last executing test programs: 2.884856744s ago: executing program 4 (id=323): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.824090134s ago: executing program 4 (id=326): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000004}}], 0x2, 0x0) 2.672250185s ago: executing program 1 (id=334): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) 2.525225146s ago: executing program 4 (id=337): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$eJzslL1OOkEUxc/M8oc/xiewsZBELFx2FzU2FDRWFiZ+EAsTiawEXcTAFkJi4RP4DBa+h7Y+hEEbbbDSes18AKMBNCZKjPdX3D2zc+funbvJAUEQf5b7u5d29Jx7sABMIoWEfv9o9XO4kX/7/+n0enWlcL5zeZNo28lBNaPo89+PAbjKWwh7Z9+eTunnBnhPb4JjTusCGGytd8GxpbUPhm2tDwxdE/m2vV8JfHuvFpSEcERwRfBEyL7vr3PGUDL6Y8Z+o9k6LAaBX/9G8dH8OnmOnNGf+b+6s3GM+bngcLXOgmFd62UkurNRIzHuPxXr17d++P4kSJD4baLvT9EFw6zhTzHDPzJh9TjTaLbmK9Vi2S/7R56XXXIWHGfRy0gjUnGE/yWlP00Y9f8NyY2zOE6KYVh3VeytPRUHOS6X/seRnlFr4f3xod2ofabPManS1oh0giCIsTENJj1T+nI0FG9t3I0SBEEQBEEQBEEQBPFlXgMAAP//ibN3Cw==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000040)={[{@nobh}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc80}}]}, 0xfe, 0x4e5, &(0x7f0000000380)="$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") 2.524586366s ago: executing program 0 (id=338): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.449741046s ago: executing program 0 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.368401007s ago: executing program 0 (id=340): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) read$FUSE(r0, &(0x7f0000001c40)={0x2020}, 0x2020) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 2.319316027s ago: executing program 1 (id=341): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2.300862248s ago: executing program 4 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xa, "3eed"}, @global=@item_012={0x1, 0x1, 0x6, "e3"}]}}, 0x0}, 0x0) 2.276784418s ago: executing program 1 (id=343): r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000300)={0x0, 0xfffffffc, 0x80, 0x3, 0x400004a}, &(0x7f0000000000), &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1], 0x1) r2 = dup2(r0, r1) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 2.108399998s ago: executing program 1 (id=345): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0600000000000000000000000058000b4824ca945f64009400010000000000000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.107891878s ago: executing program 1 (id=348): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.105120878s ago: executing program 0 (id=350): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000300)=0xfffffffc, 0x4) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) 2.062228279s ago: executing program 0 (id=352): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x10, {0x10, 0x0, "822500c302e9ce27a24b0fa6591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.993954439s ago: executing program 3 (id=354): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1.893433219s ago: executing program 3 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000005280)) 1.77637055s ago: executing program 3 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x408b, &(0x7f0000000000)="$eJzszzFKM2EQBuD33+Q3myCKthZiZyWxsxHEygvkAunsLDxA0MtI8ACeSBA8gc0naz5XBO0UUZ6n2Hm/mWVgwo97+Gywlty/azR9upvfbmXYpevpNGmTDC826vBm3H13k0wP83/SNllPclmnZbPfMlt+7SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAv8PgW21UppZRk8Nod1/ovWSSZ75RRkqOmtq8GT+c17h0kOduur0Wtk8HLzi6eJLPlN98DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwxTY5P+8d+RqvQfvjvKM/szrEJwCAUBND/i4RMEQgBx3A5t3FKwcpSrN9rrrji7pr5R6tv5hPxlbW/9yb7+VsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDGQAAAABh/tZ5tB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgoAAD//17kGVM=") 1.72292587s ago: executing program 2 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) ustat(0x0, 0x0) 1.668400941s ago: executing program 2 (id=360): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000580)=0x1009e5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000600)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "44863a46875d7a99c994a2f0f3e6c9891f90f0da47b609b1", "282614002ac3b260591ff12441d3b9bd7570005c1a865e453a529854881fe0d4"}}}}}}, 0x0) 1.646941751s ago: executing program 2 (id=361): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) read$FUSE(r0, &(0x7f0000001c40)={0x2020}, 0x2020) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 1.419591132s ago: executing program 2 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) 1.372388593s ago: executing program 3 (id=363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) 1.372190352s ago: executing program 3 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) io_uring_setup(0x103fc7, &(0x7f0000000340)={0x0, 0x1001102, 0x418}) 100.055009ms ago: executing program 1 (id=365): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000040)={[{@nobh}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc80}}]}, 0xfe, 0x4e5, &(0x7f0000000380)="$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") 99.905589ms ago: executing program 2 (id=366): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 99.845229ms ago: executing program 3 (id=367): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x0, 0x2, 0x7e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 99.785559ms ago: executing program 4 (id=368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x491, 0x0, 0x2}]}) 330.3µs ago: executing program 4 (id=369): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 104.91µs ago: executing program 0 (id=370): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40011130, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 0s ago: executing program 2 (id=371): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 21.898189][ T28] audit: type=1400 audit(1731696071.972:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.899489][ T281] cgroup: Unknown subsys name 'net' [ 21.920716][ T28] audit: type=1400 audit(1731696071.972:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.947628][ T28] audit: type=1400 audit(1731696072.002:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.947843][ T281] cgroup: Unknown subsys name 'devices' [ 22.060300][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.065762][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.196246][ T28] audit: type=1400 audit(1731696072.262:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.219234][ T28] audit: type=1400 audit(1731696072.262:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.243807][ T28] audit: type=1400 audit(1731696072.262:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.253365][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.275826][ T28] audit: type=1400 audit(1731696072.342:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.301130][ T28] audit: type=1400 audit(1731696072.342:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.355427][ T28] audit: type=1400 audit(1731696072.422:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.355930][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.380908][ T28] audit: type=1400 audit(1731696072.422:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.994214][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.001181][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.008614][ T292] device bridge_slave_0 entered promiscuous mode [ 23.031598][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.038510][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.045809][ T292] device bridge_slave_1 entered promiscuous mode [ 23.052296][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.059246][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.066347][ T295] device bridge_slave_0 entered promiscuous mode [ 23.072991][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.079872][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.087222][ T291] device bridge_slave_0 entered promiscuous mode [ 23.094144][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.101002][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.108348][ T291] device bridge_slave_1 entered promiscuous mode [ 23.122033][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.128898][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.136182][ T295] device bridge_slave_1 entered promiscuous mode [ 23.197515][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.204427][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.211761][ T294] device bridge_slave_0 entered promiscuous mode [ 23.229289][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.236149][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.243585][ T294] device bridge_slave_1 entered promiscuous mode [ 23.280645][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.287608][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.294968][ T293] device bridge_slave_0 entered promiscuous mode [ 23.313818][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.320784][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.328236][ T293] device bridge_slave_1 