last executing test programs: 4.814262394s ago: executing program 3 (id=626): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.949571669s ago: executing program 1 (id=639): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0)) 3.71795998s ago: executing program 2 (id=646): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 3.69822623s ago: executing program 2 (id=647): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12141, 0x0) 3.679407681s ago: executing program 2 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.621723101s ago: executing program 2 (id=649): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x1, "93"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.127621864s ago: executing program 0 (id=658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001c0035742bbd7000fed3df2502000000", @ANYRES32=r2, @ANYBLOB="0800720908000100ac"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 3.080630204s ago: executing program 0 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.971878355s ago: executing program 0 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 2.930479355s ago: executing program 0 (id=661): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 2.721392796s ago: executing program 3 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) 2.647554786s ago: executing program 3 (id=671): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.95278685s ago: executing program 2 (id=673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 1.90935476s ago: executing program 1 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x214, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x97) 1.853651991s ago: executing program 4 (id=677): io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x3}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000074d564b"]) 1.782940351s ago: executing program 1 (id=678): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.724334441s ago: executing program 1 (id=679): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1.723995551s ago: executing program 4 (id=680): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 1.711730841s ago: executing program 4 (id=681): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1.555541552s ago: executing program 4 (id=682): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xd9f9, 0x2, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r1, &(0x7f0000004240)=""/174, 0xae, 0x556) 1.350452913s ago: executing program 1 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) 1.283440674s ago: executing program 0 (id=684): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) writev(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000000)="9b", 0x1}], 0x1) writev(r0, &(0x7f0000000900), 0x10000000000000b6) 1.252659223s ago: executing program 0 (id=685): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207000000c3"], 0x0}, 0x0) 1.222767583s ago: executing program 1 (id=686): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x1, "93"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.067885275s ago: executing program 2 (id=687): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0)) 672.594477ms ago: executing program 4 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 654.006227ms ago: executing program 4 (id=689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x20, 0x12, 0x6, "012def8ab5be"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000005c0)={0x20, 0x14, 0x4, "e374f571"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 427.39µs ago: executing program 3 (id=690): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) 215.74µs ago: executing program 3 (id=691): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=692): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.620621][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 17.620638][ T28] audit: type=1400 audit(1762288418.678:59): avc: denied { transition } for pid=239 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.625075][ T28] audit: type=1400 audit(1762288418.678:60): avc: denied { noatsecure } for pid=239 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.627865][ T28] audit: type=1400 audit(1762288418.688:61): avc: denied { write } for pid=239 comm="sh" path="pipe:[14685]" dev="pipefs" ino=14685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.631078][ T28] audit: type=1400 audit(1762288418.688:62): avc: denied { rlimitinh } for pid=239 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.634043][ T28] audit: type=1400 audit(1762288418.688:63): avc: denied { siginh } for pid=239 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 25.114982][ T28] audit: type=1400 audit(1762288426.178:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.117389][ T275] cgroup: Unknown subsys name 'net' [ 25.138038][ T28] audit: type=1400 audit(1762288426.178:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.165432][ T28] audit: type=1400 audit(1762288426.208:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.165659][ T275] cgroup: Unknown subsys name 'devices' [ 25.275683][ T275] cgroup: Unknown subsys name 'hugetlb' [ 25.281320][ T275] cgroup: Unknown subsys name 'rlimit' [ 25.416203][ T28] audit: type=1400 audit(1762288426.478:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.439433][ T28] audit: type=1400 audit(1762288426.478:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.464158][ T28] audit: type=1400 audit(1762288426.478:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.493149][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.502381][ T28] audit: type=1400 audit(1762288426.568:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.527804][ T28] audit: type=1400 audit(1762288426.568:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.537578][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.553731][ T28] audit: type=1400 audit(1762288426.598:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.587545][ T28] audit: type=1400 audit(1762288426.598:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.383567][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.390638][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.398193][ T286] device bridge_slave_0 entered promiscuous mode [ 26.407035][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.414120][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.421603][ T286] device bridge_slave_1 entered promiscuous mode [ 26.440286][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.447387][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.455046][ T283] device bridge_slave_0 entered promiscuous mode [ 26.462031][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.469157][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.476730][ T283] device bridge_slave_1 entered promiscuous mode [ 26.505714][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.512772][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.520302][ T284] device bridge_slave_0 entered promiscuous mode [ 26.536870][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.544016][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.551489][ T284] device bridge_slave_1 entered promiscuous mode [ 26.593419][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.600555][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.608086][ T287] device bridge_slave_0 entered promiscuous mode [ 26.630550][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.637672][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.645145][ T287] device bridge_slave_1 entered promiscuous mode [ 26.659581][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.666683][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.674213][ T285] device bridge_slave_0 entered promiscuous mode [ 26.683800][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.690916][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.698558][ T285] device bridge_slave_1 entered promiscuous mode [ 26.885493][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.892559][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.899895][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.906953][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.919882][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.926993][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.934298][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.941430][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.959467][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.966543][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.973854][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.980898][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.014273][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.021341][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.028640][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.035686][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.074272][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.081736][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.089210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.097646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.105462][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.112638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.121029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.128741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.137168][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.144551][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.152987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.160772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.194714][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.202933][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.210162][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.217752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.226547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.234666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.242795][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.249842][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.257526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.265748][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.272771][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.295360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.303534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.310931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.318505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.326878][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.335099][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.342124][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.349611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.357793][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.364834][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.372304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.390868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.399309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.408020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.416244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.424601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.432376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.444063][ T284] device veth0_vlan entered promiscuous mode [ 27.453399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.461701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.469950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.478239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.486384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.494626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.511087][ T284] device veth1_macvtap entered promiscuous mode [ 27.524414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.532671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.541097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.548812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.557371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.575165][ T286] device veth0_vlan entered promiscuous mode [ 27.582720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.591361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.599843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.608370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.616943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.625327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.633824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.641661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.649931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.657542][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.670012][ T283] device veth0_vlan entered promiscuous mode [ 27.678181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.686053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.693618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.701537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.709934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.717601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.734284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.742936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.743829][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 27.751664][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.765068][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.772857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.781314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.789940][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.797010][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.813521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.821271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.829826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.840637][ T287] device veth0_vlan entered promiscuous mode [ 27.869362][ T286] device veth1_macvtap entered promiscuous mode [ 27.878127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.887772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.896153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.896967][ T338] loop3: detected capacity change from 0 to 1024 [ 27.905084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.913502][ T338] ======================================================= [ 27.913502][ T338] WARNING: The mand mount option has been deprecated and [ 27.913502][ T338] and is ignored by this kernel. Remove the mand [ 27.913502][ T338] option from the mount to silence this warning. [ 27.913502][ T338] ======================================================= [ 27.920001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.954179][ T338] EXT4-fs: Ignoring removed oldalloc option [ 27.962263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.967467][ T338] EXT4-fs: Ignoring removed bh option [ 27.975775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.989191][ T338] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.995551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.008796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.016687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.018658][ T338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.025225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.052989][ T285] device veth0_vlan entered promiscuous mode [ 28.070353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.078314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.087576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.096291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.105073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.113059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.121555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.130034][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.138476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.147227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.156050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.159342][ T338] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.6: Allocating blocks 1-17 which overlap fs metadata [ 28.164894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.190471][ T283] device veth1_macvtap entered promiscuous mode [ 28.197938][ T287] device veth1_macvtap entered promiscuous mode [ 28.211598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.221116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.229099][ T338] syz.3.6 (338) used greatest stack depth: 21440 bytes left [ 28.229461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.246656][ T284] EXT4-fs (loop3): unmounting filesystem. [ 28.258299][ T285] device veth1_macvtap entered promiscuous mode [ 28.278254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.287668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.296305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.304696][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.312914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.321660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.330023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.338437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.346770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.374083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.384628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.393101][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.401654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.478832][ T356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.566817][ T364] loop1: detected capacity change from 0 to 1024 [ 28.573493][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.584267][ T364] EXT4-fs: Ignoring removed nobh option [ 28.595519][ T364] EXT4-fs: Ignoring removed bh option [ 28.606500][ T364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.654771][ T364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.701504][ T287] EXT4-fs (loop1): unmounting filesystem. [ 28.744312][ T368] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 28.762730][ T368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 28.764990][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.796368][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.817483][ T19] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 28.826886][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.839443][ T19] usb 4-1: config 0 descriptor?? [ 29.203320][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.256998][ T19] steelseries_srws1 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 29.273365][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.281404][ T399] loop1: detected capacity change from 0 to 40427 [ 29.303073][ T399] F2FS-fs (loop1): heap/no_heap options were deprecated [ 29.314481][ T404] loop4: detected capacity change from 0 to 40427 [ 29.320666][ T399] F2FS-fs (loop1): fault_injection options not supported [ 29.328340][ T404] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 29.329491][ T399] F2FS-fs (loop1): fault_type options not supported [ 29.336438][ T404] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 29.344309][ T399] F2FS-fs (loop1): invalid crc value [ 29.357925][ T404] F2FS-fs (loop4): invalid crc value [ 29.364688][ T399] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.365657][ T404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.394423][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.411713][ T404] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 29.413311][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.418979][ T404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.429904][ T60] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 29.462930][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.467310][ T404] syz.4.27: attempt to access beyond end of device [ 29.467310][ T404] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.481377][ T399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.492151][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 29.492484][ T303] usb 4-1: USB disconnect, device number 2 [ 29.508656][ T404] syz.4.27: attempt to access beyond end of device [ 29.508656][ T404] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 29.519574][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.533697][ T60] usb 3-1: config 0 descriptor?? [ 29.539488][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.553861][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 29.563211][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 29.563987][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.588486][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.608450][ T6] usb 1-1: Product: syz [ 29.612684][ T6] usb 1-1: Manufacturer: syz [ 29.623292][ T6] usb 1-1: SerialNumber: syz [ 29.751661][ T418] loop4: detected capacity change from 0 to 512 [ 29.764024][ T418] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.30: casefold flag without casefold feature [ 29.776841][ T418] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.30: couldn't read orphan inode 15 (err -117) [ 29.789014][ T418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.814164][ T286] EXT4-fs (loop4): unmounting filesystem. [ 29.838067][ T6] usb 1-1: 0:1 : does not exist [ 29.843118][ T6] usb 1-1: 0:2 : does not exist [ 29.850666][ T6] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 29.860647][ T6] usb 1-1: USB disconnect, device number 2 [ 29.950935][ T60] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 29.958582][ T60] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 30.063811][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.093281][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.150789][ T60] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 30.159245][ T423] loop3: detected capacity change from 0 to 40427 [ 30.169977][ T423] F2FS-fs (loop3): fault_injection options not supported [ 30.177826][ T423] F2FS-fs (loop3): fault_type options not supported [ 30.185505][ T423] F2FS-fs (loop3): invalid crc value [ 30.192001][ T423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.226889][ T423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.261368][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 30.261384][ T28] audit: type=1400 audit(1762288431.318:142): avc: denied { create } for pid=422 comm="syz.3.32" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 30.291437][ T284] syz-executor: attempt to access beyond end of device [ 30.291437][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.291898][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.316742][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.326735][ T19] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.336033][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.347644][ T19] usb 5-1: config 0 descriptor?? [ 30.362168][ T60] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 30.371526][ T60] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 30.385295][ T60] usb 3-1: USB disconnect, device number 2 [ 30.440130][ T429] fido_id[429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 30.494392][ T28] audit: type=1400 audit(1762288431.558:143): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.544040][ T439] loop3: detected capacity change from 0 to 256 [ 30.544881][ T28] audit: type=1400 audit(1762288431.558:144): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.576294][ T441] netlink: 92 bytes leftover after parsing attributes in process `syz.0.39'. [ 30.587112][ T28] audit: type=1400 audit(1762288431.558:145): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.615262][ T28] audit: type=1400 audit(1762288431.558:146): avc: denied { bpf } for pid=436 comm="syz.0.38" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.635818][ T28] audit: type=1400 audit(1762288431.558:147): avc: denied { prog_load } for pid=436 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.666219][ T28] audit: type=1400 audit(1762288431.558:148): avc: denied { perfmon } for pid=436 comm="syz.0.38" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.690544][ T28] audit: type=1400 audit(1762288431.558:149): avc: denied { prog_run } for pid=436 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.709625][ T28] audit: type=1400 audit(1762288431.588:150): avc: denied { create } for pid=436 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.732511][ T28] audit: type=1400 audit(1762288431.588:151): avc: denied { write } for pid=436 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.769628][ T439] FAT-fs (loop3): Directory bread(block 64) failed [ 30.776759][ T439] FAT-fs (loop3): Directory bread(block 65) failed [ 30.783615][ T439] FAT-fs (loop3): Directory bread(block 66) failed [ 30.790182][ T439] FAT-fs (loop3): Directory bread(block 67) failed [ 30.798888][ T19] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 30.808323][ T439] FAT-fs (loop3): Directory bread(block 68) failed [ 30.823190][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input4 [ 30.831500][ T439] FAT-fs (loop3): Directory bread(block 69) failed [ 30.841290][ T439] FAT-fs (loop3): Directory bread(block 70) failed [ 30.847999][ T439] FAT-fs (loop3): Directory bread(block 71) failed [ 30.859347][ T439] FAT-fs (loop3): Directory bread(block 72) failed [ 30.866614][ T439] FAT-fs (loop3): Directory bread(block 73) failed [ 30.907025][ T19] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 31.048436][ T19] usb 5-1: USB disconnect, device number 2 [ 31.067964][ T473] syz.3.33: attempt to access beyond end of device [ 31.067964][ T473] loop3: rw=2049, sector=1224, nr_sectors = 128 limit=256 [ 31.098268][ T474] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 31.249009][ T492] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET) [ 31.532661][ T339] kworker/u4:3: attempt to access beyond end of device [ 31.532661][ T339] loop3: rw=1, sector=1352, nr_sectors = 480 limit=256 [ 31.535729][ T339] kworker/u4:3: attempt to access beyond end of device [ 31.535729][ T339] loop3: rw=1, sector=1864, nr_sectors = 2480 limit=256 [ 31.586280][ T339] kworker/u4:3: attempt to access beyond end of device [ 31.586280][ T339] loop3: rw=1, sector=4344, nr_sectors = 4536 limit=256 [ 31.611431][ T339] kworker/u4:3: attempt to access beyond end of device [ 31.611431][ T339] loop3: rw=1, sector=8880, nr_sectors = 9928 limit=256 [ 31.640504][ T339] kworker/u4:3: attempt to access beyond end of device [ 31.640504][ T339] loop3: rw=1, sector=18808, nr_sectors = 11712 limit=256 [ 32.193207][ T534] syz.1.80 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.226947][ T507] loop4: detected capacity change from 0 to 40427 [ 32.253014][ T507] F2FS-fs (loop4): fault_injection options not supported [ 32.297910][ T507] F2FS-fs (loop4): invalid crc value [ 32.311254][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.330164][ T507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.330990][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.365481][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.372937][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.408866][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.423733][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.447257][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.451605][ T507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.494056][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.511812][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.522183][ T286] syz-executor: attempt to access beyond end of device [ 32.522183][ T286] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 32.531844][ T561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.90'. [ 