000000000000000,bh,nobh,data_err=abort,delalloc,resgid=0x0000000000000000, [ 131.638630][ T519] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 131.646710][ T3966] ext4 filesystem being mounted at /root/syzkaller-testdir2462138840/syzkaller.82SDE9/175/file1 supports timestamps until 2038 (0x7fffffff) [ 131.654348][ T519] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 131.685151][ T3966] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 131.698595][ T3966] EXT4-fs (loop3): Remounting filesystem read-only [ 131.705006][ T3966] EXT4-fs error (device loop3) in ext4_setattr:5881: Corrupt filesystem [ 131.718442][ T1334] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.3: lblock 0 mapped to illegal pblock 3 (length 1) [ 132.040686][ T519] usb 1-1: USB disconnect, device number 12 [ 132.081125][ T3977] F2FS-fs (loop4): invalid crc value [ 132.087890][ T3977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.114323][ T3977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 132.149392][ T3983] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.188401][ T18] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.283380][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.290729][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.297898][ T3987] device bridge_slave_0 entered promiscuous mode [ 132.306151][ T3987] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.313270][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.320567][ T3987] device bridge_slave_1 entered promiscuous mode [ 132.364150][ T3987] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.370996][ T3987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.378076][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.384968][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.406292][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.413638][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.421620][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.439668][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.447698][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.454547][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.462178][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.470416][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.477236][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.484669][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.493724][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.518658][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.527050][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.538506][ T519] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.553882][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.561840][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.578656][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.588298][ T18] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.597927][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.606786][ T18] usb 3-1: config 0 descriptor?? [ 132.618449][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.626756][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.732049][ T3998] EXT4-fs (loop4): filesystem is read-only [ 132.737861][ T3998] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 132.747557][ T3998] EXT4-fs error (device loop4): ext4_get_journal_inode:4880: inode #32: comm syz-executor.4: iget: special inode unallocated [ 132.760522][ T3998] EXT4-fs (loop4): no journal found [ 132.768664][ T7] device bridge_slave_1 left promiscuous mode [ 132.774715][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.778422][ T519] usb 1-1: Using ep0 maxpacket: 16 [ 132.788497][ T7] device bridge_slave_0 left promiscuous mode [ 132.794481][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.898493][ T519] usb 1-1: config 0 has no interfaces? [ 133.248542][ T519] usb 1-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 133.257454][ T519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.266344][ T519] usb 1-1: Product: syz [ 133.270369][ T519] usb 1-1: Manufacturer: syz [ 133.274748][ T519] usb 1-1: SerialNumber: syz [ 133.279870][ T519] usb 1-1: config 0 descriptor?? [ 133.549324][ T23] audit: type=1400 audit(1985637330.246:11200): avc: denied { read } for pid=4017 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.558696][ T519] Bluetooth: hci0: command 0x1001 tx timeout [ 133.577429][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 133.584161][ T393] usb 1-1: USB disconnect, device number 13 [ 133.648513][ T18] usb 3-1: string descriptor 0 read error: -71 [ 133.668479][ T18] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 133.677843][ T18] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 133.685867][ T18] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 133.694109][ T18] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 133.701593][ T18] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 133.709682][ T18] usb 3-1: USB disconnect, device number 10 [ 133.720961][ T4024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 133.748717][ T4024] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 133.758350][ T23] audit: type=1400 audit(1985637330.446:11201): avc: denied { relabelto } for pid=4023 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 133.758509][ T4024] EXT4-fs error (device loop3): ext4_xattr_block_find:1861: inode #2: comm syz-executor.3: corrupted xattr block 112 [ 134.098404][ T393] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 134.161662][ T4032] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.168407][ T4032] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 134.178399][ T4032] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 134.188508][ T4032] EXT4-fs (loop0): 1 truncate cleaned up [ 134.208654][ T4032] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 134.209357][ T4036] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.220424][ T4032] syz-executor.0[4032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.220473][ T4032] syz-executor.0[4032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.230798][ T4036] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 134.256553][ T4036] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 134.266429][ T4036] EXT4-fs (loop2): 1 truncate cleaned up [ 134.278591][ T4036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 134.299070][ T4036] syz-executor.2[4036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.299101][ T4036] syz-executor.2[4036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.311088][ T4032] overlayfs: missing 'lowerdir' [ 134.328152][ T23] audit: type=1400 audit(1985637331.016:11202): avc: denied { remount } for pid=4031 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.328531][ T4032] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 134.374744][ T4036] overlayfs: missing 'lowerdir' [ 134.380309][ T4036] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 134.400135][ T23] audit: type=1400 audit(1985637331.096:11203): avc: denied { execmem } for pid=4039 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 134.488555][ T393] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.499465][ T393] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.509049][ T393] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.510371][ T4043] EXT4-fs (loop2): Ignoring removed bh option [ 134.518775][ T393] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.518790][ T393] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.518802][ T393] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 134.556491][ T4043] EXT4-fs (loop2): Ignoring removed nobh option [ 134.678508][ T393] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.699321][ T4043] EXT4-fs (loop2): 1 orphan inode deleted [ 134.705215][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.713352][ T4043] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noquota,resuid=0x0000000000000000,bh,nobh,data_err=abort,delalloc,resgid=0x0000000000000000, [ 134.733357][ T393] usb 4-1: Product: syz [ 134.737405][ T393] usb 4-1: Manufacturer: syz [ 134.741838][ T393] usb 4-1: SerialNumber: syz [ 134.746370][ T4043] ext4 filesystem being mounted at /root/syzkaller-testdir3679081548/syzkaller.1r9brb/97/file1 supports timestamps until 2038 (0x7fffffff) [ 134.776156][ T4043] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 134.785856][ T4043] EXT4-fs (loop2): Remounting filesystem read-only [ 134.792207][ T4043] EXT4-fs error (device loop2) in ext4_setattr:5881: Corrupt filesystem [ 134.805245][ T2500] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 134.961797][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.969059][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.976652][ T4049] device bridge_slave_0 entered promiscuous mode [ 134.983992][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.990913][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.998986][ T4049] device bridge_slave_1 entered promiscuous mode [ 135.038511][ T393] cdc_ncm 4-1:1.0: bind() failure [ 135.044675][ T393] cdc_ncm 4-1:1.1: bind() failure [ 135.046021][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.050721][ T393] usb 4-1: USB disconnect, device number 15 [ 135.056508][ T4049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.056619][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.076120][ T4049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.104246][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.111825][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.119246][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.126455][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.136405][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.144753][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.151609][ T2629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.162401][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.170542][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.177366][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.189752][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.199427][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.215038][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.271762][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.281463][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.289866][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.297684][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.380691][ T4057] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters [ 135.395311][ T4057] EXT4-fs (loop0): 1 orphan inode deleted [ 135.401089][ T4057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 135.410121][ T4057] ext4 filesystem being mounted at /root/syzkaller-testdir2001969854/syzkaller.42LaFC/64/file1 supports timestamps until 2038 (0x7fffffff) [ 135.507196][ T4064] xt_TCPMSS: Only works on TCP SYN packets [ 135.583394][ T4072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.584916][ T4076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.590263][ T4072] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 135.610134][ T4072] EXT4-fs (loop3): 1 truncate cleaned up [ 135.618697][ T4072] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 135.634444][ T4072] syz-executor.3[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.634478][ T4072] syz-executor.3[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.638527][ T519] Bluetooth: hci0: command 0x1009 tx timeout [ 135.695306][ T4072] overlayfs: missing 'lowerdir' [ 135.700807][ T4072] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 135.748903][ T7] device bridge_slave_1 left promiscuous mode [ 135.754957][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.762486][ T7] device bridge_slave_0 left promiscuous mode [ 135.768805][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.844436][ T4083] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.853642][ T4083] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.876197][ T4085] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.885416][ T124] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.892816][ T4085] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.112628][ T4095] tipc: Enabling of bearer rejected, failed to enable media [ 136.258548][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.272322][ T124] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.278668][ T4102] FAT-fs (loop3): Directory bread(block 64) failed [ 136.285690][ T124] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.293846][ T4102] FAT-fs (loop3): Directory bread(block 65) failed [ 136.302086][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.306834][ T4102] FAT-fs (loop3): Directory bread(block 66) failed [ 136.315656][ T124] usb 3-1: config 0 descriptor?? [ 136.320761][ T4105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.334912][ T4102] FAT-fs (loop3): Directory bread(block 67) failed [ 136.342342][ T4102] FAT-fs (loop3): Directory bread(block 68) failed [ 136.348943][ T4102] FAT-fs (loop3): Directory bread(block 69) failed [ 136.355334][ T4102] FAT-fs (loop3): Directory bread(block 70) failed [ 136.362155][ T4102] FAT-fs (loop3): Directory bread(block 71) failed [ 136.368961][ T4102] FAT-fs (loop3): Directory bread(block 72) failed [ 136.375283][ T4102] FAT-fs (loop3): Directory bread(block 73) failed [ 136.384073][ T4107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.391284][ T4107] EXT4-fs (loop4): 1 truncate cleaned up [ 136.399014][ T4107] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 136.410687][ T4107] syz-executor.4[4107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.410738][ T4107] syz-executor.4[4107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.449434][ T4107] overlayfs: missing 'lowerdir' [ 136.468381][ T4107] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 136.478422][ T2629] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.489824][ T4111] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.500262][ T4111] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz-executor.3: inode #16777216: comm syz-executor.3: iget: illegal inode # [ 136.514358][ T4111] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz-executor.3: Bad quota inode: 16777216, type: 2 [ 136.528481][ T4111] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 136.550416][ T4118] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.550881][ T4111] EXT4-fs (loop3): mount failed [ 136.559652][ T4118] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.647149][ T4120] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.656389][ T4120] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.680064][ T4111] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 136.710134][ T4123] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.789277][ T124] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.796615][ T124] plantronics 0003:047F:FFFF.0015: unbalanced collection at end of report description [ 136.806390][ T124] plantronics 0003:047F:FFFF.0015: parse failed [ 136.812624][ T124] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22 [ 137.008854][ T2629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.009125][ T18] usb 3-1: USB disconnect, device number 11 [ 137.019601][ T2629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.035037][ T2629] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.044629][ T2629] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.054130][ T2629] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.063588][ T2629] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 137.228521][ T2629] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.237472][ T2629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.245367][ T2629] usb 1-1: Product: syz [ 137.249434][ T2629] usb 1-1: Manufacturer: syz [ 137.253960][ T2629] usb 1-1: SerialNumber: syz [ 137.434666][ T23] kauditd_printk_skb: 20 callbacks suppressed [ 137.434675][ T23] audit: type=1400 audit(1985637334.126:11221): avc: denied { getopt } for pid=4138 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.504823][ T23] audit: type=1400 audit(1985637334.196:11222): avc: denied { create } for pid=4140 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.525424][ T23] audit: type=1400 audit(1985637334.196:11223): avc: denied { write } for pid=4140 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.538462][ T2629] cdc_ncm 1-1:1.0: bind() failure [ 137.548867][ T23] audit: type=1400 audit(1985637334.196:11224): avc: denied { nlmsg_write } for pid=4140 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.579330][ T2629] cdc_ncm 1-1:1.1: bind() failure [ 137.586153][ T2629] usb 1-1: USB disconnect, device number 14 [ 137.588888][ T4146] FAT-fs (loop4): Directory bread(block 64) failed [ 137.598452][ T4146] FAT-fs (loop4): Directory bread(block 65) failed [ 137.604827][ T4146] FAT-fs (loop4): Directory bread(block 66) failed [ 137.611137][ T4146] FAT-fs (loop4): Directory bread(block 67) failed [ 137.617603][ T4146] FAT-fs (loop4): Directory bread(block 68) failed [ 137.623973][ T4146] FAT-fs (loop4): Directory bread(block 69) failed [ 137.630253][ T4146] FAT-fs (loop4): Directory bread(block 70) failed [ 137.636522][ T4146] FAT-fs (loop4): Directory bread(block 71) failed [ 137.643065][ T4146] FAT-fs (loop4): Directory bread(block 72) failed [ 137.649434][ T4146] FAT-fs (loop4): Directory bread(block 73) failed [ 137.662326][ T4152] netlink: 'syz-executor.3': attribute type 31 has an invalid length. [ 137.670468][ T4152] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 137.679865][ T4149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.686565][ T4149] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 137.696795][ T4149] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 137.706517][ T4149] EXT4-fs (loop2): 1 truncate cleaned up [ 137.728529][ T4149] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 137.749298][ T4149] syz-executor.2[4149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.749346][ T4149] syz-executor.2[4149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.817813][ T4149] overlayfs: missing 'lowerdir' [ 137.836168][ T4162] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.842666][ T4149] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 137.852821][ T4162] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 137.863943][ T4162] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 137.876411][ T4162] EXT4-fs (loop3): 1 truncate cleaned up [ 137.883940][ T4162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 137.910626][ T4170] tipc: Enabling of bearer rejected, failed to enable media [ 137.950465][ T4162] overlayfs: missing 'lowerdir' [ 137.956511][ T4162] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 138.032574][ T23] audit: type=1400 audit(1985637334.726:11225): avc: denied { lock } for pid=4177 comm="syz-executor.3" path="socket:[29782]" dev="sockfs" ino=29782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 139.530058][ T4217] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.536911][ T4217] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 139.547727][ T4217] EXT4-fs (loop1): 1 truncate cleaned up [ 139.565696][ T4217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 139.576958][ T4217] bpf_get_probe_write_proto: 2 callbacks suppressed [ 139.576965][ T4217] syz-executor.1[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.577015][ T4217] syz-executor.1[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.627525][ T4217] overlayfs: missing 'lowerdir' [ 139.644660][ T4217] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 140.010387][ T4244] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.040466][ T4244] EXT4-fs error (device loop0): ext4_quota_enable:6056: comm syz-executor.0: inode #16777216: comm syz-executor.0: iget: illegal inode # [ 140.055165][ T4244] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 16777216, type: 2 [ 140.067455][ T4244] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 140.117243][ T4244] EXT4-fs (loop0): mount failed [ 140.341532][ T4244] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 141.799844][ T4313] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 141.812311][ T4313] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.826780][ T402] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 141.834336][ T4313] EXT4-fs (loop1): Remounting filesystem read-only [ 142.499589][ T3912] Bluetooth: hci0: command 0x1003 tx timeout [ 142.538445][ T402] usb 4-1: Using ep0 maxpacket: 32 [ 142.645947][ T4331] EXT4-fs (loop4): Test dummy encryption mode enabled [ 142.658521][ T402] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.668133][ T402] usb 4-1: config 1 has no interface number 1 [ 142.680119][ T4331] EXT4-fs error (device loop4): ext4_quota_enable:6056: comm syz-executor.4: inode #16777216: comm syz-executor.4: iget: illegal inode # [ 142.694324][ T402] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.704576][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 142.720016][ T402] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.720043][ T4331] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz-executor.4: Bad quota inode: 16777216, type: 2 [ 142.742853][ T4331] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 142.765300][ T4331] EXT4-fs (loop4): mount failed [ 142.908487][ T402] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.917334][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.925140][ T402] usb 4-1: Product: syz [ 142.929169][ T402] usb 4-1: Manufacturer: syz [ 142.933546][ T402] usb 4-1: SerialNumber: syz [ 143.166231][ T4331] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 143.258569][ T402] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 143.320902][ T402] usb 4-1: USB disconnect, device number 16 [ 143.540965][ T4347] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 143.559002][ T4347] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.596256][ T4347] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.618240][ T4347] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 143.631507][ T4347] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.638464][ T4347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.680081][ T4355] EXT4-fs (loop4): Test dummy encryption mode enabled [ 143.692969][ T4355] EXT4-fs error (device loop4): ext4_quota_enable:6056: comm syz-executor.4: inode #16777216: comm syz-executor.4: iget: illegal inode # [ 143.707096][ T4355] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz-executor.4: Bad quota inode: 16777216, type: 2 [ 143.719069][ T4355] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 143.748962][ T4355] EXT4-fs (loop4): mount failed [ 143.759749][ T4361] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 