last executing test programs: 4.281415354s ago: executing program 3 (id=1790): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x0, 0x3) 3.45724341s ago: executing program 0 (id=1798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000800000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 3.428914904s ago: executing program 0 (id=1801): socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fbff07000000000000c0cdafd1f8a9918bc4f65daaeb6db4ee9bcb25b1811dbf40b3a7da5a0464db04ed1782595eb9322e37229c339b1f91201c279617", 0x3d}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000000400000000000000000001248081000000000010000800"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.38974573s ago: executing program 3 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000dc0), 0x2931b90d, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syncfs(r3) 3.274923258s ago: executing program 3 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000a40)='mm_page_alloc\x00', r1}, 0x10) unshare(0x64000600) 3.227318515s ago: executing program 3 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_POLL(r4, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') 3.169950594s ago: executing program 3 (id=1810): syz_genetlink_get_family_id$ethtool(&(0x7f00000030c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRESHEX=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r5 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r5, &(0x7f00000003c0)={&(0x7f0000000340), 0x6e, &(0x7f0000000340)}, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902120001000000000904000000855f3000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.02231525s ago: executing program 2 (id=1830): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x0, 0x3) 1.906076448s ago: executing program 1 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r5, &(0x7f0000002200)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) 1.905705828s ago: executing program 1 (id=1832): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) r9 = pidfd_getfd(r0, r5, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000780), 0x4) ioprio_set$pid(0x2, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a700000000000000000008fffffc08000300", @ANYRES32=r11, @ANYBLOB="050007000000000005000800000000"], 0x2c}}, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1687bc16", @ANYRES16=r12, @ANYBLOB="00022bbd7000fedbdf251400000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4044080) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000280)=""/114, 0x1304000, 0x1000, 0x9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d", @ANYRESHEX=r2], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x1f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r0, &(0x7f0000000000), 0x12) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/slabinfo\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) 1.905418778s ago: executing program 1 (id=1833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000dc0), 0x2931b90d, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syncfs(r3) 1.548731613s ago: executing program 1 (id=1834): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8000000000001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0xb8fc, 0x25d5}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) 1.494849501s ago: executing program 1 (id=1835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1.422102172s ago: executing program 1 (id=1836): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, "41a176c6"}, 0x0, 0x0, 0x0, 0x0}) 1.151837774s ago: executing program 2 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000240), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.151533274s ago: executing program 4 (id=1840): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 1.11041019s ago: executing program 2 (id=1841): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1.11015637s ago: executing program 4 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup2(r2, r2) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) 1.10954127s ago: executing program 2 (id=1843): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r2, 0x0) setreuid(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000005c0)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000200)={r6}) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r8, 0x1, r5, 0x3, 0x80000}) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) accept4$inet6(r9, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000080)=r6) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000280)={r8}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000004900d96d28bd7000fedbdf250a003800", @ANYRES32=r10, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}}, 0x0) 1.057994348s ago: executing program 4 (id=1844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) io_setup(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 869.212687ms ago: executing program 0 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000dc0), 0x2931b90d, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syncfs(r3) 826.974874ms ago: executing program 0 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 738.095737ms ago: executing program 0 (id=1847): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 737.724867ms ago: executing program 0 (id=1848): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000200)={'syz0\x00', {}, 0xfffffffd, [0x20], [0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000eeff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_sync_file_exit\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000240)='THAWED\x00', 0x7) 239.755924ms ago: executing program 2 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 237.659114ms ago: executing program 4 (id=1850): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) unshare(0x2040400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 178.110183ms ago: executing program 4 (id=1851): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 177.763023ms ago: executing program 2 (id=1852): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES64], 0x43, 0x5542, &(0x7f0000007240)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNLsuiB48Cge/E9EwZNH/wYPnr2JB8WbUMnMRLtqQdl8tN3fD5Jn3jdvnnnesASemSUBHFqr6W+/JHEmTkTEckScjhgfP0giIpksulqEFyLibEQsPfRIyvk/J45GxMmIODNOXuRMype+OD86d/nnt3799vtjR059+c0Pi9s1sGgvRkRvqzje6RUxaxfxbjlfH3Xy2Ls0KmPxQu9eOc6KuNPazDPs1Cfr6nm82C7WZ1v3B+N4p1tvjGO7cyef3+oXJxyM2pM8+Rvu1rfzcbO1mcfOIMtje6+oa3ev+G7bGwyLPM0y30d5+hgOJ7GYb+22iv1s3ctjoz8s54u8WbO1O46jMk6+extZt5nXsXmAD/ox93anf383HbW2B52sn16u1l6q1q5UattZszVsXarUe80rl9K1dne8rDJs1XtX21nW7raqjay3nq61G41KrZauXWttdur9tFarXqxeqFxeL4/Op6/ffC/tNtO1cXy1078/7HQH6Z1sOy3esZ5uVC++vJ6eq6Xv3LiV3rp9/fqNW+9+cO39m6/cePO1ctE/ykrXNi5sbFRqFyobtfVDtP9Py6KnuH84kGTRBQA8eR7R/4f+H5il2fX/27cjZt//xwz7//J0+v/Hrf897P3/DPYPB/J/+/+PZ1QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABz9+PKV2/kB6vF+FQ5/0w59Vw5TiJiKSIe/IvlOLov53KZZ+UR61f+VsN3SeQZxuc4Vj5ORsTV8vH7s7P+FAAAAODp9fUnZz8vuvXiaXXRBTFPxUWbpdMfTilfEhErqz9NKdvS+On5KSXL/76PxO6UsuUXsI5PKVlxye3ItLL9J8v7wvGHQlKEpbmWAwAAzMX+TmC+XQgAAADz9NmiC2AxkpjcypzcC87/8/6vG4In9o0AAACAJ1Cy6AIAAACAmcv7f7//BwAAAE+34vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDnbvJWRqI4wD8b6F8+BGJce9V3MEpjEdw6dJwAC/BynW9ghfgDBg3HsFQQ6cQNIImTIu+eZ6k73T6lh8zBBJmJgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ++VPXq0/uXH27N2TfNJCKaP5hfuidPbwAAAIDf2VX1qj1ZpPrj7vrT7tLzrl5ERHlh8D6KyVni7JRTXbi/+qUNnyPahMNzTLvjUUS86o7vz/p+FQAAAODh2q43y4jR4bT9s7h3gxhSmrQpn7zJlFdERLX4limtPOS9yBTWvr/H8S5TWjuBNcsUlqbcxrnS/kr7cT/N2s3OiiIV5fXHZ+s7AAAwoDQSOH7fH3YUAgAAwJDe3rsB9OT19X8XcVzKPC0FTlPRLe/Nf6oBAAAA/6Hi3g0AAAAAeteO/3dV/fFr5Nz/L/2mwP5/AAAA8G9I+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp11Vr7brzfLWnH1zmzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjB/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9JARECyhAGkBhgoem1tHQDBlDEwJ+AFKXXEnrlR5uBVhUoCxtk7oLKiBASKGydWTu3UpewdchQJOag5x+JQy/igNY+ms9Heve+tnx+3+ermnz9fAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGrbb+/FWXyZLeO02nf7/rWV2N/5Sx/d3Li7EFuMkzaT/n+YaW4k890lAgAAwOGQVLV9Vm1v5ZtLsU9ni/o/r4+LNf+Np/feE8bU/XVf1/6x/fLzved3B5stx4knPbc6Gh5/MJ3eo5vpdHvmb4/oFVe+uPeSFR9I+t76c9t5cT2Tr2/deqdfhEfayBYAONDOwT+Mj5Xd1o0qqH8fiv2gpfQAONx6jcK7rv+z2W5zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjD9np4so6TEMJCby+O7ty/tjKuv7lxd6Fup69f32ieM54iDyGcWx0Nj7c4l2l3+crVC8uj0fBS+8GLIYSuRn+zmv6FDyY4OIROro/gIQVp9WFPSz5l8Ou/f/tO/a/3EWX4Vghh1NF/SAAAPLbyqsW6fivfXIr7krkQdr7bX/+/0ojDhPX/vQ9P3y4O/ibdN16s/wftTXHqLa5d/HTx8pWrr61eXD4/PD/8+PUTgzcGJ8+cOnVmsbhXsuiOCQAAAP9Nv2rN+j+de3D9/2gjDhPW/599O/iiOVam/h9rb9Gv60wAAAAOt2df+uP3ZMz+pN8Pny+vrV0alK+72yfK1w5S/ceOVK1Z/2dzXWcFAAAAtGF7Pdm3/n+2EYcJ1/+f+v6FH5vnzEIIM9X6/7GVT0Zn25vOVHuYXx7+8oDvyXc9RwAAALo1U7Xm+n9ePP+f7j7ykIYQXn25jKs/AzhR/Z+9+9UPzbGaz/+fbG+KUymdL69H0c+H0JvvOiMAAAAeZ09ULRb7v+WbSx/9dPT9vuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//Gg03mw==") creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x2000000}) 143.782298ms ago: executing program 3 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000000c0)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="d93720db4195e1a34be0ad2f56793935d453c377b35280952f39a19a1c8aacd2cc08dadc1451ecf3ea5602c4fa11e48f06f5c22319277e0ecdb53e2eda975d8b0c0703a4299a9ea93c68dafd02607b4a3fe826919b5010e88399105cacd421aa27d0544308c67ddcc8ff8517d764ffdad87a0dbe21d14a2503d0e96b506de87ea8c0540d52272460cdacaa16211442539f7fe78e5bb111ee23ff07f71a84f64490211f584aebce5979ffc51196826d5688fd197222f5b5b97cff2009a2845c699caa42420e8cea4ea07953369cd8e1f641273236d745f419b4d9922155209b212331da3aa5f73672aa21bb2d574372fa957b3a287d6ebe921bef5b55428bfd6460032889d75a3ee4018353773d52124165020d2eb95dd39e04b2a74886ab6fffd382297d01fb2cb60a978968975d54c66c3912fb40a0e8aa264da07aa9be4f0e01b94446266c4521aa9bbfd034e158a7c7a20a2ba328cc054088bd3f88cc921fecb6e81d83cf43616a7240f76ef1da19cfec4207aa8998417e7dc568719ca154ae9bb38ad2fadddaa995de3a7073c53bcb05a4a13e0ad1d4ffdef949549081819986e07d150e5a000e0fe4d80544732dd3cfe0c9922f4f1773a55c5957e4788eb54d9299456b2c67d353fcd06a8ee6c679013ecbbc9690a22483bd7201c6582d97c1064beadceb37fa5ecbcce3589e1981e0ab13a5a1c9d4433ed3ad5aa23c38e5ec3628c75801d783ac39db125db8d9b6179ec9fa898140c07e30ba85b7e570c5ea1e8cab93586bb5f21918bda1fc4e3966276b736ab987fedca531c81ec0d1b833db24f54751d2d0c28ba9afd26e570cd35a02a4ccdcf9f8ff3a637befb831dee77d4cc084cc17e6eeb813b9c2016672b02e9c6f0364729b0b0c5d821bc4a621a9c95658967c83978042c07a562ca74971bfcdb25109aa90e7c3b8d1ceffd243cfa9cd3bdcb40e3cdadcfcaad0dac169c0187cce25f7de991f6c90ac27ee9bfd2713e88f100b1716f8bd33bd56be5109c20bb36a8f913037bcbe4c3e530d8e87ce0f90f2e0f75d4ece99de86441af8ad7f4f61fcfbcb0f370255e651d99c2f3ba139f6fe73fa43d3084f6930c7f8c436ff5e591d7c117dd7a4b6db5f6ec75484f859ac56e5d721b914b4cc9266ad2797f721f6d2a0ac0c4547136f3959c21f7f13a1cc62a9dc64a9b90afd753b18554cf35c5892b4da6cc12c17ce35ac37cf5b355d325de3b1dd7c4c7777b58e301e33ec1637a99423d1c98e363fbf28c1d4e99c2d2f979cba6f092574a4bad6e231df33a509f74140a3d038fbec7ec9642d618eb8e539f872b3464fb8f79a2975c6744dfa4cf607e2f497f91965c83cf0c77752dd9b4b12876150d916da828640be87402ebd7228518995dc612ed05faa6decbc4ddeae47693ac515f62fc0038ed9942c6f4d9bc4b5f73c4818ee6f08c6b37e8efd647057fbd91e1bdb5b2bc4076fff1b6bcc254d8a6ee92f61a74da856ae11c898a3c44ae3e4d1d375216a46354055c3c41642e687fca57686b592eb9444e89e420bd2bdd7a76a1113f7c7d77244002b26466d2c7d20a27d67649fb174fe42821c23b1938b5e19fa07292bed86eee6f9ff58bcdf23715cac06fc2f9bfef5085279c1ca0200d8c3e2a6f3e0bb77fa3b1007a0995124b94baf563dc27aa79a65bb589a51481311655ce2aabfec217101bc915cb215f16bb380b233e7535b54aef19abbd1c31fc9e3500dd227caa36377a5ef4d9fb085226c5d3798f6462d616751978753efabe90ad79cdc85fc06f4dfab89002fb7f2fa2189cec8fdc0d6d2a83df9aa2a4fd3f1d11944c2bf49c92f73970acb8a673595f88bab87821a5f05971204fbdc3065a167a6631ffd0cfa5f701d7c0332557b1ba18f20b37478d5bd0e6554b6f73944d6ca3f550dfaace341c437003f079dcc0eaac0f764d16307ade63a2125ba686f5028f2e6972c9875abfda0dc3aa0c2116202d0d66798f2410be640a5553d9400dd8510799963dcc296ec29484b61770e4520d752e04da3dbf60ddcdc6a4976b5ce7356accc79dbd0f48ec114ea4f2cb5d53e7d2a1757f6bc7ca65eeeee3f63f36db72af868c117718f41c428444ff494e857198fccfbe89e8cffa5d587ea59208e47e002f16fd8770d950c5a8ec894927b2105c41aa5e92a68829791c2f8a16a3949da8168f173864a20a389f0b20c446aebea7e0cffaf114182513256de11c8866e0f652d0ec2d8e745c6cf76232dbafa7dc9d5337fa87ae61bbefb2a4b9c90403198bfe1b7035169e97eb2ef7bac31801ee32dc415c06062d0c19c70960377ea2a851b2229d8d306c95106477245d758808a993440834687739543a08484a7e23678f141adce3397ceab56e83cc490a6530cc60c84f721aa342f351b08391e795633cf19b7bfe8dc2233234a96c796584bdaba4c7eedda1277aae5c57eda8acfd046a75604dee4a275a6b6abcd63d54f1abe272703c00d79e1ba85f3464fcd58cbfe0d6f8872e3d99c06456fd80e126b3e9e1dc46b1773dcc9eda7acd7dba6f7d703b08307c75a2b2413f443d7e90c1dbafb0d68bb4dc8353cba5e5bb3d1d527baf9bda6d7a21288e7719ed106633435e3a6a85c743c243f38dc4d2365ce16c5d21aa55a30869c5992a5be2ae13d96b2caff60bca18dd5faa6e329dc3f4e9e029963a6ec0edff0d4f9da8c27d7cc987076d50d9e3d88dd6a18ce4de277d8e73efee3aa97413ae2b7a4ef9875f6ffa04872572b65ba828c42fd23614d22809b5be5a91ac0b96839e5e2346e3cb8d448c93a4d98a07dbf6dce164459deb30518bf4b3272e7e4f499d7b253e486878f3d8d9fa7ad404946e9cbe31bfcf43fce405a5f93588a04c656faa32a05e66a5595ed301dde5a126469f0b679708fe58edd86c2eb6b97a03c0b019eddd7f6d88db1e475021b0879c344018a130233a7ca57c448b263cf802cdc09f965fead4f48ba2d4049c6b88f752f112dbcf8882b26f27b15e5971834ec4ab94c936b15b8f74a38cb96344a445aee1ff02467b6cb4c76df8c4b68523028d7f59d30d4dbe984b989ed1870a59b202072252c306b38a0530780dc031c6015702230e744701032d36507d417293fbb21fe75a01ae3128640d1e03138e2680bec75c0af12ddf95300ba3f126e2f8019ca09a67ea5053f30bf724e5670c17851c537201c8bcb248a5e9849e467b26a2a7b0c6cf6f4690b2e72740591e85b0e7cdeb876390338b8cf74946726a0dd8226718b29d8450e2089cfeb21ff37961afb408c24dac407567ce728607d37e9847a4e82ac84a256d1625d812a1c581fe65e66baa741bed0977c1a728370da67908ea6bec47f5845fd1da0862b4eb94e2b724fcc18732bd1973e92301a33aa022fa7c913a7f43f43f15eef223c7b193c129f861232e4683fa0d86a31db99b4239ff85d14b0fb8b87adbfab7383aabe4748aea807e4c3fe37ce6cd536ad283878598455a9ff7d0baa3f27f7a57fac2f47afdc14b4a334cafb21a8380ad141eeda6f3e069359e98c522c97559a1de5ff7d0f71edc4e433a57dd2d7a035485cf4ad4a55bbdd056dfe03a30bc85c7cf47ba8ed4de220fc056cea68ab77e5cc30f6a2de9abfdbdbd88725b8542b593d81e65945bb0b53bf9815fee368520939ba9fb55588c956d07db9770c6e3b325bd2641cdd1e5201d6910b2ae50feffd28d85ca166cf2949d5a335fd9fd7d77906dbfade2ee6884ae8ca66c39a920ad0a309a8ccb2956306458902116074c4541c85ca4b3e3ba968f17feb17d1a2436424578393ff56a0112635180f0af89db2e33e6935507b025779aea9dbd067edecbd49634ebc77c0d6c4dd4c295dc0e8eb1c44406c64a33ea23c6a93c3a2895fc23cb4f773a29efb05d90beb96479888c55639931e024733a4c32dc576d6e52142b38d8a9b9d2fe312f0159ede1d25df20114b7955c3bb78ecc54add0f357670d031931dbb640f4b57c017e97e71a97c571605125faeca107f8beeb58079b90e6a6cabb1677210c5b2d2659d552fa2daa15faa7b17061abfea725b49dd016a078517c285cf47592bbff7cafa16595884f48e11346b1e4588a083d9dceecd146b3ea0a6b87d049f71b1222ed8864c697e2ccfdb9fc3c7f22187e10a91598e479d25d1546e4fc68dbe56ec94d5bc792e246e817d7769f166104853e405b08b246a2022bda6f9c3f739c6d6d2f3a7f870ee183a76978ec00c43d94aefafe468f0f1021fc74770142db7e5967bae852291ab9c3e56f00a1229b12eea414b8b6fb2c9635f0b5d32175f5be4a04fb572368258a4ed72d4d3494637c8d6ee4c6d4bf35c8c494ac4d2da1864786ad0f41d362d1cf07d60dacd9779c3ef8b8b120b27aab34d9805df829db55e6a691740e118cf542b4f6b28c0d860d4aae677e2702dcfd822fe5457c66dc2f8c457715eede8cac7837a936b731c297927c463b463c1d03d502485b41306dd2063780afe9543f96da9c086fffe3910f2314a382dbbee9f72b7e66e90f44b9049f1059a819ec8ca7af8f836704c6d188e94e7f8bebacc682c4c46de1fde391ab0e5ec89e2a488639e70fc1d9cd5e04c4122903d958d3a03419121e3424a23231289634d010f582c440d87e91286abbe95a86481927f2765f6d0f3c2e9ef60b33ad763035055840c64ada2c841adad19b7d5924a2b86da236f15ee50c0914a0a1cfba62317aa2d33de78d08ab6287618bba0e3fe9496a695f059a475d37c6c937e9dfa77215aa3af6f0a862c23e1c9d15921982e8e17c63a1208b9da06c5f0bc72c4bf855600950cf0ea6e77a91b81e6aebe0e35809464599bf916984ecf8268813a3faee2260c3e28545637e463de165dac512e8b784e5163da5471ee710ffec3c496e78d5c5ec941d2616286960f0a7bbc4d4f778309cf5091ba7e05b7a598d7865ee10e1813515dba5e7b4a3e23c1ba33bec878b0b8f3a13e17b59aa07452fe645069c4e2f7b82f106dc1a6093d45abf393f4a68f57f6521662f639d8136914823c393e0cae4bd3784e6b2bda5671fc8ebc68b3dc7aee2d876a48c205a4e7df8ea786f124f6c83baa8b85df819e8ee366eb5507809a1e36fd3f17facb562dfe511b9183b62852312eaf947fe6a61dc168de4602910c6d12ce15e35e3b4125b5f9714ea1c49a1fdfff7a8ead500b288549b30bf2a1f4f198393432498334e65e198f0352b6c181491859f166e64846570dc551b909d1bf8bc15935ba82183c81c6c49210a347a37db3467c32c7d1e3a8aa3c7957ba2c37eb3f27b928f45908cfd22dab3c604dd053ca2425f122e11fc09cea1344d0e850a28240128e501b4425333dbd5dbba9269d62c516b4d3b16783489c7e25b2816a6f167ffeb6f19a8636b18e15926f5ad1ee4a4dd242a7f1a2fdfc7bfbf40b75da