32.549263][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.568111][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.595899][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.627105][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.666127][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.684569][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.712285][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.720409][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.736208][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.753287][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.770877][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.781982][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.799921][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.809424][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.824203][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.839247][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.846757][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.856324][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.864021][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.871588][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.879608][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.887375][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.897331][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.904962][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.912444][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.923950][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.931374][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.940165][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.947769][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.955956][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.964814][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.972327][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.979996][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.987669][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 32.995423][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.003013][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.011771][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.019516][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.027119][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.035044][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.035799][ T590] sch_fq: defrate 4294967295 ignored. [ 33.042448][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.055369][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.062800][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.070298][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.077888][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.085317][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.092720][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.100203][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.107833][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.115980][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.123457][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.130860][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.138332][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.145780][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.153165][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.160753][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.168191][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.175611][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.183005][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.190482][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.198276][ T348] hid-generic 0000:0009:0000.0004: unknown main item tag 0x0 [ 33.207789][ T348] hid-generic 0000:0009:0000.0004: hidraw0: HID v0.41 Device [syz1] on syz1 [ 33.232546][ T594] fido_id[594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.394666][ T623] raw_sendmsg: syz.2.117 forgot to set AF_INET. Fix it! [ 33.473882][ T637] support for the xor transformation has been removed. [ 33.538796][ T642] loop3: detected capacity change from 0 to 128 [ 33.579330][ T647] xt_bpf: check failed: parse error [ 33.631115][ T651] loop4: detected capacity change from 0 to 16 [ 33.667877][ T651] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.921494][ T681] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 33.944104][ T639] loop2: detected capacity change from 0 to 40427 [ 33.965848][ T639] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 33.983118][ T681] syz.1.144 (681) used greatest stack depth: 20736 bytes left [ 33.990918][ T639] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.006077][ T639] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 34.048377][ T639] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.105884][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.132182][ T639] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.143546][ T639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.190672][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.200806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.227633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.249783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.262698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.271227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.279832][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.289682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.314854][ T283] F2FS-fs (loop2): Issue discard(5637, 5637, 2) failed, ret: -5 [ 34.468840][ T712] loop0: detected capacity change from 0 to 512 [ 34.504044][ T712] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.519550][ T712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.544033][ T712] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.157: invalid indirect mapped block 4294967295 (level 0) [ 34.577917][ T722] loop1: detected capacity change from 0 to 512 [ 34.584306][ T712] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.157: invalid indirect mapped block 4294967295 (level 1) [ 34.603652][ T712] EXT4-fs (loop0): 1 orphan inode deleted [ 34.610170][ T712] EXT4-fs (loop0): 1 truncate cleaned up [ 34.617038][ T722] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 34.623970][ T712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.656260][ T722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.159: bg 0: block 104: invalid block bitmap [ 34.691996][ T722] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 34.703510][ T285] EXT4-fs (loop0): unmounting filesystem. [ 34.731180][ T722] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.159: invalid indirect mapped block 1 (level 1) [ 34.765657][ T722] EXT4-fs (loop1): 1 truncate cleaned up [ 34.771583][ T722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.852218][ T287] EXT4-fs (loop1): unmounting filesystem. [ 35.140389][ T770] loop1: detected capacity change from 0 to 16 [ 35.149771][ T770] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.159256][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.169006][ T770] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 35.180006][ T770] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 35.190125][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.199795][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.203296][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.209485][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 35.225770][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.235281][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 35.244474][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.253884][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 35.262939][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 35.272110][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 35.281540][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 35.290787][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.300174][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 35.309557][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 35.318769][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 35.327953][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 35.337216][ T770] bio_check_eod: 3 callbacks suppressed [ 35.337231][ T770] syz.1.180: attempt to access beyond end of device [ 35.337231][ T770] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 35.356531][ T770] syz.1.180: attempt to access beyond end of device [ 35.356531][ T770] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 35.370899][ T770] syz.1.180: attempt to access beyond end of device [ 35.370899][ T770] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 35.385285][ T770] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[2639] [ 35.396642][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 35.404464][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.405711][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 35.417130][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.425818][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.435913][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.445765][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 35.457991][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.467384][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.476295][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.485738][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 35.497000][ T24] usb 4-1: config 0 descriptor?? [ 35.503748][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 35.516904][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 35.526073][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.535531][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 35.544656][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.554156][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 35.563359][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 35.572483][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 35.581571][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 35.590781][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 35.599988][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 35.615416][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 35.624600][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.633998][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 35.643081][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.652655][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 35.661779][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 35.687067][ T774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 35.687255][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.748488][ T774] device veth3 entered promiscuous mode [ 35.754185][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 35.763410][ T770] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 35.772761][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 35.813400][ T770] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 35.828804][ T770] syz.1.180: attempt to access beyond end of device [ 35.828804][ T770] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 35.845272][ T770] syz.1.180: attempt to access beyond end of device [ 35.845272][ T770] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 35.859177][ T770] syz.1.180: attempt to access beyond end of device [ 35.859177][ T770] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 35.876480][ T785] loop0: detected capacity change from 0 to 256 [ 35.892600][ T770] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[5297] [ 35.950412][ T789] tmpfs: Unknown parameter '9' [ 35.962038][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 35.971587][ T24] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 35.989685][ T24] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 36.008527][ T28] kauditd_printk_skb: 1817 callbacks suppressed [ 36.008544][ T28] audit: type=1400 audit(1762288437.073:1969): avc: denied { read } for pid=796 comm="syz.4.192" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.039068][ T28] audit: type=1400 audit(1762288437.103:1970): avc: denied { create } for pid=794 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.213982][ T806] device pim6reg1 entered promiscuous mode [ 36.264511][ T303] usb 4-1: USB disconnect, device number 3 [ 36.273369][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.303374][ T343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.454525][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.469936][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.481208][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.491252][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.507348][ T343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.517653][ T343] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 36.526800][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.535387][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.550112][ T343] usb 3-1: config 0 descriptor?? [ 36.551909][ T28] audit: type=1400 audit(1762288437.613:1971): avc: denied { ioctl } for pid=813 comm="syz.1.200" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17187 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.555209][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.589880][ T343] usb 3-1: bad CDC descriptors [ 36.595614][ T24] usb 1-1: Manufacturer: syz [ 36.603455][ T24] usb 1-1: config 0 descriptor?? [ 36.799341][ T343] usb 3-1: USB disconnect, device number 4 [ 36.801262][ T28] audit: type=1400 audit(1762288437.863:1972): avc: denied { execmem } for pid=816 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.985727][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 37.027368][ T24] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 37.035070][ T24] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 37.045233][ T24] appleir 0003:05AC:8243.0006: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 37.154685][ T28] audit: type=1400 audit(1762288438.223:1973): avc: denied { mounton } for pid=827 comm="syz.4.205" path="/31/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 37.179519][ T28] audit: type=1400 audit(1762288438.223:1974): avc: denied { mounton } for pid=827 comm="syz.4.205" path="/31/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 37.211371][ T28] audit: type=1400 audit(1762288438.223:1975): avc: denied { mount } for pid=827 comm="syz.4.205" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 37.240266][ T28] audit: type=1400 audit(1762288438.223:1976): avc: denied { remount } for pid=827 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 37.300209][ T837] input: syz1 as /devices/virtual/input/input7 [ 37.308117][ T837] input: failed to attach handler leds to device input7, error: -6 [ 37.312848][ T839] input: syz1 as /devices/virtual/input/input8 [ 37.352986][ T841] loop4: detected capacity change from 0 to 1024 [ 37.362256][ T28] audit: type=1400 audit(1762288438.423:1977): avc: denied { bind } for pid=842 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.382762][ T60] usb 1-1: USB disconnect, device number 3 [ 37.407957][ T841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.421343][ T841] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.438376][ T28] audit: type=1400 audit(1762288438.503:1978): avc: denied { read write } for pid=840 comm="syz.4.212" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.462585][ T841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.212: bg 0: block 480: padding at end of block bitmap is not set [ 37.477710][ T841] EXT4-fs (loop4): Remounting filesystem read-only [ 37.504252][ T286] EXT4-fs (loop4): unmounting filesystem. [ 37.582129][ T863] netlink: 64 bytes leftover after parsing attributes in process `syz.1.221'. [ 37.618353][ T867] loop1: detected capacity change from 0 to 1024 [ 37.625352][ T867] EXT4-fs: Ignoring removed orlov option [ 37.633406][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.642595][ T867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.655846][ T867] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.677663][ T287] EXT4-fs (loop1): unmounting filesystem. [ 37.813309][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 37.819675][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.830605][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.840584][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.849670][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.858485][ T24] usb 3-1: config 0 descriptor?? [ 37.865268][ T24] hub 3-1:0.0: USB hub found [ 38.065260][ T24] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 38.323021][ T914] loop0: detected capacity change from 0 to 40427 [ 38.373934][ T374] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.467365][ T24] hid-generic 0003:046D:C31C.0007: unbalanced collection at end of report description [ 38.478755][ T24] hid-generic: probe of 0003:046D:C31C.0007 failed with error -22 [ 38.506755][ T921] loop0: detected capacity change from 0 to 128 [ 38.517675][ T921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.527039][ T921] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.552482][ T285] EXT4-fs (loop0): unmounting filesystem. [ 38.589838][ T926] loop4: detected capacity change from 0 to 1024 [ 38.597081][ T926] EXT4-fs: Ignoring removed nobh option [ 38.602694][ T926] EXT4-fs: Ignoring removed bh option [ 38.615658][ T926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.628074][ T932] loop0: detected capacity change from 0 to 1024 [ 38.637972][ T932] EXT4-fs: Ignoring removed orlov option [ 38.646844][ T926] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 38.656396][ T926] EXT4-fs: old and new quota format mixing [ 38.656716][ T932] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.677139][ T286] EXT4-fs (loop4): unmounting filesystem. [ 38.696834][ T932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.732324][ T285] EXT4-fs (loop0): unmounting filesystem. [ 38.803396][ T24] usb 3-1: USB disconnect, device number 5 [ 38.873310][ T348] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.882659][ T947] netlink: 'syz.0.249': attribute type 4 has an invalid length. [ 39.057489][ T956] loop3: detected capacity change from 0 to 1024 [ 39.064486][ T348] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.074394][ T348] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.084091][ T348] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.085438][ T956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.098775][ T348] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.105745][ T956] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.115503][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.133313][ T348] usb 2-1: Product: syz [ 39.137501][ T348] usb 2-1: Manufacturer: syz [ 39.142116][ T348] usb 2-1: SerialNumber: syz [ 39.148430][ T348] hub 2-1:1.0: bad descriptor, ignoring hub [ 39.154525][ T348] hub: probe of 2-1:1.0 failed with error -5 [ 39.156009][ T956] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.253: lblock 3 mapped to illegal pblock 3 (length 3) [ 39.163517][ T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.175143][ T956] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 39.194606][ T956] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.194606][ T956] [ 39.217193][ T956] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.253: lblock 0 mapped to illegal pblock 0 (length 3) [ 39.236738][ T960] device bridge0 entered promiscuous mode [ 39.242614][ T960] device macsec1 entered promiscuous mode [ 39.248782][ T10] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 39.249267][ T960] bridge0: port 3(macsec1) entered blocking state [ 39.264297][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 39.269577][ T960] bridge0: port 3(macsec1) entered disabled state [ 39.282530][ T10] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.282530][ T10] [ 39.298687][ T960] device bridge0 left promiscuous mode [ 39.299650][ T284] EXT4-fs (loop3): unmounting filesystem. [ 39.350002][ T348] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 39.362448][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.371477][ T60] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 39.379859][ T60] usb 1-1: config 6 has no interface number 0 [ 39.386251][ T60] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 39.409897][ T60] usb 1-1: config 6 interface 200 has no altsetting 0 [ 39.421976][ T60] usb 1-1: string descriptor 0 read error: -22 [ 39.430009][ T60] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 39.439485][ T60] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 39.441865][ T967] loop2: detected capacity change from 0 to 1024 [ 39.462152][ T967] EXT4-fs: Ignoring removed orlov option [ 39.468911][ T967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.485766][ T967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.515244][ T283] EXT4-fs (loop2): unmounting filesystem. [ 39.738783][ T975] syz.2.258 (975) used greatest stack depth: 20592 bytes left [ 39.843376][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.983327][ T928] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 40.033274][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 40.039724][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.053312][ T348] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.053448][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.073812][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 40.083000][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.091999][ T24] usb 5-1: config 0 descriptor?? [ 40.249424][ T348] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 40.259234][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.283273][ T348] usb 3-1: Product: syz [ 40.287585][ T348] usb 3-1: Manufacturer: syz [ 40.292210][ T348] usb 3-1: SerialNumber: syz [ 40.413832][ T60] usb 2-1: USB disconnect, device number 2 [ 40.424844][ T60] usblp0: removed [ 40.500652][ T1001] loop3: detected capacity change from 0 to 256 [ 40.513662][ T24] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 40.528723][ T1001] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.542708][ T1001] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 40.553947][ T1001] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.788089][ T60] usb 5-1: USB disconnect, device number 3 [ 40.935333][ T348] rtl8150 3-1:1.0: couldn't reset the device [ 40.941425][ T348] rtl8150: probe of 3-1:1.0 failed with error -5 [ 40.950264][ T348] usb 3-1: USB disconnect, device number 6 [ 41.237776][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 41.237791][ T28] audit: type=1326 audit(1762288442.303:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.304959][ T28] audit: type=1326 audit(1762288442.303:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.338926][ T28] audit: type=1326 audit(1762288442.303:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.381991][ T28] audit: type=1326 audit(1762288442.303:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.406076][ T28] audit: type=1326 audit(1762288442.303:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.445869][ T28] audit: type=1326 audit(1762288442.303:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.503374][ T28] audit: type=1326 audit(1762288442.303:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.568119][ T28] audit: type=1326 audit(1762288442.303:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.636286][ T28] audit: type=1326 audit(1762288442.303:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.667299][ T28] audit: type=1326 audit(1762288442.303:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7fc00000 [ 41.788627][ T1041] loop3: detected capacity change from 0 to 40427 [ 41.793034][ T1071] Zero length message leads to an empty skb [ 41.808246][ T1041] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.831839][ T1041] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.841312][ T1041] F2FS-fs (loop3): invalid crc value [ 41.848207][ T1041] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.883829][ T1076] loop1: detected capacity change from 0 to 8192 [ 41.908968][ T1041] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.913673][ T303] usb 1-1: USB disconnect, device number 4 [ 41.916230][ T1041] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.070775][ T1041] syz.3.287: attempt to access beyond end of device [ 42.070775][ T1041] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 42.161737][ T1102] loop1: detected capacity change from 0 to 256 [ 42.175630][ T284] syz-executor: attempt to access beyond end of device [ 42.175630][ T284] loop3: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 42.191142][ T1105] loop2: detected capacity change from 0 to 1024 [ 42.205430][ T284] F2FS-fs (loop3): Issue discard(5637, 5637, 1) failed, ret: -5 [ 42.209260][ T1105] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.228218][ T1102] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 42.243378][ T1105] EXT4-fs: Ignoring removed oldalloc option [ 42.253792][ T1105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.296930][ T1105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.366138][ T283] EXT4-fs (loop2): unmounting filesystem. [ 42.403283][ T343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.445187][ T1124] loop2: detected capacity change from 0 to 512 [ 42.466464][ T1124] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.470033][ T1114] kvm [1113]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x20000000000 [ 42.475395][ T1124] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.508358][ T1114] kvm [1113]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x20000000000 [ 42.517660][ T1114] kvm [1113]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x20000000000 [ 42.545274][ T283] EXT4-fs (loop2): unmounting filesystem. [ 42.572087][ T339] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 42.580369][ T1130] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 42.592978][ T339] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 42.600480][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 42.609161][ T343] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 42.618311][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.626350][ T343] usb 5-1: Product: syz [ 42.630587][ T343] usb 5-1: Manufacturer: syz [ 42.635249][ T343] usb 5-1: SerialNumber: syz [ 42.641010][ T343] usb 5-1: config 0 descriptor?? [ 42.647362][ T343] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 42.655631][ T343] usb 5-1: Detected FT232H [ 42.733303][ T303] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.849155][ T343] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 42.853412][ T348] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 42.924310][ T303] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 42.934867][ T303] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.943304][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.944250][ T303] usb 2-1: New USB device found, idVendor=016d, idProduct=0000, bcdDevice= 0.00 [ 42.961051][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.970050][ T303] usb 2-1: config 0 descriptor?? [ 43.044731][ T348] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 43.055826][ T348] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.062471][ T348] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 43.071956][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.072577][ T343] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 43.088069][ T348] usb 1-1: config 0 descriptor?? [ 43.093360][ T1134] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 43.101242][ T343] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 43.110477][ T343] usb 5-1: USB disconnect, device number 4 [ 43.117593][ T343] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 43.124579][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.127320][ T343] ftdi_sio 5-1:0.0: device disconnected [ 43.138683][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.153400][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.166544][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.175682][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.184874][ T6] usb 4-1: config 0 descriptor?? [ 43.188727][ T1125] loop1: detected capacity change from 0 to 512 [ 43.205859][ T1125] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 43.214339][ T1125] System zones: 0-2, 18-18, 34-35 [ 43.220488][ T1125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.229633][ T1125] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.249695][ T303] usb 2-1: USB disconnect, device number 3 [ 43.503521][ T348] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 43.510474][ T348] ryos 0003:1E7D:3138.0009: item fetching failed at offset 3/5 [ 43.518268][ T348] ryos 