last executing test programs: 2m1.024103012s ago: executing program 32 (id=427): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 1m32.327093377s ago: executing program 1 (id=1401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c020000190001000000000000000005ac1414bb000000000000000000000000ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\b\x00'], 0x20c}}, 0x0) 1m32.258648959s ago: executing program 1 (id=1404): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x24, 0xfc}}}}}]}}]}}, 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "ff"}, @main=@item_4={0x3, 0x0, 0x9, "78ea0fb9"}]}}, 0x0}, 0x0) 1m30.519426665s ago: executing program 1 (id=1471): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 1m30.298261619s ago: executing program 1 (id=1480): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) 1m29.445663482s ago: executing program 1 (id=1501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 1m29.361143913s ago: executing program 1 (id=1503): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x3a17, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x6e23, 0xf5e, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, 0x0}}], 0x1, 0x4008804) 1m14.717276931s ago: executing program 33 (id=1495): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xbffffffe}, {0x80000006, 0x80, 0x9, 0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 1m14.279040257s ago: executing program 34 (id=1503): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x3a17, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x6e23, 0xf5e, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, 0x0}}], 0x1, 0x4008804) 1m5.304930027s ago: executing program 6 (id=2138): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m5.304828187s ago: executing program 6 (id=2139): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 1m5.304761247s ago: executing program 6 (id=2140): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='1-6'], 0x31) 1m5.304356087s ago: executing program 6 (id=2141): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4e2, &(0x7f0000005d00)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m5.172072819s ago: executing program 6 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x2008, 0x840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x6}]}}}]}, 0x3c}}, 0x0) 1m5.037496831s ago: executing program 6 (id=2144): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) 1m5.037404991s ago: executing program 35 (id=2144): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) 54.461211685s ago: executing program 4 (id=2559): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0xc, 0x53, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 53.765522756s ago: executing program 4 (id=2591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) munlockall() 53.765138866s ago: executing program 4 (id=2593): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) getpgrp(0x0) 53.712259857s ago: executing program 4 (id=2595): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) readlinkat(r0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000001200)=""/4119, 0x1017) 53.711809557s ago: executing program 4 (id=2597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 52.84121387s ago: executing program 4 (id=2627): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 38.67647928s ago: executing program 36 (id=2627): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 38.158825548s ago: executing program 8 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) geteuid() 37.936447211s ago: executing program 8 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff070000d7"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000102000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 37.911721942s ago: executing program 8 (id=2982): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 37.857248302s ago: executing program 8 (id=2983): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) 37.857103663s ago: executing program 8 (id=2984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getdents64(0xffffffffffffffff, 0x0, 0x0) 37.795192584s ago: executing program 8 (id=2992): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r1, 0x1) 37.704544455s ago: executing program 37 (id=2992): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r1, 0x1) 17.024997466s ago: executing program 5 (id=3610): connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000380)=@canfd={{0x1}, 0x8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x4000801}, 0x20000000) 16.997903787s ago: executing program 5 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 16.977418667s ago: executing program 5 (id=3613): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 16.896367198s ago: executing program 5 (id=3617): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x4, 0x10000000, 0x7, 0xffff}) 16.588756573s ago: executing program 5 (id=3623): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 15.918497963s ago: executing program 5 (id=3630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) 15.854363794s ago: executing program 38 (id=3630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) 3.389967718s ago: executing program 9 (id=3885): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {@noflush_merge}, {@acl}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@adaptive_mode}, {@flush_merge}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.208492981s ago: executing program 2 (id=3894): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000040)={[{@dioread_nolock}, {@noquota}]}, 0xfe, 0x45d, &(0x7f0000001480)="$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") 2.942228735s ago: executing program 2 (id=3902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r1}, 0xc) 2.889854776s ago: executing program 2 (id=3904): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800012300000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x8084) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.835370566s ago: executing program 2 (id=3907): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.57805243s ago: executing program 9 (id=3910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf252500000005002a0017000000050029000300000008000200", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 2.532290581s ago: executing program 9 (id=3911): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) symlink(0x0, 0x0) 822.371838ms ago: executing program 9 (id=3916): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) readv(r2, &(0x7f0000008a80)=[{&(0x7f0000007900)=""/4096, 0x1000}], 0x1) 821.268828ms ago: executing program 3 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) rt_sigsuspend(0x0, 0x0) 821.153928ms ago: executing program 2 (id=3919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 797.963768ms ago: executing program 3 (id=3920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 711.437599ms ago: executing program 7 (id=3928): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r0, 0x800799c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e30, 0x0, @mcast2, 0x4}, 0x1c) sendfile(r1, r0, 0x0, 0x7fffffff) 692.03485ms ago: executing program 7 (id=3929): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 662.27215ms ago: executing program 7 (id=3931): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 626.487891ms ago: executing program 3 (id=3933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="019b1d35eb66c40f13002f"], 0x34}}, 0x0) 617.036151ms ago: executing program 7 (id=3934): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noquota}, {@resuid}, {@resuid}, {@norecovery}, {@dioread_nolock}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r2}}, {@data_err_abort}]}, 0x1, 0x5fa, &(0x7f0000000c80)="$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") mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) 573.952021ms ago: executing program 3 (id=3935): setresgid(0xee00, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20}}], 0x1, 0x0) 561.697492ms ago: executing program 3 (id=3936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) 547.236142ms ago: executing program 3 (id=3937): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a03000008241c8300074bcc0905060300040000000904010000020d00000904010102"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x6b39, 0x10, 0x1e, 0x8, 0x1, 0x10, 0x8, 0x7, 0x10, 0xf, 0x1c}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 538.905912ms ago: executing program 7 (id=3938): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r2, &(0x7f00000002c0), 0x0}, 0x20) 512.013162ms ago: executing program 7 (id=3939): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb27, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x20000884) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0xdb, {0xdb, 0x6, "87d2d224538f1eb543acfdf4f247c426d36c451ce34b0eb22b67cc36b66f12cfcf2664040c4ee6b18494f03978b7cdd38ea14dae330aeade4d41c34a6dd2493ff77fe7d46f452cd85a70efa35d084fec35b17356d99b05e77aeb70a4ab377b98e6da4f86d0b50927e487091f31e2d773f80fc53a4edbec4a5b53ae7babcf8a78dc16738c9a23493010f99f9a948380d0fb97fa980c29bc78c0cbe5f5c0911221ab604eb5458bec6409b543db9adc9da4ef7420a94a65b122fca8addab08ca1a5f188a63667f061d8e025648581cf2f0a5c99a614d5b221a86f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 331.032915ms ago: executing program 0 (id=3944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 278.595006ms ago: executing program 0 (id=3945): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 246.536617ms ago: executing program 0 (id=3946): setresgid(0xee00, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20}}], 0x1, 0x0) 222.497397ms ago: executing program 0 (id=3947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 205.253937ms ago: executing program 0 (id=3948): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) open(&(0x7f0000000340)='./file0\x00', 0x20000, 0x110) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 125.047718ms ago: executing program 0 (id=3949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008502"]) 41.00196ms ago: executing program 9 (id=3950): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r2, &(0x7f00000002c0), 