143.846293][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 143.846303][ T23] audit: type=1326 audit(1985637340.536:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 143.908825][ T23] audit: type=1326 audit(1985637340.536:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 143.932630][ T23] audit: type=1326 audit(1985637340.536:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 143.958178][ T23] audit: type=1326 audit(1985637340.536:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 143.958306][ T4355] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 143.982610][ T23] audit: type=1326 audit(1985637340.586:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 144.016982][ T23] audit: type=1326 audit(1985637340.586:11234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 144.032929][ T4369] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 144.040991][ T23] audit: type=1326 audit(1985637340.586:11235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 144.081453][ T4371] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 2048 (only 8 groups) [ 144.085692][ T23] audit: type=1326 audit(1985637340.586:11236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 144.139926][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.146997][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.177090][ T23] audit: type=1326 audit(1985637340.586:11237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 144.201276][ T23] audit: type=1326 audit(1985637340.596:11238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2cb6abee9 code=0x7ffc0000 [ 144.552959][ T4375] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 144.572470][ T4375] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.588871][ T4375] EXT4-fs (loop1): Remounting filesystem read-only [ 144.622126][ T4390] EXT4-fs (loop0): Test dummy encryption mode enabled [ 144.640020][ T4390] EXT4-fs error (device loop0): ext4_quota_enable:6056: comm syz-executor.0: inode #16777216: comm syz-executor.0: iget: illegal inode # [ 144.654280][ T4390] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 16777216, type: 2 [ 144.666074][ T4390] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 144.682423][ T4390] EXT4-fs (loop0): mount failed [ 144.718247][ T4394] FAT-fs (loop3): Directory bread(block 64) failed [ 144.724617][ T4394] FAT-fs (loop3): Directory bread(block 65) failed [ 144.730945][ T4394] FAT-fs (loop3): Directory bread(block 66) failed [ 144.737231][ T4394] FAT-fs (loop3): Directory bread(block 67) failed [ 144.743649][ T4394] FAT-fs (loop3): Directory bread(block 68) failed [ 144.750042][ T4394] FAT-fs (loop3): Directory bread(block 69) failed [ 144.756479][ T4394] FAT-fs (loop3): Directory bread(block 70) failed [ 144.762792][ T4394] FAT-fs (loop3): Directory bread(block 71) failed [ 144.768490][ T3912] Bluetooth: hci0: command 0x1001 tx timeout [ 144.769182][ T4394] FAT-fs (loop3): Directory bread(block 72) failed [ 144.775076][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 144.781298][ T4394] FAT-fs (loop3): Directory bread(block 73) failed [ 144.917682][ T4390] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 146.084797][ T4418] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 146.147507][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.154562][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.079583][ T3912] Bluetooth: hci0: command 0x1009 tx timeout [ 147.170023][ T4440] device syzkaller0 entered promiscuous mode [ 147.206544][ T4442] FAT-fs (loop1): Directory bread(block 64) failed [ 147.213756][ T4442] FAT-fs (loop1): Directory bread(block 65) failed [ 147.220712][ T4442] FAT-fs (loop1): Directory bread(block 66) failed [ 147.227077][ T4442] FAT-fs (loop1): Directory bread(block 67) failed [ 147.233525][ T4442] FAT-fs (loop1): Directory bread(block 68) failed [ 147.240040][ T4442] FAT-fs (loop1): Directory bread(block 69) failed [ 147.246490][ T4442] FAT-fs (loop1): Directory bread(block 70) failed [ 147.253137][ T4442] FAT-fs (loop1): Directory bread(block 71) failed [ 147.259542][ T4442] FAT-fs (loop1): Directory bread(block 72) failed [ 147.265819][ T4442] FAT-fs (loop1): Directory bread(block 73) failed [ 148.990262][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 148.999218][ T4471] ext4 filesystem being mounted at /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0 supports timestamps until 2038 (0x7fffffff) [ 149.142264][ T4471] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 149.624258][ T4471] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 149.695956][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 149.831539][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 149.857268][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 149.884081][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 149.908964][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 149.936373][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 149.969151][ T2764] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor.0: path /root/syzkaller-testdir2001969854/syzkaller.42LaFC/84/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 149.994023][ T2764] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.0: lblock 23 mapped to illegal pblock 18 (length 1) [ 150.030769][ T4495] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 150.041933][ T4495] ext4 filesystem being mounted at /root/syzkaller-testdir1427141931/syzkaller.3zDgfw/108/bus supports timestamps until 2038 (0x7fffffff) [ 150.243247][ T4504] incfs: Backing dir is not set, filesystem can't be mounted. [ 150.250855][ T4504] incfs: mount failed -2 [ 151.017264][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.025091][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.032466][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.045536][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.052827][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.054006][ T23] kauditd_printk_skb: 99 callbacks suppressed [ 151.054015][ T23] audit: type=1326 audit(1985637347.736:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.060023][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.094883][ T23] audit: type=1326 audit(1985637347.736:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.098383][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.129785][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.136999][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.148002][ T23] audit: type=1326 audit(1985637347.786:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.178712][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.189288][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.228256][ T23] audit: type=1326 audit(1985637347.786:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.258475][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.272186][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.307974][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.321998][ T4524] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 151.330501][ T23] audit: type=1326 audit(1985637347.786:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.332947][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.355563][ T23] audit: type=1326 audit(1985637347.786:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.365148][ T4524] ext4 filesystem being mounted at /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0 supports timestamps until 2038 (0x7fffffff) [ 151.385740][ T23] audit: type=1326 audit(1985637347.816:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.425114][ T23] audit: type=1326 