entered promiscuous mode [ 23.483831][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.490704][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.497802][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.504611][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.513160][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.520030][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.527109][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.533920][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.551281][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.558162][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.565263][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.572065][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.613775][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.620736][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.627964][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.634800][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.661400][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.668284][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.675398][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.682188][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.700530][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.707605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.715268][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.722634][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.730045][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.737085][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.744526][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.752046][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.759444][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.766681][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.773888][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.808351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.817371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.826168][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.833144][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.840860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.849268][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.856107][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.863451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.871561][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.878423][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.885694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.893820][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.900678][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.907824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.918223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.925543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.961137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.969431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.977260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.985211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.993541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.001836][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.008707][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.016884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.025005][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.031856][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.055963][ T295] device veth0_vlan entered promiscuous mode [ 24.063198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.070591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.077870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.086384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.094688][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.101567][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.109015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.117131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.125329][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.132190][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.139553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.147392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.155521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.164160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.172234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.180557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.189005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.196702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.204865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.212276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.226058][ T291] device veth0_vlan entered promiscuous mode [ 24.238640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.246869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.254737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.263017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.270463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.288628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.296656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.304776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.312769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.321255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.328617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.335848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.344182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.352396][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.359538][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.366781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.375038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.383144][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.390000][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.401618][ T293] device veth0_vlan entered promiscuous mode [ 24.411862][ T291] device veth1_macvtap entered promiscuous mode [ 24.421601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.430014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.438404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.445685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.458316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.466402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.474684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.489153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.497119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.507071][ T295] device veth1_macvtap entered promiscuous mode [ 24.519262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.526835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.534831][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.543404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.552486][ T293] device veth1_macvtap entered promiscuous mode [ 24.573678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.581961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.590546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.599136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.607270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.615695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.624239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.632589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.641717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.649700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.665902][ T292] device veth0_vlan entered promiscuous mode [ 24.673769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.681763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.689681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.697769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.706305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.714585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.735402][ T292] device veth1_macvtap entered promiscuous mode [ 24.755648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.765698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.802284][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.810770][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.819423][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.829537][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.837214][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.848967][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.859752][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.867829][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.876931][ T294] device veth0_vlan entered promiscuous mode [ 24.893898][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.903262][ T328] loop0: detected capacity change from 0 to 256 [ 24.923085][ T294] device veth1_macvtap entered promiscuous mode [ 