last executing test programs: 9.49011752s ago: executing program 1: close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1808497, &(0x7f0000000540), 0xfc, 0x51a, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvOHE2adJNVnCAldhdYFG2gtrJRrsbcWiLhLhVApV7CYkTRXHiKnbaJqpoKv4AJIQAiRNcuCDBHQlV4sIRIVXAGQQIhKCFA0jQQbbHaZrYSUgdO00+H2k674fH3/fsznjezGQmgHPrWjY9TdP0UkSMZ+W5bPpEPbMd8VZEPHl8b74+JZGmN/6WRJKVtd4rbXglRpuLNJav+2qyP251c2tlrlwurWf5Ym31VrG6uXV5eXVuqbRUWpuZmX5/9oPZ92anXqR7i6NZ4mJEXPn8n779jR9+4crPPnPn9zf/8s7Xkmab78eefvyfBg+qbHY9H8N7ytaPGew0GtydGDnaMg+a/0UAAOix4V376ZdiPAYO3p0FAAAAXkLp1bH4T9I6d7fPUIdyAAAA4CWSi4ixSH6SZNcBjEUuVyhE4xreD8eFXLlSrX16sbKxtlCvi5iIfG5xuVyayq4Vnoh8Us9PN9LP8u/uyc9ExGsR8a3xkUa+MF8pL/T74AcAAACcE6PN8X+ukI3//zneHP8DAAAAZ8xEvxsAAAAAnDjjfwAAADj7jjP+v3oC7QAAAABOxBevX69Paev51wu3NzdWKrcvL5SqK4XVjfnCfGX9VmGpUllq3LNv9cA323l04NrG3WKtVK0Vq5tbN1crG2u1m8vPPQIbAAAA6KHX3nz42yQitj870pjqhnbV/zt7TkDfGgicmJ1DdpFk86H9L/rdq835H3vUKKAnBvrdAKBvBjuUJxHbPW4K0GP5fjcA6LvkkPqOF+/8Mpt/vLvtAQAAum/yo53P/+cOXHL74Grg1LMSw/nl/D+cX43z/20u+WvLzgKcKXl7AHDuvfD5/0P5GyIAAOi3scaU5ArZ4b2xyOUKhYiLjccC5JPF5XJpKiJejYjfjOdfqeenG0smh44ZAAAAAAAAAAAAAAAAAAAAAAAAAICmNE0iBQAAAM60iNyfk5837+U/Of722N7jA0PJv8Yje0Tone/d+M7duVptfbpe/ved8tp3s/J3+3EEAwAAANirNU5vjeMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJuePL4335p6Gfevn4uIiXbxB2O4MR+OfERc+EcSg7uWSyJioAvxtx9ExEfaxU/qzdoJ2S7+yMnHj4nsU2gXf7QL8eE8e1jf/lxrt/7l4q3GvP36NxjxXP64Om//Ymf7N9Bh/b94xBivP/pxsWP8BxGvD7bf/rTiJx3if/KI8b/y5a2tTnXp9yMm2/7+JM/FKtZWbxWrm1uXl1fnlkpLpbWZmen3Zz+YfW92qri4XC5l/7aN8c2P/fTpQf2/0CH+xCH9f/uI/f/vo7uPP9RM5vfH/3X2Ne6J/4sfZK/YHz+X/fZ9KkvX6ydb6e1merc3fvSrNw7q/0KH/h/2/b9zxP5f+tLX/3DElwIAPVDd3FqZK5dL62c2UR+ln4JmvISJ+j7eKWjGCSbu76968/hdTtM0ra9TL9CwpN8feLJT0u8tEwAA0G3P9v773RIAAAAAAAAAAAAAAAAAAAA4v3pxX7G9Mbd3Ukk3bqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAV/wsAAP//KYfmkw==") 8.427977956s ago: executing program 1: unshare(0x20000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000140), 0x2) 8.059844723s ago: executing program 1: mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 7.69771055s ago: executing program 4: syz_btf_id_by_name$bpf_lsm(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x1}, 0x1c}}, 0x80) open$dir(0x0, 0x0, 0x8c) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208020880"], 0x25c}}, 0x0) 6.47888427s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000001640)={0x2, 0x0, @empty}, 0x10) 5.978685348s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r3, &(0x7f0000000000)='+', 0x40000, 0x7000000) 3.803323347s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f00000000c0)={[{@errors_remount}, {@nodiscard}, {@sysvgroups}]}, 0x2, 0x456, &(0x7f0000000a80)="$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") 3.678553466s ago: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)=0x60) 3.660213769s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x72) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_address={0x3, 0x5}, @sadb_spirange={0x2, 0x10, 0x2}]}, 0x50}, 0x1, 0x7}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x60c2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 3.562458065s ago: executing program 0: r0 = socket(0x11, 0x80a, 0x0) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 3.445832632s ago: executing program 0: open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/71, 0x47}], 0x1, 0x200003c, 0x0) 3.365312265s ago: executing program 1: mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 2.658842335s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x10) r0 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000040)='ro\x00', 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x20000, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x800, 0x4, 0x5da, 0x20, 0xffffffffffffffff, 0x8983, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000003c00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpu.weight\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x10000a006) dup2(r4, r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r1, &(0x7f00000002c0)=""/203, 0xcb) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000340), 0x11000) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) vmsplice(r11, &(0x7f0000001b40)=[{&(0x7f0000000680)="85", 0x1}, {&(0x7f00000001c0)="063fd78a77e5b5ef7840a45cf38131ed7fa3f4", 0x13}, {&(0x7f0000000400)="3fe79929a1d94ed5a7af8287ad834857ae961ae8369d76c73638cae8803ecdff7773a9f51a950a126832ce096751b911e17ae96503f93203de1a53ca2d4957020ca593df8a42d58266", 0x49}, {&(0x7f0000000500)="ea5375528392d6aab00410e8df5df59dd7ba0d560651bb96356731c076fd2eddcf51c136b7f5965884fe25d4d1b9b2e040e41eeb2d23f23adbcd92dd31cc6c68992c8b5a4613cecc918fa73e6367ba2ff5ecb12d98c55d181a59d9dfdf278f83a9ce30a902434711d2a2ab46e0c587e79b025ad89cb58276f072b699e65e0daee51a3016eff855df71607583642dac8750197c5de84a05cdbdb456766829b46102ab0448d0b99010a8e9911dc28d9b1b4af56330a7a9b1907c2e1f2fb5cb57efb336400fe2", 0xc5}, {&(0x7f0000000480)="c37e797b7d03ed8fc0ea51648e49310f4cb1939f7548a4a2ec0f1ed1b32a4c6ca70fd79ec9f6b988d6ad421f9b85f3b1b5d537cadc36bd858c3ea306efb7", 0x3e}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f00000007c0)="877e9a93902740051453031f48322fb2704bd1154104af5b560c31179f1678ca305170d06c2928d76bdcde0ab7598e44cadecc27a43800c6df37875bbd260b33d2056d6b30fb90a1de4cee1c4198cf7a81621893f79d7209e9d557c17c833ed166bb9643677cc312a7026070b0e4181acc92f69177a964ea01b04be46388c23067d24154f9f584a156c08af1f48b9382c7c4e3e367959ccc3ab7235df4aedaeb830a068ae1795f6f4257571b9f7aa2ffe97f2d50a2839e83d019e4dc499e7cfa38bb0559fee1d309df61c5a5af79db6ccb8c8ef360563b52cdc89396710029f58cc0bbdf420188583e9e57", 0xeb}, {&(0x7f0000000600)="fecc945f8fe4d21dd38ba2", 0xb}, {&(0x7f00000008c0)="596241cf024ac8f3a511cb6ae1fd42f07bd034c8b704122a7668a299d0ee10ab38572f2a70f3778d09d7b24e53f00cd8092ac88051e8a2a5d06922f11b9f3183e9d67107c705756b32d587a55fb59dd1b0ad698d9c08e31ea6cbf137d87c4ec9555926b1757a11c4a4e19af7c0aafdd3b4e99e922c22278f5610770ab88adcdfa2697f503401a32133b6793865e32b7fede7c3021bdeee10", 0x98}, {&(0x7f0000001a40)="bafde3f965fd7b0a41f9f3572258c73cea15ecdb735f14359adf8e3bcef65e77d57396edcf3b117423c07b3220e7907b6fa5dc77c5430f577861d341ea57d5886e1022e6f44aa3af7209dc36378cebd6ecfeaff5fb5a6bb7e4b016a7d2ce007068d0139b4d35d54788b1394bd739f4333d73f17d04dc48decd04f9b8d43e71d957e1aa8882c12813a5af6d8003fa66fa322e749868a7d3afe6266930cd7d0ea9b7dc1211befe85e4a96087e96c0246db8d23bd09310c6db9f013469a464fa12f45bd47ef6c33be99f00c379c7446e6d1058adc9b96fb850c97fd478f52c8533df104f2c1", 0xe4}], 0xb, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.326877087s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x28, 0x6a, 0x205, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xffffffff}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 2.301858261s ago: executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x79f, 0x8000, 0x0, 0x0, {{0x37, 0x4, 0x0, 0x39, 0xdc, 0x66, 0x0, 0x9, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x43, [@loopback, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0x3c, [@multicast1, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @noop, @timestamp_addr={0x44, 0x4c, 0xcf, 0x1, 0x9, [{@local, 0x10001}, {@multicast1, 0x2}, {@multicast1, 0x1ba3}, {@local, 0x4}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8}, {@empty, 0x7}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}]}, @cipso={0x86, 0x3b, 0x0, [{0x5, 0x10, "a27427a1fd2901c6210ab38c0f1a"}, {0x0, 0x11, "fe3b8638bbc4e9667fb13b4874f158"}, {0x1, 0xb, "8f5838fd42b7f979a4"}, {0x0, 0x9, "8163eee5fbdeea"}]}, @generic={0x11d, 0x12, "39bd74c576690f6af209388a8cac4e0b"}]}}}}}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000280)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000380)="99e9f5a4a5c79ad5b8644c94e37c9e24ccec3dcce496a3a2171ad1f85c8450b6eea608b0641691c824b8cc1230fc777eb6b7160478c6d901208e4b9afa9f99bf6baad3a8e102cec0f04e961547c63c53f9d26aa9eec585374a808a7479ad607d825c0e69c5705e495d8ec86a0438ebea4560", 0x72}, {&(0x7f0000000600)="4f95b12d4513f82d0ea7b921586952f108a1b25f8fff42cfbc0bb8359f4274e79e7bb88957ebebc76c61c81ac08c1c1d8dd50c7f6e3b239e223f3e58a3e7d2560c8f6626f7f8bd899d8eb2bd40f91812c649", 0x52}, {&(0x7f0000000680)="43cda4688cf694a9faad86360305536526adb9302a06a02b42779c8ce80cb1750f17e583c395a315dfe503a40faf1ec423cbd61d6ec8967c7d7ea99b0c4b0fd078a425841623314dae2f24a5", 0x4c}, {&(0x7f0000000880)="83", 0x1}, {&(0x7f0000000980)="7a22f045b71ff6d6796383daeec3c6c6c04a2cae5bd39b31ce3badaf7eef055a84fd5010451ac87ab9d04b14f914838d2275838d22a8eadd6b4dce0278f5bd53d60926b37a97327b35f3daf1507a9b6de205d2027ad217baf858f6adcab955dfbacb8eefb8c76e9c8f2c185d", 0x6c}], 0x5, &(0x7f0000000a80)=[{0x68, 0x107, 0x6, "cfb733e0b1ebd3db719ae5864be63529bb1c08587d69b8dec7a6517f5650bd5b6a44da3491d7a08534625b69af190bfab03fc8acd102d52b2ee062fa7dd8193138556990c7b89afb307099d9966485e95387a55d16a37e"}], 0x68}}, {{&(0x7f0000000b80)=@isdn={0x22, 0x9, 0x8f, 0x5, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000c00)="8f679744cd8423d4322235add376b18c7be64dfef61fcf422cf377b23be7c9171a999e748bcd2f8db80f383e66c351cb7d520f5bc86b97213ee20260971b39e7b42d38d3861dafb3bbb7bdb0f6be6a33583526e3ebd441aab85bc5e5002b3952d982083c63f702fb49dac2faf1f6e3a61fc7e96ba36a30d564d38c71b720d3197d40fc01f7602843767af320cda66352aa1c09dcc96ff80a5ad124b1ca8bbb999cdd1c1f5db30ce0ffe225e0ecd398b2f01ea638af71f30d3fbdce3b796338dfa9918cd0e9dd3bb2ae8892cecbebb6c287e0220d577007033b85437c04e992c2fac5", 0xe2}], 0x1, &(0x7f0000000d00)=[{0x50, 0x88, 0xb2, "c554ed1ce10ee05942dd9b5108cbde0fd6c25159ac5271c96afb2a2f5bbc8527a93011fe9dd038cd47a6c3cf48fa3faf23d12a6a44edd2bb22b0ca88450e"}, {0xf0, 0x107, 0x5, "32aaa6206b955446506ac954216145ecf838e11a62a9299f7b9cd562b2360c7f21eade54595a9a300469703dec51311ab785bdc6fbd2fe556038f564164c04383f23a9eee767b8d13b9caae9de6b5a1cd68b5788caa43658d8b4d34b3a3cfd9573b51e0a6969f6f859bf2c403324a156158dbf2b93a462b6d11d0abc16a7367b72877d964ada599bcdd6a552852a4a239433d655414c8b3babc59c985405dcf8661684073d588ff15ccea4c71b480777bae8ccd4d4a0c6a3abb0d157a4d509b469d8932c9ac4e3f2bc2e0ccbe488605fb0929bf6bb4da513a0ad63d68e0e"}, {0xc0, 0x88, 0x60, "053c2c7e32334b20bff4089e63d077dc6b269ab486ab518736b3dccdb4daa85549a4afea2737b3c26945511f987b66dbdb6e166bdc3bbda3964d8f44389036c06a5a8687692fb5cebe5506e5d5817e0360900d2f7d24916ac1a59013ed97f3d5c4c393a30413717d8a6c40b3e50ae096641580ffaa3d1e362372c1b1586491ab3af1fbeef7b45224abdc749cc12c1e3cab0182dedcfc1bfb8deb65e57ee4be0d8001bf11f0103e6d78737af1"}], 0x200}}], 0x2, 0x800) 2.263318697s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r3, &(0x7f0000000000)='+', 0x40000, 0x7000000) 1.60247309s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.503595745s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) 1.485808398s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x1a1381) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SUBMITURB(r0, 0x40085511, 0x0) 1.440174056s ago: executing program 2: unshare(0x400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x2000512) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x78) pread64(r1, &(0x7f0000000180)=""/141, 0x8d, 0x0) 1.397502882s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) lseek(r2, 0x0, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x109f01) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5522) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getpgid(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.381641424s ago: executing program 2: open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/71, 0x47}], 0x1, 0x200003c, 0x0) 930.386225ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000800850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') writev(r1, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 390.412289ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00'}, 0x48) 263.724409ms ago: executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x79f, 0x8000, 0x0, 0x0, {{0x37, 0x4, 0x0, 0x39, 0xdc, 0x66, 0x0, 0x9, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x43, [@loopback, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0x3c, [@multicast1, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @noop, @timestamp_addr={0x44, 0x4c, 0xcf, 0x1, 0x9, [{@local, 0x10001}, {@multicast1, 0x2}, {@multicast1, 0x1ba3}, {@local, 0x4}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8}, {@empty, 0x7}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}]}, @cipso={0x86, 0x3b, 0x0, [{0x5, 0x10, "a27427a1fd2901c6210ab38c0f1a"}, {0x0, 0x11, "fe3b8638bbc4e9667fb13b4874f158"}, {0x1, 0xb, "8f5838fd42b7f979a4"}, {0x0, 0x9, "8163eee5fbdeea"}]}, @generic={0x11d, 0x12, "39bd74c576690f6af209388a8cac4e0b"}]}}}}}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000280)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000380)="99e9f5a4a5c79ad5b8644c94e37c9e24ccec3dcce496a3a2171ad1f85c8450b6eea608b0641691c824b8cc1230fc777eb6b7160478c6d901208e4b9afa9f99bf6baad3a8e102cec0f04e961547c63c53f9d26aa9eec585374a808a7479ad607d825c0e69c5705e495d8ec86a0438ebea4560", 0x72}, {&(0x7f0000000600)="4f95b12d4513f82d0ea7b921586952f108a1b25f8fff42cfbc0bb8359f4274e79e7bb88957ebebc76c61c81ac08c1c1d8dd50c7f6e3b239e223f3e58a3e7d2560c8f6626f7f8bd899d8eb2bd40f91812c649", 0x52}, {&(0x7f0000000680)="43cda4688cf694a9faad86360305536526adb9302a06a02b42779c8ce80cb1750f17e583c395a315dfe503a40faf1ec423cbd61d6ec8967c7d7ea99b0c4b0fd078a425841623314dae2f24a5", 0x4c}, {&(0x7f0000000880)="83", 0x1}, {&(0x7f0000000980)="7a22f045b71ff6d6796383daeec3c6c6c04a2cae5bd39b31ce3badaf7eef055a84fd5010451ac87ab9d04b14f914838d2275838d22a8eadd6b4dce0278f5bd53d60926b37a97327b35f3daf1507a9b6de205d2027ad217baf858f6adcab955dfbacb8eefb8c76e9c8f2c185d", 0x6c}], 0x5, &(0x7f0000000a80)=[{0x68, 0x107, 0x6, "cfb733e0b1ebd3db719ae5864be63529bb1c08587d69b8dec7a6517f5650bd5b6a44da3491d7a08534625b69af190bfab03fc8acd102d52b2ee062fa7dd8193138556990c7b89afb307099d9966485e95387a55d16a37e"}], 0x68}}, {{&(0x7f0000000b80)=@isdn={0x22, 0x9, 0x8f, 0x5, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000c00)="8f679744cd8423d4322235add376b18c7be64dfef61fcf422cf377b23be7c9171a999e748bcd2f8db80f383e66c351cb7d520f5bc86b97213ee20260971b39e7b42d38d3861dafb3bbb7bdb0f6be6a33583526e3ebd441aab85bc5e5002b3952d982083c63f702fb49dac2faf1f6e3a61fc7e96ba36a30d564d38c71b720d3197d40fc01f7602843767af320cda66352aa1c09dcc96ff80a5ad124b1ca8bbb999cdd1c1f5db30ce0ffe225e0ecd398b2f01ea638af71f30d3fbdce3b796338dfa9918cd0e9dd3bb2ae8892cecbebb6c287e0220d577007033b85437c04e992c2fac5", 0xe2}], 0x1, &(0x7f0000000d00)=[{0x50, 0x88, 0xb2, "c554ed1ce10ee05942dd9b5108cbde0fd6c25159ac5271c96afb2a2f5bbc8527a93011fe9dd038cd47a6c3cf48fa3faf23d12a6a44edd2bb22b0ca88450e"}, {0xf0, 0x107, 0x5, "32aaa6206b955446506ac954216145ecf838e11a62a9299f7b9cd562b2360c7f21eade54595a9a300469703dec51311ab785bdc6fbd2fe556038f564164c04383f23a9eee767b8d13b9caae9de6b5a1cd68b5788caa43658d8b4d34b3a3cfd9573b51e0a6969f6f859bf2c403324a156158dbf2b93a462b6d11d0abc16a7367b72877d964ada599bcdd6a552852a4a239433d655414c8b3babc59c985405dcf8661684073d588ff15ccea4c71b480777bae8ccd4d4a0c6a3abb0d157a4d509b469d8932c9ac4e3f2bc2e0ccbe488605fb0929bf6bb4da513a0ad63d68e0e"}, {0xc0, 0x88, 0x60, "053c2c7e32334b20bff4089e63d077dc6b269ab486ab518736b3dccdb4daa85549a4afea2737b3c26945511f987b66dbdb6e166bdc3bbda3964d8f44389036c06a5a8687692fb5cebe5506e5d5817e0360900d2f7d24916ac1a59013ed97f3d5c4c393a30413717d8a6c40b3e50ae096641580ffaa3d1e362372c1b1586491ab3af1fbeef7b45224abdc749cc12c1e3cab0182dedcfc1bfb8deb65e57ee4be0d8001bf11f0103e6d78737af1"}], 0x200}}], 0x2, 0x800) 236.781493ms ago: executing program 3: bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 224.545105ms ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="66643dc1f2a9de96f4efcfa417e4422acbc95cd3096c5e3cd83d764be8fc68b29597c84b67102dfe158b", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000800)) r5 = syz_open_pts(0xffffffffffffffff, 0x361900) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454d4, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x2000, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) statfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 161.325455ms ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "73585bbf"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 159.269105ms ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x10) r0 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000040)='ro\x00', 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x20000, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x800, 0x4, 0x5da, 0x20, 0xffffffffffffffff, 0x8983, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000003c00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpu.weight\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x10000a006) dup2(r4, r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r1, &(0x7f00000002c0)=""/203, 0xcb) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000340), 0x11000) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) vmsplice(r11, &(0x7f0000001b40)=[{&(0x7f0000000680)="85", 0x1}, {&(0x7f00000001c0)="063fd78a77e5b5ef7840a45cf38131ed7fa3f4", 0x13}, {&(0x7f0000000400)="3fe79929a1d94ed5a7af8287ad834857ae961ae8369d76c73638cae8803ecdff7773a9f51a950a126832ce096751b911e17ae96503f93203de1a53ca2d4957020ca593df8a42d58266", 0x49}, {&(0x7f0000000500)="ea5375528392d6aab00410e8df5df59dd7ba0d560651bb96356731c076fd2eddcf51c136b7f5965884fe25d4d1b9b2e040e41eeb2d23f23adbcd92dd31cc6c68992c8b5a4613cecc918fa73e6367ba2ff5ecb12d98c55d181a59d9dfdf278f83a9ce30a902434711d2a2ab46e0c587e79b025ad89cb58276f072b699e65e0daee51a3016eff855df71607583642dac8750197c5de84a05cdbdb456766829b46102ab0448d0b99010a8e9911dc28d9b1b4af56330a7a9b1907c2e1f2fb5cb57efb336400fe2", 0xc5}, {&(0x7f0000000480)="c37e797b7d03ed8fc0ea51648e49310f4cb1939f7548a4a2ec0f1ed1b32a4c6ca70fd79ec9f6b988d6ad421f9b85f3b1b5d537cadc36bd858c3ea306efb7", 