0x0}, 0x20) 15.93618ms ago: executing program 9 (id=3951): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 0s ago: executing program 2 (id=3952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 49] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.494279][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.501715][ T7249] device bridge_slave_0 entered promiscuous mode [ 119.508860][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.515921][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.523211][ T7249] device bridge_slave_1 entered promiscuous mode [ 119.590101][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.597141][ T7249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.604441][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.611475][ T7249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.638440][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.669491][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.676997][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.696440][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.704739][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.711800][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.719620][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.728705][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.729366][ T39] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 119.735779][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.743495][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.760453][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.781612][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.789949][ T7279] loop9: detected capacity change from 0 to 512 [ 119.797648][ T7279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.801308][ T7249] device veth0_vlan entered promiscuous mode [ 119.813614][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.821663][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.829674][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.839403][ T7279] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.845792][ T7249] device veth1_macvtap entered promiscuous mode [ 119.857078][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.875715][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.886031][ T7283] loop5: detected capacity change from 0 to 256 [ 119.891794][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.936141][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.945010][ T39] usb 1-1: no configurations [ 119.949621][ T39] usb 1-1: can't read configurations, error -22 [ 120.000830][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3016'. [ 120.047376][ T7304] overlayfs: missing 'lowerdir' [ 120.135965][ T7320] loop2: detected capacity change from 0 to 512 [ 120.143692][ T7320] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.150973][ T7320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.158429][ T19] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 120.172282][ T7320] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.3028: bad orphan inode 131083 [ 120.277163][ T7322] loop5: detected capacity change from 0 to 40427 [ 120.284918][ T7322] F2FS-fs (loop5): invalid crc value [ 120.291869][ T7322] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.308553][ T304] device bridge_slave_1 left promiscuous mode [ 120.316673][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.335571][ T304] device bridge_slave_0 left promiscuous mode [ 120.341732][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.354744][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.357558][ T7327] loop2: detected capacity change from 0 to 40427 [ 120.366008][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.372627][ T7322] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.382800][ T19] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.390917][ T7327] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 120.403394][ T19] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.410620][ T304] device veth1_macvtap left promiscuous mode [ 120.420812][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.430724][ T304] device veth0_vlan left promiscuous mode [ 120.443237][ T7327] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.452632][ T19] usb 10-1: config 0 descriptor?? [ 120.465766][ T7327] F2FS-fs (loop2): invalid crc value [ 120.497491][ T7327] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.537854][ T7343] loop7: detected capacity change from 0 to 1024 [ 120.545047][ T1341] bio_check_eod: 14 callbacks suppressed [ 120.545061][ T1341] syz-executor: attempt to access beyond end of device [ 120.545061][ T1341] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 120.553692][ T7327] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.574787][ T7327] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.614412][ T7326] syz.2.3031: attempt to access beyond end of device [ 120.614412][ T7326] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 120.650656][ T4398] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 120.684483][ T8] kworker/u4:0: attempt to access beyond end of device [ 120.684483][ T8] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 120.811122][ T7364] serio: Serial port ptm0 [ 120.859303][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.877243][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.890772][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.899049][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.908736][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.916377][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.924390][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.932211][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.940146][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.948129][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.958487][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.966586][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.974651][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.982627][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.990777][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 120.998738][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.010787][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.018729][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.028718][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.037077][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.037402][ T7389] input: syz0 as /devices/virtual/input/input18 [ 121.044987][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.059104][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.066798][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.078951][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.089749][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.097758][ T7381] loop0: detected capacity change from 0 to 40427 [ 121.104262][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.104287][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.112240][ T7381] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.126863][ T7381] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.126964][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.136044][ T7381] F2FS-fs (loop0): invalid crc value [ 121.143166][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.150268][ T7381] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.155391][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.178375][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.186577][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.191576][ T7381] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.194360][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.201147][ T7381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.208906][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.223593][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.231496][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.238954][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.245001][ T7378] syz.0.3049: attempt to access beyond end of device [ 121.245001][ T7378] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 121.246419][ T19] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 121.268560][ T19] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 121.280896][ T19] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 121.284285][ T304] kworker/u4:3: attempt to access beyond end of device [ 121.284285][ T304] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 121.295840][ T19] usb 10-1: USB disconnect, device number 2 [ 121.342011][ T7397] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3056'. [ 121.373988][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 121.374003][ T28] audit: type=1400 audit(2000000019.215:1223): avc: denied { mount } for pid=7400 comm="syz.2.3059" name="/" dev="configfs" ino=11947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.403400][ T28] audit: type=1400 audit(2000000019.215:1224): avc: denied { search } for pid=7400 comm="syz.2.3059" name="/" dev="configfs" ino=11947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.475241][ T7415] loop2: detected capacity change from 0 to 16 [ 121.476451][ T7411] loop0: detected capacity change from 0 to 4096 [ 121.482237][ T7415] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.507493][ T7417] loop7: detected capacity change from 0 to 512 [ 121.520002][ T7417] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #15: comm syz.7.3065: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 121.539490][ T6700] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 121.550380][ T7417] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3065: couldn't read orphan inode 15 (err -117) [ 121.580276][ T7425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3068'. [ 121.617614][ T28] audit: type=1400 audit(2000000019.473:1225): avc: denied { getopt } for pid=7430 comm="syz.7.