last executing test programs: 2m10.645797185s ago: executing program 32 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setgid(0xffffffffffffffff) 1m46.747661868s ago: executing program 33 (id=220): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11, 0x0) fcntl$getflags(r0, 0x401) 1m26.082921236s ago: executing program 34 (id=1052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000, 0x26c}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000002, r1) 1m2.719111041s ago: executing program 7 (id=1849): unshare(0x400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 1m2.708364001s ago: executing program 7 (id=1852): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a59", 0xc1}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1m2.637296201s ago: executing program 7 (id=1855): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180"], 0x94}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 1m2.616906111s ago: executing program 7 (id=1856): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 1m2.556454721s ago: executing program 7 (id=1860): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m2.48680528s ago: executing program 7 (id=1864): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 1m2.42142506s ago: executing program 35 (id=1864): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 41.472529626s ago: executing program 6 (id=2252): setresuid(0xee01, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) 41.446768466s ago: executing program 6 (id=2254): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x40100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x20040000) 41.368975846s ago: executing program 6 (id=2256): r0 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 39.216665466s ago: executing program 9 (id=2315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 39.183583976s ago: executing program 9 (id=2316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x1) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x2000000, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 39.053409485s ago: executing program 9 (id=2317): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) 38.550170993s ago: executing program 9 (id=2326): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r0, r0, 0x14, 0x34, 0x0, @void, @void, @void, @value}, 0x20) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) 37.462163838s ago: executing program 9 (id=2340): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x228, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000005c0)=0x81, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 37.334332277s ago: executing program 37 (id=2340): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000340)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x228, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000005c0)=0x81, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 22.16411199s ago: executing program 4 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback}}}}, 0x0) 22.096641709s ago: executing program 4 (id=2700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.067962709s ago: executing program 4 (id=2701): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r1, 0x0, 0xe065) 22.023500399s ago: executing program 8 (id=2704): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r0}, 0x10) unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f00000022c0)}, 0x10) 21.984089869s ago: executing program 8 (id=2705): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x4, 0x2bcc8a99, 0x0}) 21.938874149s ago: executing program 8 (id=2708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7a2, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7a2, 0x0, 0x1, r2, 0x1}) 21.899526349s ago: executing program 4 (id=2709): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000300)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@auto_da_alloc}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d3cbf7db71038259ca171cc2a311ef97e4298d1e14ef01060000e9009600fdffe0ff00000000008000000000000000000004000000c9ca4360", "d300e6d6ae9ef30bea2a004000", [0x1]}) 21.797318958s ago: executing program 8 (id=2714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x400000000000000}}, "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", "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"}) 21.709545848s ago: executing program 4 (id=2715): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r0}, 0x18) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 21.619204708s ago: executing program 8 (id=2716): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x81, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x40902, 0x0) syz_fuse_handle_req(r0, &(0x7f0000001400)="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", 0x2000, &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.488541517s ago: executing program 8 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 21.003272995s ago: executing program 4 (id=2722): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1a00040, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c756e695f786c6174653d302c636865636b3d7374726963742c747a3d5554432c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c757466383d302c00d4c15a86ebd6334f4a1df54b0a3c95f0cac25b598d45372502aa1517fd41f9e70c3061bd26164a5576b4327116653b7918b8d63e78d8e4852fcbe3787cd92bbae373bea853fededf0cab4dd8265900"/230], 0x3, 0x350, &(0x7f0000000580)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000a40), 0x0}, 0x20) creat(&(0x7f0000000200)='./bus\x00', 0x0) 20.905622105s ago: executing program 38 (id=2722): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1a00040, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c756e695f786c6174653d302c636865636b3d7374726963742c747a3d5554432c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c757466383d302c00d4c15a86ebd6334f4a1df54b0a3c95f0cac25b598d45372502aa1517fd41f9e70c3061bd26164a5576b4327116653b7918b8d63e78d8e4852fcbe3787cd92bbae373bea853fededf0cab4dd8265900"/230], 0x3, 0x350, &(0x7f0000000580)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000a40), 0x0}, 0x20) creat(&(0x7f0000000200)='./bus\x00', 0x0) 6.38301039s ago: executing program 39 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.640201163s ago: executing program 2 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x100, 0x8, 0x0) 2.616496712s ago: executing program 2 (id=3143): r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200012, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES32=r0], 0x1, 0x52b, &(0x7f0000001600)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$binfmt_elf64(r1, &(0x7f0000000b80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x6, 0x8, 0xc0, 0x1, 0x2, 0x261e189c7a92945e, 0x9794, 0x217, 0x40, 0x106, 0x7b, 0x3, 0x38, 0x1, 0x7f, 0x4, 0x7fff}, [{0x1, 0x8, 0x55a, 0x163, 0x7ff, 0x2, 0x2, 0x3}]}, 0x78) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 2.532468912s ago: executing program 2 (id=3147): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000400)={0x40, 0x9, 0x2, "b7dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xf, 0x3, "29de5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 923.299075ms ago: executing program 5 (id=3215): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000fc0100000000000000000000feff000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400"], 0x184}}, 0x0) 923.188345ms ago: executing program 5 (id=3216): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fallocate(0xffffffffffffffff, 0x21, 0x63e, 0x2) 901.140735ms ago: executing program 1 (id=3217): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x3fc1, 0x0, 0x0, 0xffffff68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0xfffffffc, 0x0, 0x0, 0xb13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4], [0xffffffff, 0x20000003, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80, 0x8666, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4]}, 0x45c) 876.959575ms ago: executing program 1 (id=3218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) 860.120345ms ago: executing program 1 (id=3219): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 755.357144ms ago: executing program 5 (id=3220): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x58, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) 672.885754ms ago: executing program 5 (id=3222): r0 = socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, &(0x7f0000000180)="0098", 0x2, 0xfffffffffffffffb) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x100023, 0x78}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xffff, 0x100, 0x0, 0x29, 0x0, @loopback, @local}}}}) 626.958524ms ago: executing program 5 (id=3224): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x4, 0x0) 513.195473ms ago: executing program 3 (id=3228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 493.832203ms ago: executing program 5 (id=3229): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 448.967703ms ago: executing program 3 (id=3231): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x800, 0x0, 0xfd, 0x0, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./bus/file0\x00', r0, &(0x7f0000000400)='./file2\x00', 0x2) 407.063212ms ago: executing program 0 (id=3232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)={0x78, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @random=0x7fff, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x6, 0x3c, 0x3}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x37, 0x38, 0x8}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x78}}, 0x0) 372.088963ms ago: executing program 1 (id=3233): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x3000}], 0x1}, 0x7}], 0x1, 0x100, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 361.453813ms ago: executing program 0 (id=3234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='$(\x00', 0xffffffffffffffff) 328.786002ms ago: executing program 0 (id=3235): syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 302.647182ms ago: executing program 2 (id=3236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc022, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 291.526662ms ago: executing program 3 (id=3237): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000004c0)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 261.305522ms ago: executing program 2 (id=3238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000040000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x12ef, 0x1}) 218.906972ms ago: executing program 0 (id=3239): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b000000000002"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 210.057142ms ago: executing program 2 (id=3240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 167.669782ms ago: executing program 0 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) 166.537482ms ago: executing program 3 (id=3242): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0x2}, 0x8, 0x20400000, 0x0, 0x0, 0x0, 0x20000, 0x0}) 131.210411ms ago: executing program 0 (id=3243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000000000080010077e5087fc878f49e2486"]) 97.504491ms ago: executing program 3 (id=3244): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) unshare(0x28000600) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x8, 0x7, 0xff, 0xf42}) 35.515541ms ago: executing program 1 (id=3245): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}]}, 0x4c}}, 0x0) 15.953911ms ago: executing program 3 (id=3246): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private0}}}}}}, 0x0) 0s ago: executing program 1 (id=3247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 110.552774][ T5173] System zones: 1-12 [ 110.557765][ T5173] EXT4-fs (loop8): 1 truncate cleaned up [ 110.563479][ T5173] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 110.563579][ T28] audit: type=1400 audit(2000000293.024:516): avc: denied { open } for pid=5177 comm="syz.1.2086" path="/458/file0" dev="configfs" ino=14173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.580726][ T5173] EXT4-fs error (device loop8): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.8.2085: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 110.614042][ T5173] EXT4-fs (loop8): Remounting filesystem read-only [ 110.616380][ T5180] incfs: Options parsing error. -22 [ 110.620369][ T5173] EXT4-fs error (device loop8) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 110.620561][ T5173] EXT4-fs (loop8): Remounting filesystem read-only [ 110.637527][ T5180] incfs: mount failed -22 [ 110.641221][ T28] audit: type=1400 audit(2000000293.044:517): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.680901][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 110.732584][ T5190] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2091'. [ 111.030321][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 111.052011][ T28] audit: type=1400 audit(2000000293.584:518): avc: denied { ioctl } for pid=5211 comm="syz.4.2100" path="socket:[36116]" dev="sockfs" ino=36116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.052460][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 111.192510][ T5226] loop4: detected capacity change from 0 to 512 [ 111.199309][ T5226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.217497][ T5226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.226429][ T5226] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.239737][ T5226] EXT4-fs (loop4): 1 truncate cleaned up [ 111.245371][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.269151][ T293] EXT4-fs (loop4): unmounting filesystem. [ 111.700138][ T5280] SELinux: Context system_u:object_r:systemd_tmpfiles_exec_t:s0 is not valid (left unmapped). [ 111.730482][ T28] audit: type=1400 audit(2000000294.254:519): avc: denied { relabelto } for pid=5279 comm="syz.1.2132" name="" dev="pipefs" ino=37180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 111.824671][ T5295] loop1: detected capacity change from 0 to 512 [ 111.866773][ T5295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.881142][ T5295] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.911018][ T5295] EXT4-fs error (device loop1): ext4_get_first_dir_block:3583: inode #12: comm syz.1.2139: Directory hole found for htree leaf block 0 [ 111.978339][ T294] EXT4-fs (loop1): unmounting filesystem. [ 112.092203][ T5313] incfs: iterate_incfs_dir / -22 [ 112.188249][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2148'. [ 112.253623][ T5327] input: syz0 as /devices/virtual/input/input18 [ 112.453558][ T28] audit: type=1400 audit(2000000294.984:520): avc: denied { unmount } for pid=1779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.523770][ T5359] netlink: 'syz.6.2166': attribute type 11 has an invalid length. [ 112.560874][ T5359] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2166'. [ 112.850290][ T5378] kvm [5377]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0x2 [ 112.928132][ T5387] loop6: detected capacity change from 0 to 512 [ 112.957527][ T5387] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 112.970285][ T5387] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.984360][ T5387] EXT4-fs warning (device loop6): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 