0x3e}, {&(0x7f0000000a40)="3e444c640699ae6d59a1f58e000e8518803a4d2a7d359c7bdfff9619b2abe1e8ad5468155dbb9e7f78b3c255dc2cd26bb420fa3ac8477885b3e50375a505c27264efc9dc19138e18e97dccac40998e623e76e544c66178b168fd111fc570674d858f97b2839991ea7a22b62b5aa8c46f3946495aab2a556aaf26359147eae46c1427777dac5dde9a639f78fa541f3d65e27d3ce284a862f3524907a1a8d7f67a475ad7ef1bb1cded402b568eb2f77aa0a8bbcd511de221f131a1a459a916cc18920f4c9fe0e74e6911523563cca03c7e17f1966d550494772556cb8b75dee99f1dc6b193dbacafcd7b081fef92df418a7c85f1b1d03590134d92f80e14c6980ea85669b85bdab2153487e3ed88e1c2663b14ebfce78d4632b6b1508ba9e844238e487086f565b5da49de7709c2a8c576f3c0bd9ae46622f03889953c3e4130cc9db7ff148d9274c2dcb5f2a80884900548e75608d0dffde18e3c005f82ea4a92732656433a633933bfbe0463da5ca6cf7e460595e06068e2acb1d9acc1b32dc3950e17030d8c6a3a889a54598382c5b2fff15943ea15f70b26bde58bc821b1cc0c21e1a49cb49d4fa480e1cdfec0f15054263aff7e9f5a9c1dea2e99d5c3c91d4cef9c92d8057d234b0a3e5adb20063ece2bf6aaac8fcd699927422db9ac119df39a56c31add54aef4833f1691439b9df5932fdb483daf5bd1c3d9d880a2882a1c9a487e4ceb8086767e3aa1bfa442c62dd80b35104a8de855446a1abcc7a540e0b691eee9764e31831a3f99bdb935f6b72ebdb92b9852c5f91a92a2562e4fd44e9189b3536c3dcf3357251b2feff70604689336d2131eb266e3a5aac99571cf49944c5ca17e4c578383ca006e0803cbcdc151d378d7de183255d7b70ebb445324e65c63507fe0e1966e06b5d8941fe1e49048df4a85111e208b10f95e45f52aa1c8ce7256782de088f36a26255683ef43f266a7051566064cb6a0a63d660e77dfebd8bd980f8ad4bed41589429a330363954a47bd2d702d49819b8644bf8c1a6646a9a3088b2931081122964df711f41b2f7cdb6b7cd0a7f7fb24e8ee87bde2f8cd824b8c162af08627528ccffa4331e6e9eb66616ddcb2271bd7e4b88cbdd5d67a78ec1c5eb39f3a8aa836baf845bc327623e7f27dee74874fa6b477a75852bc69c29866da65cdce180a258197b9cc5a404359e9e4808b622b6539e1c8fd9f5c6d20ef108428533a49d12e8b8bfcade3349133eae8b10208d30f74e9b22c92133d4747392eb128f7aa5e9a60d3323714e18140c9736f186b2bab44f70960bd99e3a4d671be48eed31234187eee4b3d12f8d09e525459bb1c8853ed106fe9f6169936a00a3f4825c451197a02e3358cbee581b91e01f237859780d73c6f5ec9117b9857d32868f8c89dda1e080a718b0cbf8993b8ff9650efee9deab7fec41e15fcd3199009cb7528d8c822a9e0d7120832cd01eae6b348dab5c1285098188f21827bc46bde9128bc6675b304beca8c00cd24257beac74dc67cb862e2cc963957893a3ec4472ce2f7c76637f712444ee5ec440bd516353790a7f18ac80ac2d566a2be8f45696af6099dcd25de248e2b7868a2303a9e6d7e98a4648df530ccdd6374227aaa3819341d476dcd2d1ea9e3c0d0f772e08bf3aa428a4cb5c9afa880c99e94d4ad0743a26f9047db34ee0f64252d1977ea9070aed179bcfdaeefbd94d25e54721d9eacdd3ee789c1f6133ab6b7686dae77e9587b7a9c092835473759731a48d238fee288a68b4d596b5b5142595a5be2dce5468884d8973864fd341354da32e00ce6df1e445914c2413bed07117ba3d92ff60f182bc87e0688b757b7fee1ef651174bb711cef3e03c2849c7b256bca38f2dc0cdaa958ecb97391d931d2a9712cb0a51bd05fe8130559f4c1b168d465a6ba95ef23de1baf54bfb5f53c1c6837d121ff06bc5ee233c0850b3ba8be520820fd221b9211e18185b19cf965a6f055bf8fee3da70941da1f863bedff54875c14f898ada184c3fce4748670664d83695e4d4559c1c34dafce4c837c02c10df87eb82d92a6ced5ca28a3328e6cd2461c29fc13e4abf8a2a74888aa9da1c963923f5acea1b4b04e5b727422a54ef4ffafa6dd29114f25d93769fb677f4b3af45b1245a7164db451d04462cc18ea26fe31cca125d3199ab9f11527b03a460c2479843566a1fba7974725312a3204a0471cad18781cd46a454381eabd44169c7f9a0d6703ac41099cc67b73214dadf7bdc29d605ad5d5788376f5c4e51de5f15c3d292b47f60abffcd3cb031d12d6ad3cedf6b0860b17fca73e583597c7fd6fe96921b8d447e072200a83599d9a5c2b3a1674fe8f4bd8f8879486437c28f933ca15d0a9563b0324c1a3bdec1c7444888ec5205b257ba468ebfbf3f7b8d45552928e3e74837dea69b4d877d80e59e2a4809d3de822249c439bfaa94c325d06d5757756c769917c4f5d309c7954870016ecde3c787403befb1d1b88901d06661fec728f32d1d454da728e0119a3e848e9cfc80819894a86defb2c043272313e1840751b5d11d4a59357b69f05e5450ca560969623e143e0e231593d396ce1ea6c0df6949770f39671736d78c82216b730e551d20c4a8c52cd57f532d7c563a60852a09f82a6e25aae0fbcdbf2f8f871c0243c490f0b663a64d4be1406f124235251151decc09e36e07baec6108d4ec5de5f4f7b96734663d0b023cd07f519bfc7f57208500b69f430e44108181daefaa3a4f7c676c5279aec37c6fcb1adcedd18ee3580b64a4859bf1840baa9edf5f1bd8963b03e7b40dbcc9c755d8313b71835aca09a6004b5367ec520ac45459803f72a34064405109abe2a7cb6d86654dc887201d7d425168882f8028f0e008353ea884abfd58b9397a18940db8495a6a955e14d8136ac30185ba824cf36c1de0385346a712e42bdcc483aa03f4aa2860e7037a0f165c595f32e3ea3ce5fdfbbd5e91cb4d3bda8c01970a8dd69e0476e51ac8cf7977a229840a39d9b58fef0af8aa4391f41c456c07d139f25e38b2d3f05963aa972afb1070dd2abf9f03f38f6c56b6eff2e950994087c24fc998454a3eb44786cb77f42b45000962b97ee55a3117d8992d36226e1e278a7d905ed35039f56e0ce230d6ccfe697c002ca19c4847b1a06e4e506c1624400fe71755271ea65da27ab1b85865bb2fcd720cefb1d70e2524b219e29acdcadbe134c64286d3fcbce0dfbde5d8009355c61e869d34daadc6a4d935cfc4fc97f737decfa48e356d5e578c7bf435275fc4c790118eadd784a29f21f36a45b4974b35551700294c7b379fd8b32dac0bf0c2a79d61994d1a39cfa4e7318666884911149c634ec6645dac25babe6a492fc9a8bffa9f60dc990582075951021c4a8763cd0a2ceca302ec7ca19557d5398fc53d4ca3f2ac9d03ae4662dd1cc53f291ea3f2ce8325d202262d36103969e89a0057ce99cc5bb9b0cd3d0964b78010b9581a7f5c8025c52fbab631e29157a45808ff23482ccfee6a7c3c4932add2e73a734ba55d409bc3ee8d6cd3023d1a5a4f843c0afc58102a036c9c42aa2418fcce92b6220a528c415dd38d8c55472aa93a00d91ff1b6481d668e26fc6d371a3851bf56c235d9917a12bc3cb9fcd49a744a98997b33895e73dd4145f4929053a832e4299c1d7842ca1f5adf7c98d803a5992c73ad40297b69a98bfddad04d037eb5a7d37a72faf80e8ae2b0ffb25483d7df0068913d9d5356fba2f620c1b8172372a9e23cbda2d8bb373e63a6ef6cbbc51dd041f609fd98fa934b4fc348b84bf1065448d740989cd4fdfaa1c061e3692e9e6c028e3fa481118f60c7e8735c03f5fa310ae59537d0c2aedb85fc72dc59b9a4c381f434dc7f20cdc9fe5835fed6b3bc2932f17180dfa3deb3dfd6d05d98e35817adfb4461341b2035345cc5eb9da39ad7467bc4849d5a58c7b4231e12184441deac28eb7947d67275bc26b99b7988b7618b46b04089a8476bfc33ee9e1de736bb2b66fed775d9b1d45c9b084d40b0a89aa8709298a06d2a2af3b0a65ae8b95352a1ab990d3a29c8448f81968b72c170650db86392a04f56567cdd88b61504020b7de1f1002fc2ac51879a258219806fc6484760e21b98b45a0a829cc5fd4e834761825e4c50b03fe9dd95aa59a2705c5915971d1a26d575cadb1876665447e1d90bd648e9e5b70ecd9f9901e859f167bf70aef17e6af57f2b8682a6eda533cf92e10574f60469d820d2ef4d84e8a44108808c11117f721d4a6b93a00b386678f975d6e42e1de3522516acf3a59cc201fc0a6c8e7a3346415d6b44863fd437a3f2a5e048104e5e1795d118daae32d19c5c5df8b9114e679128a79eb8013fc181b684d363703ef41483a52ed1b185585a726088a78aab54572ea76ed812979034e49594c8a2c2b3d9b67d9de4cf47b75c1984abfe254e980d45c0d4d8b134bcd24984ff6ebba016dd8d52da14a2fe66c368dda3bb927a427ee91b847ec006641909418bc0bf55f8e9fa4e9d12f06e2022bcd38f0a9106601b0f66666dbdff4b9cdff655b08873c06163a5ab5589d519ffb5437ed130e87099cfcd51ed85b02901d050be3c54d56698755c583ace1127dda1dfaea85db14ba83bd7c25c0949f674830e9a89aa0c12cd5d1db44bebfc3ecac1d0c67f70f31bddf3f578905cc43b3e048a4a111f9bc2a70945de909a25ce68bed83b1828e2ed29ad9243f53457d7952e5082d528321c318f80dd9d8ec4ebfab4a8065443241da7e46a758c7aa4ed70087da4f9eba5db899b8b6d5a65c632678b606a1965fd1b8b8dd98bb00d039985f8327025460bc10db96c7a604239fc1e6d80354ff863f772c9b13178228a2521fecfdc8b317c3c16db7413d1bf70bf0eb179d414712c7023ddbaf4f80bb9c182d4587c9c34badea49a90fcf1e08f7fa09a8859e860d7da16de413e617a9dd7156d97447f010394c22159e2e407162fff4a17b19047ed99c09307f91e380c946f4f342dfaf91de12575c1722c0e89a65f8a2a1ba4a08f71dd9875941a9023de17c6a819a0553801e97d9cf760ea5e3beabea37bb88c050afe3d8beccc45cde56159b45d311c92bb1e0c8cefc8dde898d025ba619444aa5f56ad1320d8c5f54dd5608b9c3462267632ce915e1b294cb6e97a650c1f2d21e728f4e0019d2e9d7a351d6bb88a57b414b15ca6b429e2deaff5d3f0eb8163ad9cf9a548148ba003bba2a330f3b57efc788b27f892f2fd8ae497927767672685d36abe3a4c36794fb5a394564286e724f636917b9fb44fb305eb177056a1eaccc824756f69ae369d51b92599f7159877a56779a855e15fe1513ff30152d6f943827ddda5c8b2fa6b2f2930d5e860f640c7941f302ae98c582f4132ce3ebef16928f08bec3f301b4a167645efea942860e0e58333cb1defba23935b35795a98c5c1c1a6cf7a8d2113500c3b6cefc09df29d804a85c6aadd6dab9730f86caae2683af6f5dee8f912d46d2beec0341ba06767bc74516f1cd504b01fb6370b1d378e047a284721baef547abb63c4861bbaffd8e06ed380abc2fd06290d4883d16d44edc243909bf871ba63de4656c613c37fef2c7a82d5a3508bfe605ab98546d98c946ce59d750da7dafaed153761530cf21f6ee62b84b1fcbbb741040e6fb873f2a074101d2b9cb7d9390e2d87a59cadabca7190ffdfbbd822bbcf496ad9ef799ffa6f28ab10886b75034fffcf8c8443355a5df1f1878833a969e0a314fa599d6664a54f042826935deb03a9bf6a6379d01db3918", 0x1000}, {&(0x7f00000006c0)="f9aeab10eafd84b7c0287bf26c1a535abc6cf812a9fb47a6e2d97e31b89b381934102aa13fd0d37be27b3308843a3feb771cceacb5ef365c8d38da0b867fae772c923f745fa74e49b22350022087c0f40a31c86b7cfe75045396772072fa81c091b3f396eef8d0220b5ee066c5b9fc679a86e5fdd6a79a0742852ea5f336979d11a9a9988b7fb1ace12d68c4fab6baba89e616efbe6edf77d4fcf62fe43b89e5a5ec4755211569e74e42b044ef7b8b35f76e0c4bccc88c77c98b3fd1ac4371e7b67cf0cff0919094a4a957fc9a57b7fbf83d56ef04d1058dbf21b1267bbae1e03501c95c76726b31a16a008983e27f0c7e94d0e46f59bd17e83acf", 0xfb}, {&(0x7f00000007c0)="877e9a93902740051453031f48322fb2704bd1154104af5b560c31179f1678ca305170d06c2928d76bdcde0ab7598e44cadecc27a43800c6df37875bbd260b33d2056d6b30fb90a1de4cee1c4198cf7a81621893f79d7209e9d557c17c833ed166bb9643677cc312a7026070b0e4181acc92f69177a964ea01b04be46388c23067d24154f9f584a156c08af1f48b9382c7c4e3e367959ccc3ab7235df4aedaeb830a068ae1795f6f4257571b9f7aa2ffe97f2d50a2839e83d019e4dc499e7cfa38bb0559fee1d309df61c5a5af79db6ccb8c8ef360563b52cdc89396710029f58cc0bbdf420188583e9e57", 0xeb}, {&(0x7f0000000600)="fecc945f8fe4d21dd38ba2", 0xb}, {&(0x7f00000008c0)="596241cf024ac8f3a511cb6ae1fd42f07bd034c8b704122a7668a299d0ee10ab38572f2a70f3778d09d7b24e53f00cd8092ac88051e8a2a5d06922f11b9f3183e9d67107c705756b32d587a55fb59dd1b0ad698d9c08e31ea6cbf137d87c4ec9555926b1757a11c4a4e19af7c0aafdd3b4e99e922c22278f5610770ab88adcdfa2697f503401a32133b6793865e32b7fede7c3021bdeee10", 0x98}, {&(0x7f0000001a40)="bafde3f965fd7b0a41f9f3572258c73cea15ecdb735f14359adf8e3bcef65e77d57396edcf3b117423c07b3220e7907b6fa5dc77c5430f577861d341ea57d5886e1022e6f44aa3af7209dc36378cebd6ecfeaff5fb5a6bb7e4b016a7d2ce007068d0139b4d35d54788b1394bd739f4333d73f17d04dc48decd04f9b8d43e71d957e1aa8882c12813a5af6d8003fa66fa322e749868a7d3afe6266930cd7d0ea9b7dc1211befe85e4a96087e96c0246db8d23bd09310c6db9f013469a464fa12f45bd47ef6c33be99f00c379c7446e6d1058adc9b96fb850c97fd478f52c8533df104f2c1", 0xe4}], 0xb, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x4c, 0x1a, 0x178, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [], [], 'veth1_vlan\x00', 'sit0\x00'}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x80000, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. 2024/06/17 16:57:43 fuzzer started 2024/06/17 16:57:43 dialing manager at 10.128.0.163:30000 [ 29.384694][ T23] audit: type=1400 audit(1718643463.670:66): avc: denied { node_bind } for pid=347 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.405074][ T23] audit: type=1400 audit(1718643463.670:67): avc: denied { name_bind } for pid=347 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.515264][ T23] audit: type=1400 audit(1718643463.800:68): avc: denied { setattr } for pid=360 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.544025][ T356] cgroup1: Unknown subsys name 'net' [ 29.569406][ T358] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.576615][ T23] audit: type=1400 audit(1718643463.830:69): avc: denied { mounton } for pid=356 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.578778][ T356] cgroup1: Unknown subsys name 'net_prio' [ 29.608764][ T356] cgroup1: Unknown subsys name 'devices' [ 29.620397][ T23] audit: type=1400 audit(1718643463.830:70): avc: denied { mount } for pid=356 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.642691][ T23] audit: type=1400 audit(1718643463.840:71): avc: denied { mounton } for pid=363 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.667961][ T23] audit: type=1400 audit(1718643463.840:72): avc: denied { mount } for pid=363 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.691006][ T23] audit: type=1400 audit(1718643463.890:73): avc: denied { relabelto } for pid=358 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.717336][ T23] audit: type=1400 audit(1718643463.900:74): avc: denied { write } for pid=358 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.742902][ T23] audit: type=1400 audit(1718643463.900:75): avc: denied { unmount } for pid=356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.766087][ T357] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.793534][ T356] cgroup1: Unknown subsys name 'hugetlb' [ 29.799636][ T356] cgroup1: Unknown subsys name 'rlimit' 2024/06/17 16:57:44 starting 5 executor processes [ 30.952969][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.959889][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.968014][ T373] device bridge_slave_0 entered promiscuous mode [ 30.998021][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.004982][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.013198][ T373] device bridge_slave_1 entered promiscuous mode [ 31.136682][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.143578][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.152225][ T377] device bridge_slave_0 entered promiscuous mode [ 31.159835][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.166849][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.175396][ T377] device bridge_slave_1 entered promiscuous mode [ 31.216892][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.223767][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.231928][ T374] device bridge_slave_0 entered promiscuous mode [ 31.278422][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.285295][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.293551][ T374] device bridge_slave_1 entered promiscuous mode [ 31.420143][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.427293][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.435502][ T376] device bridge_slave_0 entered promiscuous mode [ 31.478980][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.485849][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.494136][ T376] device bridge_slave_1 entered promiscuous mode [ 31.509991][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.516899][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.524908][ T375] device bridge_slave_0 entered promiscuous mode [ 31.541539][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.548435][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.556669][ T375] device bridge_slave_1 entered promiscuous mode [ 31.883381][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.890289][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.897561][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.904669][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.978918][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.986083][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.155056][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.162885][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.204602][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.213252][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.222501][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.229507][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.250600][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.259775][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.268504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.275341][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.321115][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.329769][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.361633][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.370865][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.385054][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.393785][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.402384][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.409385][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.437382][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.445289][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.454956][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.463243][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.471607][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.479328][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.488130][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.496372][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.503517][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.532375][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.541290][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.550529][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.559609][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.568262][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.575902][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.583744][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.600656][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.609934][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.619288][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.626125][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.654240][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.664854][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.673925][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.680802][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.688296][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.696804][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.705056][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.711947][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.719417][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.742047][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.750639][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.759115][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.772577][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.804082][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.813777][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.822350][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.829225][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.838062][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.846745][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.854972][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.861858][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.869228][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.877690][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.885932][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.906800][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.927259][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.935641][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.944627][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.953575][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.966312][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.975397][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.006649][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.014965][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.037210][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.045777][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.054525][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.063134][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.102925][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.112489][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.134408][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.143612][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.170199][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.178592][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.187587][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.195947][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.228993][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.238187][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.248129][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.256141][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.265155][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.274176][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.311736][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.320695][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.330882][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.339351][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.356755][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.365734][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.430428][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.442381][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.467662][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.476098][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.522680][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.532624][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.542003][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.550742][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.560782][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.569697][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.578491][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.587697][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.636655][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.646854][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.665641][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.674272][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.697001][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.705505][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.753831][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.773998][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.824133][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.836137][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.904475][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.920209][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.965710][ T418] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.985678][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.004496][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.331100][ T431] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 34.829644][ T23] kauditd_printk_skb: 34 callbacks suppressed [ 34.840407][ T23] audit: type=1400 audit(1718643468.870:110): avc: denied { create } for pid=429 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.177871][ T23] audit: type=1400 audit(1718643469.110:111): avc: denied { create } for pid=423 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.198170][ T23] audit: type=1400 audit(1718643469.110:112): avc: denied { bind } for pid=423 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.247845][ T23] audit: type=1400 audit(1718643469.110:113): avc: denied { write } for pid=423 comm="syz-executor.0" path="socket:[12602]" dev="sockfs" ino=12602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.285581][ T431] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 35.386873][ T23] audit: type=1400 audit(1718643469.110:114): avc: denied { name_bind } for pid=423 comm="syz-executor.0" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.428572][ T447] ====================================================== [ 35.428572][ T447] WARNING: the mand mount option is being deprecated and [ 35.428572][ T447] will be removed in v5.15! [ 35.428572][ T447] ====================================================== [ 35.457549][ T445] [ 35.459723][ T445] ********************************************************** [ 35.476594][ T445] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 35.494489][ T23] audit: type=1400 audit(1718643469.120:115): avc: denied { create } for pid=423 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.515051][ T445] ** ** [ 35.545510][ T445] ** trace_printk() being used. Allocating extra memory. ** [ 35.595893][ T23] audit: type=1400 audit(1718643469.540:116): avc: denied { write } for pid=429 comm="syz-executor.4" path="socket:[11539]" dev="sockfs" ino=11539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.620089][ T445] ** ** [ 35.628867][ T23] audit: type=1400 audit(1718643469.570:117): avc: denied { create } for pid=429 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.649146][ T445] ** This means that this is a DEBUG kernel and it is ** [ 35.656424][ T445] ** unsafe for production use. ** [ 35.663807][ T445] ** ** [ 35.671128][ T23] audit: type=1400 audit(1718643469.700:118): avc: denied { read } for pid=429 comm="syz-executor.4" name="ashmem" dev="devtmpfs" ino=9269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.695586][ T445] ** If you see this message and you are not debugging ** [ 35.702897][ T445] ** the kernel, report this immediately to your vendor! ** [ 35.710484][ T445] ** ** [ 35.725343][ T23] audit: type=1400 audit(1718643469.700:119): avc: denied { open } for pid=429 comm="syz-executor.4" path="/dev/ashmem" dev="devtmpfs" ino=9269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.749287][ T445] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 35.756968][ T445] ********************************************************** [ 35.856874][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.930832][ T465] fuse: Unknown parameter ' scontext' [ 35.975461][ T462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 36.014248][ T462] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.083254][ T462] EXT4-fs (loop2): failed to initialize system zone (-117) [ 36.102463][ T462] EXT4-fs (loop2): mount failed [ 36.391161][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.402493][ T126] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 36.411653][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.422175][ T126] usb 5-1: config 0 descriptor?? [ 37.618140][ T496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 37.639692][ T496] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 37.665615][ T126] hid-generic 0003:1B1C:1B3E.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 37.687076][ T508] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 37.791252][ T508] overlayfs: unrecognized mount option "  Šo© ãà©ß™SæÛÈÒ"èp$" or missing value [ 37.885104][ T516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.892189][ T516] IPv6: NLM_F_CREATE should be set when creating new route [ 37.899275][ T516] IPv6: NLM_F_CREATE should be set when creating new route [ 37.969638][ T502] usb 5-1: USB disconnect, device number 2 [ 39.042141][ T522] sched: RT throttling activated [ 39.884321][ T532] fuse: Unknown parameter ' scontext' [ 39.904027][ T23] kauditd_printk_skb: 33 callbacks suppressed [ 39.904055][ T23] audit: type=1400 audit(1718643474.190:153): avc: denied { getopt } for pid=533 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.987528][ T23] audit: type=1400 audit(1718643474.200:154): avc: denied { ioctl } for pid=533 comm="syz-executor.3" path="socket:[11813]" dev="sockfs" ino=11813 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.025677][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.046781][ T538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.067325][ T542] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 40.133198][ T542] overlayfs: unrecognized mount option "  Šo© ãà©ß™SæÛÈÒ"èp$" or missing value [ 40.217724][ T23] audit: type=1400 audit(1718643474.510:155): avc: denied { read } for pid=549 comm="syz-executor.1" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.257050][ T23] audit: type=1400 audit(1718643474.510:156): avc: denied { open } for pid=549 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.322682][ T23] audit: type=1400 audit(1718643474.510:157): avc: denied { write } for pid=549 comm="syz-executor.1" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.349386][ T23] audit: type=1400 audit(1718643474.600:158): avc: denied { block_suspend } for pid=554 comm="syz-executor.0" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.370723][ T556] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 40.371628][ T23] audit: type=1400 audit(1718643474.640:159): avc: denied { read } for pid=555 comm="syz-executor.3" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.422531][ T23] audit: type=1400 audit(1718643474.640:160): avc: denied { open } for pid=555 comm="syz-executor.3" path="/sys/kernel/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.446560][ T23] audit: type=1400 audit(1718643474.640:161): avc: denied { relabelfrom } for pid=555 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.476174][ T23] audit: type=1400 audit(1718643474.640:162): avc: denied { relabelto } for pid=555 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.487897][ T564] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 40.731470][ T576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 40.748397][ T576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 40.854493][ T582] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 40.975619][ T582] overlayfs: unrecognized mount option "  Šo© ãà©ß™SæÛÈÒ"èp$" or missing value [ 41.003343][ T588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 41.166240][ T590] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 41.349857][ T598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 42.561589][ T623] overlayfs: unrecognized mount option "  Šo© ãà©ß™SæÛÈÒ"èp$" or missing value [ 42.810201][ T631] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.256713][ T502] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 43.465400][ T651] EXT4-fs (loop0): 1 orphan inode deleted [ 43.482267][ T655] cgroup: syz-executor.3 (655) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 43.499358][ T651] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 43.518468][ T655] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 43.543781][ T651] ext4 filesystem being mounted at /root/syzkaller-testdir4089611318/syzkaller.Y8oB8X/27/file1 supports timestamps until 2038 (0x7fffffff) [ 43.586343][ T651] EXT4-fs error (device loop0): __ext4_get_inode_loc:4710: comm syz-executor.0: Invalid inode table block 133 in block_group 0 [ 43.626648][ T502] usb 3-1: Using ep0 maxpacket: 8 [ 44.196145][ T651] EXT4-fs (loop0): Remounting filesystem read-only [ 44.202729][ T651] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 44.239796][ T376] EXT4-fs error (device loop0): __ext4_get_inode_loc:4710: comm syz-executor.0: Invalid inode table block 133 in block_group 0 [ 44.281518][ T663] __nla_validate_parse: 3 callbacks suppressed [ 44.281534][ T663] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 44.284580][ T376] EXT4-fs error (device loop0): __ext4_get_inode_loc:4710: comm syz-executor.0: Invalid inode table block 133 in block_group 0 [ 44.296698][ T502] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 44.317857][ T502] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 44.317890][ T502] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 44.317915][ T502] usb 3-1: config 250 has no interface number 0 [ 44.317995][ T502] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 44.318032][ T502] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 44.318067][ T502] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 44.318104][ T502] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 44.318144][ T502] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 44.318173][ T502] usb 3-1: config 250 interface 228 has no altsetting 0 [ 44.576731][ T502] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 44.590473][ T666] overlayfs: unrecognized mount option "  Šo© ãà©ß™SæÛÈÒ"èp$" or missing value [ 44.595961][ T502] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 44.611099][ T502] usb 3-1: Product: syz [ 44.615103][ T502] usb 3-1: SerialNumber: syz [ 44.669287][ T502] hub 3-1:250.228: bad descriptor, ignoring hub [ 44.685599][ T502] hub: probe of 3-1:250.228 failed with error -5 [ 44.716051][ T376] syz-executor.0 (376) used greatest stack depth: 20760 bytes left [ 44.739397][ T673] syz-executor.3 (673): attempted to duplicate a private mapping with mremap. This is not supported. [ 44.904226][ T502] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 45.060914][ T685] ------------[ cut here ]------------ [ 45.066346][ T685] WARNING: CPU: 1 PID: 685 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 45.074198][ T685] Modules linked in: [ 45.077956][ T685] CPU: 1 PID: 685 Comm: syz-executor.1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 45.087834][ T685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 45.097759][ T685] RIP: 0010:drop_nlink+0xbb/0x100 [ 45.102595][ T685] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 7b 9a f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 e5 e1 c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 45.122044][ T685] RSP: 0018:ffff8881d9b0fbd0 EFLAGS: 00010287 [ 45.128030][ T685] RAX: ffffffff81a15a3b RBX: 1ffff1103a3ba529 RCX: 0000000000040000 [ 45.135838][ T685] RDX: ffffc90000540000 RSI: 0000000000000b0e RDI: 0000000000000b0f [ 45.143668][ T685] RBP: 0000000000000000 R08: ffffffff81a159bf R09: ffffed103cdddda1 [ 45.151503][ T685] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881d1dd2948 [ 45.159282][ T685] R13: ffff8881edff76c8 R14: ffff8881d1dd2900 R15: dffffc0000000000 [ 45.167097][ T685] FS: 00007f6c025866c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.175940][ T685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.182374][ T685] CR2: 0000001b32e38000 CR3: 00000001d7881000 CR4: 00000000003406a0 [ 45.190175][ T685] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.197990][ T685] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.205789][ T685] Call Trace: [ 45.208934][ T685] ? __warn+0x162/0x250 [ 45.212927][ T685] ? report_bug+0x3a1/0x4e0 [ 45.217277][ T685] ? drop_nlink+0xbb/0x100 [ 45.221603][ T685] ? drop_nlink+0xbb/0x100 [ 45.225860][ T685] ? do_invalid_op+0x6e/0x110 [ 45.230372][ T685] ? invalid_op+0x1e/0x30 [ 45.234540][ T685] ? drop_nlink+0x3f/0x100 [ 45.238784][ T685] ? drop_nlink+0xbb/0x100 [ 45.243041][ T685] ? drop_nlink+0xbb/0x100 [ 45.247334][ T685] ovl_do_remove+0x91f/0xc80 [ 45.251732][ T685] ? ovl_permission+0xd4/0x1f0 [ 45.256338][ T685] ? ovl_set_redirect+0x5f0/0x5f0 [ 45.261182][ T685] ? may_delete+0x53b/0x760 [ 45.265532][ T685] ? security_inode_unlink+0xca/0x110 [ 45.270932][ T685] vfs_unlink+0x315/0x510 [ 45.275105][ T685] do_unlinkat+0x430/0x8b0 [ 45.279448][ T685] ? fsnotify_link_count+0x80/0x80 [ 45.284819][ T685] ? getname_flags+0x1ec/0x4e0 [ 45.289429][ T685] do_syscall_64+0xca/0x1c0 [ 45.293768][ T685] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 45.299478][ T685] RIP: 0033:0x7f6c0320bf29 [ 45.303736][ T685] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.323263][ T685] RSP: 002b:00007f6c025860c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 45.331519][ T685] RAX: ffffffffffffffda RBX: 00007f6c03342f80 RCX: 00007f6c0320bf29 [ 45.339410][ T685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 45.347216][ T685] RBP: 00007f6c0327b074 R08: 0000000000000000 R09: 0000000000000000 [ 45.355042][ T685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.362935][ T685] R13: 000000000000000b R14: 00007f6c03342f80 R15: 00007fff81e0bd18 [ 45.370752][ T685] ---[ end trace 058f23ba9191e24b ]--- [ 45.549241][ T683] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.556815][ T683] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.567315][ T683] device bridge_slave_0 entered promiscuous mode [ 45.575286][ T683] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.583567][ T683] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.591981][ T683] device bridge_slave_1 entered promiscuous mode [ 45.654770][ T403] device bridge_slave_1 left promiscuous mode [ 45.660901][ T23] kauditd_printk_skb: 1156 callbacks suppressed [ 45.660928][ T23] audit: type=1400 audit(1718643479.950:1319): avc: denied { create } for pid=693 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.689779][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.702220][ T403] device bridge_slave_0 left promiscuous mode [ 45.708478][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.715808][ T23] audit: type=1400 audit(1718643479.950:1320): avc: denied { setopt } for pid=693 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.735882][ T396] usb 3-1: USB disconnect, device number 2 [ 45.742343][ T23] audit: type=1400 audit(1718643479.950:1321): avc: denied { connect } for pid=693 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.762988][ T396] usblp0: removed [ 45.769377][ T23] audit: type=1400 audit(1718643479.950:1322): avc: denied { write } for pid=693 comm="syz-executor.3" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.796595][ T23] audit: type=1400 audit(1718643479.950:1323): avc: denied { read } for pid=693 comm="syz-executor.3" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.898533][ T705] SELinux: Bad value for 'fscontext' [ 46.194301][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.222572][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.266651][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.275434][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.296596][ T502] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.308372][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.315256][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.322877][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.332136][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.340955][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.348123][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.370505][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.388858][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.404696][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.436858][ T718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 46.501092][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.536870][ T502] usb 5-1: Using ep0 maxpacket: 8 [ 46.564089][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.627312][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.656176][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.664431][ T502] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 46.766547][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.795821][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.840530][ T23] audit: type=1400 audit(1718643481.130:1324): avc: denied { mounton } for pid=683 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=12367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.964521][ T704] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.974909][ T704] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.626079][ T704] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.643292][ T502] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.662148][ T502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.679689][ T502] usb 5-1: Product: syz [ 47.687065][ T502] usb 5-1: Manufacturer: syz [ 47.695714][ T502] usb 5-1: SerialNumber: syz [ 47.728050][ T23] audit: type=1400 audit(1718643482.020:1325): avc: denied { setopt } for pid=742 comm="syz-executor.0" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.777020][ T5] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.865315][ T23] audit: type=1400 audit(1718643482.060:1326): avc: denied { read write } for pid=742 comm="syz-executor.0" name="uhid" dev="devtmpfs" ino=9267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.901720][ T502] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 47.914006][ T23] audit: type=1400 audit(1718643482.060:1327): avc: denied { open } for pid=742 comm="syz-executor.0" path="/dev/uhid" dev="devtmpfs" ino=9267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.914366][ T704] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.952003][ T704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.016106][ T645] usb 5-1: USB disconnect, device number 3 [ 48.031479][ T23] audit: type=1400 audit(1718643482.320:1328): avc: denied { create } for pid=703 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.014710][ T754] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.086891][ T502] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.311209][ T767] ------------[ cut here ]------------ [ 50.316639][ T767] WARNING: CPU: 0 PID: 767 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 50.324338][ T767] Modules linked in: [ 50.328087][ T767] CPU: 0 PID: 767 Comm: syz-executor.0 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 50.336570][ T502] usb 3-1: Using ep0 maxpacket: 8 [ 50.339356][ T767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 50.339388][ T767] RIP: 0010:drop_nlink+0xbb/0x100 [ 50.339427][ T767] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 7b 9a f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 e5 e1 c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 50.378715][ T767] RSP: 0018:ffff8881e389fbd0 EFLAGS: 00010287 [ 50.384696][ T767] RAX: ffffffff81a15a3b RBX: 1ffff1103a39287a RCX: 0000000000040000 [ 50.392496][ T767] RDX: ffffc90002f55000 RSI: 0000000000000b0b RDI: 0000000000000b0c [ 50.400398][ T767] RBP: 0000000000000000 R08: ffffffff81a159bf R09: ffffed103cb18681 [ 50.408213][ T767] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881d1c943d0 [ 50.416029][ T767] R13: ffff8881edfeb5b8 R14: ffff8881d1c94388 R15: dffffc0000000000 [ 50.423946][ T767] FS: 00007f30ce9fd6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 50.432714][ T767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.439129][ T767] CR2: 00007fec80b261f8 CR3: 00000001eb03c000 CR4: 00000000003406b0 [ 50.446943][ T767] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.454753][ T767] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.462643][ T767] Call Trace: [ 50.465789][ T767] ? __warn+0x162/0x250 [ 50.469789][ T767] ? report_bug+0x3a1/0x4e0 [ 50.474118][ T767] ? drop_nlink+0xbb/0x100 [ 50.478372][ T767] ? drop_nlink+0xbb/0x100 [ 50.482625][ T767] ? do_invalid_op+0x6e/0x110 [ 50.487143][ T767] ? invalid_op+0x1e/0x30 [ 50.491312][ T767] ? drop_nlink+0x3f/0x100 [ 50.495732][ T767] ? drop_nlink+0xbb/0x100 [ 50.500017][ T767] ? drop_nlink+0xbb/0x100 [ 50.504246][ T767] ovl_do_remove+0x91f/0xc80 [ 50.508666][ T767] ? ovl_permission+0xd4/0x1f0 [ 50.513286][ T767] ? ovl_set_redirect+0x5f0/0x5f0 [ 50.518212][ T767] ? may_delete+0x53b/0x760 [ 