24.937674][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.946964][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.959863][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.967722][ T331] loop3: detected capacity change from 0 to 512 [ 24.974160][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.986522][ T331] EXT4-fs: Ignoring removed bh option [ 25.007457][ T331] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 25.033126][ T331] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 25.045093][ T341] loop0: detected capacity change from 0 to 128 [ 25.057388][ T331] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.071067][ T331] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 25.083978][ T331] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 25.099170][ T331] EXT4-fs (loop3): 1 orphan inode deleted [ 25.104855][ T331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.157188][ T292] EXT4-fs (loop3): unmounting filesystem. [ 25.187177][ T350] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 25.519825][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.579938][ T360] loop3: detected capacity change from 0 to 40427 [ 25.602007][ T360] F2FS-fs (loop3): invalid crc value [ 25.606772][ T380] loop4: detected capacity change from 0 to 256 [ 25.610588][ T360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 25.629691][ T380] ======================================================= [ 25.629691][ T380] WARNING: The mand mount option has been deprecated and [ 25.629691][ T380] and is ignored by this kernel. Remove the mand [ 25.629691][ T380] option from the mount to silence this warning. [ 25.629691][ T380] ======================================================= [ 25.670925][ T380] FAT-fs (loop4): Directory bread(block 64) failed [ 25.677419][ T380] FAT-fs (loop4): Directory bread(block 65) failed [ 25.685847][ T380] FAT-fs (loop4): Directory bread(block 66) failed [ 25.692533][ T380] FAT-fs (loop4): Directory bread(block 67) failed [ 25.700099][ T380] FAT-fs (loop4): Directory bread(block 68) failed [ 25.706565][ T380] FAT-fs (loop4): Directory bread(block 69) failed [ 25.713161][ T380] FAT-fs (loop4): Directory bread(block 70) failed [ 25.719938][ T326] syz.2.8 (326) used greatest stack depth: 22088 bytes left [ 25.731123][ T380] FAT-fs (loop4): Directory bread(block 71) failed [ 25.737511][ T380] FAT-fs (loop4): Directory bread(block 72) failed [ 25.748770][ T380] FAT-fs (loop4): Directory bread(block 73) failed [ 25.760897][ T360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.787706][ T380] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000616b) [ 25.795749][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 25.809553][ T380] syz.4.28: attempt to access beyond end of device [ 25.809553][ T380] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 25.830338][ T360] syz.3.19: attempt to access beyond end of device [ 25.830338][ T360] loop3: rw=34817, sector=77824, nr_sectors = 2096 limit=40427 [ 25.876483][ T292] syz-executor: attempt to access beyond end of device [ 25.876483][ T292] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.928154][ T39] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.955416][ T39] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 25.971109][ T404] loop2: detected capacity change from 0 to 512 [ 25.981356][ T404] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.994738][ T404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 26.015013][ T404] EXT4-fs (loop2): 1 truncate cleaned up [ 26.020828][ T404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.047023][ T404] EXT4-fs (loop2): shut down requested (0) [ 26.063935][ T295] EXT4-fs (loop2): unmounting filesystem. [ 26.105488][ T414] can0: slcan on ptm0. [ 26.118097][ T39] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 26.127675][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.136388][ T39] usb 2-1: Product: syz [ 26.140819][ T39] usb 2-1: Manufacturer: syz [ 26.145852][ T39] usb 2-1: SerialNumber: syz [ 26.151896][ T39] usb 2-1: config 0 descriptor?? [ 26.285408][ T410] loop3: detected capacity change from 0 to 40427 [ 26.292214][ T410] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 26.300124][ T410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.309071][ T410] F2FS-fs (loop3): invalid crc value [ 26.316141][ T410] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.353751][ T410] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.361018][ T410] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.378023][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.405595][ T222] usb 2-1: USB disconnect, device number 2 [ 26.445047][ T410] syz.3.33: attempt to access beyond end of device [ 26.445047][ T410] loop3: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 26.469525][ T410] syz.3.33: attempt to access beyond end of device [ 26.469525][ T410] loop3: rw=2049, sector=49152, nr_sectors = 1184 limit=40427 [ 26.512707][ T314] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 26.521912][ T314] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 26.618026][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 26.738106][ T24] usb 3-1: config 0 has no interfaces? [ 26.859163][ T469] tun0: tun_chr_ioctl cmd 1074025675 [ 26.864312][ T469] tun0: persist enabled [ 26.869359][ T469] tun0: tun_chr_ioctl cmd 1074025675 [ 26.874518][ T469] tun0: persist enabled [ 26.898915][ T24] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 26.908264][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.916317][ T24] usb 3-1: Product: syz [ 26.920972][ T24] usb 3-1: Manufacturer: syz [ 26.923788][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 26.923803][ T28] audit: type=1400 audit(1865913805.999:137): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.931332][ T24] usb 3-1: SerialNumber: syz [ 26.932159][ T24] usb 3-1: config 0 descriptor?? [ 26.958342][ T28] audit: type=1400 audit(1865913806.009:138): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.984321][ T28] audit: type=1400 audit(1865913806.009:139): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.006885][ T28] audit: type=1400 audit(1865913806.009:140): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.030858][ T28] audit: type=1400 audit(1865913806.049:141): avc: denied { name_bind } for pid=477 comm="syz.1.62" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.054442][ T28] audit: type=1400 audit(1865913806.049:142): avc: denied { node_bind } for pid=477 comm="syz.1.62" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.076161][ T28] audit: type=1400 audit(1865913806.059:143): avc: denied { create } for pid=480 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.098304][ T28] audit: type=1400 audit(1865913806.059:144): avc: denied { getopt } for pid=480 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.164609][ T494] loop3: detected capacity change from 0 to 512 [ 27.171109][ T494] journal_path: Lookup failure for './file0' [ 27.181085][ T494] EXT4-fs: error: could not find journal device path [ 27.198037][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 27.252926][ T39] usb 3-1: USB disconnect, device number 2 [ 27.285891][ T500] loop3: detected capacity change from 0 to 128 [ 27.298730][ T414] can0 (unregistered): slcan off ptm0. [ 27.309000][ T500] EXT4-fs (loop3): Test dummy encryption mode enabled [ 27.335921][ T500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.349946][ T500] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038 (0x7fffffff) [ 27.363470][ T487] loop1: detected capacity change from 0 to 40427 [ 27.375142][ T28] audit: type=1400 audit(1865913806.449:145): avc: denied { create } for pid=499 comm="syz.3.71" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 27.376977][ T487] F2FS-fs (loop1): fault_injection options not supported [ 27.400238][ T500] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 27.402346][ T487] F2FS-fs (loop1): Image doesn't support compression [ 27.416700][ T487] F2FS-fs (loop1): Image doesn't support compression [ 27.423960][ T487] F2FS-fs (loop1): fault_type options not supported [ 27.427750][ T28] audit: type=1400 audit(1865913806.499:146): avc: denied { create } for pid=499 comm="syz.3.71" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.431923][ T487] F2FS-fs (loop1): invalid crc value [ 27.456153][ T487] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.479770][ T292] EXT4-fs (loop3): unmounting filesystem. [ 27.522913][ T487] F2FS-fs (loop1): Start checkpoint disabled! [ 27.529938][ T487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 27.554875][ T487] syz.1.65: attempt to access beyond end of device [ 27.554875][ T487] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.592816][ T314] kworker/u4:3: attempt to access beyond end of device [ 27.592816][ T314] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 27.853209][ T555] loop1: detected capacity change from 0 to 1024 [ 27.877534][ T555] ext4: Bad value for 'commit' [ 27.904703][ T556] loop2: detected