113.004642][ T1779] EXT4-fs (loop6): unmounting filesystem. [ 113.015780][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 113.040911][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 113.053786][ T5395] bridge0: port 4(vlan2) entered blocking state [ 113.060057][ T5395] bridge0: port 4(vlan2) entered disabled state [ 113.271732][ T28] audit: type=1400 audit(2000000295.804:521): avc: denied { bind } for pid=5419 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.393032][ T5428] loop2: detected capacity change from 0 to 512 [ 113.411287][ T5428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.440199][ T5428] EXT4-fs (loop2): 1 truncate cleaned up [ 113.450850][ T5428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.489018][ T296] EXT4-fs (loop2): unmounting filesystem. [ 113.523789][ T5436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2200'. [ 113.541696][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.548695][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.600031][ T5442] tap0: tun_chr_ioctl cmd 1074025677 [ 113.620873][ T5442] tap0: linktype set to 1 [ 113.686053][ T28] audit: type=1400 audit(2000000296.214:522): avc: denied { create } for pid=5449 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 114.078262][ T5477] syz.4.2218[5477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.078343][ T5477] syz.4.2218[5477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.137389][ T5477] loop4: detected capacity change from 0 to 2048 [ 114.162928][ T5452] loop8: detected capacity change from 0 to 40427 [ 114.200983][ T5452] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 114.237836][ T5452] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 114.254171][ T5452] F2FS-fs (loop8): invalid crc value [ 114.270282][ T5477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.303142][ T5452] F2FS-fs (loop8): Found nat_bits in checkpoint [ 114.333709][ T5412] loop6: detected capacity change from 0 to 131072 [ 114.351810][ T293] EXT4-fs (loop4): unmounting filesystem. [ 114.389439][ T5412] F2FS-fs (loop6): invalid crc value [ 114.431721][ T5412] F2FS-fs (loop6): Found nat_bits in checkpoint [ 114.448947][ T5452] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 114.458810][ T5452] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 114.521593][ T5414] loop1: detected capacity change from 0 to 131072 [ 114.545806][ T5414] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 114.571741][ T5414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.579903][ T5412] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 114.617906][ T5414] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.624464][ T5412] F2FS-fs (loop6): access invalid blkaddr:150994944 [ 114.637662][ T5412] CPU: 1 PID: 5412 Comm: syz.6.2188 Not tainted 6.1.118-syzkaller-00013-g7e96f2bfaa90 #0 [ 114.647310][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.657288][ T5412] Call Trace: [ 114.660423][ T5412] [ 114.663191][ T5412] dump_stack_lvl+0x151/0x1b7 [ 114.667707][ T5412] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 114.673013][ T5412] ? f2fs_get_next_page_offset+0x770/0x770 [ 114.678637][ T5412] dump_stack+0x15/0x18 [ 114.682638][ T5412] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 114.688015][ T5412] f2fs_is_valid_blkaddr+0x25/0x30 [ 114.692962][ T5412] f2fs_get_read_data_page+0x571/0x970 [ 114.698255][ T5412] ? f2fs_put_dnode+0x160/0x160 [ 114.702941][ T5412] ? pagecache_get_page+0xbc/0x110 [ 114.707910][ T5412] f2fs_find_data_page+0x1b3/0x3c0 [ 114.712831][ T5412] __f2fs_find_entry+0x631/0xd90 [ 114.717611][ T5412] ? memcpy+0x56/0x70 [ 114.721423][ T5412] ? f2fs_prepare_lookup+0x1ca/0x270 [ 114.726691][ T5412] ? f2fs_find_target_dentry+0x1000/0x1000 [ 114.732273][ T5412] ? may_create+0x65a/0x900 [ 114.736611][ T5412] ? generic_set_encrypted_ci_d_ops+0x91/0xf0 [ 114.742515][ T5412] f2fs_lookup+0x1bb/0xb50 [ 114.746766][ T5412] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 114.752669][ T5412] ? make_kgid+0x6f0/0x6f0 [ 114.756922][ T5412] ? selinux_inode_create+0x22/0x30 [ 114.761957][ T5412] ? security_inode_create+0xbc/0x100 [ 114.767161][ T5412] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 114.773067][ T5412] path_openat+0x10fd/0x2d60 [ 114.777496][ T5412] ? do_filp_open+0x480/0x480 [ 114.782017][ T5412] do_filp_open+0x230/0x480 [ 114.786348][ T5412] ? vfs_tmpfile+0x480/0x480 [ 114.790774][ T5412] ? alloc_fd+0x4fe/0x5a0 [ 114.794943][ T5412] do_sys_openat2+0x151/0x870 [ 114.799451][ T5412] ? copy_user_enhanced_fast_string+0x29/0x40 [ 114.805445][ T5412] ? do_sys_open+0x220/0x220 [ 114.809864][ T5412] ? ktime_get_boot_fast_ns+0x1bf/0x1f0 [ 114.815259][ T5412] ? bpf_trace_run2+0x138/0x290 [ 114.819937][ T5412] ? __this_cpu_preempt_check+0x13/0x20 [ 114.825407][ T5412] __x64_sys_open+0x221/0x270 [ 114.829918][ T5412] ? do_sys_openat2+0x870/0x870 [ 114.834603][ T5412] ? __bpf_trace_sys_enter+0x62/0x70 [ 114.839727][ T5412] x64_sys_call+0x36/0x9a0 [ 114.843978][ T5412] do_syscall_64+0x3b/0xb0 [ 114.848236][ T5412] ? clear_bhb_loop+0x55/0xb0 [ 114.852749][ T5412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.858471][ T5412] RIP: 0033:0x7f69df985d29 [ 114.862725][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.882174][ T5412] RSP: 002b:00007f69e0723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 114.890419][ T5412] RAX: ffffffffffffffda RBX: 00007f69dfb75fa0 RCX: 00007f69df985d29 [ 114.898224][ T5412] RDX: 0000000000000000 RSI: 00000000001492c3 RDI: 0000000020000000 [ 114.906033][ T5412] RBP: 00007f69dfa01b08 R08: 0000000000000000 R09: 0000000000000000 [ 114.913847][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.921661][ T5412] R13: 0000000000000000 R14: 00007f69dfb75fa0 R15: 00007ffd1a95fde8 [ 114.929472][ T5412] [ 115.039639][ T5414] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.087181][ T5414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.097399][ T5522] syz.4.2233[5522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.097483][ T5522] syz.4.2233[5522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.226231][ T5414] incfs: ino conflict with backing FS 4 [ 115.325557][ T5529] syz.4.2237[5529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.325638][ T5529] syz.4.2237[5529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.351172][ T5531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2239'. [ 115.384396][ T5529] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.454825][ T5540] xt_bpf: check failed: parse error [ 115.552061][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 115.641231][ T5565] fuse: Unknown parameter 'f' [ 115.659830][ T5567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.716975][ T5570] loop2: detected capacity change from 0 to 512 [ 115.738271][ T5570] EXT4-fs: Ignoring removed nobh option [ 115.750665][ T5570] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 115.782798][ T5578] loop6: detected capacity change from 0 to 512 [ 115.809720][ T5578] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 115.829942][ T5578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 115.840257][ T5578] System zones: 0-1, 15-15, 18-18, 34-34 [ 115.847015][ T5578] EXT4-fs (loop6): orphan cleanup on readonly fs [ 115.853502][ T5578] __quota_error: 4 callbacks suppressed [ 115.853516][ T5578] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 115.868706][ T5578] EXT4-fs warning (device loop6): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.883418][ T5578] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 115.895321][ T5578] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.2258: bad orphan inode 16 [ 115.906000][ T5578] EXT4-fs (loop6): Remounting filesystem read-only [ 115.912885][ T5578] ext4_test_bit(bit=15, block=18) = 1 [ 115.918219][ T5578] is_bad_inode(inode)=0 [ 115.922514][ T5578] NEXT_ORPHAN(inode)=0 [ 115.926474][ T5578] max_ino=32 [ 115.929521][ T5578] i_nlink=2 [ 115.932705][ T5578] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 115.955484][ T28] audit: type=1400 audit(2000000298.484:527): avc: denied { read } for pid=5574 comm="syz.6.2258" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 115.979112][ T5578] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 116.000640][ T1779] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 116.028271][ T1779] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 116.071461][ T3100] EXT4-fs (loop6): unmounting filesystem. [ 116.410209][ T28] audit: type=1400 audit(2000000298.934:528): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 116.488887][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.496031][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.504006][ T5615] device bridge_slave_0 entered promiscuous mode [ 116.513898][ T5634] loop8: detected capacity change from 0 to 256 [ 116.513932][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.534711][ T5634] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 116.546964][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.563028][ T5615] device bridge_slave_1 entered promiscuous mode [ 116.736513][ T315] device bridge_slave_1 left promiscuous mode [ 116.749746][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.768720][ T315] device bridge_slave_0 left promiscuous mode [ 116.780900][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.803854][ T315] device veth1_macvtap left promiscuous mode [ 116.809718][ T315] device veth0_vlan left promiscuous mode [ 116.990109][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2296'. [ 117.025652][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.032632][ T5615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.039721][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.046531][ T5615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.090201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.100261][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.128048][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.156950][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.171883][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.178775][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.202327][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.214920][ T5681] loop2: detected capacity change from 0 to 512 [ 117.221510][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.228371][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.246300][ T5681] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.276627][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.284656][ T5681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 117.317057][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.320485][ T5681] System zones: 1-12 [ 117.336882][ T5666] loop8: detected capacity change from 0 to 40427 [ 117.344299][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.352421][ T5681] EXT4-fs (loop2): 1 truncate cleaned up [ 117.357891][ T5681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.367962][ T5666] F2FS-fs (loop8): fault_injection options not supported [ 117.385392][ T5666] F2FS-fs (loop8): Image doesn't support compression [ 117.398620][ T28] audit: type=1400 audit(2134218027.924:529): avc: denied { append } for pid=5680 comm="syz.2.2304" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.399426][ T5681] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.2304: corrupted in-inode xattr [ 117.421191][ T5666] F2FS-fs (loop8): Image doesn't support compression [ 117.446926][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.455358][ T5666] F2FS-fs (loop8): fault_type options not supported [ 117.462202][ T5681] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1723: inode #15: comm syz.2.2304: unable to update i_inline_off [ 117.475292][ T5666] F2FS-fs (loop8): invalid crc value [ 117.480484][ T5681] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.493389][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.502161][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.511335][ T5666] F2FS-fs (loop8): Found nat_bits in checkpoint [ 117.517479][ T5681] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.2304: corrupted in-inode xattr [ 117.533939][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.542275][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.551677][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.560946][ T28] audit: type=1400 audit(2134218028.084:530): avc: denied { ioctl } for pid=5687 comm="syz.1.2306" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.589766][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.597479][ T5666] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 117.619096][ T5615] device veth0_vlan entered promiscuous mode [ 117.622170][ T296] EXT4-fs (loop2): unmounting filesystem. [ 117.640261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.668745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.679480][ T5615] device veth1_macvtap entered promiscuous mode [ 117.692391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.710028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.728028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.736896][ T4685] syz-executor: attempt to access beyond end of device [ 117.736896][ T4685] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.758237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.766872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.785117][ T28] audit: type=1400 audit(2134218028.314:531): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.h9dl2U/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 117.866389][ T5711] loop4: detected capacity change from 0 to 512 [ 117.892785][ T5711] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 117.939418][ T5711] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.2314: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 117.941936][ T5718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.964651][ T5718] IPv6: NLM_F_CREATE should be set when creating new route [ 117.971693][ T5718] IPv6: NLM_F_CREATE should be set when creating new route [ 117.971792][ T5711] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2314: couldn't read orphan inode 15 (err -117) [ 117.991438][ T5711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.999846][ T5711] ext2 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.041107][ T5711] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.2314: Directory hole found for htree leaf block 0 [ 118.105477][ T5709] loop2: detected capacity change from 0 to 40427 [ 118.113685][ T293] EXT4-fs (loop4): unmounting filesystem. [ 118.127848][ T28] audit: type=1400 audit(2134218028.654:532): avc: denied { create } for pid=5722 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 118.157539][ T28] audit: type=1400 audit(2134218028.654:533): avc: denied { sys_admin } for pid=5722 comm="syz.8.2318" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 118.189304][ T5709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.196184][ T28] audit: type=1400 audit(2134218028.724:534): avc: denied { mounton } for pid=5730 comm="syz.4.2320" path="/500/file0" dev="tmpfs" ino=2600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 118.277377][ T5709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.361385][ T5720] loop9: detected capacity change from 0 to 40427 [ 118.368842][ T296] syz-executor: attempt to access beyond end of device [ 118.368842][ T296] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.378371][ T5738] loop8: detected capacity change from 0 to 256 [ 118.390219][ T5720] F2FS-fs (loop9): fault_injection options not supported [ 118.407341][ T5720] F2FS-fs (loop9): invalid crc value [ 118.412887][ T5738] exfat: Bad value for 'uid' [ 118.418559][ T5720] F2FS-fs (loop9): Found nat_bits in checkpoint [ 118.470382][ T5720] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 118.542802][ T5615] F2FS-fs (loop9): access invalid blkaddr:2816 [ 118.562329][ T5615] CPU: 1 PID: 5615 Comm: syz-executor Not tainted 6.1.118-syzkaller-00013-g7e96f2bfaa90 #0 [ 118.572265][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.582158][ T5615] Call Trace: [ 118.585280][ T5615] [ 118.588057][ T5615] dump_stack_lvl+0x151/0x1b7 [ 118.592574][ T5615] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 118.597866][ T5615] ? f2fs_get_next_page_offset+0x770/0x770 [ 118.603508][ T5615] dump_stack+0x15/0x18 [ 118.607502][ T5615] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 118.612981][ T5615] f2fs_is_valid_blkaddr+0x25/0x30 [ 118.617941][ T5615] f2fs_map_blocks+0xd16/0x4340 [ 118.622624][ T5615] ? f2fs_map_lock+0x260/0x260 [ 118.627217][ T5615] ? xa_load+0x1a1/0x210 [ 118.631292][ T5615] ? xas_find_conflict+0x8c0/0x8c0 [ 118.636239][ T5615] f2fs_mpage_readpages+0xc65/0x20f0 [ 118.641365][ T5615] ? dquot_release_reservation_block+0xa0/0xa0 [ 118.647356][ T5615] ? __this_cpu_preempt_check+0x13/0x20 [ 118.652725][ T5615] ? memcg_rstat_updated+0x57/0x120 [ 118.657772][ T5615] f2fs_readahead+0xfd/0x250 [ 118.662187][ T5615] ? blk_start_plug+0x9c/0x130 [ 118.666790][ T5615] read_pages+0x1be/0xd40 [ 118.670952][ T5615] ? workingset_activation+0x430/0x430 [ 118.676333][ T5615] ? folio_add_lru+0x280/0x3f0 [ 118.680935][ T5615] ? page_cache_ra_unbounded+0x800/0x800 [ 118.686399][ T5615] ? filemap_add_folio+0x18f/0x200 [ 118.691350][ T5615] ? __filemap_add_folio+0xdb0/0xdb0 [ 118.696469][ T5615] ? __stack_depot_save+0x36/0x480 [ 118.701418][ T5615] page_cache_ra_unbounded+0x61f/0x800 [ 118.706712][ T5615] ? readahead_gfp_mask+0x190/0x190 [ 118.711747][ T5615] page_cache_ra_order+0x987/0xc40 [ 118.716700][ T5615] ? do_page_cache_ra+0x110/0x110 [ 118.721555][ T5615] ? get_page_from_freelist+0x2f41/0x2fc0 [ 118.727105][ T5615] ? kasan_set_track+0x60/0x70 [ 118.731707][ T5615] ondemand_readahead+0x91a/0xee0 [ 118.736571][ T5615] ? try_charge_memcg+0x2ea/0x16e0 [ 118.741513][ T5615] ? page_cache_sync_ra+0x450/0x450 [ 118.746548][ T5615] ? blk_cgroup_congested+0x132/0x150 [ 118.751843][ T5615] page_cache_sync_ra+0x3d6/0x450 [ 118.756705][ T5615] f2fs_readdir+0x599/0xc10 [ 118.761047][ T5615] ? f2fs_fill_dentries+0xd00/0xd00 [ 118.766078][ T5615] ? __this_cpu_preempt_check+0x13/0x20 [ 118.771456][ T5615] ? memcg_rstat_updated+0x57/0x120 [ 118.776499][ T5615] ? security_file_permission+0x86/0xb0 [ 118.781880][ T5615] iterate_dir+0x265/0x600 [ 118.786126][ T5615] ? f2fs_fill_dentries+0xd00/0xd00 [ 118.791159][ T5615] __se_sys_getdents64+0x1c1/0x460 [ 118.796116][ T5615] ? __x64_sys_getdents64+0x90/0x90 [ 118.801139][ T5615] ? filldir+0x670/0x670 [ 118.805220][ T5615] ? debug_smp_processor_id+0x17/0x20 [ 118.810433][ T5615] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 118.816345][ T5615] ? exit_to_user_mode_prepare+0x39/0xa0 [ 118.821799][ T5615] __x64_sys_getdents64+0x7b/0x90 [ 118.826665][ T5615] x64_sys_call+0x5ae/0x9a0 [ 118.831002][ T5615] do_syscall_64+0x3b/0xb0 [ 118.835340][ T5615] ? clear_bhb_loop+0x55/0xb0 [ 118.839852][ T5615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.845584][ T5615] RIP: 0033:0x7fc55bdb8693 [ 118.849832][ T5615] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 118.869279][ T5615] RSP: 002b:00007ffe22cb2d18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 118.877520][ T5615] RAX: ffffffffffffffda RBX: 000055555955d4e0 RCX: 00007fc55bdb8693 [ 118.885362][ T5615] RDX: 0000000000008000 RSI: 000055555955d4e0 RDI: 0000000000000005 [ 118.893144][ T5615] RBP: 000055555955d4b4 R08: 0000000000028b61 R09: 0000000000000000 [ 118.900955][ T5615] R10: 00007fc55bf4bca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 118.908766][ T5615] R13: 0000000000000010 R14: 000055555955d4b0 R15: 0000000000000004 [ 118.916584][ T5615] [ 118.925890][ T5615] F2FS-fs (loop9): access invalid blkaddr:2816 [ 118.932725][ T5615] CPU: 1 PID: 5615 Comm: syz-executor Not tainted 6.1.118-syzkaller-00013-g7e96f2bfaa90 #0 [ 118.942532][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.952420][ T5615] Call Trace: [ 118.955545][ T5615] [ 118.958322][ T5615] dump_stack_lvl+0x151/0x1b7 [ 118.962835][ T5615] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 118.968129][ T5615] ? f2fs_get_next_page_offset+0x770/0x770 [ 118.973776][ T5615] dump_stack+0x15/0x18 [ 118.977763][ T5615] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 118.983144][ T5615] f2fs_is_valid_blkaddr+0x25/0x30 [ 118.988093][ T5615] f2fs_map_blocks+0xd16/0x4340 [ 118.992789][ T5615] ? f2fs_map_lock+0x260/0x260 [ 118.997379][ T5615] ? xa_load+0x1a1/0x210 [ 119.001456][ T5615] ? xas_find_conflict+0x8c0/0x8c0 [ 119.006407][ T5615] ? folio_unlock+0x5c/0x70 [ 119.010743][ T5615] f2fs_mpage_readpages+0xc65/0x20f0 [ 119.015981][ T5615] ? dquot_release_reservation_block+0xa0/0xa0 [ 119.021943][ T5615] ? __this_cpu_preempt_check+0x13/0x20 [ 119.027324][ T5615] ? memcg_rstat_updated+0x57/0x120 [ 119.032361][ T5615] f2fs_readahead+0xfd/0x250 [ 119.036965][ T5615] ? blk_start_plug+0x9c/0x130 [ 119.041563][ T5615] read_pages+0x1be/0xd40 [ 119.045732][ T5615] ? workingset_activation+0x430/0x430 [ 119.051026][ T5615] ? folio_add_lru+0x280/0x3f0 [ 119.055627][ T5615] ? page_cache_ra_unbounded+0x800/0x800 [ 119.061093][ T5615] ? filemap_add_folio+0x18f/0x200 [ 119.066038][ T5615] ? __filemap_add_folio+0xdb0/0xdb0 [ 119.071160][ T5615] ? __stack_depot_save+0x36/0x480 [ 119.076107][ T5615] page_cache_ra_unbounded+0x61f/0x800 [ 119.081401][ T5615] ? readahead_gfp_mask+0x190/0x190 [ 119.086437][ T5615] page_cache_ra_order+0x987/0xc40 [ 119.091396][ T5615] ? do_page_cache_ra+0x110/0x110 [ 119.096240][ T5615] ? get_page_from_freelist+0x2f41/0x2fc0 [ 119.101799][ T5615] ? kasan_set_track+0x60/0x70 [ 119.106397][ T5615] ondemand_readahead+0x91a/0xee0 [ 119.111261][ T5615] ? try_charge_memcg+0x2ea/0x16e0 [ 119.116219][ T5615] ? page_cache_sync_ra+0x450/0x450 [ 119.121239][ T5615] ? blk_cgroup_congested+0x132/0x150 [ 119.126450][ T5615] page_cache_sync_ra+0x3d6/0x450 [ 119.131318][ T5615] f2fs_readdir+0x599/0xc10 [ 119.135702][ T5615] ? f2fs_fill_dentries+0xd00/0xd00 [ 119.140682][ T5615] ? __this_cpu_preempt_check+0x13/0x20 [ 119.146061][ T5615] ? memcg_rstat_updated+0x57/0x120 [ 119.151098][ T5615] ? security_file_permission+0x86/0xb0 [ 119.156475][ T5615] iterate_dir+0x265/0x600 [ 119.160728][ T5615] ? f2fs_fill_dentries+0xd00/0xd00 [ 119.165766][ T5615] __se_sys_getdents64+0x1c1/0x460 [ 119.170715][ T5615] ? __x64_sys_getdents64+0x90/0x90 [ 119.175743][ T5615] ? filldir+0x670/0x670 [ 119.179823][ T5615] ? debug_smp_processor_id+0x17/0x20 [ 119.185118][ T5615] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 119.191024][ T5615] ? exit_to_user_mode_prepare+0x39/0xa0 [ 119.196499][ T5615] __x64_sys_getdents64+0x7b/0x90 [ 119.201349][ T5615] x64_sys_call+0x5ae/0x9a0 [ 119.205687][ T5615] do_syscall_64+0x3b/0xb0 [ 119.209941][ T5615] ? clear_bhb_loop+0x55/0xb0 [ 119.214455][ T5615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.220181][ T5615] RIP: 0033:0x7fc55bdb8693 [ 119.224437][ T5615] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 119.243874][ T5615] RSP: 002b:00007ffe22cb2d18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 119.252123][ T5615] RAX: ffffffffffffffda RBX: 000055555955d4e0 RCX: 00007fc55bdb8693 [ 119.259938][ T5615] RDX: 0000000000008000 RSI: 000055555955d4e0 RDI: 0000000000000005 [ 119.268180][ T5615] RBP: 000055555955d4b4 R08: 0000000000028b61 R09: 0000000000000000 [ 119.275988][ T5615] R10: 00007fc55bf4bca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 119.283803][ T5615] R13: 0000000000000010 R14: 000055555955d4b0 R15: 0000000000000004 [ 119.291621][ T5615] [ 119.298668][ T5615] syz-executor: attempt to access beyond end of device [ 119.298668][ T5615] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 119.329821][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.336739][ T5754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.385581][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'. [ 119.399572][ T383] kworker/u4:5: attempt to access beyond end of device [ 119.399572][ T383] loop9: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 119.460858][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.593879][ T5775] loop2: detected capacity change from 0 to 512 [ 119.611524][ T5775] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 119.650855][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 119.657148][ T39] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.661711][ T5775] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.681023][ T5775] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2339: Block bitmap for bg 0 marked uninitialized [ 119.700830][ T39] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.720752][ T5775] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 119.732215][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.738647][ T39] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 119.748060][ T5775] EXT4-fs (loop2): 1 orphan inode deleted [ 119.758958][ T5775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.768371][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.780871][ T418] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.814674][ T39] usb 2-1: config 0 descriptor?? [ 119.839801][ T296] EXT4-fs (loop2): unmounting filesystem. [ 119.908353][ T5743] loop8: detected capacity change from 0 to 131072 [ 119.952222][ T5743] F2FS-fs (loop8): Found nat_bits in checkpoint [ 119.972016][ T418] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 119.983362][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.984186][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.994097][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.994145][ T418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 119.994184][ T418] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 120.033229][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.040973][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.044295][ T418] usb 5-1: config 0 descriptor?? [ 120.055023][ T5780] device bridge_slave_0 entered promiscuous mode [ 120.070317][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.081100][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.088534][ T5780] device bridge_slave_1 entered promiscuous mode [ 120.094802][ T5743] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 120.175848][ T5743] F2FS-fs (loop8): Can't flush 262402 in 0 for segs_per_sec 1 != 1 [ 120.247035][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.253937][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.261060][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.267920][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.278880][ T39] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x4 [ 120.288639][ T39] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 120.297706][ T39] hid-multitouch 0003:1FD2:6007.0009: item fetching failed at offset 4/5 [ 120.306519][ T39] hid-multitouch: probe of 0003:1FD2:6007.0009 failed with error -22 [ 120.358442][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.368176][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.376769][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.385882][ T315] device bridge_slave_1 left promiscuous mode [ 120.392163][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.399636][ T315] device bridge_slave_0 left promiscuous mode [ 120.405914][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.414299][ T315] device veth1_macvtap left promiscuous mode [ 120.420345][ T315] device veth0_vlan left promiscuous mode [ 120.455584][ T418] petalynx 0003:18B1:0037.000A: item fetching failed at offset 5/7 [ 120.463975][ T418] petalynx 0003:18B1:0037.000A: parse failed [ 120.469808][ T418] petalynx: probe of 0003:18B1:0037.000A failed with error -22 [ 120.492574][ T60] usb 2-1: USB disconnect, device number 6 [ 120.556833][ T5812] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 120.572870][ T5812] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 120.605091][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.621515][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.639699][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.646607][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.657906][ T418] usb 5-1: USB disconnect, device number 6 [ 120.669370][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.682930][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.695030][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.701934][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.719144][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.727251][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.735947][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.744502][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.760204][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.777797][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.800760][ T5780] device veth0_vlan entered promiscuous mode [ 120.813121][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.815884][ T5826] loop8: detected capacity change from 0 to 128 [ 120.821319][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.840595][ T5826] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.846164][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.859770][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.867971][ T5826] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.886738][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.895108][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.903890][ T5780] device veth1_macvtap entered promiscuous mode [ 120.914997][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.922918][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.940024][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.964700][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.973214][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.084383][ T5845] loop2: detected capacity change from 0 to 512 [ 121.094867][ T28] audit: type=1326 audit(2134218031.624:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.1.2367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f39b85d29 code=0x0 [ 121.118237][ T5845] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.128898][ T5845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 121.136950][ T5845] System zones: 1-12 [ 121.141919][ T5845] EXT4-fs (loop2): 1 truncate cleaned up [ 121.147362][ T5845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.156267][ T418] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 121.173829][ T296] EXT4-fs (loop2): unmounting filesystem. [ 121.188134][ T5851] loop4: detected capacity change from 0 to 256 [ 121.199665][ T5851] FAT-fs (loop4): Directory bread(block 64) failed [ 121.206587][ T5851] FAT-fs (loop4): Directory bread(block 65) failed [ 121.213200][ T5851] FAT-fs (loop4): Directory bread(block 66) failed [ 121.226435][ T5851] FAT-fs (loop4): Directory bread(block 67) failed [ 121.226751][ T5853] loop2: detected capacity change from 0 to 2048 [ 121.233263][ T5851] FAT-fs (loop4): Directory bread(block 68) failed [ 121.245628][ T5851] FAT-fs (loop4): Directory bread(block 69) failed [ 121.256107][ T5851] FAT-fs (loop4): Directory bread(block 70) failed [ 121.263621][ T5853] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 121.272182][ T5851] FAT-fs (loop4): Directory bread(block 71) failed [ 121.278791][ T5851] FAT-fs (loop4): Directory bread(block 72) failed [ 121.285651][ T5851] FAT-fs (loop4): Directory bread(block 73) failed [ 121.343273][ T418] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.375350][ T418] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.380967][ T5868] syz.4.2375[5868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.385014][ T5868] syz.4.2375[5868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.390686][ T418] usb 9-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 121.416686][ T418] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.428421][ T418] usb 9-1: config 0 descriptor?? [ 121.537896][ T5883] loop3: detected capacity change from 0 to 512 [ 121.550392][ T5883] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.567725][ T5887] loop2: detected capacity change from 0 to 1024 [ 121.580244][ T5887] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.588609][ T5883] EXT4-fs (loop3): 1 truncate cleaned up [ 121.594427][ T5883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.613057][ T5887] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.613503][ T5883] support for the xor transformation has been removed. [ 121.641922][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 121.652658][ T28] audit: type=1400 audit(2134218032.184:536): avc: denied { create } for pid=5886 comm="syz.2.2385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 121.733092][ T296] EXT4-fs (loop2): unmounting filesystem. [ 121.743374][ T28] audit: type=1400 audit(2134218032.224:537): avc: denied { link } for pid=5886 comm="syz.2.2385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 121.841821][ T418] hid-generic 0003:05AC:4262.000B: unbalanced delimiter at end of report description [ 121.857664][ T418] hid-generic: probe of 0003:05AC:4262.000B failed with error -22 [ 121.921834][ T28] audit: type=1400 audit(2134218032.454:538): avc: denied { append } for pid=5915 comm="syz.4.2398" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.950855][ T5916] random: crng reseeded on system resumption [ 122.005449][ T5918] loop1: detected capacity change from 0 to 1024 [ 122.023480][ T5901] loop3: detected capacity change from 0 to 40427 [ 122.030229][ T5901] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 122.038236][ T5901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.061708][ T5901] F2FS-fs (loop3): invalid crc value [ 122.069307][ T418] usb 9-1: USB disconnect, device number 5 [ 122.077968][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.089214][ T5918] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.2399: 'file2' linked to parent dir [ 122.101087][ T5918] binfmt_misc: register: failed to install interpreter file ./file2 [ 122.102408][ T5901] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.117292][ T294] EXT4-fs (loop1): unmounting filesystem. [ 122.162451][ T5932] devpts: called with bogus options [ 122.169499][ T5901] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.176925][ T5901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.262325][ T5941] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 122.262395][ T352] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.280645][ T28] audit: type=1400 audit(2134218032.804:539): avc: denied { relabelto } for pid=5940 comm="syz.1.2407" name="file1" dev="tmpfs" ino=2660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 122.287723][ T352] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 122.333195][ T28] audit: type=1400 audit(2134218032.804:540): avc: denied { associate } for pid=5940 comm="syz.1.2407" name="file1" dev="tmpfs" ino=2660 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:run_init_exec_t:s0" [ 122.362309][ T28] audit: type=1400 audit(2134218032.844:541): avc: denied { unlink } for pid=294 comm="syz-executor" name="file1" dev="tmpfs" ino=2660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 122.419143][ T28] audit: type=1400 audit(2134218032.944:542): avc: denied { setopt } for pid=5947 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.613366][ T5962] loop3: detected capacity change from 0 to 2048 [ 122.694514][ T5962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.716170][ T5975] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.716669][ T28] audit: type=1400 audit(2000000000.150:543): avc: denied { read } for pid=5961 comm="syz.3.2416" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.754962][ T5975] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.767602][ T5975] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.767602][ T5975] [ 122.777254][ T5975] EXT4-fs (loop3): Total free blocks count 0 [ 122.783128][ T5975] EXT4-fs (loop3): Free/Dirty block details [ 122.788806][ T5975] EXT4-fs (loop3): free_blocks=2415919104 [ 122.794539][ T5975] EXT4-fs (loop3): dirty_blocks=16 [ 122.799484][ T28] audit: type=1400 audit(2000000000.230:544): avc: denied { open } for pid=5961 comm="syz.3.2416" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.811932][ T5977] tmpfs: Unknown parameter 'in' [ 122.822841][ T5975] EXT4-fs (loop3): Block reservation details [ 122.833508][ T5975] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 122.854327][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 122.951181][ T5992] syz.3.2427[5992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.951258][ T5992] syz.3.2427[5992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.029080][ T6002] loop8: detected capacity change from 0 to 256 [ 123.066598][ T6004] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.506298][ T6044] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.515386][ T6044] FAT-fs (loop17): unable to read boot sector [ 124.420824][ T418] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.583034][ T6093] overlayfs: missing 'lowerdir' [ 124.588996][ T6094] loop8: detected capacity change from 0 to 256 [ 124.603144][ T6094] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 124.625504][ T418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.649817][ T418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.664920][ T418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.678370][ T418] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.691595][ T418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.709950][ T418] usb 2-1: config 0 descriptor?? [ 125.123660][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.131022][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.138293][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.145512][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.153046][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.160332][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.167490][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.184181][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.191469][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.198602][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.205860][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.213041][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.220515][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.227761][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.234943][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.242204][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.249329][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.256552][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.263740][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.270956][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.278150][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.285392][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.292568][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.299749][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.307036][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.314200][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.321404][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.328576][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.335818][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.342984][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.350170][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.357429][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.364599][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.371815][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.378997][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.386262][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.393500][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.400689][ T418] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 125.408250][ T418] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 125.416947][ T418] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.431446][ T418] usb 2-1: USB disconnect, device number 7 [ 125.485223][ T6138] loop4: detected capacity change from 0 to 512 [ 125.505714][ T6138] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.512429][ T6138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.523354][ T6138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 125.538105][ T6138] System zones: 1-12 [ 125.542900][ T6138] EXT4-fs (loop4): 1 truncate cleaned up [ 125.548479][ T6138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.586938][ T293] EXT4-fs (loop4): unmounting filesystem. [ 125.665638][ T6150] loop4: detected capacity change from 0 to 1024 [ 125.692878][ T6150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.701515][ T6150] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.720546][ T43] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 393: padding at end of block bitmap is not set [ 125.735978][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 125.751240][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.751240][ T43] [ 125.760854][ T43] EXT4-fs (loop4): Total free blocks count 0 [ 125.766672][ T43] EXT4-fs (loop4): Free/Dirty block details [ 125.772641][ T43] EXT4-fs (loop4): free_blocks=0 [ 125.778921][ T43] EXT4-fs (loop4): dirty_blocks=16 [ 125.784268][ T43] EXT4-fs (loop4): Block reservation details [ 125.790209][ T43] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 125.796771][ T293] EXT4-fs (loop4): unmounting filesystem. [ 129.121125][ T6187] loop8: detected capacity change from 0 to 256 [ 129.245424][ T6200] loop8: detected capacity change from 0 to 512 [ 129.266283][ T6200] EXT4-fs (loop8): Test dummy encryption mode enabled [ 129.282973][ T6200] EXT4-fs error (device loop8): __ext4_iget:5057: inode #11: block 1: comm syz.8.2517: invalid block [ 129.309354][ T6200] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2517: couldn't read orphan inode 11 (err -117) [ 129.321675][ T6200] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 129.343313][ T6200] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 129.359639][ T6200] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 129.374609][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 129.390837][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.433939][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2521'. [ 129.551563][ T6223] input: syz0 as /devices/virtual/input/input19 [ 129.580855][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 129.588904][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 129.602881][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.617098][ T19] usb 3-1: Product: syz [ 129.621225][ T19] usb 3-1: Manufacturer: syz [ 129.625672][ T19] usb 3-1: SerialNumber: syz [ 129.630749][ T19] usb 3-1: config 0 descriptor?? [ 129.639369][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 129.647307][ T19] usb 3-1: Detected FT-X [ 129.839673][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 129.895555][ T6248] loop8: detected capacity change from 0 to 256 [ 129.908286][ T6248] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 130.093186][ T6262] loop3: detected capacity change from 0 to 512 [ 130.117297][ T6262] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2544: casefold flag without casefold feature [ 130.130282][ T6262] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2544: couldn't read orphan inode 15 (err -117) [ 130.147479][ T6262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.187537][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 130.232825][ T6271] loop3: detected capacity change from 0 to 512 [ 130.238203][ T6273] loop4: detected capacity change from 0 to 256 [ 130.245310][ T6273] exfat: Deprecated parameter 'utf8' [ 130.250546][ T6273] exfat: Deprecated parameter 'namecase' [ 130.256342][ T6271] EXT4-fs: Ignoring removed nobh option [ 130.257962][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.261969][ T6273] exfat: Deprecated parameter 'utf8' [ 130.275765][ T6271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.294770][ T6273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 130.326515][ T6273] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 130.334000][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 130.334014][ T28] audit: type=1400 audit(2000000007.770:551): avc: denied { read } for pid=6276 comm="syz.8.