audit(1985637347.816:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.451366][ T2764] Trying to write to read-only block-device loop0 (partno 0) [ 151.457038][ T23] audit: type=1326 audit(1985637347.826:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.483119][ T23] audit: type=1326 audit(1985637347.826:11347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd756ee9 code=0x7ffc0000 [ 151.484297][ T4477] Trying to write to read-only block-device loop0 (partno 0) [ 151.518339][ T4524] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 151.527968][ T4524] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 151.557516][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 151.611385][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 151.643306][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 151.668901][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 151.698633][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 151.701462][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.728720][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 151.730963][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.756158][ T4049] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor.2: path /root/syzkaller-testdir2712768625/syzkaller.AuDfhr/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 151.788012][ T4049] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.2: lblock 23 mapped to illegal pblock 18 (length 1) [ 151.803232][ T4540] device bridge_slave_0 entered promiscuous mode [ 151.810786][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.817670][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.825116][ T4540] device bridge_slave_1 entered promiscuous mode [ 151.897478][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.904334][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.911472][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.918207][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.950737][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.958209][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.966243][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.979421][ T4553] EXT4-fs (loop1): Ignoring removed bh option [ 151.990085][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.000741][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.007570][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.015376][ T4550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 152.016179][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.027453][ T4550] ext4 filesystem being mounted at /root/syzkaller-testdir1427141931/syzkaller.3zDgfw/110/file0 supports timestamps until 2038 (0x7fffffff) [ 152.031964][ T4553] EXT4-fs error (device loop1): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor.1: invalid block [ 152.058197][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.065032][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.081696][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.090163][ T4553] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 152.102698][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.111428][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.119237][ T4553] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 152.134916][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.158412][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.166616][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.175303][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.183308][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.198469][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.206468][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.216015][ T9] device bridge_slave_1 left promiscuous mode [ 152.222247][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.232035][ T9] device bridge_slave_0 left promiscuous mode [ 152.238521][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.320718][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.330700][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.339139][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.347295][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.965923][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.973181][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.981088][ T4580] device bridge_slave_0 entered promiscuous mode [ 152.990604][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.997521][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.005015][ T4580] device bridge_slave_1 entered promiscuous mode [ 153.101846][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.109874][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.126846][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.144947][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.161234][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.168089][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.175540][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.183808][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.191910][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.198749][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.212227][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.280277][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.289659][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.313238][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.322495][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.340991][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.350668][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.360161][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.404691][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.413842][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.422190][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.429775][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.437031][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.444560][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.451878][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.459716][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.467021][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.474357][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.519364][ T9] device bridge_slave_1 left promiscuous mode [ 153.548178][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.559429][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.568302][ T9] device bridge_slave_0 left promiscuous mode [ 153.575373][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.629796][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.644266][ T2629] Bluetooth: hci0: command 0x1003 tx timeout [ 153.660005][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 153.660769][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.673374][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.680914][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.690279][ T4049] Trying to write to read-only block-device loop2 (partno 0) [ 153.700041][ T4529] Trying to write to read-only block-device loop2 (partno 0) [ 154.074555][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.081548][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.088845][ T4597] device bridge_slave_0 entered promiscuous mode [ 154.095687][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.102581][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.109765][ T4597] device bridge_slave_1 entered promiscuous mode [ 