capacity change from 0 to 8192 [ 27.956932][ T563] loop4: detected capacity change from 0 to 2048 [ 27.983801][ T563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.986902][ T571] loop2: detected capacity change from 0 to 512 [ 28.006676][ T563] EXT4-fs: Ignoring removed orlov option [ 28.012826][ T563] EXT4-fs (loop4): can't enable nombcache during remount [ 28.019924][ T571] EXT4-fs (loop2): 1 truncate cleaned up [ 28.025490][ T571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.043535][ T293] EXT4-fs (loop4): unmounting filesystem. [ 28.050319][ T295] EXT4-fs (loop2): unmounting filesystem. [ 28.956454][ T624] loop4: detected capacity change from 0 to 512 [ 28.965714][ T624] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.972624][ T624] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 28.985065][ T624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 28.993264][ T624] System zones: 1-12 [ 29.002766][ T624] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.109: corrupted in-inode xattr [ 29.009302][ T629] loop1: detected capacity change from 0 to 1024 [ 29.015062][ T624] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.109: couldn't read orphan inode 15 (err -117) [ 29.032753][ T624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.040242][ T629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.064255][ T293] EXT4-fs (loop4): unmounting filesystem. [ 29.096641][ T294] EXT4-fs (loop1): unmounting filesystem. [ 29.132734][ T638] loop4: detected capacity change from 0 to 256 [ 29.428952][ T645] loop4: detected capacity change from 0 to 40427 [ 29.446979][ T645] F2FS-fs (loop4): fault_injection options not supported [ 29.453898][ T645] F2FS-fs (loop4): Image doesn't support compression [ 29.460632][ T645] F2FS-fs (loop4): Image doesn't support compression [ 29.467252][ T645] F2FS-fs (loop4): fault_type options not supported [ 29.477477][ T645] F2FS-fs (loop4): invalid crc value [ 29.484894][ T645] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.530088][ T670] loop3: detected capacity change from 0 to 512 [ 29.536554][ T670] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.543935][ T670] EXT4-fs: Ignoring removed i_version option [ 29.566073][ T670] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.127: invalid block [ 29.580235][ T645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.591337][ T670] EXT4-fs (loop3): Remounting filesystem read-only [ 29.597773][ T670] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.127: couldn't read orphan inode 11 (err -117) [ 29.612961][ T670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.627695][ T645] syz.4.117: attempt to access beyond end of device [ 29.627695][ T645] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 29.630503][ T670] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.127: Directory hole found for htree leaf block 0 [ 29.658137][ T670] EXT4-fs (loop3): Remounting filesystem read-only [ 29.680284][ T670] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.127: Directory hole found for htree leaf block 0 [ 29.715628][ T292] EXT4-fs (loop3): unmounting filesystem. [ 29.838238][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.890995][ T676] loop2: detected capacity change from 0 to 40427 [ 29.910819][ T676] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 29.944428][ T690] syz.3.136[690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.944514][ T690] syz.3.136[690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.955819][ T676] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 29.979578][ T692] loop0: detected capacity change from 0 to 512 [ 29.996404][ T676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.026972][ T692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.040783][ T692] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 30.058256][ T676] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.065128][ T676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.076983][ T700] loop3: detected capacity change from 0 to 128 [ 30.111139][ T692] EXT4-fs: Ignoring removed orlov option [ 30.115041][ T684] loop4: detected capacity change from 0 to 40427 [ 30.116686][ T692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.123878][ T700] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.142904][ T684] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 30.149746][ T684] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 30.158404][ T692] EXT4-fs (loop0): can't enable nombcache during remount [ 30.168405][ T684] F2FS-fs (loop4): invalid crc value [ 30.171092][ T700] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.196150][ T684] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.196561][ T291] EXT4-fs (loop0): unmounting filesystem. [ 30.260173][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.264302][ T684] F2FS-fs (loop4): Start checkpoint disabled! [ 30.296536][ T684] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 30.314547][ T684] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 30.420822][ T10] kworker/u4:1: attempt to access beyond end of device [ 30.420822][ T10] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 30.701600][ T715] loop0: detected capacity change from 0 to 40427 [ 30.726167][ T715] F2FS-fs (loop0): heap/no_heap options were deprecated [ 30.733861][ T715] F2FS-fs (loop0): invalid crc value [ 30.740080][ T715] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.803048][ T715] F2FS-fs (loop0): Start checkpoint disabled! [ 30.828036][ T715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 30.969038][ T10] kworker/u4:1: attempt to access beyond end of device [ 30.969038][ T10] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.977209][ T740] syz.3.153 (740) used greatest stack depth: 20528 bytes left [ 31.213491][ T773] loop3: detected capacity change from 0 to 2048 [ 31.250107][ T773] Alternate GPT is invalid, using primary GPT. [ 31.256176][ T773] loop3: p1 p2 p3 [ 31.358034][ T550] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 31.429399][ T797] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.448032][ T222] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.455414][ T578] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.651186][ T801] loop2: detected capacity change from 0 to 40427 [ 31.658247][ T801] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 31.665771][ T801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.675171][ T801] F2FS-fs (loop2): invalid crc value [ 31.684820][ T801] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.723553][ T817] device vlan2 entered promiscuous mode [ 31.738892][ T801] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.746006][ T801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 31.770376][ T295] syz-executor: attempt to access beyond end of device [ 31.770376][ T295] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.828067][ T578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.839080][ T222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.858310][ T222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.868577][ T578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.878410][ T578] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.887267][ T578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.895176][ T222] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.907848][ T222] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 31.916989][ T222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.925121][ T578] usb 1-1: config 0 descriptor?? [ 31.938028][ T222] usb 5-1: config 0 descriptor?? [ 31.942819][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 31.942838][ T28] audit: type=1400 audit(1865913811.019:240): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.971331][ T28] audit: type=1400 audit(1865913811.019:241): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.992858][ T28] audit: type=1400 audit(1865913811.019:242): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.016025][ T28] audit: type=1400 audit(1865913811.019:243): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.019542][ T829] syz.2.188[829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.038965][ T829] syz.2.188[829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.055943][ T28] audit: type=1400 audit(1865913811.129:244): avc: denied { create } for pid=828 comm="syz.2.188" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.133368][ T28] audit: type=1400 audit(1865913811.209:245): avc: denied { create } for pid=834 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.153972][ T837] syz.2.196 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.167037][ T28] audit: type=1400 audit(1865913811.229:246): avc: denied { setopt } for pid=834 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.188683][ T28] audit: type=1400 audit(1865913811.229:247): avc: denied { bind } for pid=834 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.230862][ T843] loop2: detected capacity change from 0 to 