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.617840][ T7431] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 121.681477][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.699097][ T28] audit: type=1400 audit(2000000019.569:1226): avc: denied { getopt } for pid=7438 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.730830][ T7441] device veth0 entered promiscuous mode [ 121.742944][ T6700] usb 6-1: Using ep0 maxpacket: 32 [ 121.743903][ T7440] device veth0 left promiscuous mode [ 121.755220][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 121.755717][ T6700] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 121.778457][ T6700] usb 6-1: config 0 has no interface number 0 [ 121.789312][ T6700] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 121.802106][ T6700] usb 6-1: config 0 interface 196 has no altsetting 0 [ 121.815805][ T7423] loop0: detected capacity change from 0 to 40427 [ 121.823254][ T6700] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 121.832600][ T7423] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.841645][ T6700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.850384][ T7453] loop9: detected capacity change from 0 to 256 [ 121.854700][ T7423] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.857269][ T7453] exfat: Deprecated parameter 'utf8' [ 121.869650][ T6700] usb 6-1: Product: syz [ 121.876664][ T6700] usb 6-1: Manufacturer: syz [ 121.877242][ T7453] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d) [ 121.881715][ T6700] usb 6-1: SerialNumber: syz [ 121.916249][ T28] audit: type=1400 audit(2000000019.795:1227): avc: denied { append } for pid=7452 comm="syz.9.3082" path="/20/bus/pids.current" dev="loop9" ino=1048696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.940369][ T7423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.948436][ T6700] usb 6-1: config 0 descriptor?? [ 121.967225][ T7394] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 121.992230][ T7423] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.999552][ T7423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.215210][ T7479] loop7: detected capacity change from 0 to 512 [ 122.222052][ T7479] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 122.234131][ T7479] EXT4-fs (loop7): 1 truncate cleaned up [ 122.277428][ T7485] loop0: detected capacity change from 0 to 512 [ 122.284628][ T7485] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 122.294589][ T7485] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3089: iget: bogus i_mode (5) [ 122.306128][ T7485] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3089: couldn't read orphan inode 15 (err -117) [ 122.318634][ T7485] ext2 filesystem being mounted at /695/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.351289][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 122.368411][ T6700] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 122.377764][ T6700] ipheth: probe of 6-1:0.196 failed with error -22 [ 122.391137][ T7494] SELinux: ebitmap start bit (19554304) is beyond the end of the bitmap (1472) [ 122.412223][ T7494] SELinux: failed to load policy [ 122.435302][ T7505] netlink: 'syz.7.3103': attribute type 1 has an invalid length. [ 122.443497][ T7505] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3103'. [ 122.605231][ T7522] loop7: detected capacity change from 0 to 1024 [ 122.617280][ T39] usb 6-1: USB disconnect, device number 15 [ 122.619065][ T7524] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 122.633220][ T7522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.648570][ T7507] loop0: detected capacity change from 0 to 40427 [ 122.655506][ T7507] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 122.663582][ T7507] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.673834][ T7507] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.692704][ T7522] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.713220][ T7522] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.3111: path /234/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 122.717523][ T7507] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.737744][ T7522] EXT4-fs (loop7): Remounting filesystem read-only [ 122.740870][ T7507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.833151][ T7543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7543 comm=syz.2.3117 [ 122.955653][ T7557] syz.7.3125[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.955724][ T7557] syz.7.3125[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.208395][ T7591] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3139'. [ 123.345656][ T314] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 123.485110][ T7616] loop5: detected capacity change from 0 to 512 [ 123.494605][ T7616] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3150: casefold flag without casefold feature [ 123.495249][ T7616] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3150: couldn't read orphan inode 15 (err -117) [ 123.520978][ T314] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.521006][ T314] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.521927][ T314] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.549676][ T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.549703][ T314] usb 10-1: SerialNumber: syz [ 123.552492][ T7616] EXT4-fs (loop5): shut down requested (2) [ 123.587999][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 123.616084][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616109][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616129][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616147][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616166][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616205][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616224][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616243][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616261][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616279][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616297][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616315][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616348][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.616367][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.756445][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 123.757849][ T314] usb 10-1: 0:2 : does not exist [ 123.757913][ T6] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 123.757944][ T6] usb 1-1: config 0 has no interface number 0 [ 123.757991][ T6] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 123.758015][ T6] usb 1-1: config 0 interface 196 has no altsetting 0 [ 123.759644][ T314] usb 10-1: USB disconnect, device number 3 [ 123.766697][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 123.770948][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.783560][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.793623][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.800245][ T6] usb 1-1: Product: syz [ 123.806370][ T39] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 123.815183][ T6] usb 1-1: Manufacturer: syz [ 123.823338][ T39] hid-generic 0002:0004:0009.0017: hidraw0: HID v0.04 Device [syz0] on syz0 [ 123.831050][ T6] usb 1-1: SerialNumber: syz [ 123.880453][ T6] usb 1-1: config 0 descriptor?? [ 123.880734][ T7603] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 124.039224][ T7630] loop5: detected capacity change from 0 to 40427 [ 124.048093][ T7630] F2FS-fs (loop5): Found nat_bits in checkpoint [ 124.072714][ T7630] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 124.099506][ T7633] f2fs_ckpt-7:5: attempt to access beyond end of device [ 124.099506][ T7633] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 124.254218][ T28] audit: type=1400 audit(2000000022.305:1228): avc: denied { read write } for pid=7648 comm="syz.5.3163" name="file1" dev="tmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.277547][ T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.287268][ T6] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 124.293274][ T28] audit: type=1400 audit(2000000022.305:1229): avc: denied { open } for pid=7648 comm="syz.5.3163" path="/613/file1" dev="tmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.296745][ T6] ipheth: probe of 1-1:0.196 failed with error -22 [ 124.328265][ T7651] tmpfs: Unknown parameter 'gr' [ 124.341386][ T28] audit: type=1400 audit(2000000022.305:1230): avc: denied { watch watch_reads } for pid=7648 comm="syz.5.3163" path="/613/file1" dev="tmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.348748][ T7657] loop9: detected capacity change from 0 to 1024 [ 124.365979][ T28] audit: type=1400 audit(2000000022.337:1231): avc: denied { unlink } for pid=1341 comm="syz-executor" name="file1" dev="tmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.382698][ T7657] EXT4-fs mount: 36 callbacks suppressed [ 124.382714][ T7657] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 124.408887][ T7657] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.442333][ T7657] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 124.457343][ T7657] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28 [ 124.470048][ T7657] EXT4-fs (loop9): This should not happen!! Data will be lost [ 124.470048][ T7657] [ 124.492622][ T7657] EXT4-fs (loop9): Total free blocks count 0 [ 124.499889][ T7657] EXT4-fs (loop9): Free/Dirty block details [ 124.506069][ T7657] EXT4-fs (loop9): free_blocks=4293918720 [ 124.511851][ T7657] EXT4-fs (loop9): dirty_blocks=48 [ 124.516975][ T7657] EXT4-fs (loop9): Block reservation details [ 124.520980][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.523880][ T7657] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 124.543116][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.553318][ T314] usb 1-1: USB disconnect, device number 14 [ 124.562728][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.576507][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.585606][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.594565][ T8] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: block 4: comm kworker/u4:0: lblock 36 mapped to illegal pblock 4 (length 12) [ 124.610147][ T19] usb 3-1: config 0 descriptor?? [ 124.610438][ T8] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 12 with error 117 [ 124.671758][ T7679] loop9: detected capacity change from 0 to 512 [ 124.679220][ T7679] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 124.691231][ T7679] EXT4-fs (loop9): 1 truncate cleaned up [ 124.697086][ T7679] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 124.713615][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 124.735211][ T7686] loop9: detected capacity change from 0 to 128 [ 124.742078][ T7686] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.775071][ T7690] incfs: Options parsing error. -22 [ 124.780335][ T7690] incfs: mount failed -22 [ 124.794567][ T7692] loop9: detected capacity change from 0 to 256 [ 124.801460][ T7692] exfat: Deprecated parameter 'namecase' [ 124.809708][ T7692] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 124.826292][ T28] audit: type=1400 audit(2000000022.917:1232): avc: denied { rename } for pid=7691 comm="syz.9.3182" name="file2" dev="loop9" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.948647][ T6700] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 124.991522][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 124.999018][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.006441][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.013870][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.021243][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.028780][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.036321][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.044303][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.052267][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.060048][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.067828][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.077005][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.084853][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.087377][ T7714] loop9: detected capacity change from 0 to 256 [ 125.093909][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.106871][ T7716] device batadv_slave_1 entered promiscuous mode [ 125.106881][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.106904][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.126186][ T7716] device batadv_slave_1 left promiscuous mode [ 125.128073][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.141652][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.149556][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.157303][ T6700] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.170586][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.179352][ T6700] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.186752][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.194226][ T6700] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 125.203496][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.211040][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.218447][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.225844][ T6700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.234710][ T6700] usb 6-1: config 0 descriptor?? [ 125.240253][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.248945][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.256600][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.264090][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.271529][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.278982][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.286385][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.293798][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.301185][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.308588][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.316001][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.323642][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.331094][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.338488][ T19] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 125.346079][ T19] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 125.355053][ T19] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 125.370539][ T19] usb 3-1: USB disconnect, device number 2 [ 125.436086][ T6700] usbhid 6-1:0.0: can't add hid device: -71 [ 125.442076][ T6700] usbhid: probe of 6-1:0.0 failed with error -71 [ 125.457495][ T6700] usb 6-1: USB disconnect, device number 16 [ 125.507418][ T7745] loop9: detected capacity change from 0 to 4096 [ 125.516075][ T7745] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 125.540598][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 125.609480][ T7746] loop0: detected capacity change from 0 to 40427 [ 125.616946][ T7746] F2FS-fs (loop0): heap/no_heap options were deprecated [ 125.624205][ T7746] F2FS-fs (loop0): fault_injection options not supported [ 125.631346][ T7746] F2FS-fs (loop0): fault_type options not supported [ 125.639365][ T7746] F2FS-fs (loop0): invalid crc value [ 125.645857][ T7746] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.667526][ T7746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.689785][ T7753] f2fs_ckpt-7:0: attempt to access beyond end of device [ 125.689785][ T7753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.899474][ T7788] usb usb1: usbfs: process 7788 (syz.0.3223) did not claim interface 0 before use [ 125.964365][ T7772] loop9: detected capacity change from 0 to 40427 [ 125.971979][ T7772] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 125.981082][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 125.991061][ T7772] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 126.000377][ T7772] F2FS-fs (loop9): invalid crc value [ 126.043690][ T7772] F2FS-fs (loop9): Found nat_bits in checkpoint [ 126.055755][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 126.055771][ T28] audit: type=1326 audit(2000000024.236:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8bc478d3df code=0x7ffc0000 [ 126.087417][ T7818] loop7: detected capacity change from 0 to 512 [ 126.094221][ T7818] EXT4-fs: Ignoring removed nobh option [ 126.124178][ T7818] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 126.137854][ T28] audit: type=1326 audit(2000000024.279:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8bc478e9b7 code=0x7ffc0000 [ 126.138228][ T7818] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3236: invalid indirect mapped block 2683928664 (level 1) [ 126.182165][ T28] audit: type=1326 audit(2000000024.279:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bc478d290 code=0x7ffc0000 [ 126.194086][ T7807] loop2: detected capacity change from 0 to 40427 [ 126.212628][ T7818] EXT4-fs (loop7): 1 truncate cleaned up [ 126.217214][ T7807] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 126.218839][ T7818] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 126.226025][ T7807] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 126.244041][ T7807] F2FS-fs (loop2): invalid crc value [ 126.248470][ T7772] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 126.249570][ T28] audit: type=1326 audit(2000000024.279:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bc478e52b code=0x7ffc0000 [ 126.256994][ T7772] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 126.280022][ T28] audit: type=1326 audit(2000000024.279:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8bc478d58a code=0x7ffc0000 [ 126.335634][ T7807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.338730][ T28] audit: type=1326 audit(2000000024.279:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8bc478d58a code=0x7ffc0000 [ 126.367531][ T28] audit: type=1326 audit(2000000024.279:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8bc478d197 code=0x7ffc0000 [ 126.391929][ T28] audit: type=1326 audit(2000000024.279:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8bc47900ca code=0x7ffc0000 [ 126.416154][ T28] audit: type=1326 audit(2000000024.494:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bc478d290 code=0x7ffc0000 [ 126.439940][ T28] audit: type=1326 audit(2000000024.494:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8bc478d677 code=0x7ffc0000 [ 126.472465][ T7807] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.479613][ T7807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.539572][ T7849] loop0: detected capacity change from 0 to 512 [ 126.552496][ T7849] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.561493][ T7849] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.568265][ T7849] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.583237][ T7849] EXT4-fs (loop0): Test dummy encryption mode enabled [ 126.608544][ T7849] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.636940][ T7849] EXT4-fs (loop0): 1 truncate cleaned up [ 126.646576][ T7849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.666070][ T285] EXT4-fs (loop0): unmounting filesystem. [ 126.790397][ T7863] loop9: detected capacity change from 0 to 40427 [ 126.814113][ T7863] F2FS-fs (loop9): fault_injection options not supported [ 126.823781][ T7863] F2FS-fs (loop9): invalid crc value [ 126.830057][ T7863] F2FS-fs (loop9): Found nat_bits in checkpoint [ 126.864074][ T7863] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 126.897515][ T7887] loop2: detected capacity change from 0 to 40427 [ 126.906363][ T7887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.934651][ T7887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.972111][ T7168] syz-executor: attempt to access beyond end of device [ 126.972111][ T7168] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.990740][ T7249] syz-executor: attempt to access beyond end of device [ 126.990740][ T7249] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.008733][ T314] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 127.099924][ T7911] usb usb8: usbfs: process 7911 (syz.9.3260) did not claim interface 0 before use [ 127.205895][ T314] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 127.214707][ T314] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 127.225908][ T314] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 127.243672][ T314] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.259753][ T314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.268492][ T314] usb 6-1: Product: syz [ 127.274558][ T314] usb 6-1: Manufacturer: syz [ 127.279527][ T314] usb 6-1: SerialNumber: syz [ 127.304616][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3272'. [ 127.446573][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.476434][ T314] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 127.484461][ T314] usb 6-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 127.492920][ T314] usb 6-1: found format II with max.bitrate = 128, frame size=0 [ 127.500944][ T314] usb 6-1: 2:1: All rates were zero [ 127.509560][ T314] usb 6-1: USB disconnect, device number 17 [ 127.531494][ T7951] loop9: detected capacity change from 0 to 1024 [ 127.538195][ T7951] EXT4-fs: Ignoring removed orlov option [ 127.543997][ T7951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.560697][ T7951] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 127.579981][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 127.600158][ T7957] loop9: detected capacity change from 0 to 512 [ 127.608003][ T7957] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.3283: casefold flag without casefold feature [ 127.621676][ T7957] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.3283: couldn't read orphan inode 15 (err -117) [ 127.622482][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.634555][ T7957] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 127.644866][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.664409][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.677441][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.686515][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.695140][ T39] usb 3-1: config 0 descriptor?? [ 127.724551][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 127.745845][ T7962] loop9: detected capacity change from 0 to 128 [ 128.064028][ T7986] netlink: 'syz.0.3296': attribute type 12 has an invalid length. [ 128.076242][ T39] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 128.091933][ T39] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.210205][ T8007] loop9: detected capacity change from 0 to 512 [ 128.216646][ T6700] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 128.232094][ T8007] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 128.241814][ T8007] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.276257][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 128.351245][ T8039] netlink: 'syz.9.3317': attribute type 280 has an invalid length. [ 128.388364][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3319'. [ 128.399583][ T6700] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.410162][ T6700] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.425264][ T6700] usb 6-1: New USB device found, idVendor=89a7, idProduct=ab19, bcdDevice= 0.40 [ 128.435411][ T6700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.443457][ T6700] usb 6-1: Product: syz [ 128.448133][ T6700] usb 6-1: Manufacturer: syz [ 128.452963][ T6700] usb 6-1: SerialNumber: syz [ 128.459518][ T8049] device veth1_to_bond entered promiscuous mode [ 128.466561][ T8048] device veth1_to_bond left promiscuous mode [ 128.565066][ T320] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.743071][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.754137][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.764261][ T320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.777228][ T320] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.786285][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.794784][ T320] usb 1-1: config 0 descriptor?? [ 128.842172][ T4398] EXT4-fs (loop7): unmounting filesystem. [ 128.881084][ T8069] loop7: detected capacity change from 0 to 128 [ 128.888194][ T8069] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 128.904772][ T8069] FAT-fs (loop7): FAT read failed (blocknr 128) [ 128.956504][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 129.134573][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.145660][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.155533][ T6] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.164728][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.173319][ T6] usb 10-1: config 0 descriptor?? [ 129.178961][ T320] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 129.187789][ T320] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 129.196392][ T320] plantronics 0003:047F:FFFF.001A: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 129.395619][ T6700] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 129.419521][ T6700] cdc_ncm 6-1:1.0: bind() failure [ 129.425280][ T6700] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 129.432171][ T6700] cdc_ncm 6-1:1.1: bind() failure [ 129.438011][ T6700] usb 6-1: USB disconnect, device number 18 [ 129.441988][ T24] usb 1-1: USB disconnect, device number 15 [ 129.561071][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.569622][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.578765][ T6] usbhid 10-1:0.0: can't add hid device: -71 [ 129.584888][ T6] usbhid: probe of 10-1:0.0 failed with error -71 [ 129.592070][ T6] usb 10-1: USB disconnect, device number 4 [ 129.886258][ T8100] tmpfs: Unknown parameter 'fow' [ 129.921604][ T8106] loop0: detected capacity change from 0 to 512 [ 129.930956][ T8106] EXT4-fs: Ignoring removed oldalloc option [ 129.937664][ T8106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.954308][ T8109] device pim6reg1 entered promiscuous mode [ 129.958084][ T8106] EXT4-fs (loop0): 1 truncate cleaned up [ 129.966507][ T8106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.990755][ T285] EXT4-fs (loop0): unmounting filesystem. [ 130.071140][ T8133] syz.9.3361[8133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.071213][ T8133] syz.9.3361[8133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.096553][ T19] usb 3-1: USB disconnect, device number 3 [ 130.298613][ T39] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.305680][ T8145] loop2: detected capacity change from 0 to 40427 [ 130.322370][ T8145] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 130.334380][ T8145] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 130.353543][ T8145] F2FS-fs (loop2): invalid crc value [ 130.362356][ T8145] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.397522][ T8145] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.405644][ T8145] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.463159][ T1386] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.477019][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.492155][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.514310][ T39] usb 1-1: New USB device found, idVendor=89a7, idProduct=ab19, bcdDevice= 0.40 [ 130.525127][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.533737][ T39] usb 1-1: Product: syz [ 130.537920][ T39] usb 1-1: Manufacturer: syz [ 130.543342][ T39] usb 1-1: SerialNumber: syz [ 130.614928][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 130.624239][ T8178] device veth1_macvtap left promiscuous mode [ 130.710952][ T8176] loop5: detected capacity change from 0 to 40427 [ 130.718165][ T8176] F2FS-fs (loop5): heap/no_heap options were deprecated [ 130.725183][ T8176] F2FS-fs (loop5): fault_injection options not supported [ 130.732362][ T8176] F2FS-fs (loop5): fault_type options not supported [ 130.742646][ T8176] F2FS-fs (loop5): invalid crc value [ 130.749421][ T8176] F2FS-fs (loop5): Found nat_bits in checkpoint [ 130.788361][ T8176] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.821037][ T8182] f2fs_ckpt-7:5: attempt to access beyond end of device [ 130.821037][ T8182] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.138473][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 131.138487][ T28] audit: type=1400 audit(2000000029.697:1283): avc: denied { rename } for pid=8189 comm="syz.5.3383" name="file0" dev="incremental-fs" ino=3382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.189379][ T8192] device macsec2 entered promiscuous mode [ 131.197653][ T8192] device vlan1 entered promiscuous mode [ 131.205069][ T8192] device vlan1 left promiscuous mode [ 131.444850][ T8201] loop5: detected capacity change from 0 to 40427 [ 131.452594][ T8201] F2FS-fs (loop5): invalid crc value [ 131.459150][ T8201] F2FS-fs (loop5): Found nat_bits in checkpoint [ 131.481470][ T8201] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 131.495107][ T39] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 131.511187][ T39] cdc_ncm 1-1:1.0: bind() failure [ 131.517294][ T39] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 131.524622][ T39] cdc_ncm 1-1:1.1: bind() failure [ 131.530688][ T39] usb 1-1: USB disconnect, device number 16 [ 131.530984][ T1341] syz-executor: attempt to access beyond end of device [ 131.530984][ T1341] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 132.002043][ T8225] loop0: detected capacity change from 0 to 512 [ 132.015971][ T8225] EXT4-fs (loop0): 1 orphan inode deleted [ 132.021776][ T8225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.030901][ T8225] ext4 filesystem being mounted at /756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.032341][ T8] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.051108][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 132.068026][ T285] EXT4-fs (loop0): unmounting filesystem. [ 132.114137][ T8235] device macsec3 entered promiscuous mode [ 132.120083][ T8235] device ip6gretap0 entered promiscuous mode [ 132.126917][ T8235] device ip6gretap0 left promiscuous mode [ 132.331387][ T1406] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.378318][ T8251] loop0: detected capacity change from 0 to 40427 [ 132.385494][ T8251] F2FS-fs (loop0): fault_injection options not supported [ 132.393248][ T8251] F2FS-fs (loop0): invalid crc value [ 132.427262][ T8251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.434705][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3413'. [ 132.450206][ T8265] device veth1_macvtap left promiscuous mode [ 132.464783][ T8251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.487619][ T8251] syz.0.3407: attempt to access beyond end of device [ 132.487619][ T8251] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 132.508560][ T285] syz-executor: attempt to access beyond end of device [ 132.508560][ T285] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 132.617158][ T8286] loop2: detected capacity change from 0 to 2048 [ 132.651013][ T28] audit: type=1400 audit(2000000031.317:1284): avc: denied { relabelfrom } for pid=8296 comm="syz.0.3417" name="" dev="pipefs" ino=51630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 132.681087][ T8286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.681306][ T28] audit: type=1400 audit(2000000031.328:1285): avc: denied { relabelto } for pid=8296 comm="syz.0.3417" name="" dev="pipefs" ino=51630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 132.711499][ T8286] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.766916][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3432'. [ 132.789138][ T8311] device bridge_slave_0 left promiscuous mode [ 132.795712][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.829276][ T8316] loop5: detected capacity change from 0 to 512 [ 132.836157][ T8316] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 132.836607][ T8303] loop9: detected capacity change from 0 to 40427 [ 132.844920][ T8316] EXT4-fs (loop5): invalid journal inode [ 132.852230][ T8303] F2FS-fs (loop9): fault_injection options not supported [ 132.860757][ T8316] EXT4-fs (loop5): can't get journal size [ 132.870734][ T8303] F2FS-fs (loop9): invalid crc value [ 132.875387][ T8316] EXT4-fs (loop5): 1 truncate cleaned up [ 132.877799][ T8303] F2FS-fs (loop9): Found nat_bits in checkpoint [ 132.882019][ T8316] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 132.915674][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 132.930842][ T8303] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 132.944778][ T28] audit: type=1400 audit(2000000031.629:1286): avc: denied { create } for pid=8315 comm="syz.5.3433" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 132.992076][ T8316] EXT4-fs error (device loop5): ext4_check_dx_root:2266: inode #2: comm syz.5.3433: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 133.021211][ T8303] syz.9.3429: attempt to access beyond end of device [ 133.021211][ T8303] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 133.046273][ T1341] EXT4-fs (loop5): unmounting filesystem. [ 133.053540][ T7168] syz-executor: attempt to access beyond end of device [ 133.053540][ T7168] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 133.188030][ T19] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 133.366108][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 133.368581][ T8359] loop5: detected capacity change from 0 to 40427 [ 133.372734][ T19] usb 1-1: config 0 has no interfaces? [ 133.385152][ T8359] F2FS-fs (loop5): fault_injection options not supported [ 133.395829][ T8359] F2FS-fs (loop5): invalid crc value [ 133.402163][ T19] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.411999][ T8359] F2FS-fs (loop5): Found nat_bits in checkpoint [ 133.425955][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.443824][ T19] usb 1-1: Product: syz [ 133.448109][ T19] usb 1-1: Manufacturer: syz [ 133.460464][ T19] usb 1-1: SerialNumber: syz [ 133.469666][ T19] usb 1-1: config 0 descriptor?? [ 133.474878][ T8359] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 133.497450][ T8359] syz.5.3452: attempt to access beyond end of device [ 133.497450][ T8359] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 133.516094][ T1341] syz-executor: attempt to access beyond end of device [ 133.516094][ T1341] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 133.598112][ T6] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 133.714603][ T8389] SELinux: failed to load policy [ 133.766952][ T6] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.778087][ T6] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.788412][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.796114][ T6] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 133.805519][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.814390][ T6] usb 3-1: config 0 descriptor?? [ 133.848950][ T8399] loop5: detected capacity change from 0 to 256 [ 133.855745][ T8399] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.863608][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.866532][ T8399] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 133.875564][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.885409][ T8399] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 133.908072][ T39] usb 1-1: USB disconnect, device number 17 [ 134.195086][ T6] holtek_mouse 0003:04D9:A067.001B: bogus close delimiter [ 134.202205][ T6] holtek_mouse 0003:04D9:A067.001B: item 0 2 2 10 parsing failed [ 134.210503][ T6] holtek_mouse 0003:04D9:A067.001B: hid parse failed: -22 [ 134.218061][ T6] holtek_mouse: probe of 0003:04D9:A067.001B failed with error -22 [ 134.249836][ T8412] loop9: detected capacity change from 0 to 512 [ 134.256495][ T8412] EXT4-fs: Ignoring removed i_version option [ 134.264203][ T8412] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.3475: corrupted in-inode xattr [ 134.276591][ T8412] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.3475: couldn't read orphan inode 15 (err -117) [ 134.289054][ T8412] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 134.301346][ T8412] EXT4-fs error (device loop9): ext4_add_entry:2486: inode #2: comm syz.9.3475: Directory hole found for htree leaf block 0 [ 134.318914][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 134.356494][ T8419] netlink: 'syz.9.3478': attribute type 1 has an invalid length. [ 134.391268][ T6700] usb 3-1: USB disconnect, device number 4 [ 134.502876][ T8423] loop9: detected capacity change from 0 to 40427 [ 134.510045][ T8423] F2FS-fs (loop9): fault_injection options not supported [ 134.518315][ T8423] F2FS-fs (loop9): invalid crc value [ 134.525154][ T8423] F2FS-fs (loop9): Found nat_bits in checkpoint [ 134.558849][ T8423] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 134.583058][ T28] audit: type=1400 audit(2000000033.388:1287): avc: denied { reparent } for pid=8422 comm="syz.9.3480" name="file0" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 134.606772][ T7168] syz-executor: attempt to access beyond end of device [ 134.606772][ T7168] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 134.640574][ T8437] loop5: detected capacity change from 0 to 512 [ 134.647531][ T8437] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.659104][ T8437] EXT4-fs (loop5): 1 truncate cleaned up [ 134.664883][ T8437] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 134.682802][ T1341] EXT4-fs (loop5): unmounting filesystem. [ 134.697969][ T314] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.861970][ T8448] loop5: detected capacity change from 0 to 40427 [ 134.863415][ T8450] loop9: detected capacity change from 0 to 40427 [ 134.869356][ T8448] F2FS-fs (loop5): fault_injection options not supported [ 134.876242][ T8450] F2FS-fs (loop9): invalid crc value [ 134.883174][ T8448] F2FS-fs (loop5): invalid crc value [ 134.888339][ T8450] F2FS-fs (loop9): Found nat_bits in checkpoint [ 134.912136][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 134.918257][ T8448] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.926707][ T314] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 134.945694][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.966732][ T314] usb 1-1: Product: syz [ 134.975826][ T8450] F2FS-fs (loop9): Start checkpoint disabled! [ 134.983936][ T314] usb 1-1: Manufacturer: syz [ 134.993934][ T314] usb 1-1: SerialNumber: syz [ 135.002922][ T8450] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 135.004607][ T8448] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 135.018145][ T314] r8152-cfgselector 1-1: config 0 descriptor?? [ 135.031264][ T1341] syz-executor: attempt to access beyond end of device [ 135.031264][ T1341] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.083395][ T8450] F2FS-fs (loop9): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 135.414705][ T314] r8152-cfgselector 1-1: Unknown version 0x0000 [ 135.421116][ T314] r8152-cfgselector 1-1: bad CDC descriptors [ 135.427530][ T314] r8152-cfgselector 1-1: Unknown version 0x0000 [ 135.434278][ T314] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 135.898337][ T8472] loop9: detected capacity change from 0 to 512 [ 135.918958][ T8472] EXT4-fs (loop9): 1 orphan inode deleted [ 135.924899][ T8472] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 135.934116][ T8472] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.934144][ T304] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 135.934180][ T304] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 135.992892][ T28] audit: type=1400 audit(2000000034.890:1288): avc: denied { create } for pid=8491 comm="syz.0.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.057959][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 136.081028][ T28] audit: type=1400 audit(2000000034.997:1289): avc: denied { bind } for pid=8498 comm="syz.9.