0003:1E7D:3138.0009: parse failed [ 43.524011][ T348] ryos: probe of 0003:1E7D:3138.0009 failed with error -22 [ 43.615235][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 43.623082][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 43.636557][ T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 43.644389][ T6] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 43.660287][ T6] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 43.708127][ T6] usb 1-1: USB disconnect, device number 5 [ 43.758833][ T287] EXT4-fs (loop1): unmounting filesystem. [ 43.898408][ T303] usb 4-1: USB disconnect, device number 4 [ 43.921748][ T1164] xt_hashlimit: size too large, truncated to 1048576 [ 44.169439][ T1173] loop1: detected capacity change from 0 to 1024 [ 44.176262][ T1173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.183209][ T1173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.196735][ T1173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 44.205234][ T1173] System zones: 0-1, 3-36 [ 44.211029][ T1173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.226022][ T1173] capability: warning: `syz.1.339' uses deprecated v2 capabilities in a way that may be insecure [ 44.248296][ T287] EXT4-fs (loop1): unmounting filesystem. [ 44.265996][ T1178] loop1: detected capacity change from 0 to 128 [ 44.284686][ T1178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.293519][ T1178] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.308415][ T1178] syz.1.341 (pid 1178) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 44.328192][ T287] EXT4-fs (loop1): unmounting filesystem. [ 44.350806][ T103] udevd[103]: worker [374] terminated by signal 33 (Unknown signal 33) [ 44.360297][ T103] udevd[103]: worker [374] failed while handling '/devices/virtual/block/loop1' [ 44.368066][ T1187] loop0: detected capacity change from 0 to 1024 [ 44.394618][ T1187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.403201][ T1187] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.456143][ T1187] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.456473][ T1197] device vlan2 entered promiscuous mode [ 44.471664][ T1187] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 44.484267][ T1197] device syz_tun entered promiscuous mode [ 44.489285][ T1187] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.489285][ T1187] [ 44.504645][ T1187] EXT4-fs (loop0): Total free blocks count 0 [ 44.510712][ T1187] EXT4-fs (loop0): Free/Dirty block details [ 44.516729][ T1187] EXT4-fs (loop0): free_blocks=4293918720 [ 44.522509][ T1187] EXT4-fs (loop0): dirty_blocks=64 [ 44.527730][ T1187] EXT4-fs (loop0): Block reservation details [ 44.533762][ T1187] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 44.564624][ T444] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 40 mapped to illegal pblock 8 (length 8) [ 44.579234][ T444] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 44.633282][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.633420][ T1131] Bluetooth: hci0: command 0x1003 tx timeout [ 44.833318][ T348] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.023267][ T348] usb 4-1: Using ep0 maxpacket: 16 [ 45.023336][ T303] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.029657][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.047721][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.057653][ T348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.070859][ T348] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.083414][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.101884][ T348] usb 4-1: config 0 descriptor?? [ 45.153309][ T60] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 45.213271][ T303] usb 5-1: Using ep0 maxpacket: 32 [ 45.221732][ T303] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 45.230011][ T303] usb 5-1: config 0 has no interface number 0 [ 45.237694][ T303] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 45.252813][ T303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.261218][ T303] usb 5-1: Product: syz [ 45.265460][ T303] usb 5-1: Manufacturer: syz [ 45.270140][ T303] usb 5-1: SerialNumber: syz [ 45.275611][ T303] usb 5-1: config 0 descriptor?? [ 45.281404][ T303] smsc95xx v2.0.0 [ 45.334495][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.344708][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.364529][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.373712][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.381784][ T60] usb 1-1: Product: syz [ 45.386045][ T60] usb 1-1: Manufacturer: syz [ 45.390754][ T60] usb 1-1: SerialNumber: syz [ 45.510544][ T348] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 45.522328][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.533546][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.541458][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.548809][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.556132][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.563570][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.570841][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.578122][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.585474][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.592740][ T348] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 45.602857][ T60] usb 1-1: 0:2 : does not exist [ 45.612018][ T348] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input10 [ 45.625510][ T60] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 45.639133][ T60] usb 1-1: USB disconnect, device number 6 [ 45.694504][ T348] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 45.735695][ T348] usb 4-1: USB disconnect, device number 5 [ 45.746725][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.748922][ T1247] fido_id[1247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 45.823323][ T343] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.933272][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 45.939813][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.948239][ T39] usb 2-1: config 229 has an invalid interface number: 50 but max is 0 [ 45.956560][ T39] usb 2-1: config 229 has no interface number 0 [ 45.962845][ T39] usb 2-1: config 229 interface 50 has no altsetting 0 [ 45.971127][ T39] usb 2-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 45.980257][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.988304][ T39] usb 2-1: Product: syz [ 45.992571][ T39] usb 2-1: Manufacturer: syz [ 45.997207][ T39] usb 2-1: SerialNumber: syz [ 46.024348][ T343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.035327][ T343] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.046987][ T343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.056123][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.064181][ T343] usb 3-1: Product: syz [ 46.068374][ T343] usb 3-1: Manufacturer: syz [ 46.072989][ T343] usb 3-1: SerialNumber: syz [ 46.079372][ T343] cdc_mbim 3-1:1.0: skipping garbage [ 46.206066][ T39] usb-storage 2-1:229.50: USB Mass Storage device detected [ 46.245641][ T39] usb 2-1: USB disconnect, device number 4 [ 46.280324][ T1245] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 46.287781][ T303] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 46.300886][ T1261] loop3: detected capacity change from 0 to 256 [ 46.312338][ T303] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 46.322203][ T303] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 46.338540][ T303] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 46.349806][ T303] usb 5-1: USB disconnect, device number 5 [ 46.387312][ T24] hid-generic 0001:0009:0001.000C: item fetching failed at offset 0/1 [ 46.396697][ T24] hid-generic: probe of 0001:0009:0001.000C failed with error -22 [ 46.434999][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.436158][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 46.436172][ T28] audit: type=1400 audit(1762288447.503:2103): avc: denied { connect } for pid=1268 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.467543][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.654503][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.664706][ T60] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 46.679350][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.688461][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.696495][ T60] usb 1-1: Product: syz [ 46.700676][ T60] usb 1-1: Manufacturer: syz [ 46.705302][ T60] usb 1-1: SerialNumber: syz [ 46.818224][ T28] audit: type=1400 audit(1762288447.883:2104): avc: denied { read } for pid=1275 comm="syz.4.381" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.828901][ T1278] syz.1.380[1278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.841165][ T1278] syz.1.380[1278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.843109][ T28] audit: type=1400 audit(1762288447.883:2105): avc: denied { open } for pid=1275 comm="syz.4.381" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.887098][ T28] audit: type=1400 audit(1762288447.883:2106): avc: denied { ioctl } for pid=1275 comm="syz.4.381" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.910683][ T1245] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 46.921131][ T343] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 46.929466][ T343] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 66:bd:0b:99:e0:dd [ 46.960101][ T28] audit: type=1400 audit(1762288448.013:2107): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.982340][ T28] audit: type=1400 audit(1762288448.023:2108): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.006732][ T28] audit: type=1400 audit(1762288448.023:2109): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=2776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.029222][ T28] audit: type=1400 audit(1762288448.023:2110): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.052967][ T28] audit: type=1400 audit(1762288448.023:2111): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.076487][ T28] audit: type=1400 audit(1762288448.063:2112): avc: denied { read } for pid=1283 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.128728][ T39] usb 3-1: USB disconnect, device number 7 [ 47.138117][ T142] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 47.138570][ T39] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 47.163312][ T348] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.303376][ T343] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.353297][ T348] usb 2-1: Using ep0 maxpacket: 32 [ 47.360964][ T348] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 47.370153][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.378216][ T348] usb 2-1: Product: syz [ 47.382536][ T348] usb 2-1: Manufacturer: syz [ 47.387181][ T348] usb 2-1: SerialNumber: syz [ 47.392417][ T348] usb 2-1: config 0 descriptor?? [ 47.493287][ T343] usb 5-1: Using ep0 maxpacket: 32 [ 47.499629][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.510624][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.520568][ T343] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.529749][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.538754][ T343] usb 5-1: config 0 descriptor?? [ 47.544873][ T343] hub 5-1:0.0: USB hub found [ 47.601527][ T348] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 47.609416][ T348] usb 2-1: USB disconnect, device number 5 [ 47.730548][ T60] cdc_ncm 1-1:1.0: bind() failure [ 47.739803][ T60] usb 1-1: USB disconnect, device number 7 [ 47.747102][ T343] hub 5-1:0.0: 1 port detected [ 47.943310][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.950203][ T343] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 47.957235][ T343] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 47.966007][ T343] usbhid 5-1:0.0: can't add hid device: -71 [ 47.971969][ T343] usbhid: probe of 5-1:0.0 failed with error -71 [ 48.013690][ T343] usb 5-1: USB disconnect, device number 6 [ 48.117111][ T1316] syz.1.386[1316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.117171][ T1316] syz.1.386[1316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.123392][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 48.146313][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.156764][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.169372][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.173138][ T1318] loop1: detected capacity change from 0 to 512 [ 48.178558][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.192878][ T6] usb 3-1: Product: syz [ 48.197174][ T6] usb 3-1: Manufacturer: syz [ 48.201799][ T6] usb 3-1: SerialNumber: syz [ 48.365624][ T1327] loop1: detected capacity change from 0 to 128 [ 48.375311][ T1327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.384175][ T1327] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.405668][ T287] EXT4-fs (loop1): unmounting filesystem. [ 48.417552][ T6] usb 3-1: 0:2 : does not exist [ 48.427829][ T6] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 48.441833][ T6] usb 3-1: USB disconnect, device number 8 [ 48.473325][ T1213] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.647983][ T1248] udevd[1248]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.693371][ T343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 48.737316][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.863409][ T303] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 48.893315][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 48.901182][ T343] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 48.920634][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.928783][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 48.934099][ T343] usb 2-1: Product: syz [ 48.943486][ T39] usb 1-1: config 0 has no interfaces? [ 48.952878][ T343] usb 2-1: Manufacturer: syz [ 48.957723][ T39] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.969444][ T343] usb 2-1: SerialNumber: syz [ 48.975653][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.984033][ T343] r8152-cfgselector 2-1: config 0 descriptor?? [ 48.993453][ T39] usb 1-1: config 0 descriptor?? [ 49.054786][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.070107][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.084368][ T303] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 49.093677][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.106078][ T303] usb 5-1: config 0 descriptor?? [ 49.205947][ T807] usb 1-1: USB disconnect, device number 8 [ 49.395434][ T343] r8152-cfgselector 2-1: Unknown version 0x0000 [ 49.404478][ T343] r8152-cfgselector 2-1: bad CDC descriptors [ 49.415819][ T343] r8152-cfgselector 2-1: Unknown version 0x0000 [ 49.432686][ T343] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 49.464397][ T1408] loop3: detected capacity change from 0 to 512 [ 49.478397][ T1408] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 49.488017][ T1408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.428: bg 0: block 104: invalid block bitmap [ 49.500816][ T1408] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 49.509967][ T1408] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.428: invalid indirect mapped block 1 (level 1) [ 49.524071][ T1408] EXT4-fs (loop3): 1 truncate cleaned up [ 49.529817][ T1408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.536441][ T303] steelseries_srws1 0003:1038:1410.000D: collection stack underflow [ 49.547984][ T1408] EXT4-fs (loop3): shut down requested (1) [ 49.555065][ T303] steelseries_srws1 0003:1038:1410.000D: item 0 4 0 12 parsing failed [ 49.563597][ T303] steelseries_srws1 0003:1038:1410.000D: parse failed [ 49.564520][ T284] EXT4-fs (loop3): unmounting filesystem. [ 49.570424][ T303] steelseries_srws1: probe of 0003:1038:1410.000D failed with error -22 [ 49.780099][ T348] usb 5-1: USB disconnect, device number 7 [ 49.912801][ T1437] loop0: detected capacity change from 0 to 512 [ 49.950931][ T1437] EXT4-fs: Ignoring removed oldalloc option [ 49.960447][ T1439] netlink: 35 bytes leftover after parsing attributes in process `syz.1.442'. [ 49.973292][ T1439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 49.982548][ T1437] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.017272][ T1437] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.057593][ T1437] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.441: bg 0: block 248: padding at end of block bitmap is not set [ 50.072584][ T1437] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.441: Failed to acquire dquot type 1 [ 50.084954][ T1437] EXT4-fs (loop0): 1 truncate cleaned up [ 50.090667][ T1437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.106559][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 50.131709][ T1451] xt_hashlimit: size too large, truncated to 1048576 [ 50.139348][ T1437] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 50.172279][ T285] EXT4-fs (loop0): unmounting filesystem. [ 50.254272][ T1462] netlink: 'syz.0.448': attribute type 3 has an invalid length. [ 50.361179][ T1467] loop0: detected capacity change from 0 to 2048 [ 50.434949][ T1467] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.475980][ T285] EXT4-fs (loop0): unmounting filesystem. [ 50.663290][ T60] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 50.720693][ T1516] netlink: 'syz.3.472': attribute type 4 has an invalid length. [ 50.790858][ T343] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 50.844337][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.858177][ T60] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 50.867397][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.880349][ T60] usb 3-1: config 0 descriptor?? [ 50.974331][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.985507][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.995339][ T343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.008628][ T343] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.017858][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.030257][ T343] usb 1-1: config 0 descriptor?? [ 51.295736][ T1543] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 51.353340][ T60] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 51.421157][ T1510] loop1: detected capacity change from 0 to 131072 [ 51.439827][ T343] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 51.447849][ T1510] F2FS-fs (loop1): Test dummy encryption mode enabled [ 51.459109][ T343] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.479746][ T1553] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 51.490662][ T1510] F2FS-fs (loop1): invalid crc value [ 51.501954][ T343] usb 3-1: USB disconnect, device number 9 [ 51.526845][ T1510] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.594000][ T1510] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.596661][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 51.596680][ T28] audit: type=1400 audit(1762288452.663:2136): avc: denied { read append } for pid=1565 comm="syz.4.494" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.636850][ T28] audit: type=1400 audit(1762288452.663:2137): avc: denied { open } for pid=1565 comm="syz.4.494" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.670453][ T1510] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 52.360785][ T1593] loop3: detected capacity change from 0 to 131072 [ 52.371033][ T1593] F2FS-fs (loop3): Test dummy encryption mode enabled [ 52.379061][ T1593] F2FS-fs (loop3): invalid crc value [ 52.386340][ T1593] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.424826][ T1593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.905409][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.920091][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 52.928099][ T60] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.937770][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.948564][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 52.957115][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.965452][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.973964][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.982272][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.990897][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.999413][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 53.007253][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 53.114369][ T60] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 53.125530][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 53.137008][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 53.149308][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.162624][ T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.182387][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.195986][ T60] usb 4-1: config 0 descriptor?? [ 53.201323][ T1615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.399601][ T39] kernel write not supported for file bpf-prog (pid: 39 comm: kworker/1:1) [ 53.477644][ T1657] input: syz0 as /devices/virtual/input/input11 [ 53.583665][ T303] usb 1-1: USB disconnect, device number 9 [ 53.625563][ T60] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 53.637770][ T60] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 53.642916][ T28] audit: type=1400 audit(1762288454.703:2138): avc: denied { read } for pid=1672 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.653053][ T60] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 53.669524][ T1675] loop0: detected capacity change from 0 to 2048 [ 53.692352][ T1675] EXT4-fs (loop0): Test dummy encryption mode enabled [ 53.708032][ T1675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.808128][ T285] EXT4-fs (loop0): unmounting filesystem. [ 53.897369][ T28] audit: type=1400 audit(1762288454.963:2139): avc: denied { create } for pid=1694 comm="syz.4.547" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.924534][ T24] usb 4-1: USB disconnect, device number 6 [ 53.932814][ T28] audit: type=1400 audit(1762288454.983:2140): avc: denied { write } for pid=1694 comm="syz.4.547" name="file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.959529][ T28] audit: type=1400 audit(1762288454.983:2141): avc: denied { open } for pid=1694 comm="syz.4.547" path="/85/file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.982770][ T28] audit: type=1400 audit(1762288454.983:2142): avc: denied { ioctl } for pid=1694 comm="syz.4.547" path="/85/file0" dev="tmpfs" ino=466 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.007538][ T28] audit: type=1400 audit(1762288455.073:2143): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.033990][ T1701] netlink: 'syz.4.549': attribute type 7 has an invalid length. [ 54.041697][ T1701] netlink: 'syz.4.549': attribute type 8 has an invalid length. [ 54.049782][ T1701] netlink: 72 bytes leftover after parsing attributes in process `syz.4.549'. [ 54.073428][ T343] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.156982][ T1715] sch_fq: defrate 53322 ignored. [ 54.264505][ T343] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 54.275428][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.286381][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.296223][ T343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 54.321543][ T343] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 54.345088][ T343] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 54.353323][ T343] usb 3-1: Manufacturer: syz [ 54.358762][ T343] usb 3-1: config 0 descriptor?? [ 54.365388][ T1725] netlink: 536 bytes leftover after parsing attributes in process `syz.1.559'. [ 54.418364][ T1731] loop1: detected capacity change from 0 to 128 [ 54.657407][ T28] audit: type=1400 audit(1762288455.723:2144): avc: denied { bind } for pid=1750 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.686083][ T28] audit: type=1400 audit(1762288455.743:2145): avc: denied { name_bind } for pid=1750 comm="syz.3.571" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.769426][ T343] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 54.785127][ T343] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 54.788489][ T1760] loop4: detected capacity change from 0 to 512 [ 54.806779][ T343] appleir 0003:05AC:8243.0011: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 54.818521][ T1760] EXT4-fs: Ignoring removed orlov option [ 54.833162][ T1760] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 54.849232][ T1767] loop1: detected capacity change from 0 to 256 [ 54.856338][ T1760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 54.860456][ T1766] loop0: detected capacity change from 0 to 512 [ 54.879252][ T1767] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 54.893734][ T1760] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.574: corrupted in-inode xattr [ 54.902300][ T1767] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 54.925590][ T1760] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.574: couldn't read orphan inode 15 (err -117) [ 54.937840][ T1760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.963785][ T1766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.982390][ T1766] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.999288][ T1766] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #4: comm syz.0.578: corrupted inode contents [ 55.011203][ T1766] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #4: comm syz.0.578: mark_inode_dirty error [ 55.013299][ T60] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.022774][ T1766] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #4: comm syz.0.578: corrupted inode contents [ 55.042135][ T1766] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.578: mark_inode_dirty error [ 55.042479][ T286] EXT4-fs (loop4): unmounting filesystem. [ 55.059654][ T1766] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.578: Failed to acquire dquot type 1 [ 55.059831][ T1777] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #4: comm syz.0.578: corrupted inode contents [ 55.075413][ T1776] device vlan2 entered promiscuous mode [ 55.087082][ T348] usb 3-1: USB disconnect, device number 10 [ 55.094876][ T1777] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #4: comm syz.0.578: mark_inode_dirty error [ 55.119487][ T1777] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #4: comm syz.0.578: corrupted inode contents [ 55.131546][ T1777] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.578: mark_inode_dirty error [ 55.144991][ T1777] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.578: Failed to acquire dquot type 1 [ 55.156548][ T1781] loop4: detected capacity change from 0 to 128 [ 55.178451][ T285] EXT4-fs (loop0): unmounting filesystem. [ 55.194758][ T1781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.221965][ T1781] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.247548][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 55.259705][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 55.268296][ T286] EXT4-fs (loop4): unmounting filesystem. [ 55.268937][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 55.275842][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.283985][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 55.300798][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 55.309704][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 55.320993][ T1795] SELinux: Context @ is not valid (left unmapped). [ 55.336041][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.351477][ T1799] 9pnet: p9_errstr2errno: server reported unknown error [ 55.354126][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.370409][ T60] usb 4-1: Product: syz [ 55.374661][ T60] usb 4-1: Manufacturer: syz [ 55.382062][ T60] usb 4-1: SerialNumber: syz [ 55.436666][ T1805] loop1: detected capacity change from 0 to 8192 [ 55.449383][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.458795][ T1805] FAT-fs (loop1): Filesystem has been set read-only [ 55.465685][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.474346][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.483165][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.491848][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.500776][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.509410][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.518682][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.527342][ T1805] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 55.645052][ T1821] netlink: 'syz.2.601': attribute