128 [ 32.233336][ T28] audit: type=1400 audit(1865913811.309:248): avc: denied { create } for pid=844 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.256490][ T843] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 32.257891][ T28] audit: type=1400 audit(1865913811.329:249): avc: denied { setopt } for pid=844 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.281682][ T843] syz.2.200: attempt to access beyond end of device [ 32.281682][ T843] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 32.297367][ T843] syz.2.200: attempt to access beyond end of device [ 32.297367][ T843] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 32.428951][ T578] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 32.439532][ T222] wacom 0003:056A:0317.0002: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 32.464029][ T578] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input7 [ 32.475984][ T222] wacom 0003:056A:0317.0002: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 32.487539][ T222] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0002/input/input4 [ 32.551452][ T578] keytouch 0003:0926:3333.0001: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 32.614587][ T872] loop2: detected capacity change from 0 to 256 [ 32.686295][ T222] usb 1-1: USB disconnect, device number 2 [ 32.688015][ T361] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.694183][ T578] usb 5-1: USB disconnect, device number 2 [ 32.723429][ T880] loop2: detected capacity change from 0 to 2048 [ 32.739443][ T880] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.751073][ T880] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.766230][ T880] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 32.778526][ T880] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.778526][ T880] [ 32.788369][ T880] EXT4-fs (loop2): Total free blocks count 0 [ 32.794263][ T880] EXT4-fs (loop2): Free/Dirty block details [ 32.799966][ T880] EXT4-fs (loop2): free_blocks=2415919104 [ 32.805980][ T880] EXT4-fs (loop2): dirty_blocks=16 [ 32.806892][ T885] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.811967][ T880] EXT4-fs (loop2): Block reservation details [ 32.823529][ T885] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.823529][ T885] [ 32.958007][ T361] usb 4-1: Using ep0 maxpacket: 16 [ 33.078045][ T361] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 33.086097][ T361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.095972][ T361] usb 4-1: config 0 has no interface number 0 [ 33.258026][ T361] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 33.266895][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.274892][ T361] usb 4-1: Product: syz [ 33.278938][ T361] usb 4-1: Manufacturer: syz [ 33.283343][ T361] usb 4-1: SerialNumber: syz [ 33.288485][ T361] usb 4-1: config 0 descriptor?? [ 33.339783][ T906] syz.0.224[906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.339840][ T906] syz.0.224[906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.392195][ T910] loop0: detected capacity change from 0 to 128 [ 33.409921][ T910] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 33.426928][ T910] syz.0.225: attempt to access beyond end of device [ 33.426928][ T910] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 33.440064][ T910] syz.0.225: attempt to access beyond end of device [ 33.440064][ T910] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 33.548224][ T361] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 33.554923][ T361] usb 4-1: No valid video chain found. [ 33.668950][ T934] loop1: detected capacity change from 0 to 256 [ 33.709369][ T937] loop1: detected capacity change from 0 to 128 [ 33.715995][ T937] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 33.734016][ T937] syz.1.238: attempt to access beyond end of device [ 33.734016][ T937] loop1: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 33.747295][ T937] syz.1.238: attempt to access beyond end of device [ 33.747295][ T937] loop1: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 33.766024][ T361] usb 4-1: USB disconnect, device number 2 [ 33.777979][ T578] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.852667][ T951] syz.1.244[951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.852755][ T951] syz.1.244[951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.116722][ T968] loop0: detected capacity change from 0 to 256 [ 34.198061][ T578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.209202][ T578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.218773][ T578] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.231513][ T578] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 34.240327][ T578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.248825][ T578] usb 3-1: config 0 descriptor?? [ 34.350466][ T984] syz.3.257[984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.350547][ T984] syz.3.257[984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.590866][ T991] loop0: detected capacity change from 0 to 40427 [ 34.627836][ T991] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 34.635438][ T991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.644394][ T991] F2FS-fs (loop0): invalid crc value [ 34.651509][ T991] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.689709][ T991] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.696694][ T991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 34.725726][ T291] syz-executor: attempt to access beyond end of device [ 34.725726][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.741370][ T578] wacom 0003:056A:0317.0003: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 34.761727][ T578] wacom 0003:056A:0317.0003: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0 [ 34.773833][ T578] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0003/input/input8 [ 34.936165][ T1006] loop1: detected capacity change from 0 to 2048 [ 34.946973][ T24] usb 3-1: USB disconnect, device number 3 [ 34.954937][ T1006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.968796][ T1006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.986945][ T1006] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 34.999174][ T1006] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.999174][ T1006] [ 35.008738][ T1006] EXT4-fs (loop1): Total free blocks count 0 [ 35.014444][ T1006] EXT4-fs (loop1): Free/Dirty block details [ 35.020581][ T1006] EXT4-fs (loop1): free_blocks=2415919104 [ 35.021341][ T1015] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 35.026279][ T1006] EXT4-fs (loop1): dirty_blocks=16 [ 35.026299][ T1006] EXT4-fs (loop1): Block reservation details [ 35.026310][ T1006] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 35.033531][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.112808][ T1022] syz.4.272[1022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.112891][ T1022] syz.4.272[1022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.127994][ T297] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.378046][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 35.382222][ T1032] loop1: detected capacity change from 0 to 40427 [ 35.402924][ T1032] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 35.410582][ T1032] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.418783][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.419469][ T1032] F2FS-fs (loop1): invalid crc value [ 35.429872][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.436524][ T1032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.444774][ T39] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.469457][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.481360][ T39] usb 4-1: config 0 descriptor?? [ 35.497393][ T1032] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 35.505115][ T1032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 35.508248][ T297] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 35.526202][ T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.536310][ T297] usb 1-1: config 0 has no interface number 0 [ 35.542729][ T294] syz-executor: attempt to access beyond end of device [ 35.542729][ T294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.698062][ T297] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 35.707010][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.714806][ T297] usb 1-1: Product: syz [ 35.718782][ T297] usb 1-1: Manufacturer: syz [ 35.723162][ T297] usb 1-1: SerialNumber: syz [ 35.728561][ T297] usb 1-1: config 0 descriptor?? [ 35.958581][ T39] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 35.968082][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input11 [ 35.988040][ T297] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 35.994234][ T297] usb 1-1: No valid video chain found. [ 36.050329][ T39] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 36.168439][ T39] usb 4-1: USB disconnect, device number 3 [ 36.191461][ T297] usb 1-1: USB disconnect, device number 3 [ 36.507278][ T1050] loop4: detected