154.189629][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.196481][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.203602][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.210369][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.232829][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.240752][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.241391][ T4602] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 154.256259][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.268967][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.276909][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.283731][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.291003][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.298945][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.305763][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.317457][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.339262][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.362014][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.371125][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.389864][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.417120][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.434544][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.490376][ T4619] EXT4-fs (loop2): Invalid journal IO priority (must be 0-7) [ 154.697534][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.704477][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.711629][ T4628] device bridge_slave_0 entered promiscuous mode [ 154.723673][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.730525][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.737658][ T4628] device bridge_slave_1 entered promiscuous mode [ 154.750010][ T4631] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 154.766226][ T4631] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz-executor.0: bad orphan inode 15 [ 154.776559][ T4631] ext4_test_bit(bit=14, block=4) = 1 [ 154.783067][ T4631] is_bad_inode(inode)=0 [ 154.787145][ T4631] NEXT_ORPHAN(inode)=0 [ 154.791026][ T4631] max_ino=32 [ 154.793970][ T4631] i_nlink=1 [ 154.796937][ T4631] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 154.802263][ T9] device bridge_slave_1 left promiscuous mode [ 154.811616][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.814419][ T4631] EXT4-fs error (device loop0): ext4_validate_block_bitmap:409: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 154.830999][ T9] device bridge_slave_0 left promiscuous mode [ 154.836917][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.920670][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.927521][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.934966][ T4629] device bridge_slave_0 entered promiscuous mode [ 154.958862][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.965697][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.973866][ T4629] device bridge_slave_1 entered promiscuous mode [ 155.022024][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.028874][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.035978][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.042764][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.066011][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.075290][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.180313][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.187500][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.194839][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.195614][ T4649] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 155.202997][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.210301][ T4649] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 155.213250][ T4649] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.218273][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.238999][ T2629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.246984][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.254990][ T4649] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 155.255260][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.268223][ T4649] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 155.271727][ T2629] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.278337][ T4649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.285174][ T2629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.298529][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.307531][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.315747][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.321225][ T4649] attempt to access beyond end of device [ 155.321225][ T4649] loop2: rw=2049, want=45192, limit=40427 [ 155.323949][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.389105][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.397269][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.439524][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.447267][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.467394][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.474405][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.481791][ T4652] device bridge_slave_0 entered promiscuous mode [ 155.488401][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.495721][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.503212][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.511251][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.519935][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.526754][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.533999][ T4652] device bridge_slave_1 entered promiscuous mode [ 155.548635][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.556771][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.588957][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.595780][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.603086][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.611270][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.619202][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.626102][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.633386][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.641101][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.656004][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.703556][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.712453][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.720810][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.729124][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.756739][ T519] Bluetooth: hci0: command 0x1001 tx timeout [ 155.764037][ T3622] Bluetooth: hci0: sending frame failed (-49) [ 155.775122][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.783560][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.807006][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.106424][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.115493][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.124222][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.132774][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.190201][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.199130][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.218452][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.228537][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.236542][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.243379][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.251384][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.259580][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.259977][ T4676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 156.267589][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.276565][ T4676] ext4 filesystem being mounted at /root/syzkaller-testdir593042869/syzkaller.GYANNG/2/file0 supports timestamps until 2038 (0x7fffffff) [ 156.282907][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.283235][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.311894][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.319771][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.327765][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.348480][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.356051][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.364272][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.372533][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.380351][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.396680][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.405076][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.421156][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.429504][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.437554][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.445662][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.508404][ T3912] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.629116][ T9] device bridge_slave_1 left promiscuous mode [ 156.635059][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.642226][ T9] device bridge_slave_0 left promiscuous mode [ 156.648128][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.655605][ T9] device bridge_slave_1 left promiscuous mode [ 156.661542][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.668574][ T9] device bridge_slave_0 left promiscuous mode [ 156.674468][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.681709][ T9] device bridge_slave_1 left promiscuous mode [ 156.687691][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.694888][ T9] device bridge_slave_0 left promiscuous mode [ 156.700866][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.748608][ T74] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 156.758559][ T3912] usb 2-1: Using ep0 maxpacket: 16 [ 156.878464][ T3912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 156.888416][ T2516] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.008526][ T74] usb 1-1: Using ep0 maxpacket: 16 [ 157.048592][ T3912] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 157.057468][ T3912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.065346][ T3912] usb 2-1: Product: syz [ 157.069260][ T3912] usb 2-1: Manufacturer: syz [ 157.073653][ T3912] usb 2-1: SerialNumber: syz [ 157.081497][ T3912] usb 2-1: config 0 descriptor?? [ 157.119193][ T3912] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 157.126788][ T3912] usb 2-1: Detected FT232RL [ 157.131243][ T74] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.138419][ T2516] usb 3-1: Using ep0 maxpacket: 16 [ 157.142102][ T74] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.156418][ T74] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.169133][ T74] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.177943][ T74] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.186687][ T74] usb 1-1: config 0 descriptor?? [ 157.278603][ T2516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.289821][ T2516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.299331][ T2516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.311892][ T2516] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.320868][ T2516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.329258][ T2516] usb 3-1: config 0 descriptor?? [ 157.338507][ T3912] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 157.589525][ T3912] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 157.728474][ T74] usbhid 1-1:0.0: can't add hid device: -71 [ 157.734287][ T74] usbhid: probe of 1-1:0.0 failed with error -71 [ 157.741190][ T74] usb 1-1: USB disconnect, device number 15 [ 157.792407][ T3912] usb 2-1: USB disconnect, device number 11 [ 157.798535][ T391] Bluetooth: hci0: command 0x1009 tx timeout [ 157.804884][ T3912] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 157.814113][ T3912] ftdi_sio 2-1:0.0: device disconnected [ 157.868470][ T2516] usbhid 3-1:0.0: can't add hid device: -71 [ 157.874275][ T2516] usbhid: probe of 3-1:0.0 failed with error -71 [ 157.881329][ T2516] usb 3-1: USB disconnect, device number 12 [ 158.174618][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.181492][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.259793][ T4703] EXT4-fs (loop0): Unrecognized mount option "nobarrier=noblock_validity" or missing value [ 158.411760][ T4708] device syzkaller0 entered promiscuous mode [ 158.429207][ T4712] xt_l2tp: unknown flags: 10 [ 158.480397][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,sysvgroups,norecovery,errors=continue,abort,quota,noauto_da_alloc,lazytime,,errors=continue [ 158.694835][ T23] kauditd_printk_skb: 41 callbacks suppressed [ 158.694844][ T23] audit: type=1400 audit(1985637355.386:11389): avc: denied { name_bind } for pid=4730 comm="syz-executor.1" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 158.958436][ T3912] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.999565][ T4741] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 159.007316][ T4741] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.019143][ T4741] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.055576][ T4741] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 159.069022][ T4741] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 159.075929][ T4741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 159.100529][ T4741] attempt to access beyond end of device [ 159.100529][ T4741] loop1: rw=2049, want=78368, limit=40427 [ 159.116712][ T4741] attempt to access beyond end of device [ 159.116712][ T4741] loop1: rw=2049, want=45104, limit=40427 [ 159.198467][ T3912] usb 3-1: Using ep0 maxpacket: 16 [ 159.328502][ T3912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.359362][ T3912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.378515][ T3912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.398703][ T3912] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.428511][ T3912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.448646][ T3912] usb 3-1: config 0 descriptor?? [ 159.749460][ T4748] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.760324][ T4748] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.789258][ T4748] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.825720][ T4748] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 159.835652][ T4750] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 159.846538][ T4750] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.859163][ T4748] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.866096][ T4748] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.876641][ T4750] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.913252][ T4748] attempt to access beyond end of device [ 159.913252][ T4748] loop4: rw=2049, want=78368, limit=40427 [ 159.940322][ T4750] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 159.950199][ T4748] attempt to access beyond end of device [ 159.950199][ T4748] loop4: rw=2049, want=45104, limit=40427 [ 159.965586][ T4750] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 159.973706][ T4750] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 159.989456][ T3912] usbhid 3-1:0.0: can't add hid device: -71 [ 160.002164][ T4750] attempt to