981a566d4965f50657e8179e0d3b40185f29a5061ea351e60970cb3d142c28375a5d8dced003a5b01846b4ed6460acdf2cbde7529da68aecd562d3ae10aa1c1e2325f09884df99e0f4246b2f9b879d711ab49757910c54f8fa48439dd47ce70935cd4f3b1ff85a28232b6ccbb51fd5d36a69c4eb5abf9cef8642172399f94cb2daed8d2d6ed279c6e35284e7ac5db840ca12ed7d168454725e19f552aad7de59ab368e4d42238444a8672f937aedc61c2159b6d1d4aada07c6de08ae40a1bae8ca696273f5748a6259ff4bcc39510e11a5f8ba25766c6779f07761c936ac0d0d01f1d4b488c3d2742c1a3029da837cc33dd1780695c5fc1542830006989b3faa62a9c8538ae840c8285cde8a13085cd295f695a0ab6d27b03a16b1904fc62fe25776df3fa792f54f4a5ad98f1f0be45848c81e34d70d4850a4ac3a5a7dbc56fff68eb4212bb1109f6f129c12babef6ef9671901c73da50966fb18d1f0c1575cbf985fd5a5c36f33386a1ce35c2ca4422b3c0522fbcbd873d8f0f80734b4f3e0bd1aa80beb6b1ec9a40a2d39adac14b7de089820c1314ef3b2fc2988778b9cbca0fe0f64cb858a90a6bcf67961644f6bd5825c43c9d4d4b0a8e5c7321346edf5f56558c00550891392055e15a6402220301235ac8593dbbe26f1f5105d50b1199d2fe2d74a78ea8e83fb409716c7d508ac1476d067c5aa77b1f689488e406bb6702648aa1faeecdcce8702f3d66e66c927487cfba756c070065126f225afc58fe54d50923f1c7b14ce478d40f4bf9eccc441c8c931359f97898e6d8fe42a175546ec8c6d52672947e0233c1cccad78d44494361f6c81c530e9bea0e911d30998f0aeddeda8269e1a87e86509a5a4c2ed5f49e8b1bfdae1cfda352dee261ea029f80418e2232616e9f8443fce5d3f82e6bc8b8fc1e65419dc2fd1451e445f6e06ea3d12206ecadf4e45f9bf1340e162be57ea63787580c50a452af6d3b12fe4e2b8aa861e435f7766f35fa272841094149c81a40e7bff1f7177c38787b53b1b4fcf18e50c89ad3049f35f306fe628d4bdbacc07c44f8fc0006023407b4484ad6fbc15094b02a009f50e34efc0e75ab23dcc1b8355f4cd5f693aaf01e6fde20ce36fbd7fac42e00ce6100b0dfa974680dfef60ffa7f905840a2c345410abc5907edbd18d01556e6ce2593c910b282be64b225e6ce5b9b2388d602023959680981f0ee1296ecdf08e57c6a797421997a022e869f8e8a48a91a1bbe30169f608a2e854bd4de33adf2fe67577de2feee46424a679f7666307ab2134bbe9e79a12af724f97dda27d075e00cd59a260ca33be676df34ee96e13d436395edbafe4a83e1246b7b0194bd4c40d74521e52f06572102ecddd71da2bc35057eb66e7278801512f349d9f798ac8c38ba4fd2523d9f2f9586749b64dc8a0e3461cd7b7fb82e575bbba20c359ca2076cd669cb1ef83f082f21868c31fd750a2dac5670317c550a79324db88b68dd0f16e98c4b83710024d059569f5402eae23e8052b5b4b48502e0fc2483a20e38417f57cdb7ae870ce3c8352b1f4c6ffd61ed8e2751f5b93e266617b087c94a68ef704731409f3fd49bf677bdcc0c58e6094a8fd99cce1df278570390c37f51faf6fe93923f62984d5672a2d867f18ca76b964e2f7c259f639ab1122e749dd9c4f9b4470d8b68502f6f40685b74a24323837cf7e32b433c3ccbf064be0e70ffc2e5c2eae587154a7958d6c3f696fe42da49e4292404461908f7a1437b000a7f115cba487a9b426aa6ebdecbf0673e39356f894c0b3417491d0dd266a97b8711d16e6ed053028995e414d602f3296542ed46591c44a5dd1c466a92d8826bc12973e44028d37fb13bbe9ed2947334787c60f48b4f61089e3425fd165eaa1e3a2707891732875018420060afa179687c9e0f3f43b45e81fff95e07a518c9db494d0e4e453b8a35c7a0dd1ae81f4c0fd49f40fc9a6165a01ec00e0a97cd7282fb0c264709fa6e8310372bf06f66fd0f53d7919cba43d59cfcbb9f3b148b73edbdd75acdfe5f5fe2ffe40416c097e18a0fc0619bfbb78066f372d21f5d52fe4753ab29a0edf66b05c5bd3e6a5190f248561919dea3f20185e89f79fea4aaa12a44f14041a0620b23f28d5c535f40bae130843125a879e7f33d6c61cbe55ba51837b3194245237317d8532f94ed06543f5cc55535045b8b514c0d76097f520387e7b182c48c7b0173ac353d48566fafa00e7e5f7962f79645f73150d1921b6d6bcd240898aedb21b4453d63ba838bf90efbc5363beae5ad0609469a5b1c51aeae051fa57b16ad7f7c7a3f018e292ca5fbd9be583cfa9babbbb21caa574d35d8d778b1ae56e627ace9121fe5de64ed6dc684e5ee65c85baf2237953a0ced94eaa01e8c1911f487fb8324089f687040aac05dbb39475b26b1549c3d0a6b2d701fabd478b0d2e22cf720a6c80dc8971b1f0a9f39b4732fc7923a23b736966ee1537199511018723632631d36f6eca17c1192b6ec5cd68fd0de31c256270d668db457bbf57de66cb5054f446cdba23440cf485c5b379639284fb653141e20f8ab14c43f1faa181feae3a09cc6654ccc76e901c9c2fa67eeb17f488db52cde8cd26fba1f20db19c1dd92d9b09d1d2e9c8383aca4029492e5b91039fe624b35212c068120cd33a40b3ee7369bed5a705e0f7b13f0f266ff985a535d99c0a99366ab9767254da39964cd1a5df670bb7cebc06a5054d8a63aa5472f4a1d381cfc3d0e0ca8ee8c6f06974facc76538f6eaad66fc673f2dcc5cc65309fa7c821045813a1cf30d6b0a7e83e65b78f47957f28a7a80f34a14754b3347cd16e1b4d2a596099d1a17c681be6d9e4aa3724ea8a6fd6cf1a7492bedca5b47d22f1fbd710a77146acf6a11b95b36eeb2dd15c76ce7a54817c4181c90799ded1cf8c1168b39f5338822f485fc258ca42e1474927f6fb0ebf46bde59fe4e0b216fcb4015c40af76da02ef309039bc9fad472d5e9088b1f47b4a03e50458392a9d1cf4612690289429bbb60be45d9b658d1e88c2df6383c766b6246760238ff968f344311f6d9c3619763c573b7f27b99cdff92d6090003164ca5e684c60690fb13118f46424e98592b37755d715416c7fc758881f29f87371d086d24c759eb4455b50eff93123b5b150186e5a9e20945d0833a7d1039712736f5b266a7041a2ea20e959ed0a5286352f9a5f96b5b72df30df35c693379304d02200052b491a1dc18239ad5b953ae70c0f33623de25256cbf637bf25e24b21d4c78ba4591481e8424f1a1f329958c5f3ec3cc8ee72a6950dc2c1cfdf2354143e285ca9f82bec1fdf51ccab28ee51035c8dbcef7170843e858d01360266860800571a4fe0936ba82b97c8fcf76f19d49f6f95bc37b23997f8153c22b49d43598af71797547e02050f24fdaa4defe4513aab82f18e2223e2372cfaa95ec24fac636025bfdba5a4fbe25bb4beb596d272d06bc5c19e88e323d4c3afac75ded11b05cf3a0aef570e2700fad7d4b714cc8db83ed5a1c8d398d37bf1a3686ff122b76f06f4ece5413c5da26944e31177e5088e5b4255ff0cd2358b997f511bbc6593b3a6d14b3411a3a22a4e1751c3d0459fadbeae6f0bc399c7e526ba309708fc374e4c3dffbf03355b5147794704a71d6714e2329523dcfbdd6137c87212bc13d9b83d00b11422ba73abee769374762df22f55efde6766ca37c351a07552255a42aba6b9aab9ccb8576da44a7341797af0d86b68d3ab17821e86405e34e49cb73198b78b2536d49f5590ba2cc75ba9d0cb7b7f7c13bce023301a84b67d1afddad8bd1904803f9a4392ae7742bfb35530f0da566a295ba5a0786db745bd4ad5de86120fbc0b453131b4f21bd519aefe216cd7658d80e3a6afdf0f8c28ce0df38a38f0ffb5d7dac8692808be0299423253b91a347aabdf60db0a5c35404ee4148d31ae75e0095b8f07e6471be0c19fb41591cb290342a04ad89f17b3d00af14a0763a71ae376c9f707ee7cf3254e42d2641239d531e7e1c94805df8bc58a8075ce535cc648da9a3e0a9decf6d699173b1f65d25e366b0c8701eb53e0b509ca077bfd142f5a1b2782838bbafcfffb0b8c0d6751de09f68d0b23834ea46370568c9a4fb7630fc1e82dffc56da06090ce3d61aa1dd5807a98dc6aac17518a0cebb0bd0ff4d828743fa9ff0381e730df6c6b0137667a0875f1c4d8c820b0ae44253a5e3047f4a64bbcc64dcb1035b43c2c63a97df5a8cbf3be7ec92ac92e3d8ab7f257ab63eefde2ffe5abbf040d3776bef144c5e372f044fafdaba0540368615c92dfb61a3ff45651835bbd6610f4f6e5b7875d9c74367e913fb2dca9f6c755a070d01a600633f399af71d99aef87871ebdd8c0a27dbbab4961ca83df205c9440658ad3192dc116281e26eb6f236fd701667d5dae9f1c48e66c7396366b48f2557dcfd30ca4a96a7daf292c3a6b3278d910a728bcc39e66dec14969b1742d960307c45bb38fdec8f9c26775cbc7ec671873f4af31eaf9339de30b60fc3613724de2171ae81d86949c534f169b8ee5fe8318a2ec64e3b690da09e0c355225c8205c6adacde1f25c242aa1b456d6b23f0bda02b369bb0c751623fe4d40c6e6999d9e494423481ce01c85dd45ae4f6f6993388bdd32bdf01b9c22215c644ba8b517498ca02dee7f32fde3d8f591896c21cb68c82b90d84694ffbf2fcc875abce3ecbc33d9a6c58807cb0c2f3a5f77f107653c1dca780ee861799498e8165c2be957ba9f6c8bf57549674b389d341e2b99fc7931ea40793d9a17604298220af7254eb8e972cd28ea877d8ed52bab1162de7a66a0e9afd10e649b5554f41df0a7623c3e1744f439f39685de6afc65dd6c37069681afd30e476c09142c8460191526ddde6c651767ac59371a881f757d3cf2bae6d48ea781e89931b9e3ea3f65097b006fe15b61cbefede125e949abf541d670f122eff8be716b2cd662d69ead1dc797d58efe39aab72af7e610452746cff38d63b8eb217b4fc66de320aebac6e02e149f197b1ab53544162c22597ad7499f7bd75d0307ce75ce5f3b606b009c7dae85615bccaadb3cf261549be0cfe29e8faa175403342384b3efb79ecbdd4350ac768ab6d40957dd185fc4509938f9d387c86c06ed93baf9b4f931f53ded6aa431531a64a39e4fbe92b25d2c28f9314a5570b72ec33a0080d3ab68bc9fcb1786ccd5876856fa1310480f8272ee931679195e19ba116ccfe4b82c928698fe6b96b03d5f33b332bf2fb9fdfb82e386a716853d35a4374f092c2ab00e43fb8639fc525a87d41548e2289074345ca780e29c871c1ae27d27abb25dc9f5cc7460fedea216fd36ee28f69b00f7535dbf931d638f4ed710720cd94de10938ac2018888df4d1aee5676d09e4999b92d48a579916d86faebdefb9562e32e4a43857ab90af69ebd6b22ae50a1a99f8f0ffc731b2db79889824b587b75043265fa1dca7b68c2c2df36b774b5103a149bcfd4d1b3cbce3e4f257f981f973693a8120c4d4d1aefad1451c24dc12fdf798c23786c7498c6faa2b46057bd4d4be51d219a373a6153711a490c588c2085befdaa31c17cc1efc08e341e065e27489ec987a994aceffc0d3ed764606e2195bf3553fbab72a0583396f49743c7059371a3083a4fe7dcc553e26a871503990a9b99539ff0cf90866b90b6183e65756c3f5c9387aa83854c8b5335fd6a71b32383c34f22241cd25d538989d19ec7052a41523d7bdd8a834315dab3c27d9b92274fb9148119d458b38eba62d8cf955a326437f7d13ff61142748410a2fbba9341f58ddfdd45cfd77106b1ec6bae9666537705bd79e645f7a735f07865e603ed2583936a4c92377ba099fd6de8cf29b1761846a6bb803fb6ad1830e6d72beb73d89956ceaab9c2e711ac22e5823e341e14d33093d382344f811c105e7e0e0a8d73602edb2e9860235cf5e65a7c4f91d85f8038ea6706f68688576bfb75b4832fad45e4d31a3832e56b83cdacb09f10097028de8931d155b6b68adae12d7c3fb030b9436697ce648d33d0c6ce9d281e11d4c126634f50693b5edee21526b96f69f565668b7cb811151a2d27f44cca69bc36edab2cdf09de88d53246c5bcfd91c2a409f98075e64ff2d716701e28b30f5e3e2834f8cce5b8", 0x2000, &(0x7f00000008c0)={&(0x7f0000000100)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b40)={&(0x7f0000000000)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0xc2242, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r0, 0x0) 0s ago: executing program 4 (id=1854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b89f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): s mode [ 50.983542][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.990473][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.997548][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.004309][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.045683][ T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.057747][ T836] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.077218][ T836] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.108169][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.116154][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.123025][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.177251][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.185529][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.189434][ T1554] kvm: emulating exchange as write [ 51.192395][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.267253][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.275370][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.332856][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.360456][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.380018][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.414296][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.442695][ T1534] device veth0_vlan entered promiscuous mode [ 51.463179][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 51.463195][ T30] audit: type=1400 audit(1719590960.388:353): avc: denied { remount } for pid=1563 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.499962][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.530630][ T1534] device veth1_macvtap entered promiscuous mode [ 51.547785][ T30] audit: type=1400 audit(1719590960.418:354): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.575862][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.588952][ T455] device bridge_slave_1 left promiscuous mode [ 51.599829][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.627269][ T455] device bridge_slave_0 left promiscuous mode [ 51.633218][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.646992][ T30] audit: type=1400 audit(1719590960.418:355): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.698397][ T455] device veth1_macvtap left promiscuous mode [ 51.717972][ T455] device veth0_vlan left promiscuous mode [ 51.737178][ T30] audit: type=1400 audit(1719590960.418:356): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.851104][ T1584] syz.0.519[1584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.851181][ T1584] syz.0.519[1584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.905854][ T30] audit: type=1326 audit(1719590960.828:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 51.942283][ T30] audit: type=1326 audit(1719590960.828:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 51.966072][ T30] audit: type=1326 audit(1719590960.848:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 51.991339][ T30] audit: type=1326 audit(1719590960.848:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 52.015036][ T30] audit: type=1326 audit(1719590960.878:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 52.107228][ T836] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.119797][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.134212][ T30] audit: type=1400 audit(1719590961.068:362): avc: denied { read write } for pid=1604 comm="syz.3.528" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.136335][ T1098] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 52.168853][ T1605] loop3: detected capacity change from 0 to 256 [ 52.186984][ T1098] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.221589][ T1605] FAT-fs (loop3): Directory bread(block 64) failed [ 52.228985][ T1605] FAT-fs (loop3): Directory bread(block 65) failed [ 52.242472][ T1605] FAT-fs (loop3): Directory bread(block 66) failed [ 52.252148][ T1605] FAT-fs (loop3): Directory bread(block 67) failed [ 52.259169][ T1605] FAT-fs (loop3): Directory bread(block 68) failed [ 52.265549][ T1605] FAT-fs (loop3): Directory bread(block 69) failed [ 52.272708][ T1605] FAT-fs (loop3): Directory bread(block 70) failed [ 52.279251][ T1605] FAT-fs (loop3): Directory bread(block 71) failed [ 52.285694][ T1605] FAT-fs (loop3): Directory bread(block 72) failed [ 52.292682][ T1605] FAT-fs (loop3): Directory bread(block 73) failed [ 52.459400][ T1628] loop3: detected capacity change from 0 to 16 [ 52.517217][ T836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.523573][ T1628] erofs: (device loop3): mounted with root inode @ nid 36. [ 52.528055][ T836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.544765][ T836] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 52.553794][ T836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.563411][ T836] usb 3-1: config 0 descriptor?? [ 52.643348][ T1636] syz.1.543 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.729331][ T1645] loop3: detected capacity change from 0 to 512 [ 52.797602][ T1645] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 52.804635][ T1645] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.817067][ T1645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 52.824939][ T1645] System zones: 1-12 [ 52.829547][ T1645] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.547: casefold flag without casefold feature [ 52.842947][ T1645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.547: missing EA_INODE flag [ 52.854476][ T1645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.547: error while reading EA inode 12 err=-117 [ 52.866845][ T1645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.547: missing EA_INODE flag [ 52.878500][ T1645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.547: error while reading EA inode 12 err=-117 [ 52.890800][ T1645] EXT4-fs (loop3): 1 orphan inode deleted [ 52.896335][ T1645] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,debug_want_extra_isize=0x000000000000005c,debug,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 52.927306][ T1098] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 53.199807][ T1098] usb 2-1: Using ep0 maxpacket: 16 [ 53.347220][ T1098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 53.366543][ T1098] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 53.376021][ T1700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 53.386103][ T1098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.400388][ T1098] usb 2-1: config 0 descriptor?? [ 53.523187][ T63] kernel write not supported for file [eventfd] (pid: 63 comm: kworker/0:2) [ 53.637276][ T836] usb 3-1: string descriptor 0 read error: -71 [ 53.657433][ T836] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 53.666211][ T836] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 53.674380][ T836] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 53.682620][ T836] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 53.690255][ T836] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 53.702883][ T836] usb 3-1: USB disconnect, device number 9 [ 53.937841][ T1639] UDC core: couldn't find an available UDC or it's busy: -16 [ 53.951241][ T1639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.969912][ T1098] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 53.971443][ T1716] syz.3.577[1716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.977344][ T1098] hid-generic 0003:0158:0100.000D: unexpected long global item [ 53.977388][ T1716] syz.3.577[1716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.989174][ T1098] hid-generic: probe of 0003:0158:0100.000D failed with error -22 [ 54.113304][ T1724] loop3: detected capacity change from 0 to 2048 [ 54.156046][ T1734] tipc: Started in network mode [ 54.161493][ T1734] tipc: Node identity , cluster identity 4711 [ 54.216318][ T836] usb 2-1: USB disconnect, device number 6 [ 54.236908][ T1724] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.338101][ T1746] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 54.583974][ T1724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 54.692798][ T1768] device pim6reg1 entered promiscuous mode [ 55.197196][ T1098] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.268015][ T1801] loop2: detected capacity change from 0 to 512 [ 55.318826][ T1801] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 55.333300][ T1801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 55.341157][ T1801] System zones: 1-12 [ 55.345378][ T1801] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.351798][ T1801] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.615: Inode bitmap for bg 0 marked uninitialized [ 55.364479][ T1801] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.366877][ T1809] device syzkaller0 entered promiscuous mode [ 55.376773][ T1801] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 5: comm syz.2.615: lblock 0 mapped to illegal pblock 5 (length 1) [ 55.397147][ T1801] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz.2.615: error -117 reading directory block [ 55.537132][ T530] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 55.597233][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.608136][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.617979][ T1098] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.626906][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.635384][ T1098] usb 4-1: config 0 descriptor?? [ 55.777193][ T530] usb 1-1: Using ep0 maxpacket: 16 [ 55.821071][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.828362][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.835709][ T1832] device bridge_slave_0 entered promiscuous mode [ 55.850776][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.857893][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.865277][ T1832] device bridge_slave_1 entered promiscuous mode [ 55.917263][ T530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 55.928681][ T530] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 55.940797][ T530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.952615][ T530] usb 1-1: config 0 descriptor?? [ 55.966302][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.973215][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.980308][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.987198][ T1832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.019475][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.027415][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.034574][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.053728][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.063113][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.069986][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.077989][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.086006][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.092869][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.100702][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.109004][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.138430][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.155515][ T1832] device veth0_vlan entered promiscuous mode [ 56.161917][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.173306][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.180811][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.196998][ T1832] device veth1_macvtap entered promiscuous mode [ 56.205943][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.218606][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.244376][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.457905][ T455] device bridge_slave_1 left promiscuous mode [ 56.463885][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.472588][ T455] device bridge_slave_0 left promiscuous mode [ 56.478644][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.487276][ T455] device veth1_macvtap left promiscuous mode [ 56.493095][ T455] device veth0_vlan left promiscuous mode [ 56.537730][ T1803] UDC core: couldn't find an available UDC or it's busy: -16 [ 56.546934][ T1803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.589929][ T530] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 56.599019][ T530] hid-generic 0003:0158:0100.000F: unexpected long global item [ 56.607413][ T530] hid-generic: probe of 0003:0158:0100.000F failed with error -22 [ 56.747204][ T1098] usb 4-1: string descriptor 0 read error: -71 [ 56.777475][ T1098] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 56.787046][ T1098] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 56.803049][ T1098] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 56.811437][ T1098] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 56.825802][ T1098] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 56.844568][ T1098] usb 4-1: USB disconnect, device number 7 [ 56.864484][ T63] usb 1-1: USB disconnect, device number 7 [ 56.887155][ T836] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.197203][ T836] usb 3-1: Using ep0 maxpacket: 8 [ 57.317311][ T836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.341558][ T1874] incfs: Options parsing error. -22 [ 57.346647][ T1874] incfs: mount failed -22 [ 57.383819][ T1880] loop3: detected capacity change from 0 to 256 [ 57.435823][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 57.435838][ T30] audit: type=1326 audit(1719590966.358:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1879 comm="syz.3.644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x0 [ 57.437251][ T836] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 57.504335][ T836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 57.519942][ T1883] loop0: detected capacity change from 0 to 128 [ 57.526134][ T836] usb 3-1: SerialNumber: syz [ 57.545222][ T30] audit: type=1400 audit(1719590966.468:389): avc: denied { mounton } for pid=1879 comm="syz.3.644" path=2F726F6F742F73797A6B616C6C65722E34457975574C2F3132362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop3" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 57.550919][ T836] usb 3-1: config 0 descriptor?? [ 57.594342][ T1883] FAT-fs (loop0): Unrecognized mount option "./bus" or missing value [ 57.678007][ T836] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 57.684872][ T836] usb 3-1: No valid video chain found. [ 58.055641][ T836] usb 3-1: USB disconnect, device number 10 [ 58.086174][ T30] audit: type=1400 audit(1719590967.008:390): avc: denied { mount } for pid=1889 comm="syz.0.648" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.417203][ T297] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 58.442082][ T1917] loop4: detected capacity change from 0 to 512 [ 58.474082][ T1914] loop1: detected capacity change from 0 to 40427 [ 58.517876][ T1914] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 58.525574][ T1914] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 58.534587][ T1914] F2FS-fs (loop1): invalid crc value [ 58.540777][ T1917] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.547820][ T1914] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.591548][ T1917] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.660: iget: bad i_size value: -6917529027641081756 [ 58.605504][ T1917] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.660: couldn't read orphan inode 17 (err -117) [ 58.617640][ T1917] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.628838][ T1914] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 58.635685][ T1914] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.644804][ T1917] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.660: bg 0: block 65: padding at end of block bitmap is not set [ 58.648201][ T30] audit: type=1400 audit(1719590967.578:391): avc: denied { read write } for pid=1926 comm="syz.2.662" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.671335][ T1917] Quota error (device loop4): write_blk: dquota write failed [ 58.691087][ T1917] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 58.696318][ T30] audit: type=1400 audit(1719590967.598:392): avc: denied { open } for pid=1926 comm="syz.2.662" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.701758][ T1929] Quota error (device loop4): write_blk: dquota write failed [ 58.724209][ T30] audit: type=1400 audit(1719590967.598:393): avc: denied { ioctl } for pid=1926 comm="syz.2.662" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.731126][ T1929] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 58.784849][ T1917] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.660: deleted inode referenced: 15 [ 58.796612][ T1917] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.660: deleted inode referenced: 15 [ 58.827236][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.847673][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.867153][ T297] usb 1-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 58.876920][ T1917] syz.4.660 (1917) used greatest stack depth: 19824 bytes left [ 58.887477][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.899742][ T297] usb 1-1: config 0 descriptor?? [ 58.942273][ T1945] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 58.977169][ T1949] incfs: Options parsing error. -22 [ 58.983956][ T1949] incfs: mount failed -22 [ 59.234585][ T1954] attempt to access beyond end of device [ 59.234585][ T1954] loop1: rw=2049, want=79968, limit=40427 [ 59.270250][ T836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.285462][ T1954] attempt to access beyond end of device [ 59.285462][ T1954] loop1: rw=2049, want=81920, limit=40427 [ 59.314828][ T1954] attempt to access beyond end of device [ 59.314828][ T1954] loop1: rw=2049, want=53248, limit=40427 [ 59.420187][ T297] wacom 0003:056A:005B.0010: unknown main item tag 0x0 [ 59.468868][ T297] wacom 0003:056A:005B.0010: unknown main item tag 0x0 [ 59.517164][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 59.542354][ T297] wacom 0003:056A:005B.0010: unknown main item tag 0x0 [ 59.613409][ T297] wacom 0003:056A:005B.0010: unknown main item tag 0x0 [ 59.631742][ T297] wacom 0003:056A:005B.0010: unknown main item tag 0x0 [ 59.637154][ T1954] attempt to access beyond end of device [ 59.637154][ T1954] loop1: rw=2049, want=69288, limit=40427 [ 59.638834][ T836] usb 5-1: config 0 has no interfaces? [ 59.657329][ T836] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 59.670714][ T297] wacom 0003:056A:005B.0010: hidraw0: USB HID v0.00 Device [HID 056a:005b] on usb-dummy_hcd.0-1/input0 [ 59.681756][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.682544][ T1954] attempt to access beyond end of device [ 59.682544][ T1954] loop1: rw=2049, want=77760, limit=40427 [ 59.696885][ T297] usb 1-1: USB disconnect, device number 8 [ 59.709432][ T836] usb 5-1: config 0 descriptor?? [ 59.711342][ T1954] attempt to access beyond end of device [ 59.711342][ T1954] loop1: rw=2049, want=77824, limit=40427 [ 59.732284][ T1954] attempt to access beyond end of device [ 59.732284][ T1954] loop1: rw=2049, want=84336, limit=40427 [ 59.749555][ T1954] attempt to access beyond end of device [ 59.749555][ T1954] loop1: rw=2049, want=85880, limit=40427 [ 59.806539][ T1832] attempt to access beyond end of device [ 59.806539][ T1832] loop1: rw=2049, want=40968, limit=40427 [ 59.822151][ T392] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.831525][ T392] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 60.005423][ T836] usb 5-1: USB disconnect, device number 8 [ 61.212526][ T2029] loop4: detected capacity change from 0 to 512 [ 61.853837][ T2029] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.703: casefold flag without casefold feature [ 61.919100][ T2029] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 61.937851][ T2029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.018407][ T2053] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 57 bytes, need 64+ bytes) [ 62.087215][ T63] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 62.182771][ T2064] fuse: Bad value for 'fd' [ 62.267319][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.337037][ T2075] fuse: Bad value for 'fd' [ 62.357153][ T297] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 62.447201][ T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.507189][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 62.507243][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.522778][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.532325][ T63] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 62.541145][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.551788][ T63] usb 3-1: config 0 descriptor?? [ 62.597131][ T297] usb 1-1: Using ep0 maxpacket: 8 [ 62.627215][ T26] usb 2-1: config 0 has no interfaces? [ 62.632701][ T26] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 62.641790][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.650241][ T26] usb 2-1: config 0 descriptor?? [ 62.717202][ T297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.727240][ T39] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 62.734821][ T297] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.743758][ T297] usb 1-1: config 1 has no interface number 1 [ 62.749626][ T297] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.890444][ T1098] usb 2-1: USB disconnect, device number 7 [ 62.917207][ T297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.926161][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.934230][ T297] usb 1-1: Product: syz [ 62.938368][ T297] usb 1-1: Manufacturer: syz [ 62.942773][ T297] usb 1-1: SerialNumber: syz [ 63.028539][ T63] wacom 0003:056A:005B.0011: unknown main item tag 0x0 [ 63.035304][ T63] wacom 0003:056A:005B.0011: unknown main item tag 0x0 [ 63.041968][ T63] wacom 0003:056A:005B.0011: unknown main item tag 0x0 [ 63.048709][ T63] wacom 0003:056A:005B.0011: unknown main item tag 0x0 [ 63.055381][ T63] wacom 0003:056A:005B.0011: unknown main item tag 0x0 [ 63.062926][ T63] wacom 0003:056A:005B.0011: hidraw0: USB HID v0.00 Device [HID 056a:005b] on usb-dummy_hcd.2-1/input0 [ 63.233039][ T1098] usb 3-1: USB disconnect, device number 11 [ 63.289090][ T297] usb 1-1: USB disconnect, device number 9 [ 63.299063][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.367228][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 63.376140][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.410604][ T2086] loop1: detected capacity change from 0 to 512 [ 63.417742][ T39] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 63.424413][ T39] usb 5-1: No valid video chain found. [ 63.457497][ T2086] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 63.466615][ T2086] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 63.476337][ T2086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.725: bg 0: block 18: invalid block bitmap [ 63.488695][ T2086] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 63.497776][ T2086] EXT4-fs (loop1): 1 truncate cleaned up [ 63.503229][ T2086] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.513728][ T2086] ext2 filesystem being mounted at /root/syzkaller.AZKaHy/17/file0 supports timestamps until 2038 (0x7fffffff) [ 63.526968][ T2086] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 3: comm syz.1.725: lblock 0 mapped to illegal pblock 3 (length 1) [ 63.619794][ T297] usb 5-1: USB disconnect, device number 9 [ 63.728796][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 63.728813][ T30] audit: type=1400 audit(1719590972.658:405): avc: denied { read } for pid=2094 comm="syz.0.728" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.760356][ T30] audit: type=1400 audit(1719590972.658:406): avc: denied { open } for pid=2094 comm="syz.0.728" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.784888][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 63.805560][ T30] audit: type=1400 audit(1719590972.658:407): avc: denied { ioctl } for pid=2094 comm="syz.0.728" path="/dev/rtc0" dev="devtmpfs" ino=167 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.830661][ T30] audit: type=1400 audit(1719590972.708:408): avc: denied { name_bind } for pid=2098 comm="syz.3.730" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 63.909182][ T2113] fuse: Bad value for 'fd' [ 63.976978][ T30] audit: type=1400 audit(1719590972.888:409): avc: denied { create } for pid=2119 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.028898][ T2123] incfs_lookup_dentry err:-13 [ 64.033393][ T2123] incfs: Can't find or create .index dir in ./file0 [ 64.039978][ T2123] incfs: mount failed -13 [ 64.367177][ T63] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 64.429322][ T30] audit: type=1400 audit(1719590973.358:410): avc: denied { create } for pid=2140 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.448527][ T30] audit: type=1400 audit(1719590973.358:411): avc: denied { connect } for pid=2140 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.470256][ T30] audit: type=1400 audit(1719590973.358:412): avc: denied { write } for pid=2140 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.551838][ T30] audit: type=1326 audit(1719590973.478:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2147 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 64.581748][ T30] audit: type=1326 audit(1719590973.508:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2147 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 64.637155][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 64.664914][ T2163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 64.668537][ T2162] loop2: detected capacity change from 0 to 512 [ 64.748778][ T2162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.761241][ T2162] ext4 filesystem being mounted at /root/syzkaller.ErQpAt/129/bus supports timestamps until 2038 (0x7fffffff) [ 64.816418][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.826405][ T63] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 64.835147][ T63] usb 1-1: config 1 has no interface number 1 [ 64.841064][ T63] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.272603][ T2168] loop4: detected capacity change from 0 to 40427 [ 65.301460][ T2190] loop1: detected capacity change from 0 to 256 [ 65.307710][ T63] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.316561][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.327155][ T2168] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.334717][ T2168] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.342958][ T63] usb 1-1: Product: syz [ 65.346940][ T63] usb 1-1: Manufacturer: syz [ 65.352934][ T63] usb 1-1: SerialNumber: syz [ 65.359183][ T2190] exfat: Deprecated parameter 'utf8' [ 65.364432][ T2190] exfat: Deprecated parameter 'namecase' [ 65.370651][ T2168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.394728][ T2190] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000e8a4, chksum : 0xe00de75b, utbl_chksum : 0xe619d30d) [ 65.423223][ T2168] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.436748][ T2168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.583324][ T880] attempt to access beyond end of device [ 65.583324][ T880] loop4: rw=1, want=45104, limit=40427 [ 65.701902][ T2215] syz.2.773[2215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.703322][ T2215] syz.2.773[2215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.959254][ T63] usb 1-1: USB disconnect, device number 10 [ 65.995632][ T2227] syz.1.782[2227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.995700][ T2227] syz.1.782[2227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.297460][ T530] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.403062][ T2283] syz.3.806[2283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.403154][ T2283] syz.3.806[2283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.458728][ T2286] loop0: detected capacity change from 0 to 256 [ 66.518028][ T2286] exfat: Bad value for 'uid' [ 66.597295][ T530] usb 5-1: Using ep0 maxpacket: 8 [ 66.737222][ T530] usb 5-1: config 0 has no interfaces? [ 66.742676][ T530] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 66.768558][ T530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.887596][ T530] usb 5-1: config 0 descriptor?? [ 67.140409][ T525] usb 5-1: USB disconnect, device number 10 [ 67.196887][ T2306] loop2: detected capacity change from 0 to 1024 [ 67.203923][ T2308] loop1: detected capacity change from 0 to 256 [ 67.234462][ T2308] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 67.289299][ T2306] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.654069][ T2326] loop1: detected capacity change from 0 to 128 [ 68.197059][ T525] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 68.217072][ T525] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.437698][ T2348] loop1: detected capacity change from 0 to 40427 [ 68.449766][ T2379] fuse: Bad value for 'fd' [ 68.481531][ T2389] 9pnet: Could not find request transport: f [ 68.498321][ T2348] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 68.506449][ T2348] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.581552][ T2348] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.636359][ T2348] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.643615][ T2348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.995066][ T455] attempt to access beyond end of device [ 68.995066][ T455] loop1: rw=1, want=45104, limit=40427 [ 69.156437][ T2431] syz.4.870[2431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.156517][ T2431] syz.4.870[2431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.799787][ T2454] loop2: detected capacity change from 0 to 40427 [ 69.859661][ T2454] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.869513][ T2454] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.891888][ T2454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.944463][ T2454] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.951455][ T2454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.968218][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 69.968233][ T30] audit: type=1400 audit(1719590978.898:441): avc: denied { setattr } for pid=2453 comm="syz.2.877" name="bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.670461][ T30] audit: type=1400 audit(1719590979.598:442): avc: denied { getopt } for pid=2491 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.718972][ T392] attempt to access beyond end of device [ 70.718972][ T392] loop2: rw=1, want=45104, limit=40427 [ 70.760534][ T2505] loop0: detected capacity change from 0 to 256 [ 70.798899][ T2505] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 71.037126][ T530] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 71.277119][ T530] usb 5-1: Using ep0 maxpacket: 8 [ 71.397201][ T530] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.408718][ T530] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.420261][ T530] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 71.546284][ T2529] 9pnet: Insufficient options for proto=fd [ 71.619847][ T2533] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.637330][ T530] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.651594][ T530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.676239][ T530] usb 5-1: Product: syz [ 71.686004][ T530] usb 5-1: Manufacturer: syz [ 71.691055][ T530] usb 5-1: SerialNumber: syz [ 73.157309][ T30] audit: type=1400 audit(1719590982.066:443): avc: denied { remount } for pid=2539 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.302490][ T30] audit: type=1326 audit(1719590982.086:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.1.913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f826c74cb99 code=0x0 [ 73.474597][ T2564] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.661936][ T2560] loop0: detected capacity change from 0 to 40427 [ 73.684303][ T2560] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 73.698504][ T2560] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.713847][ T2560] F2FS-fs (loop0): invalid crc value [ 73.721057][ T2560] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.763090][ T2560] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 73.770069][ T2560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.787254][ T30] audit: type=1400 audit(1719590982.726:445): avc: denied { ioctl } for pid=2559 comm="syz.0.921" path="/root/syzkaller.x37fY2/200/bus/file0" dev="loop0" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.787847][ T2560] attempt to access beyond end of device [ 73.787847][ T2560] loop0: rw=2049, want=45112, limit=40427 [ 73.824391][ T2585] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.833000][ T2585] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 73.841391][ T2585] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.854520][ T2560] attempt to access beyond end of device [ 73.854520][ T2560] loop0: rw=2049, want=45224, limit=40427 [ 73.904423][ T288] attempt to access beyond end of device [ 73.904423][ T288] loop0: rw=2051, want=45224, limit=40427 [ 73.915882][ T288] F2FS-fs (loop0): Issue discard(5639, 5639, 14) failed, ret: -5 [ 74.299419][ T30] audit: type=1400 audit(1719590983.236:446): avc: denied { bind } for pid=2598 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.327285][ T530] cdc_ncm 5-1:1.0: bind() failure [ 74.357269][ T530] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 74.387239][ T530] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 74.399082][ T530] usb 5-1: USB disconnect, device number 11 [ 74.540270][ T30] audit: type=1400 audit(1719590983.476:447): avc: denied { create } for pid=2618 comm="syz.2.944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 74.550460][ T2619] loop2: detected capacity change from 0 to 2048 [ 74.628970][ T2619] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,journal_ioprio=0x0000000000000007,sb=0x0000000000000009,bsdgroups,journal_path=./file0,,errors=continue. Quota mode: none. [ 74.648301][ T2619] ext4 filesystem being mounted at /root/syzkaller.ErQpAt/160/bus supports timestamps until 2038 (0x7fffffff) [ 74.711187][ T30] audit: type=1400 audit(1719590983.646:448): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 74.731982][ T2615] loop1: detected capacity change from 0 to 40427 [ 74.755728][ T2615] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 74.764966][ T2615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.775220][ T2615] F2FS-fs (loop1): invalid crc value [ 74.782194][ T2615] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.840002][ T2615] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.846944][ T2615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.879643][ T2615] attempt to access beyond end of device [ 74.879643][ T2615] loop1: rw=2049, want=45112, limit=40427 [ 74.946277][ T2639] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 74.955641][ T2639] fuse: Bad value for 'fd' [ 75.143549][ T2615] attempt to access beyond end of device [ 75.143549][ T2615] loop1: rw=2049, want=45224, limit=40427 [ 75.191703][ T1832] attempt to access beyond end of device [ 75.191703][ T1832] loop1: rw=2051, want=45224, limit=40427 [ 75.202887][ T1832] F2FS-fs (loop1): Issue discard(5639, 5639, 14) failed, ret: -5 [ 75.347148][ T30] audit: type=1400 audit(1719590984.276:449): avc: denied { shutdown } for pid=2661 comm="syz.0.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.458904][ T2679] fuse: Bad value for 'fd' [ 75.489768][ T2687] syz.0.971[2687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.489845][ T2687] syz.0.971[2687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.704680][ T30] audit: type=1400 audit(1719590984.636:450): avc: denied { relabelfrom } for pid=2697 comm="syz.4.979" name="" dev="pipefs" ino=22223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.704705][ T2700] SELinux: Context system_u:object_r:hald_dccm_exec_t:s0 is not valid (left unmapped). [ 75.765164][ T2707] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.784312][ T30] audit: type=1400 audit(1719590984.636:451): avc: denied { relabelto } for pid=2697 comm="syz.4.979" name="" dev="pipefs" ino=22223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_dccm_exec_t:s0" [ 75.843939][ T30] audit: type=1400 audit(1719590984.766:452): avc: denied { mounton } for pid=2709 comm="syz.1.983" path="/root/syzkaller.AZKaHy/76/file0" dev="sda1" ino=1983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.929889][ T2723] syz.4.989[2723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.929963][ T2723] syz.4.989[2723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.127130][ T2727] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 76.147541][ T2727] fuse: Bad value for 'fd' [ 76.381962][ T2731] syz.4.991[2731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.382039][ T2731] syz.4.991[2731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.610081][ T2750] device syzkaller0 entered promiscuous mode [ 76.636901][ T2754] loop4: detected capacity change from 0 to 256 [ 76.701365][ T2754] FAT-fs (loop4): Directory bread(block 64) failed [ 76.707882][ T2754] FAT-fs (loop4): Directory bread(block 65) failed [ 76.714290][ T2754] FAT-fs (loop4): Directory bread(block 66) failed [ 76.720888][ T2754] FAT-fs (loop4): Directory bread(block 67) failed [ 76.727440][ T2754] FAT-fs (loop4): Directory bread(block 68) failed [ 76.733857][ T2754] FAT-fs (loop4): Directory bread(block 69) failed [ 76.740400][ T2754] FAT-fs (loop4): Directory bread(block 70) failed [ 76.811003][ T2754] FAT-fs (loop4): Directory bread(block 71) failed [ 76.828207][ T2754] FAT-fs (loop4): Directory bread(block 72) failed [ 76.834602][ T2754] FAT-fs (loop4): Directory bread(block 73) failed [ 76.886167][ T2768] fuse: Bad value for 'fd' [ 76.930316][ T30] audit: type=1326 audit(1719590985.866:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2771 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 76.963227][ T30] audit: type=1326 audit(1719590985.886:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2771 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 76.991835][ T30] audit: type=1326 audit(1719590985.886:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2771 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 77.015877][ T30] audit: type=1326 audit(1719590985.886:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2771 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 77.041717][ T30] audit: type=1326 audit(1719590985.886:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2771 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 77.111336][ T2786] loop0: detected capacity change from 0 to 512 [ 77.199026][ T2786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.210166][ T2786] ext4 filesystem being mounted at /root/syzkaller.x37fY2/221/bus supports timestamps until 2038 (0x7fffffff) [ 77.277182][ T30] audit: type=1326 audit(1719590986.206:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2788 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7ffc0000 [ 77.927618][ T2787] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 77.936888][ T2787] fuse: Bad value for 'fd' [ 77.958259][ T2794] overlayfs: failed to resolve './file0': -2 [ 78.246960][ T2801] fuse: Bad value for 'fd' [ 78.287039][ T2807] loop2: detected capacity change from 0 to 512 [ 78.322246][ T2807] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 78.345260][ T2807] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 78.402051][ T2807] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1022: bg 0: block 18: invalid block bitmap [ 78.454023][ T2807] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 78.485376][ T2807] EXT4-fs (loop2): 1 truncate cleaned up [ 78.504071][ T2807] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.554990][ T2807] ext2 filesystem being mounted at /root/syzkaller.ErQpAt/170/file0 supports timestamps until 2038 (0x7fffffff) [ 78.629933][ T2807] syz.2.1022[2807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.630014][ T2807] syz.2.1022[2807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.697144][ T2807] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 3: comm syz.2.1022: lblock 0 mapped to illegal pblock 3 (length 1) [ 78.888453][ T2815] loop4: detected capacity change from 0 to 40427 [ 78.941739][ T2815] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 78.952085][ T2815] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 78.972993][ T2815] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 78.995405][ T2836] loop2: detected capacity change from 0 to 512 [ 79.010324][ T2815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.046751][ T2815] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 79.053670][ T2815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.153040][ T2815] attempt to access beyond end of device [ 79.153040][ T2815] loop4: rw=2049, want=45104, limit=40427 [ 79.173851][ T2847] loop1: detected capacity change from 0 to 1024 [ 79.181264][ T2836] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.1030: corrupted inode contents [ 79.211715][ T2836] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #3: comm syz.2.1030: mark_inode_dirty error [ 79.247754][ T2836] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.1030: corrupted inode contents [ 79.268516][ T2847] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 79.278585][ T2836] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1030: mark_inode_dirty error [ 79.289619][ T2847] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 79.315466][ T2836] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.1030: corrupted inode contents [ 79.337197][ T2836] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #16: comm syz.2.1030: mark_inode_dirty error [ 79.391679][ T2844] loop0: detected capacity change from 0 to 40427 [ 79.397843][ T2836] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.1030: corrupted inode contents [ 79.410523][ T2844] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.411264][ T2836] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.1030: mark_inode_dirty error [ 79.427458][ T2844] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.429756][ T2836] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.1030: corrupted inode contents [ 79.457358][ T2836] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 79.470764][ T2844] F2FS-fs (loop0): invalid crc value [ 79.484806][ T2836] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.1030: corrupted inode contents [ 79.498357][ T2836] EXT4-fs error (device loop2): ext4_truncate:4292: inode #16: comm syz.2.1030: mark_inode_dirty error [ 79.517685][ T2836] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 79.519990][ T2862] loop4: detected capacity change from 0 to 512 [ 79.548035][ T2836] EXT4-fs (loop2): 1 truncate cleaned up [ 79.553595][ T2836] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.559303][ T2844] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.565182][ T2836] ext4 filesystem being mounted at /root/syzkaller.ErQpAt/171/file1 supports timestamps until 2038 (0x7fffffff) [ 79.581609][ T2862] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 79.598811][ T2862] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 79.614563][ T2862] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1040: bg 0: block 18: invalid block bitmap [ 79.633310][ T2862] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 79.645714][ T2862] EXT4-fs (loop4): 1 truncate cleaned up [ 79.652534][ T2862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.652784][ T2868] syz.3.1042[2868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.663352][ T2868] syz.3.1042[2868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.675207][ T2862] ext2 filesystem being mounted at /root/syzkaller.tADQRZ/104/file0 supports timestamps until 2038 (0x7fffffff) [ 79.705560][ T2844] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.712943][ T2844] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.744092][ T2862] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 3: comm syz.4.1040: lblock 0 mapped to illegal pblock 3 (length 1) [ 79.748547][ T2844] attempt to access beyond end of device [ 79.748547][ T2844] loop0: rw=2049, want=45112, limit=40427 [ 79.792614][ T2844] attempt to access beyond end of device [ 79.792614][ T2844] loop0: rw=2049, want=45224, limit=40427 [ 79.858171][ T288] attempt to access beyond end of device [ 79.858171][ T288] loop0: rw=2051, want=45224, limit=40427 [ 79.876068][ T288] F2FS-fs (loop0): Issue discard(5639, 5639, 14) failed, ret: -5 [ 79.992018][ T2902] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 80.009535][ T2902] fuse: Bad value for 'fd' [ 80.058448][ T2910] tmpfs: Unknown parameter '€' [ 80.239162][ T2943] loop0: detected capacity change from 0 to 16 [ 80.280547][ T2943] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.317884][ T2953] overlayfs: missing 'lowerdir' [ 80.323945][ T2953] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 80.334008][ T2953] 9pnet: Insufficient options for proto=fd [ 80.437466][ T1098] hid-generic 0000:200002C0:0000.0013: unknown main item tag 0x0 [ 80.445047][ T1098] hid-generic 0000:200002C0:0000.0013: unknown main item tag 0x0 [ 80.457612][ T2959] loop2: detected capacity change from 0 to 512 [ 80.463765][ T1098] hid-generic 0000:200002C0:0000.0013: unknown main item tag 0x0 [ 80.471320][ T1098] hid-generic 0000:200002C0:0000.0013: unknown main item tag 0x0 [ 80.479422][ T1098] hid-generic 0000:200002C0:0000.0013: hidraw0: HID v200001.00 Device [syz0] on syz0 [ 80.504861][ T2959] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 80.528074][ T2959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 80.536426][ T2959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.554368][ T2959] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 80.565060][ T2972] bpf_get_probe_write_proto: 12 callbacks suppressed [ 80.565077][ T2972] syz.1.1090[2972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.571717][ T2972] syz.1.1090[2972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.582864][ T2959] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 80.614646][ T2959] EXT4-fs (loop2): 1 truncate cleaned up [ 80.621007][ T2959] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 80.637784][ T2959] EXT4-fs warning (device loop2): dx_probe:892: inode #2: comm syz.2.1085: dx entry: limit 65535 != root limit 120 [ 80.655374][ T2959] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1085: Corrupt directory, running e2fsck is recommended [ 80.681139][ T2959] EXT4-fs warning (device loop2): dx_probe:892: inode #2: comm syz.2.1085: dx entry: limit 65535 != root limit 120 [ 80.695415][ T2959] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1085: Corrupt directory, running e2fsck is recommended [ 80.712147][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 80.712161][ T30] audit: type=1400 audit(1719590989.646:501): avc: denied { write } for pid=2958 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.955991][ T2995] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 80.967315][ T2995] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 80.988188][ T2999] tipc: Started in network mode [ 80.996684][ T2999] tipc: Node identity , cluster identity 4711 [ 81.003901][ T2999] tipc: Failed to obtain node identity [ 81.009579][ T2999] tipc: Enabling of bearer rejected, failed to enable media [ 81.329105][ T3037] fscrypt (sda1, inode 1988): Unsupported encryption flags (0x28) [ 81.342766][ T30] audit: type=1400 audit(1719590990.276:502): avc: denied { shutdown } for pid=3030 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.407314][ T30] audit: type=1400 audit(1719590990.276:503): avc: denied { read } for pid=3030 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.446401][ T3044] loop1: detected capacity change from 0 to 512 [ 81.498001][ T3044] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.505415][ T3044] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1121: bg 0: block 248: padding at end of block bitmap is not set [ 81.537510][ T3044] Quota error (device loop1): write_blk: dquota write failed [ 81.557441][ T3044] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 81.568799][ T3044] EXT4-fs (loop1): 1 truncate cleaned up [ 81.593963][ T3044] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,nodiscard,dioread_nolock,noquota,grpjquota=,noquota,abort,acl,noload,,errors=continue. Quota mode: writeback. [ 81.674706][ T3050] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 81.697340][ T3050] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 81.775926][ T3056] syz.1.1127[3056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.776334][ T3056] syz.1.1127[3056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.857016][ T3062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.996869][ T3068] syz.4.1132[3068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.996939][ T3068] syz.4.1132[3068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.140833][ T3084] loop4: detected capacity change from 0 to 256 [ 82.210017][ T30] audit: type=1400 audit(1719590991.146:504): avc: denied { mount } for pid=3087 comm="syz.3.1141" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 82.236940][ T3084] FAT-fs (loop4): Directory bread(block 64) failed [ 82.247202][ T3084] FAT-fs (loop4): Directory bread(block 65) failed [ 82.253571][ T3084] FAT-fs (loop4): Directory bread(block 66) failed [ 82.268531][ T30] audit: type=1400 audit(1719590991.166:505): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 82.289396][ T3084] FAT-fs (loop4): Directory bread(block 67) failed [ 82.295995][ T3084] FAT-fs (loop4): Directory bread(block 68) failed [ 82.302599][ T3084] FAT-fs (loop4): Directory bread(block 69) failed [ 82.309271][ T3084] FAT-fs (loop4): Directory bread(block 70) failed [ 82.315679][ T3084] FAT-fs (loop4): Directory bread(block 71) failed [ 82.322356][ T3084] FAT-fs (loop4): Directory bread(block 72) failed [ 82.329919][ T3092] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1143'. [ 82.338923][ T1098] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 82.346351][ T3084] FAT-fs (loop4): Directory bread(block 73) failed [ 82.577148][ T1098] usb 2-1: Using ep0 maxpacket: 16 [ 82.581426][ T3119] loop0: detected capacity change from 0 to 512 [ 82.617961][ T3119] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 82.650408][ T3119] EXT4-fs (loop0): Ignoring removed nobh option [ 82.656889][ T3119] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 82.666594][ T3119] EXT4-fs (loop0): failed to open journal device unknown-block(228,169) -6 [ 82.695428][ T30] audit: type=1400 audit(1719590991.626:506): avc: denied { nlmsg_read } for pid=3124 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.717181][ T1098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 82.739824][ T1098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 82.754046][ T1098] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 82.769880][ T1098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.787357][ T1098] usb 2-1: config 0 descriptor?? [ 82.842540][ T3135] syz.3.1162[3135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.842621][ T3135] syz.3.1162[3135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.963221][ T3141] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1166'. [ 83.020729][ T3149] syz.0.1169[3149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.020820][ T3149] syz.0.1169[3149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.051115][ T3078] loop1: detected capacity change from 0 to 2048 [ 83.079082][ T3149] device bridge0 entered promiscuous mode [ 83.154771][ T3161] loop2: detected capacity change from 0 to 512 [ 83.169911][ T3161] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 83.212710][ T3161] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 83.228880][ T3171] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1179'. [ 83.257473][ T3161] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1175: bg 0: block 18: invalid block bitmap [ 83.286086][ T3161] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 83.301280][ T3161] EXT4-fs (loop2): 1 truncate cleaned up [ 83.306964][ T3161] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.317677][ T3161] ext2 filesystem being mounted at /root/syzkaller.ErQpAt/192/file0 supports timestamps until 2038 (0x7fffffff) [ 83.338111][ T3078] UDC core: couldn't find an available UDC or it's busy: -16 [ 83.345740][ T3078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.600830][ T1098] hid (null): report_id 0 is invalid [ 83.608735][ T1098] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 83.615973][ T1098] hid-generic 0003:0158:0100.0014: unexpected long global item [ 83.623661][ T1098] hid-generic: probe of 0003:0158:0100.0014 failed with error -22 [ 83.634283][ T3161] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 3: comm syz.2.1175: lblock 0 mapped to illegal pblock 3 (length 1) [ 83.641145][ T530] usb 2-1: USB disconnect, device number 8 [ 83.780730][ T3198] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1190'. [ 83.793118][ T3200] loop2: detected capacity change from 0 to 256 [ 84.076823][ T3213] Zero length message leads to an empty skb [ 84.780291][ T3271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 84.790084][ T3271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 84.854091][ T3276] 9pnet: p9_errstr2errno: server reported unknown error § [ 84.900394][ T30] audit: type=1400 audit(1719590993.836:507): avc: denied { connect } for pid=3284 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.007157][ T30] audit: type=1400 audit(1719590993.926:508): avc: denied { setopt } for pid=3296 comm="syz.1.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.470424][ T3319] 9pnet: p9_errstr2errno: server reported unknown error § [ 85.576743][ T3333] usb usb8: usbfs: process 3333 (syz.1.1247) did not claim interface 0 before use [ 86.163578][ T3348] loop0: detected capacity change from 0 to 1024 [ 86.177307][ T30] audit: type=1326 audit(1719590995.116:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 86.208354][ T30] audit: type=1326 audit(1719590995.146:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 86.232586][ T30] audit: type=1326 audit(1719590995.146:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 86.256238][ T30] audit: type=1326 audit(1719590995.146:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 86.280967][ T3356] 9pnet: p9_errstr2errno: server reported unknown error § [ 86.290974][ T30] audit: type=1326 audit(1719590995.146:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011303ab99 code=0x7ffc0000 [ 86.315231][ T3348] EXT4-fs (loop0): Test dummy encryption mode enabled [ 86.345685][ T3348] EXT4-fs (loop0): Ignoring removed orlov option [ 86.353132][ T30] audit: type=1326 audit(1719590995.286:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7ffc0000 [ 86.379779][ T3348] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 86.414306][ T3365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 86.424826][ T30] audit: type=1326 audit(1719590995.286:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7ffc0000 [ 86.453337][ T3365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 86.486702][ T30] audit: type=1326 audit(1719590995.316:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67b6151b99 code=0x7ffc0000 [ 86.526847][ T30] audit: type=1326 audit(1719590995.396:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7ffc0000 [ 86.636579][ T30] audit: type=1326 audit(1719590995.396:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7ffc0000 [ 87.041974][ T3392] 9pnet: p9_errstr2errno: server reported unknown error § [ 87.139360][ T3398] usb usb8: usbfs: process 3398 (syz.0.1273) did not claim interface 0 before use [ 87.759317][ T3428] 9pnet: p9_errstr2errno: server reported unknown error § [ 87.877902][ T3438] loop2: detected capacity change from 0 to 256 [ 88.555280][ T3480] x_tables: unsorted entry at hook 3 [ 88.624354][ T3486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1305'. [ 88.633444][ T3486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1305'. [ 88.655615][ T3486] loop4: detected capacity change from 0 to 256 [ 88.790369][ T3486] FAT-fs (loop4): Directory bread(block 64) failed [ 88.796808][ T3486] FAT-fs (loop4): Directory bread(block 65) failed [ 88.803259][ T3486] FAT-fs (loop4): Directory bread(block 66) failed [ 88.809712][ T3486] FAT-fs (loop4): Directory bread(block 67) failed [ 88.816184][ T3486] FAT-fs (loop4): Directory bread(block 68) failed [ 88.822659][ T3486] FAT-fs (loop4): Directory bread(block 69) failed [ 88.829193][ T3486] FAT-fs (loop4): Directory bread(block 70) failed [ 88.835565][ T3486] FAT-fs (loop4): Directory bread(block 71) failed [ 88.842046][ T3486] FAT-fs (loop4): Directory bread(block 72) failed [ 88.848478][ T3486] FAT-fs (loop4): Directory bread(block 73) failed [ 89.624430][ T3518] bpf_get_probe_write_proto: 2 callbacks suppressed [ 89.624449][ T3518] syz.4.1320[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.637715][ T3518] syz.4.1320[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.856258][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 90.397163][ T3564] device pim6reg1 entered promiscuous mode [ 90.546406][ T3588] loop4: detected capacity change from 0 to 256 [ 90.590112][ T3588] exfat: Deprecated parameter 'namecase' [ 90.596892][ T3588] exfat: Deprecated parameter 'utf8' [ 90.603308][ T3588] exfat: Deprecated parameter 'namecase' [ 90.610829][ T3588] exfat: Deprecated parameter 'utf8' [ 90.661003][ T3588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 91.000512][ T3611] input: syz0 as /devices/virtual/input/input14 [ 91.073536][ T3617] loop4: detected capacity change from 0 to 512 [ 91.101712][ T3622] loop1: detected capacity change from 0 to 256 [ 91.110028][ T3617] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.116659][ T3617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.128299][ T3617] EXT4-fs (loop4): 1 truncate cleaned up [ 91.133786][ T3617] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nouid32,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,nobarrier,test_dummy_encryption,data=journal,noblock_validity,,errors=continue. Quota mode: none. [ 91.166172][ T3617] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 91.173538][ T3622] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x20a84b2f, utbl_chksum : 0xe619d30d) [ 91.221629][ T3631] loop1: detected capacity change from 0 to 128 [ 91.221732][ T3633] loop0: detected capacity change from 0 to 256 [ 91.234974][ T3633] exfat: Deprecated parameter 'utf8' [ 91.246960][ T3633] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 91.247865][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 91.247880][ T30] audit: type=1400 audit(1719591000.186:543): avc: denied { setopt } for pid=3630 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.305986][ T30] audit: type=1400 audit(1719591000.236:544): avc: denied { getopt } for pid=3630 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.689899][ T3655] loop1: detected capacity change from 0 to 256 [ 91.750801][ T30] audit: type=1400 audit(1719591000.686:545): avc: denied { bind } for pid=3658 comm="syz.2.