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.335367][ T6271] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.370504][ T6273] exFAT-fs (loop4): hint_cluster is invalid (1) [ 130.372084][ T6271] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.387116][ T6273] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 130.401624][ T6273] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881197761d0 iblock : 9, err : -5) [ 130.416683][ T6273] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 130.424213][ T6273] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 130.437025][ T6271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2548: bg 0: block 224: padding at end of block bitmap is not set [ 130.451439][ T352] kworker/u4:4: attempt to access beyond end of device [ 130.451439][ T352] loop4: rw=1, sector=34359738494, nr_sectors = 1 limit=256 [ 130.465574][ T352] Buffer I/O error on dev loop4, logical block 34359738494, lost async page write [ 130.465577][ T6271] EXT4-fs (loop3): Remounting filesystem read-only [ 130.481653][ T19] usb 3-1: USB disconnect, device number 7 [ 130.482346][ T352] kworker/u4:4: attempt to access beyond end of device [ 130.482346][ T352] loop4: rw=1, sector=34359738495, nr_sectors = 1 limit=256 [ 130.488939][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.506430][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 130.513427][ T19] ftdi_sio 3-1:0.0: device disconnected [ 130.518664][ T352] Buffer I/O error on dev loop4, logical block 34359738495, lost async page write [ 130.595448][ T28] audit: type=1326 audit(2000000008.030:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9585d29 code=0x7ffc0000 [ 130.623289][ T6289] loop3: detected capacity change from 0 to 512 [ 130.650332][ T6289] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2555: inode #1: comm syz.3.2555: iget: illegal inode # [ 130.654474][ T28] audit: type=1326 audit(2000000008.030:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9585d29 code=0x7ffc0000 [ 130.664206][ T6289] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2555: error while reading EA inode 1 err=-117 [ 130.698796][ T28] audit: type=1326 audit(2000000008.050:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faeb9585d29 code=0x7ffc0000 [ 130.722029][ T6289] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2555: inode #1: comm syz.3.2555: iget: illegal inode # [ 130.734955][ T28] audit: type=1326 audit(2000000008.050:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeb9585d63 code=0x7ffc0000 [ 130.757950][ T6289] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2555: error while reading EA inode 1 err=-117 [ 130.771685][ T6294] loop1: detected capacity change from 0 to 256 [ 130.778455][ T28] audit: type=1326 audit(2000000008.060:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faeb95847df code=0x7ffc0000 [ 130.801785][ T6289] EXT4-fs (loop3): 1 orphan inode deleted [ 130.807348][ T6289] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.833624][ T6294] FAT-fs (loop1): Directory bread(block 64) failed [ 130.840144][ T6294] FAT-fs (loop1): Directory bread(block 65) failed [ 130.847051][ T6294] FAT-fs (loop1): Directory bread(block 66) failed [ 130.855679][ T6294] FAT-fs (loop1): Directory bread(block 67) failed [ 130.865430][ T28] audit: type=1326 audit(2000000008.060:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faeb9585db7 code=0x7ffc0000 [ 130.890167][ T6294] FAT-fs (loop1): Directory bread(block 68) failed [ 130.896722][ T6294] FAT-fs (loop1): Directory bread(block 69) failed [ 130.903434][ T6294] FAT-fs (loop1): Directory bread(block 70) failed [ 130.909836][ T6294] FAT-fs (loop1): Directory bread(block 71) failed [ 130.916503][ T28] audit: type=1326 audit(2000000008.060:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeb9584690 code=0x7ffc0000 [ 130.917160][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 130.940162][ T6294] FAT-fs (loop1): Directory bread(block 72) failed [ 130.951851][ T6294] FAT-fs (loop1): Directory bread(block 73) failed [ 130.955895][ T6292] loop4: detected capacity change from 0 to 40427 [ 130.958229][ T28] audit: type=1326 audit(2000000008.060:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeb958592b code=0x7ffc0000 [ 130.991285][ T28] audit: type=1326 audit(2000000008.070:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faeb958498a code=0x7ffc0000 [ 131.015978][ T6292] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.038808][ T6299] input: syz0 as /devices/virtual/input/input20 [ 131.108826][ T6292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.137438][ T352] kworker/u4:4: attempt to access beyond end of device [ 131.137438][ T352] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 131.207118][ T293] syz-executor: attempt to access beyond end of device [ 131.207118][ T293] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.214358][ T6314] loop2: detected capacity change from 0 to 512 [ 131.278584][ T6314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.297192][ T6314] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.361530][ T6314] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #19: comm syz.2.2564: corrupted inode contents [ 131.403942][ T6314] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #19: comm syz.2.2564: mark_inode_dirty error [ 131.441916][ T6314] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #19: comm syz.2.2564: corrupted inode contents [ 131.493201][ T6314] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #19: comm syz.2.2564: mark_inode_dirty error [ 131.530522][ T6314] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #19: comm syz.2.2564: mark inode dirty (error -117) [ 131.535124][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 131.554011][ T6349] random: crng reseeded on system resumption [ 131.560921][ T6314] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 131.608917][ T6351] input: syz0 as /devices/virtual/input/input22 [ 131.621107][ T296] EXT4-fs (loop2): unmounting filesystem. [ 131.674988][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 131.710924][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 131.796785][ T6373] loop2: detected capacity change from 0 to 128 [ 131.851217][ T6378] xt_NFQUEUE: number of queues (32773) out of range (got 79881) [ 131.885701][ T6387] loop3: detected capacity change from 0 to 16 [ 131.895364][ T6387] erofs: (device loop3): mounted with root inode @ nid 36. [ 132.076401][ T6414] input: syz0 as /devices/virtual/input/input23 [ 132.195476][ T6431] loop1: detected capacity change from 0 to 512 [ 132.272983][ T6431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.292016][ T6431] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.339734][ T294] EXT4-fs (loop1): unmounting filesystem. [ 132.348581][ T6442] netlink: 'syz.8.2618': attribute type 2 has an invalid length. [ 132.433028][ T6452] input: syz0 as /devices/virtual/input/input24 [ 132.557423][ T6469] loop8: detected capacity change from 0 to 512 [ 132.590634][ T6469] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 132.600941][ T6469] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.637486][ T6433] loop3: detected capacity change from 0 to 40427 [ 132.653950][ T6433] F2FS-fs (loop3): fault_type options not supported [ 132.661677][ T6433] F2FS-fs (loop3): invalid crc value [ 132.681803][ T6433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.762144][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 132.780136][ T6433] F2FS-fs (loop3): Start checkpoint disabled! [ 132.820373][ T6433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 133.001196][ T6494] loop8: detected capacity change from 0 to 512 [ 133.023215][ T6494] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 133.050397][ T6494] EXT4-fs (loop8): 1 truncate cleaned up [ 133.076644][ T6494] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 133.114680][ T6494] support for the xor transformation has been removed. [ 133.139949][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 133.243973][ T43] kworker/u4:2: attempt to access beyond end of device [ 133.243973][ T43] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 133.425472][ T6465] loop2: detected capacity change from 0 to 131072 [ 133.441012][ T6465] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 133.460014][ T6465] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 133.507233][ T6465] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.569441][ T6504] loop8: detected capacity change from 0 to 40427 [ 133.582718][ T6504] F2FS-fs (loop8): invalid crc value [ 133.593417][ T6465] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 133.600328][ T6465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.608500][ T6504] F2FS-fs (loop8): Found nat_bits in checkpoint [ 133.719137][ T6504] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 133.755475][ T6522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=6522 comm=syz.3.2650 [ 133.919674][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.954159][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.961068][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.998810][ T6533] device bridge0 entered promiscuous mode [ 134.026628][ T6539] device vlan4 entered promiscuous mode [ 134.407557][ T6588] loop8: detected capacity change from 0 to 512 [ 134.435159][ T6588] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.2682: bad orphan inode 15 [ 134.452328][ T6545] loop3: detected capacity change from 0 to 40427 [ 134.459198][ T6588] ext4_test_bit(bit=14, block=5) = 0 [ 134.461284][ T6545] F2FS-fs (loop3): fault_injection options not supported [ 134.464469][ T6588] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 134.482537][ T6545] F2FS-fs (loop3): Image doesn't support compression [ 134.489130][ T6545] F2FS-fs (loop3): Image doesn't support compression [ 134.495713][ T6545] F2FS-fs (loop3): fault_type options not supported [ 134.511785][ T6588] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 134.515240][ T6545] F2FS-fs (loop3): invalid crc value [ 134.533650][ T6588] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 134.545286][ T6545] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.572062][ T6606] syz.2.2688[6606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.572141][ T6606] syz.2.2688[6606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.590983][ T6588] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 134.612707][ T6545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.637004][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 134.699449][ T5780] syz-executor: attempt to access beyond end of device [ 134.699449][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.902188][ T6626] loop8: detected capacity change from 0 to 512 [ 134.915472][ T6626] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 134.945842][ T6626] EXT4-fs (loop8): 1 truncate cleaned up [ 134.946713][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.951399][ T6626] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 134.989247][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 135.010962][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.032309][ T6638] loop4: detected capacity change from 0 to 256 [ 135.232237][ T6658] loop4: detected capacity change from 0 to 512 [ 135.250147][ T6658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.274420][ T6658] EXT4-fs (loop4): 1 truncate cleaned up [ 135.300841][ T6658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.382137][ T293] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /576/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.405754][ T6662] loop1: detected capacity change from 0 to 40427 [ 135.418589][ T293] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.449431][ T6671] loop8: detected capacity change from 0 to 512 [ 135.455988][ T293] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /576/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.489730][ T6662] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.517322][ T293] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.538733][ T6671] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 135.552038][ T6671] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.552063][ T6665] loop3: detected capacity change from 0 to 40427 [ 135.571184][ T293] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /576/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.596041][ T6665] F2FS-fs (loop3): invalid crc value [ 135.604645][ T4685] EXT4-fs error (device loop8): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /175/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 135.605126][ T6662] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.626369][ T293] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.652496][ T6665] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.662189][ T293] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /576/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.698807][ T293] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.719396][ T6665] F2FS-fs (loop3): Start checkpoint disabled! [ 135.725787][ T293] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /576/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.755404][ T293] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.774982][ T6665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 135.792413][ T6662] syz.1.2711: attempt to access beyond end of device [ 135.792413][ T6662] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.862818][ T378] EXT4-fs (loop4): unmounting filesystem. [ 135.881072][ T294] syz-executor: attempt to access beyond end of device [ 135.881072][ T294] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 135.914557][ T10] kworker/u4:1: attempt to access beyond end of device [ 135.914557][ T10] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 135.947269][ T378] bridge0: port 3(syz_tun) entered disabled state [ 135.982220][ T378] device syz_tun left promiscuous mode [ 135.987530][ T378] bridge0: port 3(syz_tun) entered disabled state [ 136.033560][ T10] tipc: Disabling bearer [ 136.051111][ T10] tipc: Left network mode [ 136.274057][ T6696] loop1: detected capacity change from 0 to 512 [ 136.334083][ T6696] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.411959][ T6696] EXT4-fs (loop1): 1 truncate cleaned up [ 136.417854][ T6696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.493388][ T6709] loop2: detected capacity change from 0 to 512 [ 136.551007][ T6709] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.574513][ T10] device bridge_slave_1 left promiscuous mode [ 136.580595][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.588216][ T10] device bridge_slave_0 left promiscuous mode [ 136.595437][ T6709] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.2731: invalid block [ 136.606393][ T6709] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2731: couldn't read orphan inode 11 (err -117) [ 136.609001][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.631720][ T6709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.642643][ T10] device veth1_macvtap left promiscuous mode [ 136.648604][ T10] device veth0_vlan left promiscuous mode [ 136.661662][ T6709] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 136.678771][ T6709] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 136.695006][ T296] EXT4-fs (loop2): unmounting filesystem. [ 136.800855][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.855275][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.863991][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.871885][ T6704] device bridge_slave_0 entered promiscuous mode [ 136.872148][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 136.872163][ T28] audit: type=1400 audit(2000000014.310:582): avc: denied { map } for pid=6727 comm="syz.2.2738" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 136.878993][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.915497][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.922928][ T6704] device bridge_slave_1 entered promiscuous mode [ 137.011214][ T6] usb 2-1: no configurations [ 137.015653][ T6] usb 2-1: can't read configurations, error -22 [ 