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.210177][ T8508] loop0: detected capacity change from 0 to 512 [ 136.227610][ T8508] EXT4-fs: Ignoring removed bh option [ 136.246353][ T8508] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 136.269996][ T8508] EXT4-fs (loop0): 1 truncate cleaned up [ 136.278644][ T8508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.289693][ T8508] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 136.305480][ T285] EXT4-fs (loop0): unmounting filesystem. [ 136.323971][ T8529] 9pnet_fd: Insufficient options for proto=fd [ 136.460984][ T8537] random: crng reseeded on system resumption [ 136.510667][ T28] audit: type=1400 audit(2000000035.459:1290): avc: denied { ioctl } for pid=8536 comm="syz.0.3526" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.540130][ T8547] input: syz1 as /devices/virtual/input/input21 [ 136.561736][ T8551] input: syz0 as /devices/virtual/input/input22 [ 136.569983][ T8554] syz.0.3534[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.570067][ T8554] syz.0.3534[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.593087][ T8554] loop0: detected capacity change from 0 to 512 [ 136.615903][ T8554] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.627272][ T8554] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (800) [ 136.629301][ T8560] loop9: detected capacity change from 0 to 128 [ 136.672577][ T8565] loop2: detected capacity change from 0 to 2048 [ 136.684380][ T8565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.698969][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 136.717107][ T8573] loop2: detected capacity change from 0 to 128 [ 136.725204][ T8573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.733968][ T8573] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.765705][ T28] audit: type=1400 audit(2000000035.706:1291): avc: denied { bind } for pid=8575 comm="syz.9.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.786748][ T28] audit: type=1400 audit(2000000035.706:1292): avc: denied { setopt } for pid=8575 comm="syz.9.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.812925][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 136.925565][ T6700] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 137.094888][ T6700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.105905][ T6700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.115681][ T6700] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 137.124726][ T6700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.133181][ T6700] usb 1-1: config 0 descriptor?? [ 137.700327][ T6700] hid-led 0003:1D34:000A.001C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 137.712110][ T6700] hid-led 0003:1D34:000A.001C: Dream Cheeky Webmail Notifier initialized [ 137.893261][ T314] usb 1-1: USB disconnect, device number 19 [ 138.498598][ T28] audit: type=1326 audit(2000000037.583:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.2.3556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2a698e929 code=0x0 [ 138.691705][ T28] audit: type=1400 audit(2000000037.798:1294): avc: denied { read } for pid=8625 comm="syz.5.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.765247][ T8636] loop9: detected capacity change from 0 to 2048 [ 138.791210][ T8636] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 138.803776][ T8636] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 138.818482][ T8636] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 138.830770][ T8636] EXT4-fs (loop9): This should not happen!! Data will be lost [ 138.830770][ T8636] [ 138.841201][ T8636] EXT4-fs (loop9): Total free blocks count 0 [ 138.848176][ T8636] EXT4-fs (loop9): Free/Dirty block details [ 138.854313][ T8636] EXT4-fs (loop9): free_blocks=66060288 [ 138.860140][ T8636] EXT4-fs (loop9): dirty_blocks=16 [ 138.866006][ T8636] EXT4-fs (loop9): Block reservation details [ 138.873283][ T8636] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 138.891994][ T1386] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.126212][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3579'. [ 139.432776][ T28] audit: type=1400 audit(2000000038.581:1295): avc: denied { create } for pid=8675 comm="syz.9.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 139.490309][ T8684] loop5: detected capacity change from 0 to 128 [ 139.503406][ T8684] EXT4-fs: Ignoring removed nobh option [ 139.523971][ T8684] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.536043][ T8684] ext4 filesystem being mounted at /704/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.584387][ T1341] EXT4-fs (loop5): unmounting filesystem. [ 139.624802][ T28] audit: type=1326 audit(2000000038.796:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.9.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c118e929 code=0x7ffc0000 [ 139.731092][ T8708] loop5: detected capacity change from 0 to 512 [ 139.751944][ T8708] EXT4-fs: Ignoring removed bh option [ 139.763571][ T8708] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 139.788318][ T8708] EXT4-fs (loop5): orphan cleanup on readonly fs [ 139.799214][ T8708] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3602: bg 0: block 18: invalid block bitmap [ 139.815518][ T8708] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 139.836578][ T8718] loop7: detected capacity change from 0 to 512 [ 139.840299][ T8708] EXT4-fs (loop5): 1 truncate cleaned up [ 139.849268][ T8708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.861675][ T39] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 139.870177][ T8708] EXT4-fs (loop5): unmounting filesystem. [ 139.875710][ T8718] EXT4-fs (loop7): 1 orphan inode deleted [ 139.881912][ T8718] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 139.884492][ T43] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 139.905355][ T8718] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.916198][ T8729] loop2: detected capacity change from 0 to 256 [ 139.934387][ T8732] SELinux: Context system_u:object is not valid (left unmapped). [ 139.958877][ T8735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.965094][ T8736] loop5: detected capacity change from 0 to 512 [ 139.967817][ T8735] overlayfs: missing 'lowerdir' [ 139.984944][ T8736] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 139.996476][ T8736] ext4 filesystem being mounted at /712/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.997251][ T4398] EXT4-fs (loop7): unmounting filesystem. [ 140.034260][ T1341] EXT4-fs (loop5): unmounting filesystem. [ 140.044647][ T8743] loop7: detected capacity change from 0 to 1024 [ 140.052477][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.062896][ T39] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.076899][ T39] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.092953][ T8743] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 140.095284][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.101583][ T6] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 140.123385][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.131399][ T39] usb 1-1: Product: syz [ 140.136606][ T39] usb 1-1: Manufacturer: syz [ 140.150558][ T39] usb 1-1: SerialNumber: syz [ 140.157986][ T4398] EXT4-fs (loop7): unmounting filesystem. [ 140.170545][ T39] cdc_ncm 1-1:1.0: skipping garbage [ 140.233363][ T8746] loop5: detected capacity change from 0 to 40427 [ 140.242502][ T8746] F2FS-fs (loop5): Found nat_bits in checkpoint [ 140.279355][ T8746] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 140.290494][ T8758] device bridge1 entered promiscuous mode [ 140.291986][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.316424][ T6] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.334417][ T1341] F2FS-fs (loop5): access invalid blkaddr:2048 [ 140.341320][ T1341] CPU: 0 PID: 1341 Comm: syz-executor Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 140.351318][ T1341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.361394][ T1341] Call Trace: [ 140.364770][ T1341] [ 140.367698][ T1341] __dump_stack+0x21/0x24 [ 140.372034][ T1341] dump_stack_lvl+0xee/0x150 [ 140.376639][ T1341] ? __cfi_dump_stack_lvl+0x8/0x8 [ 140.381658][ T1341] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 140.387533][ T1341] dump_stack+0x15/0x24 [ 140.391689][ T1341] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 140.397219][ T1341] f2fs_is_valid_blkaddr+0x23/0x30 [ 140.402322][ T1341] f2fs_map_blocks+0xc93/0x3a60 [ 140.407169][ T1341] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 140.412475][ T1341] ? xas_start+0x317/0x3e0 [ 140.416883][ T1341] ? xas_load+0x39e/0x3b0 [ 140.421205][ T1341] ? xa_load+0xad/0xd0 [ 140.425265][ T1341] f2fs_mpage_readpages+0xa3a/0x1b70 [ 140.430546][ T1341] ? dquot_release_reservation_block+0xa0/0xa0 [ 140.436687][ T1341] ? cgroup_rstat_updated+0xf5/0x370 [ 140.441959][ T1341] ? xas_nomem+0x6b/0x1f0 [ 140.446274][ T1341] f2fs_readahead+0xfc/0x240 [ 140.450848][ T1341] ? __cfi_f2fs_readahead+0x10/0x10 [ 140.456031][ T1341] read_pages+0x1b0/0xdd0 [ 140.460354][ T1341] ? __cfi___filemap_add_folio+0x10/0x10 [ 140.465979][ T1341] ? page_cache_ra_unbounded+0x720/0x720 [ 140.471608][ T1341] ? folio_add_lru+0x260/0x390 [ 140.476364][ T1341] ? filemap_add_folio+0x105/0x150 [ 140.481475][ T1341] page_cache_ra_unbounded+0x5d1/0x720 [ 140.486924][ T1341] ? __kernel_text_address+0xd/0x30 [ 140.492124][ T1341] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 140.498096][ T1341] ? stack_trace_save+0x98/0xe0 [ 140.502941][ T1341] page_cache_ra_order+0x36a/0xb70 [ 140.508044][ T1341] ? slab_free_freelist_hook+0xc2/0x190 [ 140.513579][ T1341] ? kmem_cache_free+0x12d/0x300 [ 140.518500][ T1341] ? __x64_sys_newfstatat+0x9b/0xb0 [ 140.523684][ T1341] ? x64_sys_call+0x77c/0x9a0 [ 140.528352][ T1341] ? __cfi_page_cache_ra_order+0x10/0x10 [ 140.534058][ T1341] ondemand_readahead+0x817/0xdb0 [ 140.539071][ T1341] ? page_cache_sync_ra+0x490/0x490 [ 140.544262][ T1341] page_cache_sync_ra+0x41b/0x490 [ 140.549276][ T1341] f2fs_readdir+0x444/0x940 [ 140.553768][ T1341] ? cgroup_rstat_updated+0xf5/0x370 [ 140.559045][ T1341] ? __cfi_f2fs_readdir+0x10/0x10 [ 140.564053][ T1341] ? handle_mm_fault+0x17be/0x2640 [ 140.569158][ T1341] ? down_read_killable+0xb6/0x100 [ 140.574257][ T1341] ? __cfi_down_read_killable+0x10/0x10 [ 140.579788][ T1341] ? fsnotify_perm+0x269/0x5b0 [ 140.584541][ T1341] ? security_file_permission+0x94/0xb0 [ 140.590074][ T1341] iterate_dir+0x271/0x610 [ 140.594485][ T1341] ? __cfi_f2fs_readdir+0x10/0x10 [ 140.599497][ T1341] __se_sys_getdents64+0xe5/0x240 [ 140.604507][ T1341] ? __x64_sys_getdents64+0x90/0x90 [ 140.609695][ T1341] ? __cfi_filldir64+0x10/0x10 [ 140.614472][ T1341] ? do_user_addr_fault+0x9ac/0x1050 [ 140.619759][ T1341] ? debug_smp_processor_id+0x17/0x20 [ 140.625161][ T1341] __x64_sys_getdents64+0x7b/0x90 [ 140.630195][ T1341] x64_sys_call+0x15c/0x9a0 [ 140.634718][ T1341] do_syscall_64+0x4c/0xa0 [ 140.639136][ T1341] ? clear_bhb_loop+0x30/0x80 [ 140.643808][ T1341] ? clear_bhb_loop+0x30/0x80 [ 140.648473][ T1341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.654365][ T1341] RIP: 