access beyond end of device [ 160.002164][ T4750] loop1: rw=2049, want=78368, limit=40427 [ 160.009489][ T3912] usbhid: probe of 3-1:0.0 failed with error -71 [ 160.018054][ T4750] attempt to access beyond end of device [ 160.018054][ T4750] loop1: rw=2049, want=45104, limit=40427 [ 160.039538][ T3912] usb 3-1: USB disconnect, device number 13 [ 160.347604][ T4762] device syzkaller0 entered promiscuous mode [ 160.536687][ T4769] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,sysvgroups,norecovery,errors=continue,abort,quota,noauto_da_alloc,lazytime,,errors=continue [ 160.776269][ T23] audit: type=1400 audit(1985637357.466:11390): avc: denied { bind } for pid=4785 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.782465][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.802582][ T4789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.918524][ T121] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 161.170978][ T4794] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 161.186645][ T4794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.206113][ T4794] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.247964][ T4794] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 161.254929][ T4794] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.278466][ T121] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 161.288049][ T4794] attempt to access beyond end of device [ 161.288049][ T4794] loop4: rw=2049, want=78064, limit=40427 [ 161.300890][ T121] usb 2-1: config 0 has no interface number 0 [ 161.335452][ T23] audit: type=1400 audit(1985637358.026:11391): avc: denied { mounton } for pid=4816 comm="syz-executor.2" path="/root/syzkaller-testdir2963606900/syzkaller.55CMaf/23/file0" dev="incremental-fs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.488546][ T121] usb 2-1: New USB device found, idVendor=04b0, idProduct=0301, bcdDevice= 0.10 [ 161.501746][ T121] usb 2-1: New USB device strings: Mfr=1, Product=24, SerialNumber=3 [ 161.522703][ T121] usb 2-1: Product: syz [ 161.526730][ T121] usb 2-1: Manufacturer: syz [ 161.531177][ T121] usb 2-1: SerialNumber: syz [ 161.536385][ T121] usb 2-1: config 0 descriptor?? [ 161.598923][ T121] usb-storage 2-1:0.3: USB Mass Storage device detected [ 161.626551][ T121] usb-storage 2-1:0.3: Quirks match for vid 04b0 pid 0301: 80 [ 161.665358][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.679834][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.694776][ T4819] device bridge_slave_0 entered promiscuous mode [ 161.705566][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.712665][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.720399][ T23] audit: type=1400 audit(1985637358.416:11392): avc: denied { bind } for pid=4825 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.744944][ T4819] device bridge_slave_1 entered promiscuous mode [ 161.800111][ T121] usb 2-1: USB disconnect, device number 12 [ 161.853807][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.860671][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.867771][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.874557][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.930778][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.948808][ T2516] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.956402][ T2516] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.997614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.009343][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.016206][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.046967][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.060094][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.066949][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.080086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.103684][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.125890][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.148883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.168801][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.180159][ T7] device bridge_slave_1 left promiscuous mode [ 162.186124][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.211768][ T7] device bridge_slave_0 left promiscuous mode [ 162.224230][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.375358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.395104][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.725089][ T4851] FAT-fs (loop2): Directory bread(block 64) failed [ 162.734582][ T4851] FAT-fs (loop2): Directory bread(block 65) failed [ 162.745117][ T4851] FAT-fs (loop2): Directory bread(block 66) failed [ 162.756619][ T4851] FAT-fs (loop2): Directory bread(block 67) failed [ 162.763078][ T4851] FAT-fs (loop2): Directory bread(block 68) failed [ 162.777574][ T4851] FAT-fs (loop2): Directory bread(block 69) failed [ 162.784233][ T4851] FAT-fs (loop2): Directory bread(block 70) failed [ 162.790640][ T4851] FAT-fs (loop2): Directory bread(block 71) failed [ 162.796974][ T4851] FAT-fs (loop2): Directory bread(block 72) failed [ 162.803306][ T4851] FAT-fs (loop2): Directory bread(block 73) failed [ 162.850957][ T4839] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 162.858591][ T4843] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 162.866110][ T4843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 162.874245][ T4839] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 162.883315][ T7] attempt to access beyond end of device [ 162.883315][ T7] loop2: rw=1, want=1868, limit=256 [ 162.904206][ T4839] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.911331][ T4843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.984313][ T4839] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 162.999744][ T4843] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 163.007655][ T4843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.019398][ T4839] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 163.027389][ T4839] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 163.033508][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue [ 163.046328][ T4843] attempt to access beyond end of device [ 163.046328][ T4843] loop3: rw=2049, want=78064, limit=40427 [ 163.050002][ T4863] ext4 filesystem being mounted at /root/syzkaller-testdir2377326302/syzkaller.XSknUK/2/bus supports timestamps until 2038 (0x7fffffff) [ 163.075050][ T4839] attempt to access beyond end of device [ 163.075050][ T4839] loop4: rw=2049, want=78368, limit=40427 [ 163.104082][ T23] audit: type=1400 audit(1985637359.796:11393): avc: denied { create } for pid=4862 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.109288][ T4839] attempt to access beyond end of device [ 163.109288][ T4839] loop4: rw=2049, want=45104, limit=40427 [ 163.128290][ T23] audit: type=1400 audit(1985637359.816:11394): avc: denied { write } for pid=4862 comm="syz-executor.2" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.158062][ T23] audit: type=1400 audit(1985637359.816:11395): avc: denied { open } for pid=4862 comm="syz-executor.2" path="/root/syzkaller-testdir2377326302/syzkaller.XSknUK/2/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.193799][ T23] audit: type=1400 audit(1985637359.816:11396): avc: denied { read } for pid=4862 comm="syz-executor.2" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.304264][ T4871] device syzkaller0 entered promiscuous mode [ 163.339626][ T4873] __nla_validate_parse: 2 callbacks suppressed [ 163.339634][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.379025][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. serialport: VM disconnected.