137.128497][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.142200][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.160219][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.181041][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.191548][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.199042][ T6739] loop3: detected capacity change from 0 to 2048 [ 137.210905][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.217753][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.238688][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.256756][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.265565][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.281355][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.289493][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.296385][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.299067][ T28] audit: type=1400 audit(2000000014.740:583): avc: denied { append } for pid=6738 comm="syz.3.2742" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.333755][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.352048][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.361207][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.370982][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 137.379347][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.381126][ T28] audit: type=1400 audit(2000000014.770:584): avc: denied { ioctl } for pid=6738 comm="syz.3.2742" path="/70/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.420703][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.429127][ T6] usb 2-1: no configurations [ 137.433630][ T6] usb 2-1: can't read configurations, error -22 [ 137.439933][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.447890][ T6] usb usb2-port1: attempt power cycle [ 137.466064][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.490491][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.501693][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.520997][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.539363][ T6704] device veth0_vlan entered promiscuous mode [ 137.562229][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.591697][ T6704] device veth1_macvtap entered promiscuous mode [ 137.619659][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.631241][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.650901][ T28] audit: type=1400 audit(2000000015.080:585): avc: denied { mount } for pid=6704 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.685267][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.693619][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.779283][ T6765] loop3: detected capacity change from 0 to 512 [ 137.799998][ T6765] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.821056][ T6765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.833445][ T28] audit: type=1400 audit(2000000015.270:586): avc: denied { relabelfrom } for pid=6766 comm="syz.2.2752" name="UDP" dev="sockfs" ino=44148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 137.833472][ T6767] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 137.879457][ T28] audit: type=1400 audit(2000000015.310:587): avc: denied { relabelto } for pid=6766 comm="syz.2.2752" name="UDP" dev="sockfs" ino=44148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 137.888272][ T6765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 137.914355][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 137.935002][ T6765] System zones: 1-12 [ 137.939946][ T6765] EXT4-fs (loop3): 1 truncate cleaned up [ 137.945756][ T6765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.957383][ T6] usb 2-1: no configurations [ 137.964613][ T6] usb 2-1: can't read configurations, error -22 [ 138.099247][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 138.127351][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.171545][ T6] usb 2-1: no configurations [ 138.176016][ T6] usb 2-1: can't read configurations, error -22 [ 138.190896][ T6] usb usb2-port1: unable to enumerate USB device [ 138.229158][ T6798] loop3: detected capacity change from 0 to 1024 [ 138.244741][ T28] audit: type=1400 audit(2000000015.680:588): avc: denied { mounton } for pid=6799 comm="syz.2.2767" path="/582/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.275371][ T28] audit: type=1400 audit(2000000015.680:589): avc: denied { read } for pid=6799 comm="syz.2.2767" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.306663][ T28] audit: type=1400 audit(2000000015.680:590): avc: denied { open } for pid=6799 comm="syz.2.2767" path="/582/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.329803][ T6798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.376394][ T28] audit: type=1400 audit(2000000015.790:591): avc: denied { remount } for pid=6805 comm="syz.0.2769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.398380][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 138.553887][ T6827] netlink: 'syz.2.2778': attribute type 4 has an invalid length. [ 138.610107][ T6833] device veth1_macvtap left promiscuous mode [ 138.616209][ T6833] device macsec0 entered promiscuous mode [ 138.649565][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x1 [ 138.661087][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.679155][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.688760][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.696287][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.708457][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.716090][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.725859][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.733631][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.743946][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.758675][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.766840][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.779469][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.787336][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.807376][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.816312][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.825028][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.839659][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.850890][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.858117][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.865690][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.875646][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.883262][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.896530][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.904067][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.913032][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.921607][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.928817][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.936106][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.943302][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.950419][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.957692][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.964885][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.972200][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.979336][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.986608][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 138.997955][ T39] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 139.070040][ T6861] loop3: detected capacity change from 0 to 1024 [ 139.099649][ T6861] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.142212][ T6861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.196799][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 139.274495][ T294] EXT4-fs (loop1): unmounting filesystem. [ 139.283480][ T6879] device bridge2 entered promiscuous mode [ 139.666891][ T6883] loop1: detected capacity change from 0 to 40427 [ 139.681302][ T6883] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.696581][ T6883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.716553][ T6883] F2FS-fs (loop1): invalid crc value [ 139.741061][ T6883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.832702][ T6883] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.842871][ T6883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.940788][ T6898] loop3: detected capacity change from 0 to 40427 [ 140.001979][ T6898] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.020654][ T6883] syz.1.2804: attempt to access beyond end of device [ 140.020654][ T6883] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 140.071845][ T6883] syz.1.2804: attempt to access beyond end of device [ 140.071845][ T6883] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 140.104533][ T6883] syz.1.2804: attempt to access beyond end of device [ 140.104533][ T6883] loop1: rw=2049, sector=57344, nr_sectors = 320 limit=40427 [ 140.110874][ T6898] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.219182][ T5780] syz-executor: attempt to access beyond end of device [ 140.219182][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.316383][ T6920] loop2: detected capacity change from 0 to 16 [ 140.332352][ T6920] erofs: (device loop2): mounted with root inode @ nid 36. [ 140.391812][ T6922] loop2: detected capacity change from 0 to 128 [ 140.416299][ T6922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.430074][ T6922] ext4 filesystem being mounted at /598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.474958][ T296] EXT4-fs (loop2): unmounting filesystem. [ 140.675750][ T6947] loop3: detected capacity change from 0 to 128 [ 140.692503][ T6947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.712950][ T6947] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.782769][ T6952] loop2: detected capacity change from 0 to 128 [ 140.819332][ T6954] loop1: detected capacity change from 0 to 512 [ 140.837563][ T6954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.848378][ T6952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.857279][ T6952] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.882011][ T6954] EXT4-fs (loop1): 1 truncate cleaned up [ 140.887529][ T6954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.903081][ T296] EXT4-fs (loop2): unmounting filesystem. [ 140.925594][ T294] EXT4-fs (loop1): unmounting filesystem. [ 140.988415][ T5780] EXT4-fs (loop3): unmounting filesystem. [ 141.169167][ T6983] xt_hashlimit: size too large, truncated to 1048576 [ 141.232162][ T6992] loop3: detected capacity change from 0 to 256 [ 141.275944][ T6992] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.529361][ T7012] tipc: Started in network mode [ 141.536666][ T7014] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 141.542051][ T7012] tipc: Node identity 7, cluster identity 4711 [ 141.568327][ T7012] tipc: Node number set to 7 [ 141.584172][ T7012] tipc: Cannot configure node identity twice [ 141.590927][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.770835][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 141.776946][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.804049][ T39] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 141.821774][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.838362][ T39] usb 1-1: Product: syz [ 141.846903][ T39] usb 1-1: Manufacturer: syz [ 141.855714][ T39] usb 1-1: SerialNumber: syz [ 141.866885][ T39] usb 1-1: config 0 descriptor?? [ 141.881600][ T39] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 141.903568][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.034560][ T7033] xt_hashlimit: size too large, truncated to 1048576 [ 142.081884][ T39] usb 1-1: USB disconnect, device number 3 [ 142.331642][ T7037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7037 comm=syz.3.2866 [ 142.675264][ T7051] loop2: detected capacity change from 0 to 128 [ 142.695676][ T7053] input: syz0 as /devices/virtual/input/input25 [ 142.705741][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 142.705758][ T28] audit: type=1400 audit(2000000020.140:603): avc: denied { mounton } for pid=7050 comm="syz.2.2872" path="/617/file0/file0" dev="loop2" ino=1048766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 142.872093][ T7063] kvm: apic: phys broadcast and lowest prio [ 143.033651][ T7082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2885'. [ 143.070871][ T7082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2885'. [ 143.080064][ T7082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2885'. [ 143.274816][ T7104] loop1: detected capacity change from 0 to 128 [ 143.321631][ T7104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.330221][ T7104] ext4 filesystem being mounted at /591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.458866][ T294] EXT4-fs (loop1): unmounting filesystem. [ 143.605805][ T7138] loop2: detected capacity change from 0 to 1024 [ 143.615646][ T7138] EXT4-fs: Ignoring removed nobh option [ 143.622037][ T7138] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.652752][ T7138] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.731395][ T7138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.829329][ T296] EXT4-fs (loop2): unmounting filesystem. [ 143.912709][ T7154] loop2: detected capacity change from 0 to 2048 [ 143.957010][ T7154] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.043142][ T7154] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.082398][ T7164] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2920'. [ 144.105386][ T7154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 144.159957][ T7154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.159957][ T7154] [ 144.175558][ T7154] EXT4-fs (loop2): Total free blocks count 0 [ 144.192814][ T7154] EXT4-fs (loop2): Free/Dirty block details [ 144.199741][ T7154] EXT4-fs (loop2): free_blocks=2415919104 [ 144.227791][ T7154] EXT4-fs (loop2): dirty_blocks=32 [ 144.248523][ T7154] EXT4-fs (loop2): Block reservation details [ 144.255380][ T7154] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 144.304838][ T296] EXT4-fs (loop2): unmounting filesystem. [ 145.070826][ T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 145.115660][ T7218] bridge0: port 3(veth1_macvtap) entered blocking state [ 145.122980][ T7218] bridge0: port 3(veth1_macvtap) entered disabled state [ 145.260906][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 145.267736][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.296225][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 145.317054][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.336576][ T19] usb 2-1: config 0 descriptor?? [ 145.349228][ T19] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 145.673422][ T7243] syz.0.2955[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.673512][ T7243] syz.0.2955[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.015919][ T7234] loop2: detected capacity change from 0 to 131072 [ 146.083229][ T7234] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.178716][ T7234] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.355971][ T7276] incfs: Backing dir is not set, filesystem can't be mounted. [ 146.385075][ T7276] incfs: mount failed -2 [ 147.621846][ T28] audit: type=1400 audit(2000000025.060:604): avc: denied { mounton } for pid=7309 