50.522565][ T767] ? security_inode_unlink+0xca/0x110 [ 50.527766][ T767] vfs_unlink+0x315/0x510 [ 50.531936][ T767] do_unlinkat+0x430/0x8b0 [ 50.536192][ T767] ? fsnotify_link_count+0x80/0x80 [ 50.541146][ T767] ? getname_flags+0x1ec/0x4e0 [ 50.545733][ T767] do_syscall_64+0xca/0x1c0 [ 50.550083][ T767] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 50.555797][ T767] RIP: 0033:0x7f30cf682f29 [ 50.560046][ T767] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.579580][ T767] RSP: 002b:00007f30ce9fd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 50.587910][ T767] RAX: ffffffffffffffda RBX: 00007f30cf7b9f80 RCX: 00007f30cf682f29 [ 50.595717][ T767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 50.603529][ T767] RBP: 00007f30cf6f2074 R08: 0000000000000000 R09: 0000000000000000 [ 50.611339][ T767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.619154][ T767] R13: 000000000000000b R14: 00007f30cf7b9f80 R15: 00007ffdfd0f3af8 [ 50.626975][ T767] ---[ end trace 058f23ba9191e24c ]--- [ 50.633284][ T502] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 50.641743][ T502] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 50.656600][ T502] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 50.665574][ T502] usb 3-1: config 250 has no interface number 0 [ 50.677532][ T502] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 50.689259][ T502] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 50.691234][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 50.691291][ T23] audit: type=1400 audit(1718643484.980:1335): avc: denied { mount } for pid=768 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.700061][ T502] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.736034][ T23] audit: type=1326 audit(1718643485.020:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec80a1cf29 code=0x0 [ 50.764333][ T502] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.775335][ T502] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 50.788741][ T502] usb 3-1: config 250 interface 228 has no altsetting 0 [ 50.875604][ T788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=788 comm=syz-executor.1 [ 50.888787][ T23] audit: type=1400 audit(1718643485.180:1337): avc: denied { nlmsg_write } for pid=787 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 50.906824][ T502] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 50.918649][ T502] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 50.927496][ T502] usb 3-1: Product: syz [ 50.931501][ T502] usb 3-1: SerialNumber: syz [ 50.977700][ T502] hub 3-1:250.228: bad descriptor, ignoring hub [ 50.983899][ T502] hub: probe of 3-1:250.228 failed with error -5 [ 51.009682][ T502] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 51.184880][ T645] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.231779][ T23] audit: type=1400 audit(1718643485.520:1338): avc: denied { unmount } for pid=377 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.339233][ T802] xt_TCPMSS: Only works on TCP SYN packets [ 51.557751][ T502] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 51.606924][ T645] usb 1-1: Using ep0 maxpacket: 8 [ 51.737939][ T645] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 51.926594][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.047692][ T502] usb 3-1: device firmware changed [ 52.052286][ T808] input: syz1 as /devices/virtual/input/input4 [ 52.053827][ T502] usb 3-1: USB disconnect, device number 3 [ 52.067170][ T502] usblp0: removed [ 52.086701][ T645] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.101125][ T645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.110587][ T645] usb 1-1: Product: syz [ 52.114754][ T645] usb 1-1: Manufacturer: syz [ 52.119559][ T645] usb 1-1: SerialNumber: syz [ 52.166566][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 52.173237][ T645] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 53.314462][ T107] usb 1-1: USB disconnect, device number 2 [ 53.320550][ T5] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 53.330469][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.338413][ T5] usb 5-1: Product: syz [ 53.342550][ T5] usb 5-1: Manufacturer: syz [ 53.347036][ T5] usb 5-1: SerialNumber: syz [ 53.377523][ T5] usb 5-1: config 0 descriptor?? [ 53.566619][ T502] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.850109][ T5] usb 5-1: USB disconnect, device number 4 [ 53.984697][ T23] audit: type=1400 audit(1718643488.270:1339): avc: denied { create } for pid=837 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.166606][ T23] audit: type=1400 audit(1718643488.370:1340): avc: denied { mounton } for pid=834 comm="syz-executor.3" path="/root/syzkaller-testdir1559206077/syzkaller.SUEcrE/37/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 54.447442][ T502] usb 3-1: unable to read config index 0 descriptor/all [ 54.491497][ T502] usb 3-1: can't read configurations, error -71 [ 54.499348][ T23] audit: type=1400 audit(1718643488.420:1341): avc: denied { sys_module } for pid=834 comm="syz-executor.3" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.674662][ T23] audit: type=1400 audit(1718643488.420:1342): avc: denied { module_load } for pid=834 comm="syz-executor.3" path="/sys/power/wake_lock" dev="sysfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 56.016847][ T23] audit: type=1400 audit(1718643490.300:1343): avc: denied { create } for pid=866 comm="syz-executor.3" dev="anon_inodefs" ino=13679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.066057][ T23] audit: type=1400 audit(1718643490.350:1344): avc: denied { ioctl } for pid=866 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13679 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.106584][ T107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.144396][ T23] audit: type=1400 audit(1718643490.380:1345): avc: denied { create } for pid=837 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.186981][ T23] audit: type=1400 audit(1718643490.380:1346): avc: denied { write } for pid=837 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.224013][ T865] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.229544][ T23] audit: type=1400 audit(1718643490.380:1347): avc: denied { nlmsg_read } for pid=837 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.340541][ T865] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1055) [ 56.365689][ T865] FAT-fs (loop4): Filesystem has been set read-only [ 56.383048][ T865] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1055) [ 56.404211][ T865] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1055) [ 56.526570][ T397] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 56.526704][ T107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.569454][ T107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.596503][ T107] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.767634][ T397] usb 4-1: Using ep0 maxpacket: 16 [ 56.776767][ T107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.792284][ T107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.815671][ T107] usb 2-1: Product: syz [ 56.825375][ T107] usb 2-1: Manufacturer: syz [ 56.835389][ T107] usb 2-1: SerialNumber: syz [ 56.887901][ T107] cdc_ncm 2-1:1.0: bind() failure [ 57.117579][ T13] usb 2-1: USB disconnect, device number 2 [ 57.262096][ T397] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 57.280057][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.310205][ T397] usb 4-1: Product: syz [ 57.323078][ T397] usb 4-1: Manufacturer: syz [ 57.335759][ T397] usb 4-1: SerialNumber: syz [ 57.416159][ T397] usb 4-1: config 0 descriptor?? [ 57.972541][ T899] incfs: Backing dir is not set, filesystem can't be mounted. [ 57.980103][ T899] incfs: mount failed -2 [ 58.038341][ T13] usb 4-1: USB disconnect, device number 2 [ 60.236460][ T907] bridge0: port 3(gretap0) entered blocking state [ 60.242917][ T907] bridge0: port 3(gretap0) entered disabled state [ 60.258041][ T907] device gretap0 entered promiscuous mode [ 60.265120][ T907] bridge0: port 3(gretap0) entered blocking state [ 60.271408][ T907] bridge0: port 3(gretap0) entered forwarding state [ 60.359632][ T907] device gretap0 left promiscuous mode [ 60.366181][ T907] bridge0: port 3(gretap0) entered disabled state [ 61.066586][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.218007][ T940] incfs: Backing dir is not set, filesystem can't be mounted. [ 61.225492][ T940] incfs: mount failed -2 [ 61.403306][ T944] bridge0: port 3(gretap0) entered blocking state [ 61.409893][ T944] bridge0: port 3(gretap0) entered disabled state [ 61.431212][ T944] device gretap0 entered promiscuous mode [ 61.439072][ T944] bridge0: port 3(gretap0) entered blocking state [ 61.445343][ T944] bridge0: port 3(gretap0) entered forwarding state [ 61.605182][ T944] device gretap0 left promiscuous mode [ 61.612984][ T944] bridge0: port 3(gretap0) entered disabled state [ 62.180811][ T23] audit: type=1400 audit(1718643495.650:1348): avc: denied { create } for pid=938 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.216680][ T23] audit: type=1400 audit(1718643495.690:1349): avc: denied { ioctl } for pid=938 comm="syz-executor.1" path="socket:[14806]" dev="sockfs" ino=14806 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.366694][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.386584][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.405696][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.587001][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.615054][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.630805][ T948] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 62.646873][ T13] usb 5-1: Product: syz [ 62.650873][ T13] usb 5-1: Manufacturer: syz [ 62.661339][ T948] ext4 filesystem being mounted at /root/syzkaller-testdir1559206077/syzkaller.SUEcrE/50/bus supports timestamps until 2038 (0x7fffffff) [ 62.679829][ T13] usb 5-1: SerialNumber: syz [ 62.714895][ T948] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #12: block 32: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 62.718214][ T13] cdc_ncm 5-1:1.0: bind() failure [ 62.746725][ T23] audit: type=1400 audit(1718643497.030:1350): avc: denied { create } for pid=947 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.747144][ T948] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #12: block 32: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 62.969535][ T397] usb 5-1: USB disconnect, device number 5 [ 63.033017][ T23] audit: type=1400 audit(1718643497.320:1351): avc: denied { write } for pid=972 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.054586][ T23] audit: type=1400 audit(1718643497.320:1352): avc: denied { read } for pid=972 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.149998][ T981] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 63.181400][ T983] syz-executor.1 (pid 983) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 63.227958][ T983] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 63.284152][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 63.293263][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.318243][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 63.335570][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.343566][ T985] syz-executor.3 (985) used greatest stack depth: 18616 bytes left [ 63.352910][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.365142][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.374118][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.383346][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.452676][ T1002] xt_hashlimit: overflow, rate too high: 0 [ 63.579851][ T23] audit: type=1400 audit(1718643497.870:1353): avc: denied { view } for pid=1008 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 63.620185][ T1012] binder: 1008:1012 ioctl c0306201 0 returned -14 [ 63.681744][ T23] audit: type=1400 audit(1718643497.910:1354): avc: denied { ioctl } for pid=1008 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.044885][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.054208][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.075604][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.076357][ T1034] xt_hashlimit: overflow, rate too high: 0 [ 64.094461][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.114712][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.128764][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.138310][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.155788][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.356614][ T397] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.486906][ T1060] binder: 1057:1060 ioctl c0306201 0 returned -14 [ 64.717180][ T397] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.731924][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.737774][ T397] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.744618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.755087][ T397] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.773657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.822346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.866741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.887578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.906914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.915323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.940955][ T397] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.953389][ T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.975853][ T397] usb 3-1: Product: syz [ 64.986958][ T397] usb 3-1: Manufacturer: syz [ 64.992581][ T397] usb 3-1: SerialNumber: syz [ 65.018770][ T1067] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.040247][ T397] cdc_ncm 3-1:1.0: bind() failure [ 65.055649][ T1073] xt_hashlimit: overflow, rate too high: 0 [ 65.064621][ T1067] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 65.083119][ T1067] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 65.103306][ T1067] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 65.114857][ T23] audit: type=1400 audit(1718643499.400:1355): avc: denied { rmdir } for pid=1066 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.140397][ T1067] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 65.156376][ T1067] Quota error (device loop0): write_blk: dquota write failed [ 65.163988][ T1067] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 65.243233][ T5] usb 3-1: USB disconnect, device number 6 [ 65.536656][ T1054] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 65.906969][ T1054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.926636][ T1054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.938757][ T1054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 65.950644][ T1054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 65.960622][ T1054] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 65.976876][ T1054] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 65.985866][ T1054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.995749][ T1054] usb 4-1: config 0 descriptor?? [ 66.471345][ T1054] wacom 0003:056A:00C4.0003: unknown main item tag 0x0 [ 66.489785][ T1054] wacom 0003:056A:00C4.0003: unknown main item tag 0x0 [ 66.508399][ T1054] wacom 0003:056A:00C4.0003: unknown main item tag 0x0 [ 66.525396][ T1054] wacom 0003:056A:00C4.0003: unknown main item tag 0x0 [ 66.545614][ T1054] wacom 0003:056A:00C4.0003: unknown main item tag 0x0 [ 66.556581][ T397] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.566108][ T1054] wacom 0003:056A:00C4.0003: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.3-1/input0 [ 66.696413][ T1054] usb 4-1: USB disconnect, device number 3 [ 66.784886][ T1139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.966651][ T397] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.977615][ T397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.986634][ T397] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.159294][ T397] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.168562][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.176937][ T397] usb 1-1: Product: syz [ 67.181106][ T397] usb 1-1: Manufacturer: syz [ 67.185754][ T397] usb 1-1: SerialNumber: syz [ 67.226861][ T395] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.236053][ T397] cdc_ncm 1-1:1.0: bind() failure [ 67.447040][ T1062] usb 1-1: USB disconnect, device number 3 [ 67.626817][ T395] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 67.634817][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 67.676205][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 67.696611][ T395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.712659][ T395] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.721732][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.731505][ T395] usb 2-1: config 0 descriptor?? [ 67.760258][ T1141] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 67.767849][ T1121] F2FS-fs (loop2): Test dummy encryption mode enabled [ 67.774745][ T1121] F2FS-fs (loop2): Test dummy encryption mode enabled [ 67.781828][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 67.781859][ T23] audit: type=1400 audit(1718643502.070:1361): avc: denied { write } for pid=1157 comm="syz-executor.4" name="event0" dev="devtmpfs" ino=9261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.821869][ T1121] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.966946][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 67.974811][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 67.975146][ T1121] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.031055][ T1121] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 68.039792][ T23] audit: type=1400 audit(1718643502.330:1362): avc: denied { append } for pid=1119 comm="syz-executor.2" path="/root/syzkaller-testdir2679990508/syzkaller.inp2OC/44/file0/cpuacct.usage_percpu" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.219571][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.241191][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.251455][ T1170] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.267739][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.284557][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.292404][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.319482][ T1170] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 68.333625][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.353113][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.361211][ T1170] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 68.373462][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.381071][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.388582][ T1170] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 68.397466][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.404764][ T395] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.409705][ T1170] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 68.413042][ T395] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 68.434396][ T1170] Quota error (device loop0): write_blk: dquota write failed [ 68.438883][ T395] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 68.442577][ T1170] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 68.457041][ T395] usb 2-1: USB disconnect, device number 3 [ 68.619277][ T1180] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 68.829406][ T1188] incfs: Backing dir is not set, filesystem can't be mounted. [ 68.865331][ T1188] incfs: mount failed -2 [ 68.905521][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.912521][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.689375][ T1199] xt_TCPMSS: Only works on TCP SYN packets [ 70.296601][ T1178] device bridge_slave_0 entered promiscuous mode [ 70.306190][ T1197] bridge0: port 3(gretap0) entered blocking state [ 70.312516][ T1197] bridge0: port 3(gretap0) entered disabled state [ 70.319944][ T1197] device gretap0 entered promiscuous mode [ 70.325756][ T1197] bridge0: port 3(gretap0) entered blocking state [ 70.332029][ T1197] bridge0: port 3(gretap0) entered forwarding state [ 70.358697][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.373345][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.390542][ T1178] device bridge_slave_1 entered promiscuous mode [ 70.454361][ T1196] device gretap0 left promiscuous mode [ 70.460337][ T1196] bridge0: port 3(gretap0) entered disabled state [ 70.525865][ T1204] xt_hashlimit: overflow, rate too high: 0 [ 70.649468][ T1213] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 70.762022][ T1211] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.811405][ T1211] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 70.854212][ T1211] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 70.868370][ T403] device bridge_slave_1 left promiscuous mode [ 70.870180][ T1211] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 70.874430][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.924861][ T1211] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 70.939651][ T403] device bridge_slave_0 left promiscuous mode [ 70.949615][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.961411][ T1211] Quota error (device loop0): write_blk: dquota write failed [ 70.977605][ T1211] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 71.055561][ T23] audit: type=1400 audit(1718643505.340:1363): avc: denied { bind } for pid=1226 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.154454][ T1232] incfs: Backing dir is not set, filesystem can't be mounted. [ 71.172131][ T1232] incfs: mount failed -2 [ 71.304263][ T1238] xt_hashlimit: overflow, rate too high: 0 [ 71.344340][ T1237] bridge0: port 3(gretap0) entered blocking state [ 71.350607][ T1237] bridge0: port 3(gretap0) entered disabled state [ 71.358341][ T1237] device gretap0 entered promiscuous mode [ 71.364145][ T1237] bridge0: port 3(gretap0) entered blocking state [ 71.370422][ T1237] bridge0: port 3(gretap0) entered forwarding state [ 71.518104][ T23] audit: type=1400 audit(1718643505.810:1364): avc: denied { create } for pid=1244 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.538946][ T5] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.584323][ T23] audit: type=1400 audit(1718643505.840:1365): avc: denied { setopt } for pid=1244 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.651114][ T23] audit: type=1400 audit(1718643505.840:1366): avc: denied { bind } for pid=1244 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.700581][ T24] cfg80211: failed to load regulatory.db [ 71.705250][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.721941][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.735775][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.744644][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.755929][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.762826][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.771067][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.779820][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.788132][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.794970][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.802329][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.811418][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.819017][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 71.824648][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.832935][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.841494][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.850188][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.859185][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.867295][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.869430][ T1254] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.876049][ T1243] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 71.900255][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.926835][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.930131][ T1254] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #17: comm syz-executor.2: iget: bad i_size value: -6917529027641081756 [ 71.935364][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.959216][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 71.964314][ T1254] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 71.970553][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.996773][ T1062] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.007042][ T5] usb 4-1: config 0 descriptor?? [ 72.008125][ T1254] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 72.012191][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.030023][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.048787][ T5] usb 4-1: cannot find UAC_HEADER [ 72.053837][ T5] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 72.072646][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.078342][ T1254] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 65: padding at end of block bitmap is not set [ 72.082131][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.230476][ T1271] xt_hashlimit: overflow, rate too high: 0 [ 72.285504][ T5] usb 4-1: USB disconnect, device number 4 [ 72.344569][ T1283] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 72.406654][ T1062] usb 2-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 72.415260][ T1062] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 72.424116][ T1062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.434843][ T1062] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 72.436719][ T396] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 72.443772][ T1062] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice=13.00 [ 72.460072][ T1062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.469659][ T1062] usb 2-1: config 0 descriptor?? [ 72.666602][ T397] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 72.712314][ T1062] usb 2-1: USB disconnect, device number 4 [ 72.731534][ T1291] F2FS-fs (loop0): invalid crc value [ 72.740033][ T1291] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.816724][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.832003][ T1291] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 72.834774][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.848550][ T1291] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.848756][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 72.866701][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.876634][ T396] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 72.891043][ T396] usb 5-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 72.902226][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.908638][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 72.908679][ T23] audit: type=1400 audit(1718643507.200:1368): avc: denied { map } for pid=1290 comm="syz-executor.0" path="/root/syzkaller-testdir2272330848/syzkaller.8sOe66/51/file1/memory.events" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.912171][ T396] usb 5-1: config 0 descriptor?? [ 72.949404][ T683] attempt to access beyond end of device [ 72.949404][ T683] loop0: rw=2049, want=45104, limit=40427 [ 73.036683][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.056647][ T397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.084209][ T23] audit: type=1400 audit(1718643507.370:1369): avc: denied { setopt } for pid=1303 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.107132][ T397] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.115453][ T23] audit: type=1400 audit(1718643507.370:1370): avc: denied { write } for pid=1303 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.126299][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.145336][ T397] usb 3-1: config 0 descriptor?? [ 73.150430][ T23] audit: type=1400 audit(1718643507.370:1371): avc: denied { read } for pid=1303 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.228823][ T23] audit: type=1400 audit(1718643507.520:1372): avc: denied { read } for pid=1311 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.441169][ T396] wacom 0003:056A:00C4.0005: unknown main item tag 0x0 [ 73.451307][ T396] wacom 0003:056A:00C4.0005: unknown main item tag 0x0 [ 73.464337][ T396] wacom 0003:056A:00C4.0005: unknown main item tag 0x0 [ 73.475517][ T396] wacom 0003:056A:00C4.0005: unknown main item tag 0x0 [ 73.488113][ T396] wacom 0003:056A:00C4.0005: unknown main item tag 0x0 [ 73.507196][ T396] wacom 0003:056A:00C4.0005: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.4-1/input0 [ 73.629446][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.652780][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.662889][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.681382][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.692344][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.699709][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.707813][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.715873][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.723879][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.731731][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.739059][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.746372][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.753676][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.760960][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.768453][ T397] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 73.776877][ T397] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 73.786935][ T18] usb 5-1: USB disconnect, device number 6 [ 73.796451][ T397] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 73.897467][ T397] usb 3-1: USB disconnect, device number 7 [ 73.942003][ T1323] F2FS-fs (loop1): invalid crc value [ 73.950493][ T1323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.034563][ T1323] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 74.041626][ T1323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.070299][ T1062] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 74.084298][ T373] attempt to access beyond end of device [ 74.084298][ T373] loop1: rw=2049, want=45104, limit=40427 [ 74.356575][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 74.436697][ T1062] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.456618][ T1062] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.556754][ T1062] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.575789][ T1062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.605776][ T1062] usb 1-1: SerialNumber: syz [ 74.633320][ T23] audit: type=1400 audit(1718643508.920:1373): avc: denied { map } for pid=1359 comm="syz-executor.2" path="socket:[15747]" dev="sockfs" ino=15747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.658353][ T1062] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 74.670813][ T23] audit: type=1400 audit(1718643508.920:1374): avc: denied { read } for pid=1359 comm="syz-executor.2" path="socket:[15747]" dev="sockfs" ino=15747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.705248][ T1350] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 74.717532][ T23] audit: type=1400 audit(1718643509.000:1375): avc: denied { read } for pid=1364 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.719715][ T1350] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 74.749840][ T1350] F2FS-fs (loop4): invalid crc value [ 74.767992][ T1350] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.776862][ T5] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 74.786794][ T5] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 74.795581][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.805913][ T5] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 74.814933][ T5] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice=13.00 [ 74.827594][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.838878][ T5] usb 4-1: config 0 descriptor?? [ 74.891883][ T1380] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.906144][ T1350] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 74.913132][ T1350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.026814][ T396] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 75.037336][ T23] audit: type=1400 audit(1718643509.330:1376): avc: denied { ioctl } for pid=1349 comm="syz-executor.4" path="/root/syzkaller-testdir404955663/syzkaller.UuBVds/4/bus/memory.stat" dev="loop4" ino=456 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.066672][ T1383] attempt to access beyond end of device [ 75.066672][ T1383] loop4: rw=2049, want=45112, limit=40427 [ 75.080038][ T1054] usb 4-1: USB disconnect, device number 5 [ 75.221026][ T403] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 75.229912][ T403] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 75.396760][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.407772][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.417381][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 75.428254][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.437680][ T396] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 75.450474][ T396] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 75.459345][ T396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.467326][ T1062] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 75.477013][ T396] usb 2-1: config 0 descriptor?? [ 75.566088][ T1393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.653491][ T1397] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 75.665776][ T5] usb 1-1: USB disconnect, device number 4 [ 75.786073][ T23] audit: type=1400 audit(1718643510.070:1377): avc: denied { create } for pid=1409 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.826680][ T1062] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 75.834769][ T1062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.834811][ T1062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 75.834851][ T1062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.834901][ T1062] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.834933][ T1062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.837726][ T1062] usb 3-1: config 0 descriptor?? [ 75.906713][ T1391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 75.960995][ T396] wacom 0003:056A:00C4.0007: unknown main item tag 0x0 [ 75.968051][ T396] wacom 0003:056A:00C4.0007: unknown main item tag 0x0 [ 75.974885][ T396] wacom 0003:056A:00C4.0007: unknown main item tag 0x0 [ 75.981991][ T396] wacom 0003:056A:00C4.0007: unknown main item tag 0x0 [ 75.988856][ T396] wacom 0003:056A:00C4.0007: unknown main item tag 0x0 [ 76.000051][ T396] wacom 0003:056A:00C4.0007: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 76.184189][ T396] usb 2-1: USB disconnect, device number 5 [ 76.241685][ T1420] F2FS-fs (loop0): invalid crc value [ 76.250265][ T1420] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.334165][ T1420] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 76.341461][ T1420] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.351602][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.358916][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.366172][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.373534][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.383849][ T683] attempt to access beyond end of device [ 76.383849][ T683] loop0: rw=2049, want=45104, limit=40427 [ 76.384396][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.402211][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.409499][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.416681][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.423948][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.431180][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.438381][ T1062] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 76.446446][ T1062] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 76.458875][ T1062] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 76.619927][ T1062] usb 3-1: USB disconnect, device number 8 [ 76.996752][ T397] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 77.051527][ T1456] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 77.483500][ T18] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.516660][ T397] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.519268][ T1484] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 77.527166][ T397] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.136734][ T397] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.145750][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.153777][ T397] usb 4-1: SerialNumber: syz [ 78.207019][ T397] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 78.326792][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.337963][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.348156][ T18] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.365528][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.375212][ T18] usb 1-1: config 0 descriptor?? [ 78.376788][ T107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 78.746685][ T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.757467][ T107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.770676][ T107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.780187][ T107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.790200][ T107] usb 3-1: config 0 descriptor?? [ 79.035616][ T1503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.138622][ T1503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.140947][ T1516] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 79.153960][ T1518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.265232][ T23] audit: type=1400 audit(1718643513.550:1378): avc: denied { read } for pid=1502 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.293370][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.300632][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.307806][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.314989][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.322237][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.329418][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.336886][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.344158][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.351388][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.358593][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.365770][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.373005][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.380297][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.387515][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.394852][ T107] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 79.402832][ T107] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 79.413899][ T107] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 79.522426][ T18] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0009/input/input14 [ 79.537803][ T18] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0009/input/input15 [ 79.553029][ T18] uclogic 0003:256C:006D.0009: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 79.567519][ T107] usb 3-1: USB disconnect, device number 9 [ 79.718693][ T397] usb 1-1: USB disconnect, device number 5 [ 80.252856][ T1535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.857360][ T18] usb 4-1: USB disconnect, device number 6 [ 81.429507][ T1531] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.437782][ T1531] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.449642][ T1531] F2FS-fs (loop1): invalid crc value [ 81.458541][ T1531] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.560847][ T1531] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.567879][ T1531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.697198][ T1531] attempt to access beyond end of device [ 81.697198][ T1531] loop1: rw=2049, want=45104, limit=40427 [ 81.817426][ T1531] attempt to access beyond end of device [ 81.817426][ T1531] loop1: rw=10241, want=45112, limit=40427 [ 81.836566][ T397] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 81.846774][ T1575] attempt to access beyond end of device [ 81.846774][ T1575] loop1: rw=2049, want=45120, limit=40427 [ 81.872512][ T403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 81.881562][ T403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 81.951777][ T403] attempt to access beyond end of device [ 81.951777][ T403] loop1: rw=1, want=45128, limit=40427 [ 82.176644][ T395] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.206768][ T397] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.226685][ T397] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.346710][ T397] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.365884][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 82.382182][ T397] usb 3-1: SerialNumber: syz [ 82.438662][ T397] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 82.536710][ T395] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 82.545072][ T395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 82.556419][ T395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 82.584696][ T395] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.597768][ T395] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.616583][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.636558][ T395] usb 1-1: config 0 descriptor?? [ 82.666706][ T1578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 82.849822][ T1600] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 82.857588][ T1600] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.868797][ T1600] F2FS-fs (loop1): invalid crc value [ 82.880664][ T1600] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.965556][ T1600] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.972622][ T1600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.108922][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.116465][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.124059][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.131453][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.139048][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.146405][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.146802][ T1613] attempt to access beyond end of device [ 83.146802][ T1613] loop1: rw=2049, want=45112, limit=40427 [ 83.153672][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.171986][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.179267][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.186565][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.193800][ T395] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 83.202051][ T395] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 83.213926][ T395] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 83.266208][ T1600] attempt to access beyond end of device [ 83.266208][ T1600] loop1: rw=10241, want=45120, limit=40427 [ 83.277908][ T1600] attempt to access beyond end of device [ 83.277908][ T1600] loop1: rw=2049, want=45120, limit=40427 [ 83.321819][ T403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 83.330727][ T403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 83.368145][ T1619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.397957][ T395] usb 1-1: USB disconnect, device number 6 [ 83.487103][ T107] usb 3-1: USB disconnect, device number 10 [ 84.308015][ T23] audit: type=1400 audit(1718643518.590:1379): avc: denied { shutdown } for pid=1630 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.064810][ T23] audit: type=1400 audit(1718643519.350:1380): avc: denied { mounton } for pid=1653 comm="syz-executor.1" path=2F726F6F742F73797A6B616C6C65722D74657374646972313036313435303032352F73797A6B616C6C65722E6D42656555692F3131302FE91F7189591E9233614B dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 85.286568][ T1054] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 85.406504][ T1661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 85.417436][ T1661] System zones: 0-1, 3-12 [ 85.423883][ T1661] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 85.558741][ T1649] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 85.577503][ T1649] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.600254][ T1649] F2FS-fs (loop0): invalid crc value [ 85.633200][ T1649] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.676667][ T1054] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.676688][ T395] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.704215][ T1054] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.806693][ T1054] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.815761][ T1054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.823815][ T1054] usb 4-1: SerialNumber: syz [ 85.828758][ T1649] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.836119][ T1649] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.877781][ T1054] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 86.056722][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.076565][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.096459][ T395] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.115666][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.135541][ T395] usb 2-1: config 0 descriptor?? [ 86.179274][ T1649] attempt to access beyond end of device [ 86.179274][ T1649] loop0: rw=10241, want=45104, limit=40427 [ 86.197467][ T1675] attempt to access beyond end of device [ 86.197467][ T1675] loop0: rw=2049, want=45120, limit=40427 [ 86.225796][ T403] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.234665][ T403] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 86.339711][ T403] attempt to access beyond end of device [ 86.339711][ T403] loop0: rw=1, want=45128, limit=40427 [ 86.753430][ T1681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.185451][ T1682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.516302][ T395] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input16 [ 87.536356][ T395] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input17 [ 87.552141][ T395] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 87.633427][ T107] usb 2-1: USB disconnect, device number 6 [ 87.650740][ T23] audit: type=1400 audit(1718643521.940:1381): avc: denied { create } for pid=1683 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 87.653377][ T1684] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.695040][ T23] audit: type=1400 audit(1718643521.940:1382): avc: denied { mounton } for pid=1683 comm="syz-executor.2" path="/root/syzkaller-testdir2679990508/syzkaller.inp2OC/86/file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 87.722525][ T1684] FAT-fs (loop5): unable to read boot sector [ 87.775003][ T1054] usb 4-1: USB disconnect, device number 7 [ 87.843057][ T23] audit: type=1400 audit(1718643522.130:1383): avc: denied { unlink } for pid=375 comm="syz-executor.2" name="file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 87.891581][ T23] audit: type=1400 audit(1718643522.180:1384): avc: denied { bind } for pid=1696 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.922298][ T23] audit: type=1400 audit(1718643522.180:1385): avc: denied { name_bind } for pid=1696 comm="syz-executor.2" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 88.001099][ T23] audit: type=1400 audit(1718643522.180:1386): avc: denied { node_bind } for pid=1696 comm="syz-executor.2" saddr=fe88::3 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 88.065671][ T23] audit: type=1400 audit(1718643522.280:1387): avc: denied { mounton } for pid=1702 comm="syz-executor.3" path=2F726F6F742F73797A6B616C6C65722D74657374646972313535393230363037372F73797A6B616C6C65722E5355456372452F3130392FE91F7189591E9233614B dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 88.479627][ T1722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.634933][ T107] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 89.166726][ T107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.186627][ T395] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 89.195337][ T23] audit: type=1400 audit(1718643523.480:1388): avc: denied { bind } for pid=1728 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.198073][ T1693] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.346763][ T107] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.355663][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.363869][ T107] usb 4-1: Product: syz [ 89.368208][ T1693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.368222][ T107] usb 4-1: Manufacturer: syz [ 89.368254][ T107] usb 4-1: SerialNumber: syz [ 89.384419][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 89.384449][ T23] audit: type=1400 audit(1718643523.670:1390): avc: denied { mount } for pid=1692 comm="syz-executor.0" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.556722][ T395] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.566993][ T395] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.639482][ T23] audit: type=1400 audit(1718643523.930:1391): avc: denied { unmount } for pid=683 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.659709][ T395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.669251][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.677114][ T395] usb 5-1: SerialNumber: syz [ 89.680580][ T23] audit: type=1400 audit(1718643523.970:1392): avc: denied { mount } for pid=1766 comm="syz-executor.2" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.704114][ T1054] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.719964][ T23] audit: type=1326 audit(1718643524.000:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 89.745566][ T23] audit: type=1326 audit(1718643524.000:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 89.748112][ T395] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 89.770353][ T23] audit: type=1326 audit(1718643524.000:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 89.800347][ T23] audit: type=1326 audit(1718643524.000:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 89.824808][ T23] audit: type=1326 audit(1718643524.010:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 89.849023][ T23] audit: type=1326 audit(1718643524.010:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8167a666a7 code=0x7ffc0000 [ 89.873273][ T23] audit: type=1326 audit(1718643524.010:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8167a2c379 code=0x7ffc0000 [ 90.039761][ T1773] fuse: Invalid rootmode [ 90.099244][ T1054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.110290][ T1054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.121222][ T1054] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.130523][ T1054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.140568][ T1054] usb 2-1: config 0 descriptor?? [ 90.413109][ T1793] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #17: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 90.431775][ T1793] EXT4-fs (loop2): no journal found [ 90.556787][ T107] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 90.563108][ T107] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 90.570455][ T107] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 90.605943][ T1789] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.660269][ T1801] FAT-fs (loop2): Directory bread(block 64) failed [ 90.666920][ T1801] FAT-fs (loop2): Directory bread(block 65) failed [ 90.673391][ T1801] FAT-fs (loop2): Directory bread(block 66) failed [ 90.679939][ T1801] FAT-fs (loop2): Directory bread(block 67) failed [ 90.686410][ T1801] FAT-fs (loop2): Directory bread(block 68) failed [ 90.693507][ T1801] FAT-fs (loop2): Directory bread(block 69) failed [ 90.700172][ T1801] FAT-fs (loop2): Directory bread(block 70) failed [ 90.706742][ T1801] FAT-fs (loop2): Directory bread(block 71) failed [ 90.707765][ T1789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.713506][ T1801] FAT-fs (loop2): Directory bread(block 72) failed [ 90.727193][ T1801] FAT-fs (loop2): Directory bread(block 73) failed [ 90.727972][ T1804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.774085][ T107] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 90.789044][ T107] usb 4-1: USB disconnect, device number 8 [ 90.795169][ T107] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 91.283038][ T1054] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000D/input/input18 [ 91.307929][ T1054] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000D/input/input19 [ 91.343337][ T1054] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 91.499378][ T1054] usb 2-1: USB disconnect, device number 7 [ 92.149494][ T1820] fuse: Invalid rootmode [ 92.220896][ T395] usb 5-1: USB disconnect, device number 7 [ 92.313218][ T1840] No source specified [ 92.523285][ T1867] fuse: Invalid rootmode [ 92.560927][ T1871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1871 comm=syz-executor.2 [ 92.596709][ T18] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.655005][ T1877] No source specified [ 92.706564][ T1054] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 92.727108][ T1883] request_module fs-squashfs succeeded, but still no fs? [ 92.897144][ T1895] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 92.905450][ T1895] System zones: 0-1, 3-12 [ 92.912304][ T1895] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 92.956720][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.967656][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.977533][ T18] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.996641][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.017034][ T18] usb 1-1: config 0 descriptor?? [ 93.026800][ T1902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1902 comm=syz-executor.1 [ 93.096683][ T1054] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.123230][ T1054] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.259862][ T1054] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.276614][ T1054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.294794][ T1054] usb 4-1: SerialNumber: syz [ 93.357833][ T1054] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 93.755544][ T1908] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 93.763212][ T1908] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.774665][ T1908] F2FS-fs (loop1): invalid crc value [ 93.783180][ T1908] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.902110][ T1908] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.913114][ T1908] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.995944][ T1925] cgroup1: none used incorrectly [ 94.230695][ T18] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input20 [ 94.374568][ T1933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.383378][ T18] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input21 [ 94.409648][ T18] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 94.438978][ T18] usb 1-1: USB disconnect, device number 7 [ 94.456875][ T1931] attempt to access beyond end of device [ 94.456875][ T1931] loop1: rw=2049, want=45112, limit=40427 [ 94.533453][ T403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 94.546557][ T403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 94.567143][ T395] usb 4-1: USB disconnect, device number 9 [ 94.663705][ T1952] No source specified [ 95.376575][ T396] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 95.707217][ T1980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1980 comm=syz-executor.1 [ 95.736675][ T396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.746912][ T396] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.811676][ T1988] No source specified [ 95.856697][ T396] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.877767][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.878518][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 95.878553][ T23] audit: type=1400 audit(1718643530.170:1411): avc: denied { read } for pid=1989 comm="syz-executor.0" name="file0" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 95.892484][ T396] usb 4-1: SerialNumber: syz [ 95.982125][ T396] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 96.038412][ T23] audit: type=1400 audit(1718643530.170:1412): avc: denied { open } for pid=1989 comm="syz-executor.0" path="/root/syzkaller-testdir2272330848/syzkaller.8sOe66/95/file0" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 96.456716][ T1969] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.464546][ T1969] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.476271][ T1969] F2FS-fs (loop2): invalid crc value [ 96.484727][ T1969] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.657626][ T1969] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.665050][ T1969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.706727][ T395] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.715953][ T23] audit: type=1400 audit(1718643531.000:1413): avc: denied { setopt } for pid=2018 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.753416][ T23] audit: type=1400 audit(1718643531.030:1414): avc: denied { getopt } for pid=2018 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.802136][ T2022] attempt to access beyond end of device [ 96.802136][ T2022] loop2: rw=2049, want=45112, limit=40427 [ 97.204140][ T2026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.252970][ T441] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 97.261910][ T441] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 97.309333][ T18] usb 4-1: USB disconnect, device number 10 [ 97.458013][ T395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.476621][ T395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.496594][ T395] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.515652][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.538395][ T395] usb 1-1: config 0 descriptor?? [ 97.553302][ T2038] cgroup1: name respecified [ 98.087468][ T2060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.196798][ T396] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 98.237816][ T2066] cgroup1: none used incorrectly [ 98.295690][ T23] audit: type=1400 audit(1718643532.580:1415): avc: denied { mount } for pid=2067 comm="syz-executor.2" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.346588][ T23] audit: type=1326 audit(1718643532.610:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 98.390379][ T23] audit: type=1326 audit(1718643532.610:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 98.414824][ T23] audit: type=1326 audit(1718643532.610:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 98.439396][ T23] audit: type=1326 audit(1718643532.610:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 98.463344][ T23] audit: type=1326 audit(1718643532.610:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2067 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167a68f29 code=0x7ffc0000 [ 98.519833][ T2047] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 98.526281][ T2047] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 98.542120][ T2047] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.579429][ T2050] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.587509][ T2050] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.606683][ T396] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.624979][ T2050] F2FS-fs (loop3): invalid crc value [ 98.630959][ T396] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.951692][ T2050] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.958838][ T396] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.982984][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.042386][ T396] usb 5-1: SerialNumber: syz [ 99.094492][ T2047] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.131145][ T2047] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.164015][ T396] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 99.204943][ T395] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000F/input/input22 [ 99.222921][ T395] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000F/input/input23 [ 99.237871][ T395] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 