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.782601][ T3655] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x20a84b2f, utbl_chksum : 0xe619d30d) [ 92.329467][ T3698] loop2: detected capacity change from 0 to 256 [ 92.385540][ T3698] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x20a84b2f, utbl_chksum : 0xe619d30d) [ 92.413752][ T3706] syz.4.1402[3706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.414774][ T3706] syz.4.1402[3706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.432114][ T30] audit: type=1326 audit(1719591001.366:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec5f1db99 code=0x7ffc0000 [ 92.480887][ T30] audit: type=1326 audit(1719591001.366:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec5f1db99 code=0x7ffc0000 [ 92.527183][ T30] audit: type=1326 audit(1719591001.406:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fcec5f1db99 code=0x7ffc0000 [ 92.601396][ T30] audit: type=1326 audit(1719591001.406:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec5f1db99 code=0x7ffc0000 [ 92.626099][ T30] audit: type=1326 audit(1719591001.406:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec5f1db99 code=0x7ffc0000 [ 93.347377][ T3725] syz.2.1407[3725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.347464][ T3725] syz.2.1407[3725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.525554][ T3725] 9pnet: Insufficient options for proto=fd [ 93.716601][ T30] audit: type=1326 audit(1719591002.646:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 93.775601][ T30] audit: type=1326 audit(1719591002.676:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 94.201227][ T3777] syz.4.1429[3777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.201600][ T3777] syz.4.1429[3777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.297393][ T3777] 9pnet: Insufficient options for proto=fd [ 94.769029][ T3723] loop1: detected capacity change from 0 to 131072 [ 94.807755][ T3723] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 2) [ 94.815821][ T3723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.857154][ T3723] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.918716][ T3723] F2FS-fs (loop1): recover fsync data on readonly fs [ 94.931892][ T3723] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 94.931977][ T3819] Illegal XDP return value 425631813, expect packet loss! [ 94.958279][ T3723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.999344][ T3830] netem: incorrect ge model size [ 95.004351][ T3830] netem: change failed [ 95.236481][ T3853] syz.4.1460[3853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.236809][ T3853] syz.4.1460[3853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.318540][ T3853] 9pnet: Insufficient options for proto=fd [ 95.439746][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.446963][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.454433][ T3845] device bridge_slave_0 entered promiscuous mode [ 95.461423][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.468351][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.475695][ T3845] device bridge_slave_1 entered promiscuous mode [ 95.507527][ T3855] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 95.517816][ T3855] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 95.660693][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.667569][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.674653][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.681466][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.703807][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.713042][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.721820][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.831621][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.843772][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.874836][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.882253][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.983725][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.998513][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.013823][ T3866] overlayfs: failed to resolve './file0': -2 [ 96.022679][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.029659][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.035154][ T3872] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 96.037197][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.052697][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.108256][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.119887][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.128172][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.136436][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.144891][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 96.187278][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.197380][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.218498][ T3884] loop0: detected capacity change from 0 to 16 [ 96.229162][ T3845] device veth0_vlan entered promiscuous mode [ 96.236845][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.247735][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.262921][ T3845] device veth1_macvtap entered promiscuous mode [ 96.270014][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.280131][ T3884] erofs: (device loop0): mounted with root inode @ nid 36. [ 96.287730][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.300711][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.317323][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.325426][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.334110][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.342765][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.409660][ T3892] loop0: detected capacity change from 0 to 512 [ 96.421900][ T880] device bridge_slave_1 left promiscuous mode [ 96.431158][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.448095][ T880] device bridge_slave_0 left promiscuous mode [ 96.457190][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.483259][ T3892] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 96.517537][ T880] device veth1_macvtap left promiscuous mode [ 96.523384][ T880] device veth0_vlan left promiscuous mode [ 96.536745][ T3892] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1479: iget: bad i_size value: -67835469387268086 [ 96.539638][ T3882] loop1: detected capacity change from 0 to 40427 [ 96.564570][ T3892] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1479: couldn't read orphan inode 15 (err -117) [ 96.587508][ T3892] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.603416][ T3892] ext2 filesystem being mounted at /root/syzkaller.x37fY2/299/file0 supports timestamps until 2038 (0x7fffffff) [ 96.617406][ T3882] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 96.628378][ T3882] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 96.738383][ T3882] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.774040][ T3894] loop4: detected capacity change from 0 to 40427 [ 96.804895][ T3882] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 96.813831][ T3894] F2FS-fs (loop4): invalid crc value [ 96.819495][ T3882] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.854860][ T3894] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.867056][ T3918] loop2: detected capacity change from 0 to 16 [ 96.906916][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 96.906951][ T30] audit: type=1400 audit(1719591005.836:566): avc: denied { setattr } for pid=3881 comm="syz.1.1475" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.946925][ T30] audit: type=1400 audit(1719591005.876:567): avc: denied { mounton } for pid=3891 comm="syz.0.1479" path="/root/syzkaller.x37fY2/299/file0/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.954109][ T3894] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 96.988309][ T3918] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.995608][ T3894] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 97.089354][ T3894] attempt to access beyond end of device [ 97.089354][ T3894] loop4: rw=2049, want=53264, limit=40427 [ 97.115326][ T1534] attempt to access beyond end of device [ 97.115326][ T1534] loop4: rw=2049, want=45104, limit=40427 [ 97.774146][ T3941] loop3: detected capacity change from 0 to 1024 [ 97.855080][ T3949] loop4: detected capacity change from 0 to 256 [ 97.865021][ T3941] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 97.879007][ T3941] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,bsdgroups,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 97.915452][ T30] audit: type=1400 audit(1719591006.836:568): avc: denied { append } for pid=3939 comm="syz.3.1496" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.938785][ T3949] exfat: Bad value for 'fmask' [ 98.042140][ T3960] syz.0.1498[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.042578][ T3960] syz.0.1498[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.271159][ T3959] 9pnet: Insufficient options for proto=fd [ 98.320117][ T3964] loop2: detected capacity change from 0 to 512 [ 98.339441][ T3964] EXT4-fs (loop2): bad block size 16384 [ 98.357946][ T3974] syz.3.1509[3974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.358001][ T3974] syz.3.1509[3974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.427774][ T3982] loop2: detected capacity change from 0 to 256 [ 98.489790][ T30] audit: type=1400 audit(1719591007.426:569): avc: denied { setopt } for pid=3988 comm="syz.3.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.544585][ T3982] FAT-fs (loop2): Directory bread(block 64) failed [ 98.556774][ T3982] FAT-fs (loop2): Directory bread(block 65) failed [ 98.563277][ T3982] FAT-fs (loop2): Directory bread(block 66) failed [ 98.569818][ T3982] FAT-fs (loop2): Directory bread(block 67) failed [ 98.576266][ T3982] FAT-fs (loop2): Directory bread(block 68) failed [ 98.583172][ T3982] FAT-fs (loop2): Directory bread(block 69) failed [ 98.591116][ T3982] FAT-fs (loop2): Directory bread(block 70) failed [ 98.603951][ T3982] FAT-fs (loop2): Directory bread(block 71) failed [ 98.610990][ T3982] FAT-fs (loop2): Directory bread(block 72) failed [ 98.617695][ T3982] FAT-fs (loop2): Directory bread(block 73) failed [ 98.893434][ T30] audit: type=1326 audit(1719591007.826:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 98.925470][ T30] audit: type=1326 audit(1719591007.856:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 98.953366][ T30] audit: type=1326 audit(1719591007.856:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 98.987012][ T30] audit: type=1326 audit(1719591007.906:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 99.024011][ T30] audit: type=1326 audit(1719591007.906:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45531f3be7 code=0x7ffc0000 [ 99.055682][ T30] audit: type=1326 audit(1719591007.906:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45531985b9 code=0x7ffc0000 [ 99.239991][ T4024] syz.2.1527[4024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.240346][ T4024] syz.2.1527[4024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.530729][ T4025] loop4: detected capacity change from 0 to 512 [ 99.597410][ T4025] EXT4-fs error (device loop4): __ext4_iget:4892: inode #15: block 1803188595: comm syz.4.1530: invalid block [ 99.616844][ T4025] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1530: couldn't read orphan inode 15 (err -117) [ 99.635532][ T4025] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000007ffc,debug_want_extra_isize=0x000000000000005c,usrquota,nombcache,stripe=0x0000000000000008,usrjquota=,,errors=continue. Quota mode: writeback. [ 99.660643][ T530] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 99.677580][ T4025] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1530: invalid indirect mapped block 234881024 (level 0) [ 99.744238][ T4047] syz.2.1541[4047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.744334][ T4047] syz.2.1541[4047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.858897][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.877445][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.885252][ T4043] device bridge_slave_0 entered promiscuous mode [ 99.894560][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.901534][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.908778][ T4043] device bridge_slave_1 entered promiscuous mode [ 100.269757][ T530] usb 1-1: Using ep0 maxpacket: 8 [ 100.317824][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.324728][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.331791][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.338590][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.386818][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.395294][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.402757][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.409676][ T530] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 100.417853][ T530] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 100.426280][ T530] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 100.436232][ T530] usb 1-1: config 250 has no interface number 0 [ 100.437377][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.450338][ T530] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 100.454322][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.468580][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.473455][ T530] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 100.485942][ T530] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.500099][ T530] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.510219][ T530] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 100.526903][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.534832][ T530] usb 1-1: config 250 interface 228 has no altsetting 0 [ 100.535673][ T4075] loop3: detected capacity change from 0 to 512 [ 100.546796][ T4077] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.548109][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.561676][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.573612][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.589733][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.602898][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.636051][ T4043] device veth0_vlan entered promiscuous mode [ 100.642527][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.650754][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.658394][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.672919][ T4043] device veth1_macvtap entered promiscuous mode [ 100.687195][ T530] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 100.700489][ T530] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 100.709669][ T530] usb 1-1: Product: syz [ 100.713648][ T530] usb 1-1: SerialNumber: syz [ 100.758037][ T530] hub 1-1:250.228: bad descriptor, ignoring hub [ 100.768138][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.776439][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.785532][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.786662][ T530] hub: probe of 1-1:250.228 failed with error -5 [ 100.974465][ T880] device bridge_slave_1 left promiscuous mode [ 101.049859][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.121497][ T880] device bridge_slave_0 left promiscuous mode [ 101.151252][ T530] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 101.164819][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.184831][ T880] device veth1_macvtap left promiscuous mode [ 101.195793][ T880] device veth0_vlan left promiscuous mode [ 101.278568][ T4113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4113 comm=syz.1.1565 [ 101.367230][ T802] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 101.401268][ T4103] loop3: detected capacity change from 0 to 40427 [ 101.512936][ T4103] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 101.521855][ T4103] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.549061][ T4103] F2FS-fs (loop3): invalid crc value [ 101.578609][ T4103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.600322][ T4019] UDC core: couldn't find an available UDC or it's busy: -16 [ 101.607318][ T802] usb 3-1: Using ep0 maxpacket: 32 [ 101.612563][ T4019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.681602][ T4103] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.694938][ T4103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.727499][ T802] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.734681][ T4103] F2FS-fs (loop3): Inconsistent error blkaddr:5663, sit bitmap:0 [ 101.746515][ T4103] CPU: 0 PID: 4103 Comm: syz.3.1561 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 101.747154][ T802] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.756231][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 101.775697][ T4103] Call Trace: [ 101.778797][ T4103] [ 101.781573][ T4103] dump_stack_lvl+0x151/0x1b7 [ 101.786091][ T4103] ? io_uring_drop_tctx_refs+0x190/0x190 [ 101.791560][ T4103] dump_stack+0x15/0x17 [ 101.795675][ T4103] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 101.800880][ T4103] f2fs_map_blocks+0x1631/0x3ac0 [ 101.805650][ T4103] ? __stack_depot_save+0x40d/0x470 [ 101.810693][ T4103] ? f2fs_do_map_lock+0x70/0x70 [ 101.815376][ T4103] ? debug_smp_processor_id+0x17/0x20 [ 101.820595][ T4103] ? try_charge_memcg+0x213/0x1550 [ 101.825529][ T4103] f2fs_mpage_readpages+0xc94/0x2160 [ 101.830913][ T4103] ? xas_start+0x333/0x3f0 [ 101.835168][ T4103] ? dquot_release_reservation_block+0xa0/0xa0 [ 101.841156][ T4103] f2fs_readahead+0xfd/0x250 [ 101.845585][ T4103] ? blk_start_plug+0x5a/0x170 [ 101.850526][ T4103] read_pages+0x15e/0xb00 [ 101.854691][ T4103] ? lru_cache_add+0x279/0x540 [ 101.859439][ T4103] ? page_cache_ra_unbounded+0x920/0x920 [ 101.864875][ T4103] ? add_to_page_cache_lru+0x225/0x2c0 [ 101.870173][ T4103] ? add_to_page_cache_locked+0x40/0x40 [ 101.875554][ T4103] ? bpf_trace_run2+0x210/0x210 [ 101.880240][ T4103] ? debug_smp_processor_id+0x17/0x20 [ 101.885463][ T4103] page_cache_ra_unbounded+0x6cb/0x920 [ 101.890744][ T4103] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 101.897097][ T4103] force_page_cache_ra+0x3c0/0x420 [ 101.902026][ T4103] generic_fadvise+0x593/0x880 [ 101.906624][ T4103] ? dump_task+0x520/0x520 [ 101.910882][ T4103] ? __fdget+0x1bc/0x240 [ 101.914961][ T4103] __x64_sys_fadvise64+0x13f/0x180 [ 101.919908][ T4103] do_syscall_64+0x3d/0xb0 [ 101.924157][ T4103] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.929893][ T4103] RIP: 0033:0x7f45531fcb99 [ 101.934139][ T4103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.953579][ T4103] RSP: 002b:00007f455247e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 101.961912][ T4103] RAX: ffffffffffffffda RBX: 00007f455338afa0 RCX: 00007f45531fcb99 [ 101.969725][ T4103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 101.977536][ T4103] RBP: 00007f455327d77e R08: 0000000000000000 R09: 0000000000000000 [ 101.985345][ T4103] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 101.993155][ T4103] R13: 000000000000000b R14: 00007f455338afa0 R15: 00007ffc4897b8a8 [ 102.000972][ T4103] [ 102.014093][ T530] usb 1-1: USB disconnect, device number 11 [ 102.030342][ T530] usblp0: removed [ 102.056867][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 102.056883][ T30] audit: type=1326 audit(1719591010.986:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.4.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.087196][ T802] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.096273][ T30] audit: type=1326 audit(1719591011.016:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.4.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.119435][ T30] audit: type=1326 audit(1719591011.016:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.4.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.127348][ T802] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 102.171538][ T30] audit: type=1326 audit(1719591011.016:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.4.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.172709][ T802] usb 3-1: Product: syz [ 102.226856][ T802] usb 3-1: Manufacturer: syz [ 102.237339][ T30] audit: type=1326 audit(1719591011.026:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.4.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.267657][ T30] audit: type=1326 audit(1719591011.146:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.4.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.291326][ T802] hub 3-1:4.0: USB hub found [ 102.295595][ T30] audit: type=1326 audit(1719591011.146:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.4.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.348005][ T30] audit: type=1326 audit(1719591011.146:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.4.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.371419][ T30] audit: type=1326 audit(1719591011.146:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.4.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.395902][ T30] audit: type=1326 audit(1719591011.146:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.4.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 102.466183][ T4153] loop1: detected capacity change from 0 to 2048 [ 102.507180][ T802] hub 3-1:4.0: 2 ports detected [ 102.562148][ T4158] loop3: detected capacity change from 0 to 512 [ 102.569275][ T4153] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x00000000078ac198,data_err=ignore,,errors=continue. Quota mode: none. [ 102.939126][ T392] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.959563][ T392] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 102.982218][ T392] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.982218][ T392] [ 102.999626][ T392] EXT4-fs (loop1): Total free blocks count 0 [ 103.005523][ T392] EXT4-fs (loop1): Free/Dirty block details [ 103.011267][ T392] EXT4-fs (loop1): free_blocks=2415919104 [ 103.016795][ T392] EXT4-fs (loop1): dirty_blocks=16 [ 103.035565][ T392] EXT4-fs (loop1): Block reservation details [ 103.046231][ T392] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 103.047550][ T4170] loop3: detected capacity change from 0 to 1024 [ 103.074947][ T4170] EXT4-fs (loop3): Ignoring removed nobh option [ 103.081602][ T4170] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 103.091919][ T4170] EXT4-fs (loop3): barriers disabled [ 103.097258][ T4170] JBD2: no valid journal superblock found [ 103.102853][ T4170] EXT4-fs (loop3): error loading journal [ 103.980820][ T4201] syz.3.1597[4201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.980904][ T4201] syz.3.1597[4201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.047149][ T63] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.137175][ T802] hub 3-1:4.0: activate --> -90 [ 104.496522][ T4210] loop1: detected capacity change from 0 to 1024 [ 104.507274][ T530] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.557160][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 104.587493][ T4210] EXT4-fs (loop1): Ignoring removed nobh option [ 104.593794][ T4210] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 104.603853][ T4210] EXT4-fs (loop1): barriers disabled [ 104.609132][ T4210] JBD2: no valid journal superblock found [ 104.614711][ T4210] EXT4-fs (loop1): error loading journal [ 104.687221][ T63] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 104.695349][ T63] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 104.706274][ T63] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 104.715192][ T63] usb 5-1: config 250 has no interface number 0 [ 104.721393][ T63] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 104.732857][ T63] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 104.743288][ T63] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.743405][ T39] usb 3-1: USB disconnect, device number 12 [ 104.753450][ T63] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 104.769200][ T530] usb 1-1: Using ep0 maxpacket: 8 [ 104.777467][ T63] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 104.791332][ T63] usb 5-1: config 250 interface 228 has no altsetting 0 [ 104.887229][ T530] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.917211][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 104.943350][ T63] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 104.951674][ T63] usb 5-1: Product: syz [ 104.955660][ T63] usb 5-1: SerialNumber: syz [ 104.977282][ T530] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 104.990499][ T530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 104.999303][ T63] hub 5-1:250.228: bad descriptor, ignoring hub [ 105.015251][ T63] hub: probe of 5-1:250.228 failed with error -5 [ 105.022175][ T530] usb 1-1: SerialNumber: syz [ 105.030906][ T530] usb 1-1: config 0 descriptor?? [ 105.046020][ T4236] loop3: detected capacity change from 0 to 1024 [ 105.082484][ T4236] EXT4-fs (loop3): Ignoring removed nobh option [ 105.090003][ T530] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 105.097314][ T4236] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 105.099495][ T530] usb 1-1: No valid video chain found. [ 105.114257][ T4236] EXT4-fs (loop3): barriers disabled [ 105.122168][ T4236] JBD2: no valid journal superblock found [ 105.130302][ T4236] EXT4-fs (loop3): error loading journal [ 105.208308][ T63] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 105.390159][ T39] usb 1-1: USB disconnect, device number 12 [ 105.761762][ T4266] loop2: detected capacity change from 0 to 256 [ 105.794349][ T4194] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.801676][ T4194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.840853][ T4266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea8fed2, utbl_chksum : 0xe619d30d) [ 105.872423][ T4266] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 105.875207][ T4270] syz.3.1628[4270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.881408][ T4270] syz.3.1628[4270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.910852][ T4272] loop3: detected capacity change from 0 to 1024 [ 105.987255][ T530] usb 5-1: USB disconnect, device number 12 [ 106.008724][ T530] usblp0: removed [ 106.048474][ T4272] EXT4-fs (loop3): Ignoring removed nobh option [ 106.054740][ T4272] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 106.065812][ T4272] EXT4-fs (loop3): barriers disabled [ 106.071060][ T4272] JBD2: no valid journal superblock found [ 106.076650][ T4272] EXT4-fs (loop3): error loading journal [ 106.162557][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 106.171819][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 106.227134][ T39] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 106.379363][ T4315] loop3: detected capacity change from 0 to 16 [ 106.437534][ T4315] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.477192][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 106.492775][ T4319] loop4: detected capacity change from 0 to 512 [ 106.499289][ T4321] loop3: detected capacity change from 0 to 256 [ 106.518164][ T4321] exfat: Deprecated parameter 'namecase' [ 106.523749][ T4321] exfat: Deprecated parameter 'utf8' [ 106.528921][ T4321] exfat: Deprecated parameter 'namecase' [ 106.555566][ T4321] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 106.607719][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.628299][ T4326] incfs: Backing dir is not set, filesystem can't be mounted. [ 106.633184][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.644478][ T4326] incfs: mount failed -2 [ 106.728760][ T4342] loop3: detected capacity change from 0 to 512 [ 106.767258][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.776239][ T39] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 106.784445][ T39] usb 3-1: Product: syz [ 106.788388][ T39] usb 3-1: Manufacturer: syz [ 106.806676][ T4346] loop4: detected capacity change from 0 to 256 [ 106.827560][ T39] hub 3-1:4.0: USB hub found [ 107.011221][ T4368] loop1: detected capacity change from 0 to 512 [ 107.047200][ T39] hub 3-1:4.0: 2 ports detected [ 107.201063][ T4387] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 107.219604][ T4387] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 107.242153][ T4397] loop3: detected capacity change from 0 to 512 [ 107.306513][ T4409] syz.4.1696[4409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.306586][ T4409] syz.4.1696[4409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.416537][ T4418] loop3: detected capacity change from 0 to 2048 [ 107.605259][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.675404][ T4418] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.690130][ T4418] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 107.702288][ T4418] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.702288][ T4418] [ 107.711722][ T4418] EXT4-fs (loop3): Total free blocks count 0 [ 107.717584][ T4418] EXT4-fs (loop3): Free/Dirty block details [ 107.723288][ T4418] EXT4-fs (loop3): free_blocks=2415919104 [ 107.729168][ T4418] EXT4-fs (loop3): dirty_blocks=48 [ 107.734105][ T4418] EXT4-fs (loop3): Block reservation details [ 107.739948][ T4418] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 107.820730][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 107.820747][ T30] audit: type=1326 audit(1719591016.756:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 107.850318][ T30] audit: type=1326 audit(1719591016.756:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 107.874205][ T30] audit: type=1326 audit(1719591016.756:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 107.905482][ T30] audit: type=1326 audit(1719591016.786:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45531fcb99 code=0x7ffc0000 [ 107.978826][ T4437] loop3: detected capacity change from 0 to 512 [ 108.113833][ T4444] loop1: detected capacity change from 0 to 2048 [ 108.196954][ T4444] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.228111][ T4444] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.244504][ T4444] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 108.256890][ T4444] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.256890][ T4444] [ 108.266425][ T4444] EXT4-fs (loop1): Total free blocks count 0 [ 108.272396][ T4444] EXT4-fs (loop1): Free/Dirty block details [ 108.287710][ T4444] EXT4-fs (loop1): free_blocks=2415919104 [ 108.293290][ T4444] EXT4-fs (loop1): dirty_blocks=48 [ 108.301567][ T4444] EXT4-fs (loop1): Block reservation details [ 108.307657][ T4444] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 108.309511][ T4472] loop4: detected capacity change from 0 to 256 [ 108.358552][ T4472] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 108.457193][ T802] hub 3-1:4.0: activate --> -90 [ 109.061840][ T308] usb 3-1: USB disconnect, device number 13 [ 109.244976][ T4503] loop1: detected capacity change from 0 to 2048 [ 109.429804][ T4503] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.477749][ T4503] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.493145][ T4503] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 109.505683][ T4503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.505683][ T4503] [ 109.515323][ T4503] EXT4-fs (loop1): Total free blocks count 0 [ 109.521214][ T4503] EXT4-fs (loop1): Free/Dirty block details [ 109.526956][ T4503] EXT4-fs (loop1): free_blocks=2415919104 [ 109.532795][ T4503] EXT4-fs (loop1): dirty_blocks=48 [ 109.538008][ T4503] EXT4-fs (loop1): Block reservation details [ 109.543902][ T4503] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 109.730274][ T802] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.769595][ T30] audit: type=1326 audit(1719591018.706:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 109.890171][ T30] audit: type=1326 audit(1719591018.706:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 110.023184][ T30] audit: type=1326 audit(1719591018.706:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 110.056868][ T30] audit: type=1326 audit(1719591018.706:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 110.081802][ T30] audit: type=1326 audit(1719591018.706:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 110.105032][ T30] audit: type=1326 audit(1719591018.706:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcb4e2afb99 code=0x7ffc0000 [ 110.147171][ T802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.158478][ T802] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.205085][ T4558] loop4: detected capacity change from 0 to 2048 [ 110.247179][ T802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.256521][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.264618][ T802] usb 1-1: SerialNumber: syz [ 110.294619][ T4558] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.320135][ T4558] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.335567][ T4558] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 110.347890][ T4558] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.347890][ T4558] [ 110.357450][ T4558] EXT4-fs (loop4): Total free blocks count 0 [ 110.367202][ T4558] EXT4-fs (loop4): Free/Dirty block details [ 110.373004][ T4558] EXT4-fs (loop4): free_blocks=2415919104 [ 110.383801][ T4558] EXT4-fs (loop4): dirty_blocks=48 [ 110.388936][ T4558] EXT4-fs (loop4): Block reservation details [ 110.396917][ T4558] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 110.565320][ T525] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.649449][ T4584] kvm: pic: non byte read [ 110.788615][ T39] usb 1-1: USB disconnect, device number 13 [ 110.837106][ T525] usb 2-1: Using ep0 maxpacket: 32 [ 110.947122][ T308] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 110.977205][ T525] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.987955][ T525] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.117196][ T525] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.126061][ T525] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 111.134232][ T525] usb 2-1: Product: syz [ 111.138226][ T525] usb 2-1: Manufacturer: syz [ 111.177723][ T525] hub 2-1:4.0: USB hub found [ 111.307183][ T308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.322209][ T308] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 111.331971][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.346396][ T308] usb 5-1: config 0 descriptor?? [ 111.388284][ T308] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 111.397189][ T525] hub 2-1:4.0: 2 ports detected [ 112.108181][ T530] usb 5-1: USB disconnect, device number 13 [ 112.126895][ T4642] syz.4.1791[4642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.126951][ T4642] syz.4.1791[4642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.822624][ T4676] loop2: detected capacity change from 0 to 256 [ 112.857321][ T530] hub 2-1:4.0: activate --> -90 [ 113.007167][ T525] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 113.428815][ T308] usb 2-1: USB disconnect, device number 9 [ 113.554482][ T4698] loop4: detected capacity change from 0 to 40427 [ 113.629783][ T4698] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 113.639127][ T4698] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.647431][ T525] usb 1-1: Using ep0 maxpacket: 16 [ 113.653614][ T4698] F2FS-fs (loop4): invalid crc value [ 113.660535][ T4698] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.694101][ T4698] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 113.700452][ T63] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.705490][ T4698] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.714596][ T4698] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 113.777211][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 113.797099][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 113.806796][ T525] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 113.817745][ T525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.829265][ T525] usb 1-1: config 0 descriptor?? [ 113.967164][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 113.991453][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 113.991468][ T30] audit: type=1400 audit(1719591022.926:700): avc: denied { bind } for pid=4719 comm="syz.4.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.032834][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.072353][ T4725] device bridge_slave_0 left promiscuous mode [ 114.087010][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.118226][ T30] audit: type=1400 audit(1719591023.056:701): avc: denied { map } for pid=4730 comm="syz.1.1829" path="socket:[31050]" dev="sockfs" ino=31050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.141444][ T30] audit: type=1400 audit(1719591023.066:702): avc: denied { read } for pid=4730 comm="syz.1.1829" path="socket:[31050]" dev="sockfs" ino=31050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.468416][ T4665] UDC core: couldn't find an available UDC or it's busy: -16 [ 114.481856][ T4665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.517929][ T525] hid (null): global environment stack underflow [ 114.526401][ T525] hid-generic 0003:0158:0100.0015: unknown main item tag 0x0 [ 114.534013][ T525] hid-generic 0003:0158:0100.0015: collection stack underflow [ 114.541573][ T63] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 114.550494][ T525] hid-generic 0003:0158:0100.0015: item 0 2 0 12 parsing failed [ 114.558087][ T63] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 114.566067][ T63] usb 4-1: Product: syz [ 114.573494][ T525] hid-generic: probe of 0003:0158:0100.0015 failed with error -22 [ 114.581157][ T63] usb 4-1: Manufacturer: syz [ 114.586603][ T63] usb 4-1: SerialNumber: syz [ 114.591616][ T63] usb 4-1: config 0 descriptor?? [ 114.637908][ T63] usb 4-1: selecting invalid altsetting 1 [ 114.644341][ T63] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 114.723480][ T525] usb 1-1: USB disconnect, device number 14 [ 114.927236][ T308] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.038710][ T30] audit: type=1326 audit(1719591023.976:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.1844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e2afb99 code=0x0 [ 115.125666][ T30] audit: type=1326 audit(1719591024.056:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7fc00000 [ 115.149994][ T30] audit: type=1326 audit(1719591024.056:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67b6151b99 code=0x7fc00000 [ 115.197155][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 115.317201][ T308] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.328853][ T308] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.487536][ T308] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 115.496671][ T308] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 115.505002][ T308] usb 2-1: Product: syz [ 115.509205][ T308] usb 2-1: Manufacturer: syz [ 115.717774][ T308] hub 2-1:4.0: USB hub found [ 115.857259][ T30] audit: type=1326 audit(1719591024.786:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b6151b99 code=0x7fc00000 [ 115.913719][ T4786] loop4: detected capacity change from 0 to 1024 [ 115.937208][ T308] hub 2-1:4.0: 2 ports detected [ 115.972138][ T4786] EXT4-fs (loop4): Ignoring removed orlov option [ 115.977130][ T307] usb 4-1: USB disconnect, device number 8 [ 115.983613][ T4786] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 116.012889][ T4786] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 116.043881][ T30] audit: type=1400 audit(1719591024.976:707): avc: denied { map } for pid=4785 comm="syz.4.1851" path="/root/syzkaller.tADQRZ/281/file1/file0/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.078214][ T4786] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz.4.1851: corrupt xattr in inline inode [ 116.091460][ T4786] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz.4.1851: corrupted in-inode xattr [ 116.122892][ T30] audit: type=1400 audit(1719591025.056:708): avc: denied { rmdir } for pid=1534 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.146170][ T1534] ================================================================== [ 116.146363][ T30] audit: type=1400 audit(1719591025.056:709): avc: denied { unlink } for pid=1534 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.154050][ T1534] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 116.154077][ T1534] Read of size 4 at addr ffff8881268f0000 by task syz-executor/1534 [ 116.154093][ T1534] [ 116.154099][ T1534] CPU: 0 PID: 1534 Comm: syz-executor Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 116.154120][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.214219][ T1534] Call Trace: [ 116.217325][ T1534] [ 116.220103][ T1534] dump_stack_lvl+0x151/0x1b7 [ 116.224616][ T1534] ? io_uring_drop_tctx_refs+0x190/0x190 [ 116.230082][ T1534] ? panic+0x751/0x751 [ 116.233990][ T1534] print_address_description+0x87/0x3b0 [ 116.239389][ T1534] kasan_report+0x179/0x1c0 [ 116.243708][ T1534] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 116.249178][ T1534] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 116.254645][ T1534] __asan_report_load4_noabort+0x14/0x20 [ 116.260113][ T1534] ext4_xattr_delete_inode+0xcd0/0xce0 [ 116.265411][ T1534] ? sb_end_intwrite+0x120/0x120 [ 116.270183][ T1534] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 116.276106][ T1534] ? ext4_journal_check_start+0x16c/0x230 [ 116.281647][ T1534] ? __kasan_check_read+0x11/0x20 [ 116.286497][ T1534] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 116.292313][ T1534] ? ext4_evict_inode+0xb8d/0x14e0 [ 116.297280][ T1534] ext4_evict_inode+0xea1/0x14e0 [ 116.302122][ T1534] ? _raw_spin_unlock+0x4d/0x70 [ 116.306825][ T1534] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 116.312535][ T1534] ? _raw_spin_unlock+0x4d/0x70 [ 116.317229][ T1534] ? inode_io_list_del+0x18b/0x1a0 [ 116.322170][ T1534] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 116.327897][ T1534] evict+0x2a3/0x630 [ 116.331719][ T1534] iput+0x63b/0x7e0 [ 116.335363][ T1534] vfs_rmdir+0x359/0x470 [ 116.339443][ T1534] do_rmdir+0x3ab/0x630 [ 116.343584][ T1534] ? d_delete_notify+0x160/0x160 [ 116.348361][ T1534] __x64_sys_unlinkat+0xdf/0xf0 [ 116.353046][ T1534] do_syscall_64+0x3d/0xb0 [ 116.357310][ T1534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.363026][ T1534] RIP: 0033:0x7fcb4e2af217 [ 116.367307][ T1534] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.386734][ T1534] RSP: 002b:00007ffe9a400268 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 116.394966][ T1534] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fcb4e2af217 [ 116.402778][ T1534] RDX: 0000000000000200 RSI: 00007ffe9a401410 RDI: 00000000ffffff9c [ 116.410587][ T1534] RBP: 00007fcb4e31d64a R08: 0000000000000000 R09: 0000000000000000 [ 116.418399][ T1534] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffe9a401410 [ 116.426212][ T1534] R13: 00007fcb4e31d64a R14: 000000000001c4b3 R15: 00007ffe9a4035f0 [ 116.434028][ T1534] [ 116.436886][ T1534] [ 116.439058][ T1534] Allocated by task 4487: [ 116.443234][ T1534] __kasan_slab_alloc+0xb1/0xe0 [ 116.447912][ T1534] slab_post_alloc_hook+0x53/0x2c0 [ 116.452888][ T1534] kmem_cache_alloc+0xf5/0x200 [ 116.457458][ T1534] vm_area_dup+0x26/0x230 [ 116.461625][ T1534] __split_vma+0xc1/0x470 [ 116.465788][ T1534] split_vma+0x7c/0xd0 [ 116.469815][ T1534] mprotect_fixup+0x4b5/0x7f0 [ 116.474316][ T1534] do_mprotect_pkey+0x79e/0xb20 [ 116.479005][ T1534] __x64_sys_mprotect+0x80/0x90 [ 116.483697][ T1534] do_syscall_64+0x3d/0xb0 [ 116.487944][ T1534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.493673][ T1534] [ 116.495843][ T1534] Freed by task 25: [ 116.499489][ T1534] kasan_set_track+0x4b/0x70 [ 116.503917][ T1534] kasan_set_free_info+0x23/0x40 [ 116.508693][ T1534] ____kasan_slab_free+0x126/0x160 [ 116.513634][ T1534] __kasan_slab_free+0x11/0x20 [ 116.518235][ T1534] slab_free_freelist_hook+0xbd/0x190 [ 116.523443][ T1534] kmem_cache_free+0x116/0x2e0 [ 116.528044][ T1534] __free_vm_area_struct+0x1c/0x20 [ 116.532991][ T1534] rcu_do_batch+0x57a/0xc10 [ 116.537334][ T1534] rcu_core+0x517/0x1020 [ 116.541468][ T1534] rcu_core_si+0x9/0x10 [ 116.545401][ T1534] __do_softirq+0x26d/0x5bf [ 116.549758][ T1534] [ 116.551910][ T1534] Last potentially related work creation: [ 116.557474][ T1534] kasan_save_stack+0x3b/0x60 [ 116.561978][ T1534] __kasan_record_aux_stack+0xd3/0xf0 [ 116.567191][ T1534] kasan_record_aux_stack_noalloc+0xb/0x10 [ 116.572836][ T1534] call_rcu+0x135/0x1310 [ 116.576907][ T1534] vm_area_free_no_check+0xff/0x130 [ 116.581984][ T1534] vm_area_free+0x53/0x60 [ 116.586109][ T1534] exit_mmap+0x525/0x940 [ 116.590192][ T1534] __mmput+0x95/0x310 [ 116.594006][ T1534] mmput+0x5b/0x170 [ 116.597654][ T1534] do_exit+0xb9c/0x2ca0 [ 116.601647][ T1534] do_group_exit+0x141/0x310 [ 116.606072][ T1534] __x64_sys_exit_group+0x3f/0x40 [ 116.610935][ T1534] do_syscall_64+0x3d/0xb0 [ 116.615182][ T1534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.620911][ T1534] [ 116.623084][ T1534] The buggy address belongs to the object at ffff8881268f0000 [ 116.623084][ T1534] which belongs to the cache vm_area_struct of size 232 [ 116.637230][ T1534] The buggy address is located 0 bytes inside of [ 116.637230][ T1534] 232-byte region [ffff8881268f0000, ffff8881268f00e8) [ 116.650163][ T1534] The buggy address belongs to the page: [ 116.655643][ T1534] page:ffffea00049a3c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1268f0 [ 116.665696][ T1534] flags: 0x4000000000000200(slab|zone=1) [ 116.671173][ T1534] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001bd500 [ 116.679590][ T1534] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 116.688004][ T1534] page dumped because: kasan: bad access detected [ 116.694258][ T1534] page_owner tracks the page as allocated [ 116.699805][ T1534] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1534, ts 108499161592, free_ts 108324806708 [ 116.715781][ T1534] post_alloc_hook+0x1a3/0x1b0 [ 116.720380][ T1534] prep_new_page+0x1b/0x110 [ 116.724718][ T1534] get_page_from_freelist+0x3550/0x35d0 [ 116.730189][ T1534] __alloc_pages+0x27e/0x8f0 [ 116.734797][ T1534] new_slab+0x9a/0x4e0 [ 116.738705][ T1534] ___slab_alloc+0x39e/0x830 [ 116.743131][ T1534] __slab_alloc+0x4a/0x90 [ 116.747295][ T1534] kmem_cache_alloc+0x134/0x200 [ 116.751981][ T1534] vm_area_dup+0x26/0x230 [ 116.756150][ T1534] copy_mm+0x9a1/0x13e0 [ 116.760144][ T1534] copy_process+0x1149/0x3290 [ 116.764652][ T1534] kernel_clone+0x21e/0x9e0 [ 116.768994][ T1534] __x64_sys_clone+0x23f/0x290 [ 116.773593][ T1534] do_syscall_64+0x3d/0xb0 [ 116.777846][ T1534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.783577][ T1534] page last free stack trace: [ 116.788089][ T1534] free_unref_page_prepare+0x7c8/0x7d0 [ 116.793382][ T1534] free_unref_page_list+0x14b/0xa60 [ 116.798415][ T1534] release_pages+0x1310/0x1370 [ 116.803014][ T1534] free_pages_and_swap_cache+0x8a/0xa0 [ 116.808334][ T1534] tlb_finish_mmu+0x177/0x320 [ 116.812829][ T1534] exit_mmap+0x40d/0x940 [ 116.816902][ T1534] __mmput+0x95/0x310 [ 116.820720][ T1534] mmput+0x5b/0x170 [ 116.824369][ T1534] do_exit+0xb9c/0x2ca0 [ 116.828359][ T1534] do_group_exit+0x141/0x310 [ 116.832786][ T1534] get_signal+0x7a3/0x1630 [ 116.837045][ T1534] arch_do_signal_or_restart+0xbd/0x1680 [ 116.842507][ T1534] exit_to_user_mode_loop+0xa0/0xe0 [ 116.847540][ T1534] exit_to_user_mode_prepare+0x5a/0xa0 [ 116.852838][ T1534] syscall_exit_to_user_mode+0x26/0x160 [ 116.858218][ T1534] do_syscall_64+0x49/0xb0 [ 116.862471][ T1534] [ 116.864638][ T1534] Memory state around the buggy address: [ 116.870115][ T1534] ffff8881268eff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.878130][ T1534] ffff8881268eff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.886027][ T1534] >ffff8881268f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.893922][ T1534] ^ [ 116.897830][ T1534] ffff8881268f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 116.905727][ T1534] ffff8881268f0100: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 116.913635][ T1534] ================================================================== [ 116.921523][ T1534] Disabling lock debugging due to kernel taint [ 116.930531][ T4788] loop2: detected capacity change from 0 to 40427 [ 116.959930][ T4788] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 116.970117][ T4788] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.983253][ T4788] F2FS-fs (loop2): invalid crc value [ 116.993288][ T4788] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.040254][ T4788] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.047245][ T4788] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.061308][ T4788] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 117.073901][ T290] attempt to access beyond end of device [ 117.073901][ T290] loop2: rw=2049, want=45104, limit=40427 [ 117.797186][ T308] hub 2-1:4.0: activate --> -90 [ 118.218813][ T319] usb 2-1: USB disconnect, device number 10