capacity change from 0 to 2048 [ 36.550180][ T1050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.563632][ T1050] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.567334][ T1066] loop1: detected capacity change from 0 to 256 [ 36.584720][ T1050] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 36.589771][ T1066] exfat: Deprecated parameter 'namecase' [ 36.602370][ T1050] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.602370][ T1050] [ 36.612778][ T1050] EXT4-fs (loop4): Total free blocks count 0 [ 36.615252][ T1066] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 36.619052][ T1050] EXT4-fs (loop4): Free/Dirty block details [ 36.631799][ T1068] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.636496][ T1050] EXT4-fs (loop4): free_blocks=2415919104 [ 36.653698][ T1050] EXT4-fs (loop4): dirty_blocks=16 [ 36.658707][ T1050] EXT4-fs (loop4): Block reservation details [ 36.664447][ T1050] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 37.396141][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 37.396157][ T28] audit: type=1400 audit(1865913816.469:289): avc: denied { create } for pid=1069 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.421716][ T1072] loop0: detected capacity change from 0 to 2048 [ 37.443157][ T28] audit: type=1400 audit(1865913816.499:290): avc: denied { getopt } for pid=1069 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.465348][ T1081] loop1: detected capacity change from 0 to 512 [ 37.493418][ T1081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.504656][ T28] audit: type=1400 audit(1865913816.549:291): avc: denied { read write } for pid=1082 comm="syz.4.294" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.529285][ T28] audit: type=1400 audit(1865913816.549:292): avc: denied { open } for pid=1082 comm="syz.4.294" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.529883][ T1072] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.559032][ T28] audit: type=1400 audit(1865913816.549:293): avc: denied { ioctl } for pid=1082 comm="syz.4.294" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.596442][ T1081] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.293: invalid block [ 37.601058][ T1072] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.618313][ T1081] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.293: invalid indirect mapped block 4294967295 (level 1) [ 37.623037][ T1072] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 37.655850][ T1081] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.293: invalid indirect mapped block 4294967295 (level 1) [ 37.663839][ T1072] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.663839][ T1072] [ 37.669898][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.679336][ T1072] EXT4-fs (loop0): Total free blocks count 0 [ 37.679356][ T1072] EXT4-fs (loop0): Free/Dirty block details [ 37.679368][ T1072] EXT4-fs (loop0): free_blocks=2415919104 [ 37.679382][ T1072] EXT4-fs (loop0): dirty_blocks=16 [ 37.679394][ T1072] EXT4-fs (loop0): Block reservation details [ 37.679404][ T1072] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 37.689393][ T28] audit: type=1400 audit(1865913816.769:294): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.718231][ T1081] EXT4-fs (loop1): 2 truncates cleaned up [ 37.721678][ T28] audit: type=1400 audit(1865913816.769:295): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.772631][ T28] audit: type=1400 audit(1865913816.769:296): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.793402][ T1081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.795017][ T28] audit: type=1400 audit(1865913816.769:297): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.824067][ T1072] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.837155][ T28] audit: type=1400 audit(1865913816.769:298): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.868920][ T1081] EXT4-fs error (device loop1): ext4_check_dx_root:2264: inode #2: comm syz.1.293: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 37.909547][ T294] EXT4-fs (loop1): unmounting filesystem. [ 37.933202][ T1095] loop0: detected capacity change from 0 to 16 [ 37.950623][ T1095] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.962665][ T1097] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 38.099163][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.114307][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.126940][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.140910][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 38.141421][ T1116] input: syz0 as /devices/virtual/input/input12 [ 38.154330][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.168829][ T39] usb 4-1: config 0 descriptor?? [ 38.173744][ T1116] input: failed to attach handler leds to device input12, error: -6 [ 38.515056][ T1091] loop4: detected capacity change from 0 to 131072 [ 38.522231][ T1091] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 38.531150][ T1091] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 38.540045][ T1091] F2FS-fs (loop4): invalid crc value [ 38.547143][ T1091] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.583450][ T1091] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 38.590377][ T1091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 38.603519][ T1091] F2FS-fs (loop4): sanity_check_inode: inode (ino=8) is with extra_attr, but extra_attr feature is off [ 38.639859][ T39] wacom 0003:056A:0317.0005: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 38.654899][ T39] wacom 0003:056A:0317.0005: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 38.671957][ T39] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.0005/input/input13 [ 38.856968][ T578] usb 4-1: USB disconnect, device number 4 [ 39.383658][ T1128] loop0: detected capacity change from 0 to 512 [ 39.406473][ T1128] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.429332][ T1135] loop3: detected capacity change from 0 to 2048 [ 39.464076][ T1128] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.320: invalid indirect mapped block 4294967295 (level 1) [ 39.480425][ T1128] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.320: invalid indirect mapped block 4294967295 (level 1) [ 39.503344][ T1128] EXT4-fs (loop0): 2 truncates cleaned up [ 39.503596][ T1135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.509333][ T1128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.535249][ T1135] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.558101][ T1135] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 39.570578][ T1135] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.570578][ T1135] [ 39.571853][ T1128] EXT4-fs error (device loop0): ext4_check_dx_root:2264: inode #2: comm syz.0.320: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 39.596406][ T1135] EXT4-fs (loop3): Total free blocks count 0 [ 39.600593][ T1154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.615969][ T1156] loop2: detected capacity change from 0 to 16 [ 39.622301][ T1135] EXT4-fs (loop3): Free/Dirty block details [ 39.632591][ T1135] EXT4-fs (loop3): free_blocks=2415919104 [ 39.639004][ T1154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.639004][ T1154] [ 39.649175][ T1156] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.680207][ T1160] loop1: detected capacity change from 0 to 128 [ 39.686323][ T1135] EXT4-fs (loop3): dirty_blocks=16 [ 39.696063][ T291] EXT4-fs (loop0): unmounting filesystem. [ 39.711716][ T1154] EXT4-fs (loop3): Total free blocks count 0 [ 39.723070][ T1160] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.752772][ T1160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.764843][ T1166] loop4: detected capacity change from 0 to 16 [ 39.778400][ T1160] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038 (0x7fffffff) [ 39.789419][ T1166] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.816778][ T1166] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 39.835969][ T1160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 39.885529][ T1166] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 39.914450][ T294] EXT4-fs (loop1): unmounting filesystem. [ 39.929090][ T1166] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 39.943507][ T1180] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 39.973855][ T1188] loop3: detected capacity change from 0 to 512 [ 39.978234][ T1180] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 39.998130][ T1180] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 40.030228][ T1188] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.049277][ T1190] loop4: detected capacity change from 0 to 16 [ 40.072116][ T1190] erofs: (device loop4): mounted with root inode @ nid 36. [ 40.086714][ T1188] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.336: invalid block [ 40.116333][ T1188] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.336: invalid indirect mapped block 4294967295 (level 1) [ 40.134129][ T1188] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.336: invalid indirect mapped block 4294967295 (level 1) [ 40.152871][ T1171] loop2: detected capacity change from 0 to 40427 [ 40.163097][ T1188] EXT4-fs (loop3): 2 truncates cleaned up [ 40.168937][ T1188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.194307][ T1171] F2FS-fs (loop2): invalid crc value [ 40.195637][ T1198] loop0: detected capacity change from 0 to 2048 [ 40.223201][ T1188] EXT4-fs error (device loop3): ext4_check_dx_root:2264: inode #2: comm syz.3.336: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 40.249640][ T1171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.254363][ T1198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.280577][ T1198] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.305255][ T292] EXT4-fs (loop3): unmounting filesystem. [ 40.311647][ T1198] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 40.324709][ T1198] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.324709][ T1198] [ 40.336908][ T1198] EXT4-fs (loop0): Total free blocks count 0 [ 40.344915][ T1198] EXT4-fs (loop0): Free/Dirty block details [ 40.348258][ T1212] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.362731][ T1198] EXT4-fs (loop0): free_blocks=2415919104 [ 40.363113][ T1212] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.363113][ T1212] [ 40.368471][ T1171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.378226][ T1212] EXT4-fs (loop0): Total free blocks count 0 [ 40.399307][ T1198] EXT4-fs (loop0): dirty_blocks=16 [ 40.417378][ T295] syz-executor: attempt to access beyond end of device [ 40.417378][ T295] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.520000][ T1230] loop3: detected capacity change from 0 to 16 [ 40.526669][ T1230] erofs: (device loop3): mounted with root inode @ nid 36. [ 40.588002][ T297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.623507][ T1234] loop2: detected capacity change from 0 to 1024 [ 40.630372][ T1234] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.643314][ T1234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.653087][ T1234] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 40.664115][ T295] EXT4-fs (loop2): unmounting filesystem. [ 40.683350][ T1240] loop2: detected capacity change from 0 to 512 [ 40.693588][ T1240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.706198][ T1240] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.355: invalid indirect mapped block 4294967295 (level 1) [ 40.720366][ T1240] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.355: invalid indirect mapped block 4294967295 (level 1) [ 40.734438][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.742171][ T1240] EXT4-fs (loop2): 2 truncates cleaned up [ 40.748185][ T1240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.751419][ T1243] syz.3.357[1243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.757000][ T1243] syz.3.357[1243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.762686][ T1240] EXT4-fs error (device loop2): ext4_check_dx_root:2264: inode #2: comm syz.2.355: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 40.794456][ T809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.812705][ T295] EXT4-fs (loop2): unmounting filesystem. [ 40.932459][ T1252] loop2: detected capacity change from 0 to 2048 [ 40.933322][ T1243] loop3: detected capacity change from 0 to 32768 [ 40.949639][ T1252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.962192][ T1252] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.977018][ T1252] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 40.989338][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.989392][ T1252] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.989392][ T1252] [ 41.000441][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.010611][ T1252] EXT4-fs (loop2): Total free blocks count 0 [ 41.019399][ T297] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 41.026749][ T1256] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.033915][ T1243] loop3: p1 p2 p3 < p5 p6 > [ 41.034039][ T1243] loop3: p1 size 242222080 extends beyond EOD, [ 41.046613][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 41.050291][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.056846][ T1243] truncated [ 41.061702][ T1252] EXT4-fs (loop2): Free/Dirty block details [ 41.077969][ T1252] EXT4-fs (loop2): free_blocks=2415919104 [ 41.091268][ T297] usb 5-1: config 0 descriptor?? [ 41.096357][ T1252] EXT4-fs (loop2): dirty_blocks=16 [ 41.101544][ T1252] EXT4-fs (loop2): Block reservation details [ 41.107455][ T1252] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 41.128470][ T6] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 41.141199][ T6] usb 2-1: config 0 has no interface number 0 [ 41.156120][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.168167][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.182682][ T6] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 41.192618][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.204004][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.213967][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.223716][ T358] udevd[358]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.223768][ T434] udevd[434]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 41.235059][ T1257] udevd[1257]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.243136][ T809] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 41.254255][ T776] udevd[776]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 41.261938][ T6] usb 2-1: config 0 descriptor?? [ 41.272523][ T1044] udevd[1044]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 41.275836][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.291692][ T1044] udevd[1044]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.296633][ T316] udevd[316]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 41.303476][ T776] udevd[776]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 41.314002][ T1257] udevd[1257]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.323236][ T434] udevd[434]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 41.333174][ T809] usb 1-1: config 0 descriptor?? [ 41.578885][ T297] chicony 0003:04F2:1421.0006: unbalanced collection at end of report description [ 41.588135][ T297] chicony 0003:04F2:1421.0006: Chicony hid parse failed: -22 [ 41.595334][ T297] chicony: probe of 0003:04F2:1421.0006 failed with error -22 [ 41.758734][ T6] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0007/input/input16 [ 41.783554][ T297] usb 5-1: USB disconnect, device number 3 [ 41.828964][ T809] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x1 [ 41.836780][ T809] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 41.847281][ T6] holtek_kbd 0003:04D9:A055.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 41.860344][ T809] hid-multitouch 0003:1FD2:6007.0008: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 41.952195][ T809] usb 2-1: USB disconnect, device number 3 [ 42.031652][ T6] usb 1-1: USB disconnect, device number 4 [ 42.470580][ T1275] loop1: detected capacity change from 0 to 16 [ 42.477516][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 42.477532][ T28] audit: type=1400 audit(1865913821.549:323): avc: denied { bind } for pid=1269 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.515991][ T1275] erofs: (device loop1): mounted with root inode @ nid 36. [ 42.563285][ T1280] loop4: detected capacity change from 0 to 512 [ 42.569735][ T1278] ================================================================== [ 42.575730][ T28] audit: type=1400 audit(1865913821.579:324): avc: denied { name_bind } for pid=1269 comm="syz.2.366" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 42.577618][ T1278] BUG: KASAN: use-after-free in dev_map_generic_redirect+0x9f/0x7d0 [ 42.606063][ T1278] Read of size 8 at addr ffff88812ee0ff80 by task syz.2.371/1278 [ 42.613609][ T1278] [ 42.615789][ T1278] CPU: 0 PID: 1278 Comm: syz.2.371 Not tainted 6.1.112-syzkaller-00014-g7160754546da #0 [ 42.625324][ T1278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.635212][ T1278] Call Trace: [ 42.638344][ T1278] [ 42.641116][ T1278] dump_stack_lvl+0x151/0x1b7 [ 42.645630][ T1278] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 42.650919][ T1278] ? _printk+0xd1/0x111 [ 42.654915][ T1278] ? __virt_addr_valid+0x242/0x2f0 [ 42.659863][ T1278] print_report+0x158/0x4e0 [ 42.664208][ T1278] ? __virt_addr_valid+0x242/0x2f0 [ 42.669156][ T1278] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 42.675228][ T1278] ? dev_map_generic_redirect+0x9f/0x7d0 [ 42.680691][ T1278] kasan_report+0x13c/0x170 [ 42.685032][ T1278] ? dev_map_generic_redirect+0x9f/0x7d0 [ 42.690499][ T1278] __asan_report_load8_noabort+0x14/0x20 [ 42.695965][ T1278] dev_map_generic_redirect+0x9f/0x7d0 [ 42.701277][ T1278] ? bq_enqueue+0x3e0/0x3e0 [ 42.705603][ T1278] ? bpf_prog_run_generic_xdp+0xa35/0x1200 [ 42.711255][ T1278] xdp_do_generic_redirect+0x42e/0xb40 [ 42.716542][ T1278] do_xdp_generic+0x53e/0x800 [ 