type 6 has an invalid length. [ 55.683308][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.864436][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.882456][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.897441][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.907092][ T39] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 55.915155][ T39] usb 5-1: Manufacturer: syz [ 55.920619][ T39] usb 5-1: config 0 descriptor?? [ 56.000486][ T1848] SELinux: failed to load policy [ 56.213009][ T60] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 56.233511][ T60] cdc_ncm 4-1:1.0: bind() failure [ 56.239554][ T60] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 56.256636][ T60] cdc_ncm 4-1:1.1: bind() failure [ 56.271333][ T60] usb 4-1: USB disconnect, device number 7 [ 56.343768][ T1863] loop1: detected capacity change from 0 to 512 [ 56.365010][ T1863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.374059][ T1863] ext4 filesystem being mounted at /162/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.388934][ T1863] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #4: comm syz.1.620: corrupted inode contents [ 56.401573][ T1863] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #4: comm syz.1.620: mark_inode_dirty error [ 56.413307][ T1863] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #4: comm syz.1.620: corrupted inode contents [ 56.425254][ T1863] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.620: mark_inode_dirty error [ 56.436605][ T1863] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.620: Failed to acquire dquot type 1 [ 56.440025][ T1866] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #4: comm syz.1.620: corrupted inode contents [ 56.459867][ T1866] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #4: comm syz.1.620: mark_inode_dirty error [ 56.471429][ T1866] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #4: comm syz.1.620: corrupted inode contents [ 56.489929][ T1866] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.620: mark_inode_dirty error [ 56.501439][ T1866] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.620: Failed to acquire dquot type 1 [ 56.525284][ T287] EXT4-fs (loop1): unmounting filesystem. [ 56.553378][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 56.725074][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 56.743649][ T39] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input13 [ 56.754473][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 56.754490][ T28] audit: type=1326 audit(1762288457.813:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 56.756092][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 56.770571][ T28] audit: type=1326 audit(1762288457.813:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 56.792671][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 56.822577][ T39] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input14 [ 56.833333][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.841518][ T28] audit: type=1326 audit(1762288457.813:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 56.845551][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 56.867555][ T28] audit: type=1326 audit(1762288457.813:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 56.879141][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 56.907043][ T28] audit: type=1400 audit(1762288457.813:2157): avc: denied { mount } for pid=1873 comm="syz.1.623" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.913978][ T39] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input15 [ 56.948290][ T28] audit: type=1326 audit(1762288457.813:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 56.950479][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.981057][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 56.989077][ T28] audit: type=1326 audit(1762288457.813:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 56.991022][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 57.012537][ T28] audit: type=1326 audit(1762288457.813:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 57.022109][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 57.044634][ T28] audit: type=1326 audit(1762288457.813:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 57.053424][ T24] usb 1-1: config 0 descriptor?? [ 57.079384][ T28] audit: type=1326 audit(1762288457.813:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1873 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186018f6c9 code=0x7ffc0000 [ 57.079889][ T39] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input16 [ 57.124077][ T39] uclogic 0003:256C:006D.0012: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 57.138041][ T39] usb 5-1: USB disconnect, device number 8 [ 57.167537][ T1885] sch_fq: defrate 53322 ignored. [ 57.214064][ T1887] loop2: detected capacity change from 0 to 8192 [ 57.223626][ T346] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 57.232838][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.241758][ T1887] FAT-fs (loop2): Filesystem has been set read-only [ 57.248465][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.257139][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.265924][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.274607][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.283269][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.291898][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.301105][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.309776][ T1887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 57.355387][ T1891] loop2: detected capacity change from 0 to 1024 [ 57.363653][ T1891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.378366][ T1891] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.402059][ T1891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 57.403297][ T346] usb 4-1: Using ep0 maxpacket: 16 [ 57.417528][ T1894] fido_id[1894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 57.420625][ T1891] System zones: [ 57.438963][ T346] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 57.452644][ T1891] 0-1, 3-36 [ 57.456576][ T346] usb 4-1: config 0 has no interface number 0 [ 57.463020][ T1891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.471985][ T346] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 57.514414][ T346] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 57.538261][ T346] usb 4-1: config 0 interface 41 has no altsetting 0 [ 57.554276][ T283] EXT4-fs (loop2): unmounting filesystem. [ 57.560491][ T346] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 57.569693][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.583172][ T346] usb 4-1: Product: syz [ 57.587482][ T346] usb 4-1: Manufacturer: syz [ 57.594659][ T24] hid-picolcd 0003:04D8:C002.0013: No report with id 0x11 found [ 57.602480][ T346] usb 4-1: SerialNumber: syz [ 57.631008][ T346] usb 4-1: config 0 descriptor?? [ 57.641482][ T1881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 57.652115][ T1881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 57.722664][ T1912] loop7: detected capacity change from 0 to 7 [ 57.731241][ T444] loop: Write error at byte offset 6, length 3584. [ 57.738046][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 57.747512][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 57.777438][ T39] usb 1-1: USB disconnect, device number 10 [ 57.819241][ T444] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.853542][ T1918] device syz_tun entered promiscuous mode [ 57.859457][ T1918] device vlan2 entered promiscuous mode [ 57.866175][ T1881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 57.876726][ T1881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 58.304779][ T346] Error reading MAC address [ 58.305229][ T1881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 58.305264][ T1881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 58.413335][ T39] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.506175][ T346] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 58.511211][ T346] usb 4-1: USB disconnect, device number 8 [ 58.593340][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 58.599687][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 58.599720][ T39] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 58.599745][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.607171][ T39] usb 3-1: config 0 descriptor?? [ 58.617628][ T1953] incfs: Options parsing error. -22 [ 58.617671][ T1953] incfs: mount failed -22 [ 58.650086][ T1955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 58.935273][ T1966] loop4: detected capacity change from 0 to 256 [ 59.006442][ T1974] netlink: 116 bytes leftover after parsing attributes in process `syz.4.667'. [ 59.020108][ T39] hid (null): global environment stack underflow [ 59.036754][ T39] hid (null): report_id 0 is invalid [ 59.049723][ T39] hid (null): global environment stack underflow [ 59.056224][ T39] hid (null): unknown global tag 0xc [ 59.061551][ T39] hid (null): report_id 25068 is invalid [ 59.067286][ T39] hid (null): report_id 0 is invalid [ 59.072573][ T39] hid (null): global environment stack overflow [ 59.080177][ T39] hid (null): unknown global tag 0xc [ 59.085483][ T39] hid (null): unknown global tag 0x58 [ 59.103275][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 59.231163][ T1982] loop4: detected capacity change from 0 to 40427 [ 59.233695][ T343] usb 3-1: USB disconnect, device number 11 [ 59.247484][ T1982] F2FS-fs (loop4): Invalid segment/section count (31, 0 x 1) [ 59.257554][ T1982] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 59.265849][ T1982] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (0, 24) [ 59.273606][ T1982] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 59.294528][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.305647][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.315442][ T24] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 59.324516][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.333359][ T24] usb 1-1: config 0 descriptor?? [ 59.742642][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.750788][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.758826][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.766843][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.774792][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.782746][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.790726][ T24] steelseries_srws1 0003:1038:1410.0015: unknown main item tag 0x0 [ 59.799125][ T24] steelseries_srws1 0003:1038:1410.0015: missing HID_OUTPUT_REPORT 0 [ 59.812753][ T1987] incfs: Options parsing error. -22 [ 59.818276][ T1987] incfs: mount failed -22 [ 59.833343][ T1133] Bluetooth: hci0: command 0x1003 tx timeout [ 59.833389][ T1213] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.833607][ T1916] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 59.857368][ T1992] loop1: detected capacity change from 0 to 128 [ 59.951142][ T24] usb 1-1: USB disconnect, device number 11 [ 60.277953][ T2001] loop1: detected capacity change from 0 to 40427 [ 60.285589][ T2001] F2FS-fs (loop1): fault_injection options not supported [ 60.293591][ T2001] F2FS-fs (loop1): invalid crc value [ 60.309931][ T2001] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.345758][ T2001] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.401882][ T287] syz-executor: attempt to access beyond end of device [ 60.401882][ T287] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 60.694913][ T444] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.773286][ T343] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 60.803273][ T60] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 60.954499][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.965443][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.975227][ T343] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 60.984277][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.993149][ T343] usb 1-1: config 0 descriptor?? [ 60.998302][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 61.004672][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 61.011602][ T60] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.020796][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.029686][ T60] usb 2-1: config 0 descriptor?? [ 61.373301][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 61.403620][ T343] steelseries_srws1 0003:1038:1410.0016: collection stack underflow [ 61.411728][ T343] steelseries_srws1 0003:1038:1410.0016: item 0 4 0 12 parsing failed [ 61.420122][ T343] steelseries_srws1 0003:1038:1410.0016: parse failed [ 61.427085][ T343] steelseries_srws1: probe of 0003:1038:1410.0016 failed with error -22 [ 61.443573][ T60] hid (null): global environment stack underflow [ 61.450028][ T60] hid (null): report_id 0 is invalid [ 61.456887][ T60] hid (null): global environment stack underflow [ 61.463373][ T60] hid (null): unknown global tag 0xc [ 61.468681][ T60] hid (null): report_id 25068 is invalid [ 61.474373][ T60] hid (null): report_id 0 is invalid [ 61.479666][ T60] hid (null): global environment stack overflow [ 61.487437][ T60] hid (null): unknown global tag 0xc [ 61.492761][ T60] hid (null): unknown global tag 0x58 [ 61.573285][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 61.579594][ T24] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 61.587879][ T24] usb 5-1: config 1 has no interface number 0 [ 61.594062][ T24] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.604035][ T24] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.614124][ T24] usb 5-1: config 1 interface 105 has no altsetting 0 [ 61.621260][ T60] usb 1-1: USB disconnect, device number 12 [ 61.622521][ T24] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 61.636344][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.644405][ T24] usb 5-1: Product: syz [ 61.648632][ T24] usb 5-1: Manufacturer: syz [ 61.653358][ T24] usb 5-1: SerialNumber: syz [ 61.659495][ T2025] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 61.665865][ T348] usb 2-1: USB disconnect, device number 7 [ 61.666762][ T2025] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 61.913296][ C0] ================================================================== [ 61.921411][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 61.928474][ C0] Write of size 8 at addr ffff88811e4d8a00 by task swapper/0/0 [ 61.936027][ C0] [ 61.938372][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 61.945406][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.955524][ C0] Call Trace: [ 61.958821][ C0] [ 61.961686][ C0] __dump_stack+0x21/0x24 [ 61.966034][ C0] dump_stack_lvl+0xee/0x150 [ 61.970644][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.975690][ C0] ? update_rq_clock+0x536/0x5c0 [ 61.980645][ C0] ? __run_timers+0x32b/0x9a0 [ 61.985338][ C0] print_address_description+0x71/0x200 [ 61.990892][ C0] print_report+0x4a/0x60 [ 61.995234][ C0] kasan_report+0x122/0x150 [ 61.999761][ C0] ? __run_timers+0x32b/0x9a0 [ 62.004451][ C0] __asan_report_store8_noabort+0x17/0x20 [ 62.010191][ C0] __run_timers+0x32b/0x9a0 [ 62.014739][ C0] ? sched_clock+0x9/0x10 [ 62.019184][ C0] ? sched_clock_cpu+0x6e/0x250 [ 62.024051][ C0] ? calc_index+0x200/0x200 [ 62.028588][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 62.033807][ C0] run_timer_softirq+0x6a/0xf0 [ 62.038587][ C0] handle_softirqs+0x1d7/0x600 [ 62.043458][ C0] ? irqtime_account_irq+0xc4/0x240 [ 62.048693][ C0] __irq_exit_rcu+0x52/0xf0 [ 62.053218][ C0] irq_exit_rcu+0x9/0x10 [ 62.057465][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 62.063126][ C0] [ 62.066065][ C0] [ 62.069018][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 62.075215][ C0] RIP: 0010:default_idle+0xf/0x20 [ 62.080264][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d b3 0f 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 62.099882][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257 [ 62.105973][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: cdc3132ff4fdd400 [ 62.114057][ C0] RDX: 0000000000000001 RSI: ffffffff85aa1380 RDI: ffffffff85aa1340 [ 62.122047][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917 [ 62.130054][ C0] R10: 0000000000000000 R11: ffffffff84f42280 R12: 0000000000000000 [ 62.138047][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000 [ 62.146054][ C0] ? __cfi_default_idle+0x10/0x10 [ 62.151122][ C0] arch_cpu_idle+0x1c/0x20 [ 62.155555][ C0] default_idle_call+0x71/0x1d0 [ 62.160429][ C0] do_idle+0x1a7/0x520 [ 62.164511][ C0] ? irqentry_exit+0x30/0x40 [ 62.169130][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 62.174334][ C0] ? schedule_idle+0x5b/0x90 [ 62.178929][ C0] ? do_idle+0x515/0x520 [ 62.183225][ C0] cpu_startup_entry+0x43/0x60 [ 62.188022][ C0] rest_init+0x10a/0x130 [ 62.192283][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 62.197762][ C0] arch_call_rest_init+0xe/0x10 [ 62.202636][ C0] start_kernel+0x482/0x4f0 [ 62.207153][ C0] x86_64_start_reservations+0x2a/0x2c [ 62.212634][ C0] x86_64_start_kernel+0x7c/0x81 [ 62.217592][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 62.223499][ C0] [ 62.226525][ C0] [ 62.228846][ C0] Allocated by task 1916: [ 62.233189][ C0] kasan_set_track+0x4b/0x70 [ 62.237793][ C0] kasan_save_alloc_info+0x25/0x30 [ 62.242913][ C0] __kasan_kmalloc+0x95/0xb0 [ 62.247507][ C0] __kmalloc+0xb1/0x1e0 [ 62.251668][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 62.256977][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 62.262009][ C0] tty_ioctl+0x8ef/0xc60 [ 62.266428][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 62.271122][ C0] __x64_sys_ioctl+0x7b/0x90 [ 62.275717][ C0] x64_sys_call+0x58b/0x9a0 [ 62.280235][ C0] do_syscall_64+0x4c/0xa0 [ 62.284651][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.290552][ C0] [ 62.292875][ C0] Freed by task 1915: [ 62.296938][ C0] kasan_set_track+0x4b/0x70 [ 62.301543][ C0] kasan_save_free_info+0x31/0x50 [ 62.306579][ C0] ____kasan_slab_free+0x132/0x180 [ 62.311698][ C0] __kasan_slab_free+0x11/0x20 [ 62.316471][ C0] slab_free_freelist_hook+0xc2/0x190 [ 62.321854][ C0] __kmem_cache_free+0xb7/0x1b0 [ 62.326712][ C0] kfree+0x6f/0xf0 [ 62.330447][ C0] hci_release_dev+0x12a3/0x13b0 [ 62.335396][ C0] bt_host_release+0x82/0x90 [ 62.339999][ C0] device_release+0xa4/0x1d0 [ 62.344593][ C0] kobject_put+0x19d/0x280 [ 62.349019][ C0] put_device+0x1f/0x30 [ 62.353181][ C0] hci_free_dev+0x1c/0x20 [ 62.357520][ C0] hci_uart_tty_close+0x1a3/0x230 [ 62.362553][ C0] tty_ldisc_kill+0x10f/0x1f0 [ 62.367252][ C0] tty_ldisc_release+0x1a5/0x200 [ 62.372211][ C0] tty_release_struct+0x29/0xe0 [ 62.377077][ C0] tty_release+0xbfd/0x1210 [ 62.381591][ C0] __fput+0x1fc/0x8f0 [ 62.385580][ C0] ____fput+0x15/0x20 [ 62.389575][ C0] task_work_run+0x1db/0x240 [ 62.394173][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 62.399377][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 62.404834][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 62.410319][ C0] do_syscall_64+0x58/0xa0 [ 62.414740][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.420646][ C0] [ 62.422971][ C0] Last potentially related work creation: [ 62.428683][ C0] kasan_save_stack+0x3a/0x60 [ 62.433365][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 62.438763][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 62.444593][ C0] insert_work+0x51/0x300 [ 62.448931][ C0] __queue_work+0x9b1/0xd30 [ 62.453441][ C0] queue_work_on+0xd2/0x140 [ 62.457980][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 62.462935][ C0] hci_cmd_sync_status+0x53/0x120 [ 62.467972][ C0] hci_dev_cmd+0x628/0x720 [ 62.472393][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 62.477078][ C0] sock_do_ioctl+0x101/0x310 [ 62.481693][ C0] sock_ioctl+0x4d8/0x6e0 [ 62.486027][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 62.490708][ C0] __x64_sys_ioctl+0x7b/0x90 [ 62.495308][ C0] x64_sys_call+0x58b/0x9a0 [ 62.499832][ C0] do_syscall_64+0x4c/0xa0 [ 62.504255][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.510177][ C0] [ 62.512501][ C0] Second to last potentially related work creation: [ 62.519082][ C0] kasan_save_stack+0x3a/0x60 [ 62.523767][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 62.529178][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 62.535001][ C0] insert_work+0x51/0x300 [ 62.539341][ C0] __queue_work+0x9b1/0xd30 [ 62.543921][ C0] queue_work_on+0xd2/0x140 [ 62.548432][ C0] hci_cmd_timeout+0x191/0x200 [ 62.553207][ C0] process_one_work+0x71f/0xc40 [ 62.558076][ C0] worker_thread+0xa29/0x11f0 [ 62.562757][ C0] kthread+0x281/0x320 [ 62.566845][ C0] ret_from_fork+0x1f/0x30 [ 62.571286][ C0] [ 62.573613][ C0] The buggy address belongs to the object at ffff88811e4d8000 [ 62.573613][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 62.587665][ C0] The buggy address is located 2560 bytes inside of [ 62.587665][ C0] 8192-byte region [ffff88811e4d8000, ffff88811e4da000) [ 62.601120][ C0] [ 62.603448][ C0] The buggy address belongs to the physical page: [ 62.609862][ C0] page:ffffea0004793600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e4d8 [ 62.620115][ C0] head:ffffea0004793600 order:3 compound_mapcount:0 compound_pincount:0 [ 62.628436][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 62.634526][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 62.643114][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 62.651691][ C0] page dumped because: kasan: bad access detected [ 62.658102][ C0] page_owner tracks the page as allocated [ 62.663824][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1419, tgid 1418 (syz.0.433), ts 49803467583, free_ts 49456030743 [ 62.684230][ C0] post_alloc_hook+0x1f5/0x210 [ 62.689066][ C0] prep_new_page+0x1c/0x110 [ 62.693580][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 62.699134][ C0] __alloc_pages+0x1c3/0x450 [ 62.703741][ C0] alloc_slab_page+0x6e/0xf0 [ 62.708352][ C0] new_slab+0x98/0x3d0 [ 62.712425][ C0] ___slab_alloc+0x6bd/0xb20 [ 62.717025][ C0] __slab_alloc+0x5e/0xa0 [ 62.721364][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 62.726825][ C0] kmalloc_trace+0x29/0xb0 [ 62.731241][ C0] audit_log_d_path+0xc6/0x240 [ 62.736008][ C0] common_lsm_audit+0x8f8/0x16d0 [ 62.740948][ C0] slow_avc_audit+0x1ac/0x220 [ 62.745648][ C0] avc_has_extended_perms+0x8d3/0xdc0 [ 62.751045][ C0] ioctl_has_perm+0x391/0x4c0 [ 62.755728][ C0] selinux_file_ioctl+0x377/0x480 [ 62.760761][ C0] page last free stack trace: [ 62.765431][ C0] free_unref_page_prepare+0x742/0x750 [ 62.770896][ C0] free_unref_page+0x8f/0x530 [ 62.775576][ C0] __free_pages+0x67/0x100 [ 62.779993][ C0] __free_slab+0xca/0x1a0 [ 62.784336][ C0] __unfreeze_partials+0x160/0x190 [ 62.789505][ C0] put_cpu_partial+0xa9/0x100 [ 62.794187][ C0] __slab_free+0x1c4/0x280 [ 62.798606][ C0] ___cache_free+0xbf/0xd0 [ 62.803024][ C0] qlist_free_all+0xc6/0x140 [ 62.807612][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 62.813089][ C0] __kasan_slab_alloc+0x24/0x80 [ 62.817979][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 62.823101][ C0] kmem_cache_alloc+0x16e/0x330 [ 62.827982][ C0] getname_flags+0xb9/0x500 [ 62.832494][ C0] getname+0x19/0x20 [ 62.836398][ C0] do_sys_openat2+0xcb/0x7e0 [ 62.841008][ C0] [ 62.843340][ C0] Memory state around the buggy address: [ 62.848974][ C0] ffff88811e4d8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.857039][ C0] ffff88811e4d8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.865108][ C0] >ffff88811e4d8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.873173][ C0] ^ [ 62.877245][ C0] ffff88811e4d8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.885328][ C0] ffff88811e4d8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.893393][ C0] ================================================================== [ 62.901466][ C0] Disabling lock debugging due to kernel taint [ 62.907731][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 62.919448][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 62.927876][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 62.936397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.946553][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 62.951859][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4f 6d 00 49 8b 7d 00 e8 93 05 [ 62.971486][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 62.977572][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500 [ 62.985551][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 62.993548][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 63.001527][ C0] R10: ffffed1023c9b139 R11: 1ffff11023c9b139 R12: dffffc0000000000 [ 63.009678][ C0] R13: 0000000000000000 R14: ffff88811e4d89c8 R15: 0000000000000008 [ 63.017658][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 63.026594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.033181][ C0] CR2: 0000001b2e90fff8 CR3: 000000012fc62000 CR4: 00000000003506b0 [ 63.041176][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.049163][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.057149][ C0] Call Trace: [ 63.060433][ C0] [ 63.063286][ C0] delayed_work_timer_fn+0x61/0x80 [ 63.068424][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 63.074269][ C0] call_timer_fn+0x46/0x2a0 [ 63.078787][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 63.084606][ C0] __run_timers+0x667/0x9a0 [ 63.089133][ C0] ? calc_index+0x200/0x200 [ 63.093645][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 63.098870][ C0] run_timer_softirq+0x6a/0xf0 [ 63.103652][ C0] handle_softirqs+0x1d7/0x600 [ 63.108426][ C0] ? irqtime_account_irq+0xc4/0x240 [ 63.113635][ C0] __irq_exit_rcu+0x52/0xf0 [ 63.118140][ C0] irq_exit_rcu+0x9/0x10 [ 63.122384][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 63.128024][ C0] [ 63.130961][ C0] [ 63.133894][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 63.139903][ C0] RIP: 0010:default_idle+0xf/0x20 [ 63.145210][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d b3 0f 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 63.164823][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257 [ 63.170906][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: cdc3132ff4fdd400 [ 63.178895][ C0] RDX: 0000000000000001 RSI: ffffffff85aa1380 RDI: ffffffff85aa1340 [ 63.186875][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917 [ 63.194852][ C0] R10: 0000000000000000 R11: ffffffff84f42280 R12: 0000000000000000 [ 63.202864][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000 [ 63.210846][ C0] ? __cfi_default_idle+0x10/0x10 [ 63.215891][ C0] arch_cpu_idle+0x1c/0x20 [ 63.220309][ C0] default_idle_call+0x71/0x1d0 [ 63.225165][ C0] do_idle+0x1a7/0x520 [ 63.229236][ C0] ? irqentry_exit+0x30/0x40 [ 63.233834][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 63.239039][ C0] ? schedule_idle+0x5b/0x90 [ 63.243638][ C0] ? do_idle+0x515/0x520 [ 63.247890][ C0] cpu_startup_entry+0x43/0x60 [ 63.252662][ C0] rest_init+0x10a/0x130 [ 63.256903][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 63.262281][ C0] arch_call_rest_init+0xe/0x10 [ 63.267140][ C0] start_kernel+0x482/0x4f0 [ 63.271646][ C0] x86_64_start_reservations+0x2a/0x2c [ 63.277117][ C0] x86_64_start_kernel+0x7c/0x81 [ 63.282070][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 63.287970][ C0] [ 63.290988][ C0] Modules linked in: [ 63.294904][ C0] ---[ end trace 0000000000000000 ]--- [ 63.300355][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 63.305660][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4f 6d 00 49 8b 7d 00 e8 93 05 [ 63.325267][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 63.331340][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500 [ 63.339319][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 63.347289][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 63.355262][ C0] R10: ffffed1023c9b139 R11: 1ffff11023c9b139 R12: dffffc0000000000 [ 63.363239][ C0] R13: 0000000000000000 R14: ffff88811e4d89c8 R15: 0000000000000008 [ 63.371218][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 63.380343][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.386930][ C0] CR2: 0000001b2e90fff8 CR3: 000000012fc62000 CR4: 00000000003506b0 [ 63.394911][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.402889][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.410870][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 63.418278][ C0] Kernel Offset: disabled [ 63.422605][ C0] Rebooting in 86400 seconds..