99.251873][ T395] usb 1-1: USB disconnect, device number 8 [ 99.267368][ T2073] attempt to access beyond end of device [ 99.267368][ T2073] loop1: rw=2049, want=45112, limit=40427 [ 99.337075][ T2050] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.344004][ T2050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.547678][ T2085] FAT-fs (loop0): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 99.547678][ T2085] ÿÿ18446744073709551615" or missing value [ 99.555044][ T2088] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.574599][ T2088] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 99.586464][ T2088] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 99.601034][ T2088] EXT4-fs error (device loop2): ext4_validate_block_bitmap:409: comm syz-executor.2: bg 0: block 19: invalid block bitmap [ 99.614031][ T2088] EXT4-fs (loop2): Remounting filesystem read-only [ 99.620902][ T2088] EXT4-fs error (device loop2) in ext4_free_blocks:5019: Corrupt filesystem [ 99.645641][ T2088] EXT4-fs (loop2): 1 truncate cleaned up [ 99.659741][ T2088] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity, [ 99.744557][ T2050] attempt to access beyond end of device [ 99.744557][ T2050] loop3: rw=10241, want=45104, limit=40427 [ 99.797929][ T2089] attempt to access beyond end of device [ 99.797929][ T2089] loop3: rw=2049, want=45120, limit=40427 [ 99.821410][ T375] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir2679990508/syzkaller.inp2OC/151/bus: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 99.875420][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 99.908161][ T2085] kvm: emulating exchange as write [ 99.919013][ T441] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 99.934789][ T441] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 100.054424][ T441] attempt to access beyond end of device [ 100.054424][ T441] loop3: rw=1, want=45128, limit=40427 [ 100.103289][ T2099] cgroup1: name respecified [ 100.123167][ T2100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.296240][ T396] usb 5-1: USB disconnect, device number 8 [ 100.628493][ T2110] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.635566][ T2110] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.656819][ T397] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.665403][ T2110] device bridge_slave_0 entered promiscuous mode [ 100.684745][ T403] bridge0: port 3(gretap0) entered disabled state [ 100.704294][ T403] device gretap0 left promiscuous mode [ 100.716609][ T403] bridge0: port 3(gretap0) entered disabled state [ 100.734839][ T2110] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.750655][ T2110] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.766449][ T2110] device bridge_slave_1 entered promiscuous mode [ 100.908735][ T2132] cgroup1: name respecified [ 100.929506][ T403] device bridge_slave_1 left promiscuous mode [ 100.943120][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.957404][ T403] device bridge_slave_0 left promiscuous mode [ 100.967238][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.016768][ T397] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.246706][ T107] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 101.627581][ T107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.653431][ T107] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.786745][ T107] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.796469][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.838574][ T107] usb 4-1: SerialNumber: syz [ 101.877847][ T107] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 101.926779][ T397] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.935775][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.944087][ T397] usb 1-1: Product: syz [ 101.948362][ T397] usb 1-1: Manufacturer: syz [ 101.953208][ T397] usb 1-1: SerialNumber: syz [ 101.980455][ T23] kauditd_printk_skb: 94 callbacks suppressed [ 101.980487][ T23] audit: type=1400 audit(1718643536.270:1515): avc: denied { read } for pid=2149 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.010960][ T23] audit: type=1400 audit(1718643536.270:1516): avc: denied { open } for pid=2149 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.035347][ T23] audit: type=1400 audit(1718643536.270:1517): avc: denied { ioctl } for pid=2149 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=794 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.250948][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.259097][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.286597][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.295186][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.306650][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.313520][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.321522][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.330957][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.339569][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.346432][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.369769][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.401383][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.420495][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.460938][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.500082][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.548887][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.587347][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.597769][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.623039][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.638025][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.676989][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 102.795626][ T2181] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.930804][ T23] audit: type=1400 audit(1718643537.220:1518): avc: denied { rename } for pid=2189 comm="syz-executor.2" name="#2" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 102.953442][ T23] audit: type=1400 audit(1718643537.220:1519): avc: denied { unlink } for pid=2189 comm="syz-executor.2" name="file1" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 103.097058][ T397] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 103.103493][ T397] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 103.118524][ T397] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 103.256146][ T18] usb 4-1: USB disconnect, device number 11 [ 103.327885][ T397] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 103.340301][ T2201] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.360551][ T397] usb 1-1: USB disconnect, device number 9 [ 103.367211][ T2201] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 103.378794][ T2201] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 103.395466][ T397] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 104.072852][ T23] audit: type=1400 audit(1718643537.830:1520): avc: denied { execute } for pid=2203 comm="syz-executor.2" path="/root/syzkaller-testdir4000034896/syzkaller.pZpPL8/8/file0/bus" dev="tmpfs" ino=18406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.113741][ T2201] EXT4-fs error (device loop3): ext4_validate_block_bitmap:409: comm syz-executor.3: bg 0: block 19: invalid block bitmap [ 104.142395][ T2201] EXT4-fs (loop3): Remounting filesystem read-only [ 104.163228][ T2201] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 104.174188][ T2201] EXT4-fs (loop3): 1 truncate cleaned up [ 104.180064][ T2201] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity, [ 104.208711][ T23] audit: type=1400 audit(1718643538.500:1521): avc: denied { read } for pid=2210 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.250098][ T23] audit: type=1400 audit(1718643538.520:1522): avc: denied { read } for pid=2214 comm="syz-executor.4" dev="nsfs" ino=4026532535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.273102][ T377] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir1559206077/syzkaller.SUEcrE/138/bus: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 104.273345][ T23] audit: type=1400 audit(1718643538.520:1523): avc: denied { open } for pid=2214 comm="syz-executor.4" path="net:[4026532535]" dev="nsfs" ino=4026532535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.302557][ T377] EXT4-fs (loop3): Remounting filesystem read-only [ 104.322892][ T23] audit: type=1400 audit(1718643538.520:1524): avc: denied { read } for pid=2214 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.451054][ T1062] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.496912][ T2218] EXT4-fs (loop2): Unrecognized mount option "smackfstransmute=(" or missing value [ 104.756572][ T1062] usb 2-1: Using ep0 maxpacket: 16 [ 104.864895][ T2227] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.872618][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.882713][ T2227] device bridge_slave_0 entered promiscuous mode [ 104.889290][ T1062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.903365][ T1062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.913202][ T1062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.918715][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 104.925953][ T1062] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 104.945527][ T1062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.956825][ T1062] usb 2-1: config 0 descriptor?? [ 104.963650][ T2227] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.970933][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.979003][ T2227] device bridge_slave_1 entered promiscuous mode [ 105.178902][ T441] device bridge_slave_1 left promiscuous mode [ 105.184987][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.195107][ T441] device bridge_slave_0 left promiscuous mode [ 105.201214][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.957020][ T1062] ryos 0003:1E7D:31CE.0010: unknown main item tag 0x0 [ 105.967415][ T1062] ryos 0003:1E7D:31CE.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 106.096609][ T395] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 106.115388][ T2227] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.122316][ T2227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.129490][ T2227] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.136341][ T2227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.145752][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.164993][ T1054] usb 2-1: USB disconnect, device number 8 [ 106.186600][ T396] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 106.193702][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.261197][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.269978][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.283519][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.292675][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.301022][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.307913][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.326568][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.335144][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.345814][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.352685][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.376076][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.385256][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.404358][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.412774][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.443275][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.452876][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.471580][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.481049][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.505995][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.514609][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.526976][ T395] usb 3-1: config 0 has no interfaces? [ 106.538850][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.547858][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.556817][ T396] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.561003][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.576852][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.696892][ T395] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.706293][ T395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.714291][ T395] usb 3-1: Product: syz [ 106.718865][ T395] usb 3-1: Manufacturer: syz [ 106.723349][ T395] usb 3-1: SerialNumber: syz [ 106.726729][ T396] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.733079][ T395] usb 3-1: config 0 descriptor?? [ 106.746464][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.754364][ T396] usb 1-1: Product: syz [ 106.758369][ T396] usb 1-1: Manufacturer: syz [ 106.762763][ T396] usb 1-1: SerialNumber: syz [ 106.958104][ T2280] FAT-fs (loop1): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 106.958104][ T2280] ÿÿ18446744073709551615" or missing value [ 107.282981][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 107.513504][ T2290] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.648938][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 107.648965][ T23] audit: type=1400 audit(1718643541.940:1529): avc: denied { bind } for pid=2293 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.689181][ T2296] sit: Src spoofed 0.0.0.0/2002:0:200:: -> 0.0.0.0/2002:: [ 107.794739][ T2301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.896779][ T396] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 107.904257][ T396] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 107.916616][ T396] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 108.127905][ T396] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 108.155961][ T396] usb 1-1: USB disconnect, device number 10 [ 108.162214][ T396] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 108.657077][ T23] audit: type=1400 audit(1718643542.760:1530): avc: denied { create } for pid=2315 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.683984][ T23] audit: type=1400 audit(1718643542.770:1531): avc: denied { bind } for pid=2315 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.705958][ T23] audit: type=1400 audit(1718643542.850:1532): avc: denied { setopt } for pid=2315 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.985569][ T2320] IPv6: NLM_F_REPLACE set, but no existing node found! [ 109.104307][ T2330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.232068][ T396] usb 3-1: USB disconnect, device number 11 [ 109.284322][ T23] audit: type=1400 audit(1718643543.570:1533): avc: denied { read } for pid=2344 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.325346][ T23] audit: type=1400 audit(1718643543.610:1534): avc: denied { getopt } for pid=2343 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.350420][ T2348] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.496564][ T395] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 110.538789][ T2379] EXT4-fs (loop1): Ignoring removed orlov option [ 110.545175][ T2379] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 110.562242][ T2379] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 110.586098][ T23] audit: type=1400 audit(1718643544.880:1535): avc: denied { setattr } for pid=2378 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.696616][ T396] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.733320][ T2392] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.879320][ T395] usb 1-1: config 0 has no interfaces? [ 111.696919][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.708056][ T396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.716819][ T395] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 111.720895][ T396] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.731936][ T2412] EXT4-fs (loop1): Ignoring removed orlov option [ 111.738828][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.740937][ T396] usb 5-1: config 0 descriptor?? [ 111.745790][ T395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.753531][ T2412] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 111.757862][ T395] usb 1-1: Product: syz [ 111.781029][ T2412] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 111.797518][ T395] usb 1-1: Manufacturer: syz [ 111.805951][ T395] usb 1-1: SerialNumber: syz [ 111.813331][ T395] usb 1-1: config 0 descriptor?? [ 112.024466][ T2428] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.239451][ T396] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 112.252052][ T396] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 112.275095][ T396] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 112.368287][ T2439] sit: Src spoofed 0.0.0.0/2002:0:200:: -> 0.0.0.0/2002:: [ 112.638667][ T2430] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 112.646288][ T2430] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.660456][ T2430] F2FS-fs (loop1): invalid crc value [ 112.669867][ T2430] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.446976][ T2430] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.454162][ T2430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.499552][ T107] usb 5-1: USB disconnect, device number 9 [ 113.601892][ T2457] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 114.407335][ T1054] usb 1-1: USB disconnect, device number 11 [ 114.450662][ T441] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 114.461664][ T441] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 114.520352][ T2473] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute=(" or missing value [ 114.558606][ T23] audit: type=1400 audit(1718643548.850:1536): avc: denied { mount } for pid=2479 comm="syz-executor.2" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.598356][ T23] audit: type=1400 audit(1718643548.890:1537): avc: denied { unmount } for pid=2110 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.906579][ T1062] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.446790][ T1062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.541690][ T1062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.596193][ T1062] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.634254][ T1062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.692963][ T1062] usb 3-1: config 0 descriptor?? [ 116.090982][ T1054] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.229302][ T1062] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 116.237994][ T2519] FAT-fs (loop0): Directory bread(block 64) failed [ 116.244354][ T2519] FAT-fs (loop0): Directory bread(block 65) failed [ 116.252099][ T1062] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 116.256830][ T2519] FAT-fs (loop0): Directory bread(block 66) failed [ 116.264385][ T1062] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 116.274971][ T2519] FAT-fs (loop0): Directory bread(block 67) failed [ 116.284762][ T2519] FAT-fs (loop0): Directory bread(block 68) failed [ 116.291841][ T2519] FAT-fs (loop0): Directory bread(block 69) failed [ 116.293790][ T2522] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 116.298903][ T2519] FAT-fs (loop0): Directory bread(block 70) failed [ 116.312550][ T2519] FAT-fs (loop0): Directory bread(block 71) failed [ 116.326658][ T2519] FAT-fs (loop0): Directory bread(block 72) failed [ 116.343191][ T2519] FAT-fs (loop0): Directory bread(block 73) failed [ 116.389431][ T23] audit: type=1400 audit(1718643550.680:1538): avc: denied { read } for pid=2514 comm="syz-executor.1" name="file3" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.414405][ T2515] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[9000] [ 116.418220][ T23] audit: type=1400 audit(1718643550.680:1539): avc: denied { open } for pid=2514 comm="syz-executor.1" path="/root/syzkaller-testdir1061450025/syzkaller.mBeeUi/178/file0/file3" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.424798][ T2515] ------------[ cut here ]------------ [ 116.457333][ T2515] WARNING: CPU: 0 PID: 2515 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 116.467388][ T2515] Modules linked in: [ 116.471120][ T2515] CPU: 0 PID: 2515 Comm: syz-executor.1 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 116.482465][ T2515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 116.492488][ T2515] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 116.498470][ T2515] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 116.517973][ T2515] RSP: 0018:ffff8881f0e16d18 EFLAGS: 00010246 [ 116.523880][ T2515] RAX: 149ca4668ae0d300 RBX: 1ffff1103e1c2e60 RCX: 149ca4668ae0d300 [ 116.531769][ T2515] RDX: ffffc90000540000 RSI: 0000000000000f9c RDI: 0000000000000f9d [ 116.539587][ T2515] RBP: ffff8881d4d1d000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 116.547397][ T2515] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881f24dc000 [ 116.555200][ T2515] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881f0e17300 [ 116.563023][ T2515] FS: 00007f6c025866c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 116.571784][ T2515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.578204][ T2515] CR2: 0000000000000000 CR3: 00000001d53ed000 CR4: 00000000003406b0 [ 116.586019][ T2515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.593824][ T2515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.601626][ T2515] Call Trace: [ 116.604778][ T2515] ? __warn+0x162/0x250 [ 116.608781][ T2515] ? report_bug+0x3a1/0x4e0 [ 116.613111][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 116.618510][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 116.623874][ T2515] ? do_invalid_op+0x6e/0x110 [ 116.628541][ T2515] ? invalid_op+0x1e/0x30 [ 116.632662][ T2515] ? wake_up_klogd+0xb2/0xf0 [ 116.637093][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 116.642482][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 116.647870][ T2515] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 116.653837][ T2515] z_erofs_decompress+0xba6/0xfc0 [ 116.658720][ T2515] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 116.664030][ T2515] ? z_erofs_onlinepage_endio+0x140/0x140 [ 116.669627][ T2515] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 116.674846][ T2515] ? _raw_spin_lock+0x1b0/0x1b0 [ 116.679543][ T2515] ? prepare_to_wait_event+0x3c1/0x420 [ 116.684835][ T2515] ? autoremove_wake_function+0xf0/0xf0 [ 116.690215][ T2515] ? finish_wait+0xa5/0x1a0 [ 116.694575][ T2515] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 116.700208][ T2515] ? z_erofs_attach_page+0x4d7/0x710 [ 116.705363][ T2515] ? z_erofs_do_read_page+0x2580/0x2580 [ 116.710732][ T2515] ? init_wait_entry+0xd0/0xd0 [ 116.715317][ T2515] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 116.721731][ T2515] ? check_preemption_disabled+0x9f/0x320 [ 116.727314][ T2515] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 116.733564][ T2515] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 116.739894][ T2515] ? setup_fault_attr+0x3d0/0x3d0 [ 116.744729][ T2515] ? plist_add+0x3f2/0x490 [ 116.748985][ T2515] ? plist_check_list+0x1f8/0x220 [ 116.753866][ T2515] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 116.760189][ T2515] read_pages+0x119/0x400 [ 116.764363][ T2515] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 116.770001][ T2515] ? find_get_entry+0x569/0x600 [ 116.774691][ T2515] __do_page_cache_readahead+0x448/0x4f0 [ 116.780177][ T2515] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 116.786516][ T2515] generic_file_read_iter+0x673/0x21f0 [ 116.791815][ T2515] ? find_get_pages_range_tag+0xae0/0xae0 [ 116.797370][ T2515] ? fget_many+0x20/0x20 [ 116.801519][ T2515] ? iov_iter_init+0x82/0x160 [ 116.806014][ T2515] __vfs_read+0x5cd/0x730 [ 116.810188][ T2515] ? rw_verify_area+0x360/0x360 [ 116.814873][ T2515] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 116.821490][ T2515] ? security_file_permission+0x1dc/0x2f0 [ 116.827033][ T2515] vfs_read+0x148/0x360 [ 116.831019][ T2515] ksys_read+0x199/0x2c0 [ 116.835112][ T2515] ? vfs_write+0x4e0/0x4e0 [ 116.839358][ T2515] do_syscall_64+0xca/0x1c0 [ 116.843690][ T2515] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 116.849409][ T2515] RIP: 0033:0x7f6c0320bf29 [ 116.853660][ T2515] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 116.873272][ T2515] RSP: 002b:00007f6c025860c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.881518][ T2515] RAX: ffffffffffffffda RBX: 00007f6c03342f80 RCX: 00007f6c0320bf29 [ 116.889416][ T2515] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 116.897227][ T2515] RBP: 00007f6c0327b074 R08: 0000000000000000 R09: 0000000000000000 [ 116.905040][ T2515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.912860][ T2515] R13: 000000000000000b R14: 00007f6c03342f80 R15: 00007fff81e0bd18 [ 116.920682][ T2515] ---[ end trace 058f23ba9191e24d ]--- [ 116.947230][ T2515] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[8192] [ 116.957551][ T2515] ------------[ cut here ]------------ [ 116.962892][ T2515] WARNING: CPU: 0 PID: 2515 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 116.972905][ T2515] Modules linked in: [ 116.976661][ T2515] CPU: 0 PID: 2515 Comm: syz-executor.1 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 116.988019][ T2515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 116.998024][ T2515] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 117.003997][ T2515] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 117.023437][ T2515] RSP: 0018:ffff8881f0e16fb8 EFLAGS: 00010246 [ 117.029342][ T2515] RAX: 149ca4668ae0d300 RBX: 1ffff1103e1c2eb4 RCX: 149ca4668ae0d300 [ 117.037154][ T2515] RDX: ffffc90000540000 RSI: 000000000003ffff RDI: 0000000000040000 [ 117.044974][ T2515] RBP: ffff8881d4d1d000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 117.052781][ T2515] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881f24dc000 [ 117.060588][ T2515] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881f0e175a0 [ 117.068405][ T2515] FS: 00007f6c025866c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 117.077180][ T2515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.083585][ T2515] CR2: 0000000000000000 CR3: 00000001d53ed000 CR4: 00000000003406b0 [ 117.091400][ T2515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.099207][ T2515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.107016][ T2515] Call Trace: [ 117.110161][ T2515] ? __warn+0x162/0x250 [ 117.114162][ T2515] ? report_bug+0x3a1/0x4e0 [ 117.118511][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 117.123885][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 117.129261][ T2515] ? do_invalid_op+0x6e/0x110 [ 117.133768][ T2515] ? invalid_op+0x1e/0x30 [ 117.138038][ T2515] ? wake_up_klogd+0xb2/0xf0 [ 117.142555][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 117.147935][ T2515] ? z_erofs_lz4_decompress+0x910/0xc70 [ 117.153338][ T2515] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 117.159301][ T2515] z_erofs_decompress+0xba6/0xfc0 [ 117.164186][ T2515] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 117.169464][ T2515] ? debug_smp_processor_id+0x20/0x20 [ 117.174702][ T2515] ? z_erofs_onlinepage_endio+0x140/0x140 [ 117.180303][ T2515] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 117.185528][ T2515] ? _raw_spin_lock+0x1b0/0x1b0 [ 117.190229][ T2515] z_erofs_submit_and_unzip+0x115d/0x13d0 [ 117.195763][ T2515] ? z_erofs_attach_page+0x4fa/0x710 [ 117.201002][ T2515] ? z_erofs_do_read_page+0x2580/0x2580 [ 117.206463][ T2515] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 117.212856][ T2515] ? read_pages+0x39d/0x400 [ 117.217214][ T2515] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 117.223378][ T2515] ? z_erofs_rcu_callback+0x20/0x20 [ 117.228448][ T2515] ? pagecache_get_page+0x5a7/0x750 [ 117.233456][ T2515] generic_file_read_iter+0xcd5/0x21f0 [ 117.238763][ T2515] ? find_get_pages_range_tag+0xae0/0xae0 [ 117.244287][ T2515] ? fget_many+0x20/0x20 [ 117.248364][ T2515] ? iov_iter_init+0x82/0x160 [ 117.252877][ T2515] __vfs_read+0x5cd/0x730 [ 117.257048][ T2515] ? rw_verify_area+0x360/0x360 [ 117.261737][ T2515] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 117.268340][ T2515] ? security_file_permission+0x1dc/0x2f0 [ 117.273879][ T2515] vfs_read+0x148/0x360 [ 117.277880][ T2515] ksys_read+0x199/0x2c0 [ 117.281960][ T2515] ? vfs_write+0x4e0/0x4e0 [ 117.286299][ T2515] do_syscall_64+0xca/0x1c0 [ 117.290640][ T2515] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 117.296624][ T2515] RIP: 0033:0x7f6c0320bf29 [ 117.300869][ T2515] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 117.320401][ T2515] RSP: 002b:00007f6c025860c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.328638][ T2515] RAX: ffffffffffffffda RBX: 00007f6c03342f80 RCX: 00007f6c0320bf29 [ 117.336475][ T2515] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 117.344274][ T2515] RBP: 00007f6c0327b074 R08: 0000000000000000 R09: 0000000000000000 [ 117.352157][ T2515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.359992][ T2515] R13: 000000000000000b R14: 00007f6c03342f80 R15: 00007fff81e0bd18 [ 117.367899][ T2515] ---[ end trace 058f23ba9191e24e ]--- [ 117.426652][ T1054] usb 5-1: config 0 has no interfaces? [ 117.586703][ T1054] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 117.605920][ T1054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.616022][ T1054] usb 5-1: Product: syz [ 117.620500][ T1054] usb 5-1: Manufacturer: syz [ 117.635078][ T1054] usb 5-1: SerialNumber: syz [ 117.648527][ T1054] usb 5-1: config 0 descriptor?? [ 117.697720][ T1062] usb 3-1: USB disconnect, device number 12 [ 118.196582][ T18] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 118.227014][ T2555] input: syz0 as /devices/virtual/input/input24 [ 118.334716][ T2536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.456603][ T18] usb 1-1: Using ep0 maxpacket: 8 [ 118.494632][ T2536] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 118.506244][ T2536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.790987][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.802630][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.812238][ T18] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.825838][ T18] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 118.834968][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.844569][ T18] usb 1-1: config 0 descriptor?? [ 119.581286][ T1246] usb 5-1: USB disconnect, device number 10 [ 119.632655][ T2227] attempt to access beyond end of device [ 119.632655][ T2227] loop3: rw=2049, want=45104, limit=40427 [ 119.786393][ T23] audit: type=1400 audit(1718643554.070:1540): avc: denied { ioctl } for pid=2578 comm="syz-executor.4" path="/root/syzkaller-testdir404955663/syzkaller.UuBVds/98/file2" dev="sda1" ino=1953 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 119.825833][ T18] wacom 0003:056A:00E6.0013: hidraw0: USB HID v0.00 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 120.034153][ T1246] usb 1-1: USB disconnect, device number 12 [ 120.075761][ T2583] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 120.327732][ T2590] usb usb8: usbfs: process 2590 (syz-executor.1) did not claim interface 0 before use [ 120.794608][ T23] audit: type=1400 audit(1718643555.080:1541): avc: denied { connect } for pid=2616 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.868919][ T2615] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 120.992735][ T2623] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 127: padding at end of block bitmap is not set [ 121.008830][ T2623] EXT4-fs (loop2): Remounting filesystem read-only [ 121.015647][ T2623] EXT4-fs error (device loop2) in ext4_free_blocks:5019: Corrupt filesystem [ 121.032526][ T2623] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz-executor.2: invalid indirect mapped block 1 (level 1) [ 121.063236][ T2623] EXT4-fs (loop2): 1 truncate cleaned up [ 121.076600][ T2623] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups, [ 121.164435][ T2634] mmap: syz-executor.0 (2634) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 121.487670][ T2648] input: syz0 as /devices/virtual/input/input28 [ 121.648643][ T2659] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 122.081730][ T2667] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 127: padding at end of block bitmap is not set [ 122.136870][ T2667] EXT4-fs (loop0): Remounting filesystem read-only [ 122.143503][ T2667] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 122.172638][ T2667] EXT4-fs error (device loop0): ext4_free_branches:1022: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 122.200754][ T2667] EXT4-fs (loop0): 1 truncate cleaned up [ 122.206340][ T2667] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups, [ 122.293303][ T2643] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 122.304105][ T2643] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.316868][ T2643] F2FS-fs (loop3): invalid crc value [ 122.369348][ T2643] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.516648][ T18] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.587267][ T2643] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.605239][ T2643] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.653723][ T2227] attempt to access beyond end of device [ 122.653723][ T2227] loop3: rw=2049, want=45104, limit=40427 [ 122.846797][ T397] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 122.886881][ T18] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 122.906741][ T18] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.996739][ T18] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.005720][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.026621][ T18] usb 3-1: SerialNumber: syz [ 123.216721][ T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.238674][ T2676] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.246239][ T2676] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.254395][ T397] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.276622][ T397] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.288674][ T18] usb 3-1: 0:2 : does not exist [ 123.308122][ T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.318683][ T23] audit: type=1400 audit(1718643557.610:1542): avc: denied { write } for pid=2690 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.343257][ T2676] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.358278][ T397] usb 1-1: config 0 descriptor?? [ 123.373604][ T23] audit: type=1400 audit(1718643557.610:1543): avc: denied { nlmsg_write } for pid=2690 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.485252][ T2676] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.496905][ T2676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.514338][ T23] audit: type=1400 audit(1718643557.800:1544): avc: denied { rename } for pid=2675 comm="syz-executor.1" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.544468][ T23] audit: type=1400 audit(1718643557.830:1545): avc: denied { create } for pid=2675 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 123.595379][ T2676] attempt to access beyond end of device [ 123.595379][ T2676] loop1: rw=2049, want=45104, limit=40427 [ 123.691084][ T23] audit: type=1400 audit(1718643557.980:1546): avc: denied { mount } for pid=2696 comm="syz-executor.3" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 123.751687][ T18] usb 3-1: USB disconnect, device number 13 [ 123.758640][ T23] audit: type=1400 audit(1718643558.050:1547): avc: denied { unmount } for pid=2227 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 123.838973][ T397] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.847493][ T397] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 123.858485][ T397] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.118864][ T2713] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 127: padding at end of block bitmap is not set [ 124.136868][ T2713] EXT4-fs (loop4): Remounting filesystem read-only [ 124.143234][ T2713] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 124.165201][ T2713] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 124.193091][ T2713] EXT4-fs (loop4): 1 truncate cleaned up [ 124.204198][ T2713] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups, [ 124.265592][ T2723] cgroup2: Unknown parameter 'no' [ 124.534102][ T2728] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 124.577707][ T2728] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 124.642559][ T18] usb 1-1: USB disconnect, device number 13 [ 124.703769][ T2728] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 124.983882][ T2728] EXT4-fs (loop1): group descriptors corrupted! [ 126.239354][ T2754] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 127: padding at end of block bitmap is not set [ 126.258819][ T2754] EXT4-fs (loop3): Remounting filesystem read-only [ 126.265294][ T2754] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 126.274226][ T2761] Zero length message leads to an empty skb [ 126.281416][ T2754] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 126.299879][ T2754] EXT4-fs (loop3): 1 truncate cleaned up [ 126.305473][ T2754] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups, [ 126.346635][ T1246] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.027112][ T107] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 128.106858][ T1246] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 128.117384][ T1246] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.196779][ T1246] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.206105][ T1246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.214734][ T1246] usb 2-1: SerialNumber: syz [ 128.371816][ T2780] F2FS-fs (loop4): invalid crc value [ 128.381132][ T2780] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.387449][ T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.398253][ T107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.411072][ T107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.420040][ T107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.432602][ T107] usb 3-1: config 0 descriptor?? [ 128.511185][ T2780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 128.670524][ T1246] usb 2-1: 0:2 : does not exist [ 129.251260][ T2803] attempt to access beyond end of device [ 129.251260][ T2803] loop4: rw=34817, want=78336, limit=40427 [ 130.074764][ T2812] cgroup2: Unknown parameter 'no' [ 130.120764][ T1178] attempt to access beyond end of device [ 130.120764][ T1178] loop4: rw=2049, want=45104, limit=40427 [ 130.150772][ T1246] usb 2-1: USB disconnect, device number 9 [ 130.186734][ T107] usbhid 3-1:0.0: can't add hid device: -71 [ 130.192923][ T107] usbhid: probe of 3-1:0.0 failed with error -71 [ 130.206756][ T2808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz-executor.1: bg 0: block 127: padding at end of block bitmap is not set [ 130.229506][ T107] usb 3-1: USB disconnect, device number 14 [ 130.251854][ T2808] EXT4-fs (loop1): Remounting filesystem read-only [ 130.258628][ T2808] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 130.269167][ T2808] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 130.303678][ T2808] EXT4-fs (loop1): 1 truncate cleaned up [ 130.309505][ T2808] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups, [ 130.342890][ T2826] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.506186][ T2847] cgroup2: Unknown parameter 'no' [ 131.606689][ T395] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.066934][ T395] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 132.116421][ T395] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.321331][ T2863] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.330989][ T395] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.373518][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.382199][ T395] usb 2-1: SerialNumber: syz [ 132.648542][ T395] usb 2-1: 0:2 : does not exist [ 133.382156][ T395] usb 2-1: USB disconnect, device number 10 [ 133.594815][ T2850] F2FS-fs (loop0): invalid crc value [ 133.645319][ T2850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.756863][ T2850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 serialport: VM disconnected.