42.721052][ T1278] ? generic_xdp_tx+0x560/0x560 [ 42.725737][ T1278] ? migrate_disable+0xd9/0x190 [ 42.730420][ T1278] __netif_receive_skb_core+0x19ae/0x43d0 [ 42.735981][ T1278] ? qdisc_run+0x260/0x260 [ 42.740231][ T1278] ? bpf_flow_dissect+0x3e0/0x3e0 [ 42.745085][ T1278] ? stack_trace_snprint+0xf0/0xf0 [ 42.750035][ T1278] ? __stack_depot_save+0x36/0x480 [ 42.754985][ T1278] __netif_receive_skb+0x11c/0x530 [ 42.759940][ T1278] ? kmem_cache_alloc+0x175/0x2c0 [ 42.764791][ T1278] ? build_skb+0x2c/0x220 [ 42.768957][ T1278] ? tun_get_user+0x1c0e/0x3a90 [ 42.773643][ T1278] ? vfs_write+0xaf6/0xed0 [ 42.777892][ T1278] ? ksys_write+0x199/0x2c0 [ 42.782253][ T1278] ? __x64_sys_write+0x7b/0x90 [ 42.786833][ T1278] ? x64_sys_call+0x2f/0x9a0 [ 42.791260][ T1278] ? __netif_receive_skb_list_core+0x890/0x890 [ 42.797255][ T1278] netif_receive_skb+0xb0/0x480 [ 42.801941][ T1278] ? enqueue_to_backlog+0x9d0/0x9d0 [ 42.806975][ T1278] ? tun_rx_batched+0x169/0x8f0 [ 42.811660][ T1278] tun_rx_batched+0x1c0/0x8f0 [ 42.816172][ T1278] ? eth_type_trans+0x43b/0x710 [ 42.820858][ T1278] ? pskb_may_pull+0x100/0x100 [ 42.825457][ T1278] ? tun_get_user+0x2340/0x3a90 [ 42.830144][ T1278] tun_get_user+0x287e/0x3a90 [ 42.834662][ T1278] ? tun_do_read+0x2000/0x2000 [ 42.839256][ T1278] ? ref_tracker_alloc+0x31d/0x450 [ 42.844205][ T1278] ? file_has_perm+0x508/0x6c0 [ 42.848804][ T1278] ? ref_tracker_dir_print+0x160/0x160 [ 42.854202][ T1278] ? futex_wait_setup+0x330/0x330 [ 42.859055][ T1278] ? tun_get+0xe9/0x120 [ 42.863045][ T1278] tun_chr_write_iter+0x129/0x210 [ 42.867902][ T1278] vfs_write+0xaf6/0xed0 [ 42.871984][ T1278] ? file_end_write+0x1c0/0x1c0 [ 42.876662][ T1278] ? do_futex+0x55a/0x9a0 [ 42.880870][ T1278] ? __fget_files+0x2cb/0x330 [ 42.885345][ T1278] ? __fdget_pos+0x204/0x390 [ 42.889768][ T1278] ? ksys_write+0x77/0x2c0 [ 42.894023][ T1278] ksys_write+0x199/0x2c0 [ 42.898190][ T1278] ? __this_cpu_preempt_check+0x13/0x20 [ 42.903568][ T1278] ? xfd_validate_state+0x6f/0x170 [ 42.908519][ T1278] ? __ia32_sys_read+0x90/0x90 [ 42.913117][ T1278] ? fpregs_restore_userregs+0x130/0x290 [ 42.918583][ T1278] __x64_sys_write+0x7b/0x90 [ 42.923016][ T1278] x64_sys_call+0x2f/0x9a0 [ 42.927264][ T1278] do_syscall_64+0x3b/0xb0 [ 42.931516][ T1278] ? clear_bhb_loop+0x55/0xb0 [ 42.936205][ T1278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.941931][ T1278] RIP: 0033:0x7fb5ded7d1ff [ 42.946205][ T1278] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 42.965625][ T1278] RSP: 002b:00007fb5dfb07000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 42.973869][ T1278] RAX: ffffffffffffffda RBX: 00007fb5def35f80 RCX: 00007fb5ded7d1ff [ 42.981680][ T1278] RDX: 000000000000006a RSI: 0000000020000180 RDI: 00000000000000c8 [ 42.989493][ T1278] RBP: 00007fb5dedf175e R08: 0000000000000000 R09: 0000000000000000 [ 42.997305][ T1278] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000000 [ 43.005118][ T1278] R13: 0000000000000000 R14: 00007fb5def35f80 R15: 00007fff23fd8c58 [ 43.012935][ T1278] [ 43.015791][ T1278] [ 43.017959][ T1278] Allocated by task 434: [ 43.022040][ T1278] kasan_set_track+0x4b/0x70 [ 43.026466][ T1278] kasan_save_alloc_info+0x1f/0x30 [ 43.031414][ T1278] __kasan_kmalloc+0x9c/0xb0 [ 43.035837][ T1278] kmalloc_trace+0x44/0xa0 [ 43.040099][ T1278] kernfs_fop_open+0x70e/0xb10 [ 43.044691][ T1278] do_dentry_open+0x891/0x1250 [ 43.049292][ T1278] vfs_open+0x73/0x80 [ 43.053116][ T1278] path_openat+0x2532/0x2d60 [ 43.057534][ T1278] do_filp_open+0x230/0x480 [ 43.061876][ T1278] do_sys_openat2+0x151/0x870 [ 43.066390][ T1278] __x64_sys_openat+0x243/0x290 [ 43.071075][ T1278] x64_sys_call+0x6bf/0x9a0 [ 43.075417][ T1278] do_syscall_64+0x3b/0xb0 [ 43.079669][ T1278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.085394][ T1278] [ 43.087565][ T1278] Last potentially related work creation: [ 43.093121][ T1278] kasan_save_stack+0x3b/0x60 [ 43.097637][ T1278] __kasan_record_aux_stack+0xb4/0xc0 [ 43.102840][ T1278] kasan_record_aux_stack_noalloc+0xb/0x10 [ 43.108485][ T1278] kvfree_call_rcu+0x9f/0x800 [ 43.112993][ T1278] kernfs_unlink_open_file+0x327/0x3d0 [ 43.118292][ T1278] kernfs_fop_release+0x253/0x310 [ 43.123152][ T1278] __fput+0x1e5/0x870 [ 43.126968][ T1278] ____fput+0x15/0x20 [ 43.130787][ T1278] task_work_run+0x24d/0x2e0 [ 43.135232][ T1278] exit_to_user_mode_loop+0x94/0xa0 [ 43.140248][ T1278] exit_to_user_mode_prepare+0x5a/0xa0 [ 43.145540][ T1278] syscall_exit_to_user_mode+0x26/0x130 [ 43.150922][ T1278] do_syscall_64+0x47/0xb0 [ 43.155175][ T1278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.160907][ T1278] [ 43.163077][ T1278] The buggy address belongs to the object at ffff88812ee0ff80 [ 43.163077][ T1278] which belongs to the cache kmalloc-96 of size 96 [ 43.176788][ T1278] The buggy address is located 0 bytes inside of [ 43.176788][ T1278] 96-byte region [ffff88812ee0ff80, ffff88812ee0ffe0) [ 43.189634][ T1278] [ 43.191802][ T1278] The buggy address belongs to the physical page: [ 43.198065][ T1278] page:ffffea0004bb83c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812ee0fb00 pfn:0x12ee0f [ 43.209421][ T1278] flags: 0x4000000000000200(slab|zone=1) [ 43.214897][ T1278] raw: 4000000000000200 ffff888100040310 ffffea0004bb8648 ffff888100042900 [ 43.223320][ T1278] raw: ffff88812ee0fb00 0000000000200011 00000001ffffffff 0000000000000000 [ 43.231726][ T1278] page dumped because: kasan: bad access detected [ 43.237988][ T1278] page_owner tracks the page as allocated [ 43.243529][ T1278] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 102, tgid 102 (udevd), ts 25022513835, free_ts 25021201364 [ 43.260811][ T1278] post_alloc_hook+0x213/0x220 [ 43.265403][ T1278] prep_new_page+0x1b/0x110 [ 43.269743][ T1278] get_page_from_freelist+0x2980/0x2a10 [ 43.275122][ T1278] __alloc_pages+0x234/0x610 [ 43.279546][ T1278] alloc_slab_page+0x6c/0xf0 [ 43.283975][ T1278] new_slab+0x90/0x3e0 [ 43.287882][ T1278] ___slab_alloc+0x6f9/0xb80 [ 43.292307][ T1278] __slab_alloc+0x5d/0xa0 [ 43.296473][ T1278] __kmem_cache_alloc_node+0x1af/0x250 [ 43.301769][ T1278] kmalloc_trace+0x2a/0xa0 [ 43.306021][ T1278] kernfs_fop_open+0x70e/0xb10 [ 43.310625][ T1278] do_dentry_open+0x891/0x1250 [ 43.315222][ T1278] vfs_open+0x73/0x80 [ 43.319039][ T1278] path_openat+0x2532/0x2d60 [ 43.323464][ T1278] do_filp_open+0x230/0x480 [ 43.327805][ T1278] do_sys_openat2+0x151/0x870 [ 43.332323][ T1278] page last free stack trace: [ 43.336833][ T1278] free_unref_page_prepare+0x83d/0x850 [ 43.342124][ T1278] free_unref_page+0xb2/0x5c0 [ 43.346640][ T1278] __free_pages+0x61/0xf0 [ 43.350807][ T1278] free_pages+0x7c/0x90 [ 43.354795][ T1278] pgd_free+0x17d/0x190 [ 43.358789][ T1278] __mmdrop+0xb0/0x3e0 [ 43.362693][ T1278] __mmput+0x304/0x310 [ 43.366605][ T1278] mmput+0x56/0x170 [ 43.370255][ T1278] do_exit+0xb29/0x2b80 [ 43.374241][ T1278] do_group_exit+0x21a/0x2d0 [ 43.378664][ T1278] get_signal+0x169d/0x1820 [ 43.383005][ T1278] arch_do_signal_or_restart+0xb0/0x16f0 [ 43.388644][ T1278] exit_to_user_mode_loop+0x74/0xa0 [ 43.393681][ T1278] exit_to_user_mode_prepare+0x5a/0xa0 [ 43.399215][ T1278] syscall_exit_to_user_mode+0x26/0x130 [ 43.404592][ T1278] do_syscall_64+0x47/0xb0 [ 43.408844][ T1278] [ 43.411009][ T1278] Memory state around the buggy address: [ 43.416482][ T1278] ffff88812ee0fe80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 43.424399][ T1278] ffff88812ee0ff00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 43.432280][ T1278] >ffff88812ee0ff80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 43.440175][ T1278] ^ [ 43.444083][ T1278] ffff88812ee10000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.451980][ T1278] ffff88812ee10080: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 43.459876][ T1278] ================================================================== [ 43.467834][ T1278] Disabling lock debugging due to kernel taint [ 43.493799][ T28] audit: type=1400 audit(1865913821.579:325): avc: denied { node_bind } for pid=1269 comm="syz.2.366" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.528092][ T1280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.546387][ T28] audit: type=1400 audit(1865913821.579:326): avc: denied { setopt } for pid=1269 comm="syz.2.366" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.554453][ T1280] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.369: invalid indirect mapped block 4294967295 (level 1) [ 43.568381][ T28] audit: type=1400 audit(1865913821.699:327): avc: denied { setopt } for pid=1281 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.582362][ T1280] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.369: invalid indirect mapped block 4294967295 (level 1) [ 43.614571][ T1280] EXT4-fs (loop4): 2 truncates cleaned up [ 43.620216][ T1280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.639564][ T1280] EXT4-fs error (device loop4): ext4_check_dx_root:2264: inode #2: comm syz.4.369: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 43.660351][ T293] EXT4-fs (loop4): unmounting filesystem.