comm="syz.0.2981" path="/proc/152/cgroup" dev="proc" ino=46788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 147.821190][ T6] usb 2-1: USB disconnect, device number 12 [ 148.250841][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.396589][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3007'. [ 148.442559][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 148.455170][ T19] usb 1-1: config 254 has an invalid interface number: 205 but max is 0 [ 148.470829][ T19] usb 1-1: config 254 has no interface number 0 [ 148.487382][ T19] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=52.c6 [ 148.513361][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.524965][ T19] usb 1-1: Product: syz [ 148.528950][ T19] usb 1-1: Manufacturer: syz [ 148.541077][ T19] usb 1-1: SerialNumber: syz [ 148.571515][ T7374] loop2: detected capacity change from 0 to 512 [ 148.603995][ T7374] EXT4-fs (loop2): Test dummy encryption mode enabled [ 148.621404][ T7374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.661311][ T7374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 148.677520][ T7381] loop1: detected capacity change from 0 to 512 [ 148.684075][ T7374] System zones: 1-12 [ 148.696865][ T7381] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.721339][ T7374] EXT4-fs (loop2): 1 truncate cleaned up [ 148.726810][ T7374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.736647][ T7381] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.3013: inline data xattr refers to an external xattr inode [ 148.755756][ T7340] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 148.771768][ T60] usb 1-1: USB disconnect, device number 4 [ 148.800848][ T7381] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3013: couldn't read orphan inode 12 (err -117) [ 148.822864][ T7381] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.855082][ T7381] EXT4-fs (loop1): shut down requested (1) [ 148.885555][ T294] EXT4-fs (loop1): unmounting filesystem. [ 148.920401][ T296] EXT4-fs (loop2): unmounting filesystem. [ 149.183497][ T7398] loop2: detected capacity change from 0 to 128 [ 149.221496][ T7398] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.241161][ T7398] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.300386][ T352] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.525448][ T7413] loop2: detected capacity change from 0 to 256 [ 149.658571][ T28] audit: type=1400 audit(2000000027.090:605): avc: denied { module_load } for pid=7418 comm="syz.2.3029" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 149.682489][ T7419] Invalid ELF header magic: != ELF [ 150.230839][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.349572][ T7435] syz.3.3036[7435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.349655][ T7435] syz.3.3036[7435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.420860][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 150.451938][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.472257][ T6] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 150.488969][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.511409][ T6] usb 3-1: Product: syz [ 150.515425][ T6] usb 3-1: Manufacturer: syz [ 150.519835][ T6] usb 3-1: SerialNumber: syz [ 150.548364][ T6] usb 3-1: config 0 descriptor?? [ 150.560152][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 150.584947][ T7447] device gretap0 entered promiscuous mode [ 150.613271][ T7447] device gretap0 left promiscuous mode [ 150.614971][ T7449] loop1: detected capacity change from 0 to 512 [ 150.671964][ T7449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.692908][ T7449] ext4 filesystem being mounted at /621/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.716771][ T39] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 150.733575][ T39] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 150.752981][ T294] EXT4-fs (loop1): unmounting filesystem. [ 150.764666][ T60] usb 3-1: USB disconnect, device number 8 [ 150.780824][ T39] hid-generic 0000:0003:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 150.877127][ T7465] loop1: detected capacity change from 0 to 512 [ 150.885736][ T4685] EXT4-fs (loop8): unmounting filesystem. [ 150.892851][ T7465] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.912305][ T7465] EXT4-fs (loop1): 1 truncate cleaned up [ 150.919448][ T7465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.937397][ T7465] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 150.958262][ T294] EXT4-fs (loop1): unmounting filesystem. [ 150.980084][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.987125][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.995265][ T7462] device bridge_slave_0 entered promiscuous mode [ 151.004347][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.012013][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.019312][ T7462] device bridge_slave_1 entered promiscuous mode [ 151.090119][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.097015][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.104137][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.111015][ T7462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.126304][ T7486] loop1: detected capacity change from 0 to 512 [ 151.147737][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3056: casefold flag without casefold feature [ 151.160719][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3056: couldn't read orphan inode 15 (err -117) [ 151.172797][ T7486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.213074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.223386][ T294] EXT4-fs (loop1): unmounting filesystem. [ 151.229219][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.257905][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.278661][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.302764][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.309753][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.321195][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.329309][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.336200][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.360545][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.384156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.415286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.435732][ T7462] device veth0_vlan entered promiscuous mode [ 151.459484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.468466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.476508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.496889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.514238][ T7513] loop1: detected capacity change from 0 to 512 [ 151.525023][ T7462] device veth1_macvtap entered promiscuous mode [ 151.529255][ T7513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.537452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.552061][ T7496] loop0: detected capacity change from 0 to 40427 [ 151.562958][ T7513] EXT4-fs (loop1): 1 truncate cleaned up [ 151.564469][ T7496] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 151.576797][ T7513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.577996][ T7496] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.586165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.604913][ T7496] F2FS-fs (loop0): invalid crc value [ 151.632320][ T7496] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.643326][ T315] device bridge_slave_1 left promiscuous mode [ 151.657990][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.670949][ T6754] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.689499][ T315] device bridge_slave_0 left promiscuous mode [ 151.696313][ T294] EXT4-fs (loop1): unmounting filesystem. [ 151.705738][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.715400][ T315] device veth1_macvtap left promiscuous mode [ 151.724797][ T315] device veth0_vlan left promiscuous mode [ 151.730973][ T7496] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.740868][ T7496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.766802][ T24] kernel write not supported for file /4/net/sockstat (pid: 24 comm: kworker/1:0) [ 151.848373][ T7530] loop5: detected capacity change from 0 to 512 [ 151.875991][ T7530] EXT4-fs (loop5): Test dummy encryption mode enabled [ 151.894195][ T6754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.914095][ T6754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.929499][ T7530] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3073: casefold flag without casefold feature [ 151.933924][ T6754] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.954890][ T7530] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3073: couldn't read orphan inode 15 (err -117) [ 151.975115][ T7496] syz.0.3061: attempt to access beyond end of device [ 151.975115][ T7496] loop0: rw=2049, sector=77824, nr_sectors = 2088 limit=40427 [ 151.981296][ T7530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.989138][ T6754] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.010816][ T6754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.022011][ T7496] syz.0.3061: attempt to access beyond end of device [ 152.022011][ T7496] loop0: rw=2049, sector=79912, nr_sectors = 2008 limit=40427 [ 152.036198][ T6754] usb 3-1: config 0 descriptor?? [ 152.047210][ T7517] loop3: detected capacity change from 0 to 40427 [ 152.047387][ T7496] syz.0.3061: attempt to access beyond end of device [ 152.047387][ T7496] loop0: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 152.078849][ T7496] syz.0.3061: attempt to access beyond end of device [ 152.078849][ T7496] loop0: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 152.087992][ T7534] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 152.107262][ T7530] EXT4-fs error (device loop5): ext4_check_dx_root:2266: inode #2: comm syz.5.3073: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 152.123607][ T7496] syz.0.3061: attempt to access beyond end of device [ 152.123607][ T7496] loop0: rw=2049, sector=57344, nr_sectors = 2128 limit=40427 [ 152.139054][ T7517] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.158632][ T7496] syz.0.3061: attempt to access beyond end of device [ 152.158632][ T7496] loop0: rw=2049, sector=59472, nr_sectors = 416 limit=40427 [ 152.187763][ T7462] EXT4-fs (loop5): unmounting filesystem. [ 152.232141][ T28] audit: type=1400 audit(2000000029.670:606): avc: denied { accept } for pid=7543 comm="syz.1.3077" path="socket:[47593]" dev="sockfs" ino=47593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.233322][ T7517] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.338279][ T7555] loop5: detected capacity change from 0 to 1024 [ 152.353698][ T7555] EXT4-fs: Ignoring removed oldalloc option [ 152.364796][ T7555] EXT4-fs: Ignoring removed bh option [ 152.379590][ T5780] syz-executor: attempt to access beyond end of device [ 152.379590][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.464925][ T6754] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 152.481188][ T6754] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 152.511716][ T6754] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 152.553576][ T760] udevd[760]: failed to send result of seq 12402 to main daemon: Connection refused [ 152.622075][ T7571] loop3: detected capacity change from 0 to 512 [ 152.638996][ T7571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.656400][ T7571] EXT4-fs (loop3): 1 truncate cleaned up [ 152.711742][ T7565] loop1: detected capacity change from 0 to 40427 [ 152.720417][ T7565] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 152.726177][ T7562] loop5: detected capacity change from 0 to 40427 [ 152.729481][ T7565] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 152.735519][ T39] usb 3-1: USB disconnect, device number 9 [ 152.743413][ T7565] F2FS-fs (loop1): invalid crc value [ 152.750350][ T7562] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 152.754911][ T7565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.760428][ T7562] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 152.777127][ T7562] F2FS-fs (loop5): invalid crc value [ 152.783845][ T7562] F2FS-fs (loop5): Found nat_bits in checkpoint [ 152.801337][ T7583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7583 comm=syz.3.3089 [ 152.804043][ T7565] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.820390][ T7565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.859962][ T7562] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 152.866982][ T7562] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 152.879330][ T294] syz-executor: attempt to access beyond end of device [ 152.879330][ T294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.907522][ T7562] syz.5.3086: attempt to access beyond end of device [ 152.907522][ T7562] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.991228][ T7592] loop3: detected capacity change from 0 to 1024 [ 153.009728][ T7592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.049069][ T7592] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 153.063035][ T7600] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3095'. [ 153.104458][ T7604] loop1: detected capacity change from 0 to 512 [ 153.115623][ T7604] EXT4-fs (loop1): unsupported inode size: 143 [ 153.122718][ T7604] EXT4-fs (loop1): blocksize: 1024 [ 153.128567][ T7606] device batadv_slave_1 entered promiscuous mode [ 153.135785][ T7605] device batadv_slave_1 left promiscuous mode [ 153.220006][ T7598] loop5: detected capacity change from 0 to 40427 [ 153.226961][ T7598] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 153.234803][ T7598] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 153.252460][ T7598] F2FS-fs (loop5): invalid crc value [ 153.264993][ T7598] F2FS-fs (loop5): Found nat_bits in checkpoint [ 153.267053][ T7619] loop2: detected capacity change from 0 to 256 [ 153.277760][ T7619] exfat: Deprecated parameter 'utf8' [ 153.283335][ T7619] exfat: Deprecated parameter 'namecase' [ 153.288937][ T7619] exfat: Deprecated parameter 'utf8' [ 153.305527][ T7619] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x589b2fed, utbl_chksum : 0xe619d30d) [ 153.334085][ T7598] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 153.342494][ T7598] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 153.350047][ T28] audit: type=1400 audit(2000000030.780:607): avc: denied { rmdir } for pid=7617 comm="syz.2.3105" name="file0" dev="loop2" ino=1048788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.505112][ T7598] syz.5.3092: attempt to access beyond end of device [ 153.505112][ T7598] loop5: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 153.589018][ T7651] loop3: detected capacity change from 0 to 256 [ 153.627830][ T7653] kvm: apic: phys broadcast and lowest prio [ 153.700868][ T418] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.724503][ T28] audit: type=1400 audit(2000000031.160:608): avc: denied { map } for pid=7663 comm="syz.3.3125" path="socket:[48715]" dev="sockfs" ino=48715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.752816][ T7667] loop2: detected capacity change from 0 to 512 [ 153.758969][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.776437][ T7667] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 153.793456][ T7667] EXT4-fs (loop2): invalid journal inode [ 153.799174][ T7667] EXT4-fs (loop2): can't get journal size [ 153.810979][ T7667] EXT4-fs (loop2): 1 truncate cleaned up [ 153.828525][ T7667] EXT4-fs warning (device loop2): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 153.890886][ T418] usb 2-1: Using ep0 maxpacket: 32 [ 153.897897][ T418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.921349][ T418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.936122][ T418] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 153.945478][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 153.951221][ T418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.965753][ T6] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.973967][ T6] usb 1-1: config 0 has no interface number 0 [ 153.979867][ T6] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.991847][ T418] usb 2-1: config 0 descriptor?? [ 154.002494][ T6] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.012899][ T6] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 154.022655][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.032474][ T6] usb 1-1: config 0 descriptor?? [ 154.071798][ T7673] loop5: detected capacity change from 0 to 40427 [ 154.086587][ T7673] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 154.097841][ T7673] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 154.107201][ T7673] F2FS-fs (loop5): invalid crc value [ 154.128845][ T7673] F2FS-fs (loop5): Found nat_bits in checkpoint [ 154.130483][ T7679] loop3: detected capacity change from 0 to 40427 [ 154.149674][ T7679] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 154.157472][ T7679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.169967][ T7679] F2FS-fs (loop3): invalid crc value [ 154.187284][ T7679] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.202279][ T7673] F2FS-fs (loop5): Start checkpoint disabled! [ 154.202692][ T7702] loop2: detected capacity change from 0 to 256 [ 154.220683][ T7702] FAT-fs (loop2): Directory bread(block 64) failed [ 154.227347][ T7673] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 154.227433][ T7702] FAT-fs (loop2): Directory bread(block 65) failed [ 154.241055][ T7673] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 154.241091][ T7702] FAT-fs (loop2): Directory bread(block 66) failed [ 154.256386][ T7702] FAT-fs (loop2): Directory bread(block 67) failed [ 154.263189][ T7702] FAT-fs (loop2): Directory bread(block 68) failed [ 154.269720][ T7702] FAT-fs (loop2): Directory bread(block 69) failed [ 154.276638][ T7702] FAT-fs (loop2): Directory bread(block 70) failed [ 154.283454][ T7702] FAT-fs (loop2): Directory bread(block 71) failed [ 154.290310][ T7679] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.290348][ T7702] FAT-fs (loop2): Directory bread(block 72) failed [ 154.304090][ T7702] FAT-fs (loop2): Directory bread(block 73) failed [ 154.305973][ T7679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.399143][ T418] savu 0003:1E7D:2D5A.0010: report_id 0 is invalid [ 154.409411][ T418] savu 0003:1E7D:2D5A.0010: item 0 1 1 8 parsing failed [ 154.416981][ T418] savu 0003:1E7D:2D5A.0010: parse failed [ 154.426420][ T418] savu: probe of 0003:1E7D:2D5A.0010 failed with error -22 [ 154.497567][ T7715] loop2: detected capacity change from 0 to 2048 [ 154.599574][ T418] usb 2-1: USB disconnect, device number 13 [ 154.659211][ T6] uclogic 0003:28BD:0071.0011: failed retrieving string descriptor #100: -71 [ 154.667990][ T6] uclogic 0003:28BD:0071.0011: failed retrieving pen parameters: -71 [ 154.676094][ T6] uclogic 0003:28BD:0071.0011: pen probing failed: -71 [ 154.682919][ T6] uclogic 0003:28BD:0071.0011: failed probing parameters: -71 [ 154.690211][ T6] uclogic: probe of 0003:28BD:0071.0011 failed with error -71 [ 154.698571][ T6] usb 1-1: USB disconnect, device number 5 [ 154.722685][ T7730] loop3: detected capacity change from 0 to 2048 [ 154.735575][ T28] audit: type=1400 audit(2000000032.170:609): avc: denied { map } for pid=7729 comm="syz.3.3145" path="/168/file2/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.766777][ T7736] loop5: detected capacity change from 0 to 1024 [ 154.770298][ T7730] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.774608][ T7736] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 154.796339][ T7736] EXT4-fs (loop5): orphan cleanup on readonly fs [ 154.802903][ T315] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 154.803598][ T7736] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz.5.3151: Invalid inode table block 0 in block_group 0 [ 154.815463][ T315] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.815463][ T315] [ 154.827692][ T7736] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 154.837349][ T315] EXT4-fs (loop3): Total free blocks count 0 [ 154.846875][ T7736] EXT4-fs error (device loop5): ext4_quota_write:7183: inode #3: comm syz.5.3151: mark_inode_dirty error [ 154.852809][ T315] EXT4-fs (loop3): Free/Dirty block details [ 154.865716][ T7736] Quota error (device loop5): write_blk: dquota write failed [ 154.869483][ T315] EXT4-fs (loop3): free_blocks=2415919120 [ 154.876661][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.882183][ T315] EXT4-fs (loop3): dirty_blocks=16 [ 154.889500][ T7736] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 154.894328][ T315] EXT4-fs (loop3): Block reservation details [ 154.904411][ T7736] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.3151: Failed to acquire dquot type 0 [ 154.910062][ T315] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 154.922035][ T7736] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz.5.3151: Invalid inode table block 0 in block_group 0 [ 154.939401][ T7736] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 154.949738][ T7736] EXT4-fs error (device loop5): ext4_ext_truncate:4453: inode #15: comm syz.5.3151: mark_inode_dirty error [ 154.961208][ T7736] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz.5.3151: Invalid inode table block 0 in block_group 0 [ 154.974612][ T7736] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 154.984663][ T7736] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 155.000269][ T7736] EXT4-fs error (device loop5): __ext4_get_inode_loc:4508: comm syz.5.3151: Invalid inode table block 0 in block_group 0 [ 155.015877][ T7736] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 155.029713][ T7736] EXT4-fs error (device loop5): ext4_truncate:4313: inode #15: comm syz.5.3151: mark_inode_dirty error [ 155.041322][ T7736] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 155.050248][ T7736] EXT4-fs (loop5): 1 truncate cleaned up [ 155.061890][ T7747] loop3: detected capacity change from 0 to 512 [ 155.072730][ T7747] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.110848][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 155.116953][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.140114][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.153558][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.182855][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.200832][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.227168][ T24] usb 3-1: Product: syz [ 155.231309][ T24] usb 3-1: Manufacturer: syz [ 155.246035][ T24] usb 3-1: SerialNumber: syz [ 155.285655][ T28] audit: type=1400 audit(2000000032.720:610): avc: denied { read } for pid=7780 comm="syz.1.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.334971][ T7789] loop0: detected capacity change from 0 to 256 [ 155.354753][ T7789] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 155.373533][ T7789] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 155.482830][ T28] audit: type=1400 audit(2000000032.920:611): avc: denied { mounton } for pid=7766 comm="syz.0.3165" path="/95/file2/file2" dev="loop0" ino=1048796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.632097][ T10] tipc: Subscription rejected, illegal request [ 155.663051][ T24] usb 3-1: 0:2 : does not exist [ 155.678618][ T7828] netlink: 'syz.5.3191': attribute type 1 has an invalid length. [ 155.683728][ T7830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.772522][ T28] audit: type=1400 audit(2000000033.210:612): avc: denied { sqpoll } for pid=7842 comm="syz.0.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.883457][ T7852] loop5: detected capacity change from 0 to 2048 [ 155.904751][ T7852] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 155.928398][ T7859] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3204'. [ 156.096956][ T7879] incfs: iterate_incfs_dir / -22 [ 156.196966][ T7889] input: syz0 as /devices/virtual/input/input28 [ 156.244003][ T7894] loop1: detected capacity change from 0 to 2048 [ 156.250745][ T7894] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.268044][ T24] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 156.291185][ T24] usb 3-1: USB disconnect, device number 10 [ 156.482408][ T7909] loop5: detected capacity change from 0 to 128 [ 156.483576][ T7894] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3219: bg 0: block 234: padding at end of block bitmap is not set [ 156.514132][ T7894] EXT4-fs (loop1): Remounting filesystem read-only [ 156.531758][ T7909] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.720099][ T7924] loop3: detected capacity change from 0 to 8192 [ 156.748681][ T7924] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.772868][ T7932] loop0: detected capacity change from 0 to 256 [ 156.801272][ T7932] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 156.833455][ T7932] exFAT-fs (loop0): hint_cluster is invalid (17) [ 156.961325][ T7950] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.007194][ T7955] loop3: detected capacity change from 0 to 512 [ 157.031064][ T7955] EXT4-fs: Ignoring removed nobh option [ 157.036985][ T7955] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.094625][ T7960] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 157.106193][ T7960] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 157.113646][ T7964] loop2: detected capacity change from 0 to 256 [ 157.114433][ T7960] CPU: 1 PID: 7960 Comm: syz.3.3246 Not tainted 6.1.118-syzkaller-00013-g7e96f2bfaa90 #0 [ 157.123873][ T7964] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 157.130137][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.151842][ T7960] RIP: 0010:bq_flush_to_queue+0x47/0x6e0 [ 157.157307][ T7960] Code: df e8 fd 6e dd ff 49 8d 5f 50 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 23 e3 24 00 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 cd 04 00 00 48 89 5d 80 44 8b 33 4d 8d [ 157.176751][ T7960] RSP: 0018:ffffc900033ff8b8 EFLAGS: 00010246 [ 157.182646][ T7960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 157.190456][ T7960] RDX: ffffc900052f9000 RSI: 000000000000006d RDI: 000000000000006e [ 157.198287][ T7960] RBP: ffffc900033ff948 R08: ffffffff81981608 R09: ffffffff8320c702 [ 157.206080][ T7960] R10: 0000000000000002 R11: ffff888143628000 R12: dffffc0000000000 [ 157.213890][ T7960] R13: ffff8881f6f34440 R14: ffff8881f6f34440 R15: ffff8881f6f00000 [ 157.221705][ T7960] FS: 00007faeba4ac6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 157.230468][ T7960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.236891][ T7960] CR2: 0000000020001840 CR3: 000000011fdbc000 CR4: 00000000003526a0 [ 157.244707][ T7960] Call Trace: [ 157.247829][ T7960] [ 157.250613][ T7960] ? __die_body+0x62/0xb0 [ 157.254775][ T7960] ? die_addr+0x9f/0xd0 [ 157.258764][ T7960] ? exc_general_protection+0x317/0x4c0 [ 157.264151][ T7960] ? asm_exc_general_protection+0x27/0x30 [ 157.269701][ T7960] ? tun_get_user+0x1e32/0x3a90 [ 157.274443][ T7960] ? __cpu_map_flush+0x28/0x130 [ 157.279081][ T7960] ? bq_flush_to_queue+0x47/0x6e0 [ 157.283939][ T7960] ? bq_flush_to_queue+0x23/0x6e0 [ 157.288796][ T7960] ? preempt_schedule+0xd9/0xe0 [ 157.293481][ T7960] ? schedule_preempt_disabled+0x20/0x20 [ 157.298954][ T7960] __cpu_map_flush+0xab/0x130 [ 157.303465][ T7960] xdp_do_flush+0x13/0x20 [ 157.307627][ T7960] tun_get_user+0x1e4e/0x3a90 [ 157.312145][ T7960] ? tun_get_user+0x7e6/0x3a90 [ 157.316743][ T7960] ? tun_do_read+0x2000/0x2000 [ 157.321341][ T7960] ? ref_tracker_alloc+0x31d/0x450 [ 157.326293][ T7960] ? avc_policy_seqno+0x1b/0x70 [ 157.330978][ T7960] ? tun_get+0xe9/0x120 [ 157.334969][ T7960] tun_chr_write_iter+0x129/0x210 [ 157.339830][ T7960] vfs_write+0xaf6/0xed0 [ 157.343910][ T7960] ? file_end_write+0x1c0/0x1c0 [ 157.348594][ T7960] ? do_futex+0x501/0x9a0 [ 157.352765][ T7960] ? __fget_files+0x2cb/0x330 [ 157.357276][ T7960] ? __fdget_pos+0x204/0x390 [ 157.361698][ T7960] ? ksys_write+0x77/0x2c0 [ 157.365953][ T7960] ksys_write+0x199/0x2c0 [ 157.370144][ T7960] ? __this_cpu_preempt_check+0x13/0x20 [ 157.375501][ T7960] ? xfd_validate_state+0x6f/0x170 [ 157.380448][ T7960] ? __ia32_sys_read+0x90/0x90 [ 157.385055][ T7960] ? fpregs_restore_userregs+0x130/0x290 [ 157.390518][ T7960] __x64_sys_write+0x7b/0x90 [ 157.394941][ T7960] x64_sys_call+0x2f/0x9a0 [ 157.399192][ T7960] do_syscall_64+0x3b/0xb0 [ 157.403539][ T7960] ? clear_bhb_loop+0x55/0xb0 [ 157.408070][ T7960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.413865][ T7960] RIP: 0033:0x7faeb95847df [ 157.418115][ T7960] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 157.437560][ T7960] RSP: 002b:00007faeba4ac000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 157.445800][ T7960] RAX: ffffffffffffffda RBX: 00007faeb9775fa0 RCX: 00007faeb95847df [ 157.453615][ T7960] RDX: 000000000000005e RSI: 0000000020000cc0 RDI: 00000000000000c8 [ 157.461425][ T7960] RBP: 00007faeb9601b08 R08: 0000000000000000 R09: 0000000000000000 [ 157.469235][ T7960] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000000 [ 157.477135][ T7960] R13: 0000000000000000 R14: 00007faeb9775fa0 R15: 00007ffe81606b08 [ 157.484954][ T7960] [ 157.487815][ T7960] Modules linked in: [ 157.491630][ T7960] ---[ end trace 0000000000000000 ]--- [ 157.496844][ T7960] RIP: 0010:bq_flush_to_queue+0x47/0x6e0 [ 157.502348][ T7960] Code: df e8 fd 6e dd ff 49 8d 5f 50 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 23 e3 24 00 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 cd 04 00 00 48 89 5d 80 44 8b 33 4d 8d [ 157.521773][ T7960] RSP: 0018:ffffc900033ff8b8 EFLAGS: 00010246 [ 157.527822][ T7960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 157.535756][ T7960] RDX: ffffc900052f9000 RSI: 000000000000006d RDI: 000000000000006e [ 157.543554][ T7960] RBP: ffffc900033ff948 R08: ffffffff81981608 R09: ffffffff8320c702 [ 157.551369][ T7960] R10: 0000000000000002 R11: ffff888143628000 R12: dffffc0000000000 [ 157.559342][ T7960] R13: ffff8881f6f34440 R14: ffff8881f6f34440 R15: ffff8881f6f00000 [ 157.567184][ T7960] FS: 00007faeba4ac6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 157.575940][ T7960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.582410][ T7960] CR2: 0000000020001840 CR3: 000000011fdbc000 CR4: 00000000003526a0 [ 157.590159][ T7960] Kernel panic - not syncing: Fatal exception in interrupt [ 157.597507][ T7960] Kernel Offset: disabled [ 157.601646][ T7960] Rebooting in 86400 seconds..