0033:0x7fe8757c1293 [ 140.658767][ T1341] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 140.678360][ T1341] RSP: 002b:00007ffe69d95ee8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 140.686761][ T1341] RAX: ffffffffffffffda RBX: 000055558514d4e0 RCX: 00007fe8757c1293 [ 140.694719][ T1341] RDX: 0000000000008000 RSI: 000055558514d4e0 RDI: 0000000000000005 [ 140.702679][ T1341] RBP: 000055558514d4b4 R08: 0000000000000000 R09: 0000000000000000 [ 140.710636][ T1341] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 140.718592][ T1341] R13: 0000000000000010 R14: 000055558514d4b0 R15: 00007ffe69d981a0 [ 140.726558][ T1341] [ 140.729701][ T314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.740210][ T1341] bio_check_eod: 1 callbacks suppressed [ 140.740239][ T1341] syz-executor: attempt to access beyond end of device [ 140.740239][ T1341] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 140.747490][ T6] usb 10-1: New USB device found, idVendor=89a7, idProduct=ab19, bcdDevice= 0.40 [ 140.760003][ T1341] syz-executor: attempt to access beyond end of device [ 140.760003][ T1341] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 140.769400][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.802647][ T6] usb 10-1: Product: syz [ 140.807759][ T6] usb 10-1: Manufacturer: syz [ 140.821473][ T6] usb 10-1: SerialNumber: syz [ 140.848685][ T8766] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3626'. [ 140.860283][ T2178] syz.5.797: attempt to access beyond end of device [ 140.860283][ T2178] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.872151][ T8768] netlink: 'syz.7.3627': attribute type 2 has an invalid length. [ 140.913808][ T8772] loop7: detected capacity change from 0 to 256 [ 140.925064][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.925580][ T8772] FAT-fs (loop7): Directory bread(block 64) failed [ 140.942710][ T8772] FAT-fs (loop7): Directory bread(block 65) failed [ 140.946050][ T314] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.949279][ T8772] FAT-fs (loop7): Directory bread(block 66) failed [ 140.965734][ T8772] FAT-fs (loop7): Directory bread(block 67) failed [ 140.972574][ T8772] FAT-fs (loop7): Directory bread(block 68) failed [ 140.973474][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.979184][ T8772] FAT-fs (loop7): Directory bread(block 69) failed [ 140.994300][ T8772] FAT-fs (loop7): Directory bread(block 70) failed [ 141.001297][ T8772] FAT-fs (loop7): Directory bread(block 71) failed [ 141.008860][ T8772] FAT-fs (loop7): Directory bread(block 72) failed [ 141.010632][ T314] usb 3-1: config 0 descriptor?? [ 141.016708][ T8772] FAT-fs (loop7): Directory bread(block 73) failed [ 141.081895][ T43] kworker/u4:2: attempt to access beyond end of device [ 141.081895][ T43] loop7: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 141.135993][ T8779] loop7: detected capacity change from 0 to 256 [ 141.203000][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.210659][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.213156][ T8791] loop7: detected capacity change from 0 to 512 [ 141.219095][ T8780] device bridge_slave_0 entered promiscuous mode [ 141.230984][ T8791] EXT4-fs: Ignoring removed nobh option [ 141.232927][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.243657][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.251521][ T8780] device bridge_slave_1 entered promiscuous mode [ 141.259888][ T8791] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 141.294793][ T4398] EXT4-fs (loop7): unmounting filesystem. [ 141.343701][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.350801][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.358199][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.365245][ T8780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.394016][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.403097][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.411073][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.427768][ T304] device bridge_slave_1 left promiscuous mode [ 141.434590][ T314] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 141.439706][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.452474][ T314] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001D/input/input23 [ 141.464686][ T304] device bridge_slave_0 left promiscuous mode [ 141.470954][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.471065][ T8795] loop7: detected capacity change from 0 to 40427 [ 141.485368][ T8795] F2FS-fs (loop7): fault_injection options not supported [ 141.485379][ T304] device veth0_vlan left promiscuous mode [ 141.497168][ T39] cdc_ncm 1-1:1.0: bind() failure [ 141.498254][ T8795] F2FS-fs (loop7): Image doesn't support compression [ 141.504652][ T39] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 141.510777][ T8795] F2FS-fs (loop7): invalid crc value [ 141.516886][ T39] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 141.523524][ T8795] F2FS-fs (loop7): Found nat_bits in checkpoint [ 141.541499][ T39] usb 1-1: USB disconnect, device number 20 [ 141.548254][ T314] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 141.565902][ T8795] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 141.636419][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.645047][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.659482][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.668626][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.675720][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.684064][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.692391][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.699555][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.717709][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.726175][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.744051][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.757138][ T8780] device veth0_vlan entered promiscuous mode [ 141.765362][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.778337][ T6] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed [ 141.781838][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.792883][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.799698][ T8798] f2fs_gc-7:7: attempt to access beyond end of device [ 141.799698][ T8798] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.801253][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.815012][ T8795] syz.7.3639: attempt to access beyond end of device [ 141.815012][ T8795] loop7: rw=34817, sector=110424, nr_sectors = 88 limit=40427 [ 141.823370][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.836462][ T6] cdc_ncm 10-1:1.0: bind() failure [ 141.846806][ T8780] device veth1_macvtap entered promiscuous mode [ 141.858127][ T6] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 141.861739][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.865097][ T6] cdc_ncm 10-1:1.1: bind() failure [ 141.873724][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.886427][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.889889][ T6] usb 10-1: USB disconnect, device number 5 [ 141.904640][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.913215][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.053966][ T8807] loop0: detected capacity change from 0 to 512 [ 142.089311][ T8807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.102922][ T8807] ext4 filesystem being mounted at /793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.121398][ T39] usb 3-1: USB disconnect, device number 5 acpid: input device has been disconnected, fd 3 [ 142.145877][ T8807] overlayfs: conflicting lowerdir path [ 142.162064][ T285] EXT4-fs (loop0): unmounting filesystem. [ 142.233784][ T8838] device batadv_slave_0 entered promiscuous mode [ 142.241300][ T8836] device batadv_slave_0 left promiscuous mode [ 142.255478][ T8840] loop7: detected capacity change from 0 to 256 [ 142.264241][ T8840] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 142.291638][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 142.291654][ T28] audit: type=1400 audit(2000000041.649:1308): avc: denied { map } for pid=8839 comm="syz.7.3657" path="/305/file2/file2" dev="loop7" ino=1048714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.335155][ T28] audit: type=1400 audit(2000000041.649:1309): avc: denied { execute } for pid=8839 comm="syz.7.3657" path="/305/file2/file2" dev="loop7" ino=1048714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.360625][ T28] audit: type=1400 audit(2000000041.703:1310): avc: denied { bind } for pid=8850 comm="syz.0.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.386559][ T8857] syz.0.3665[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.386658][ T8857] syz.0.3665[8857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.400555][ T8859] incfs: Options parsing error. -22 [ 142.425874][ T8859] incfs: mount failed -22 [ 142.798786][ T8897] binder: 8895:8897 ioctl c0306201 200000000040 returned -14 [ 142.950486][ T8908] overlayfs: failed to set xattr on upper [ 142.955894][ T28] audit: type=1400 audit(2000000042.368:1311): avc: denied { setopt } for pid=8909 comm="syz.2.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.039946][ T8914] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3691'. [ 143.050746][ T8918] loop2: detected capacity change from 0 to 128 [ 143.057329][ T8918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.058990][ T8914] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3691'. [ 143.077476][ T8914] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3691'. [ 143.086590][ T8918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.096161][ T8918] EXT4-fs (loop2): Test dummy encryption mode enabled [ 143.120094][ T8917] incfs: Options parsing error. -22 [ 143.124716][ T8918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.139801][ T8918] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.141327][ T8917] incfs: mount failed -22 [ 143.165673][ T8921] loop9: detected capacity change from 0 to 1024 [ 143.181358][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 143.195336][ T8921] EXT4-fs: Ignoring removed orlov option [ 143.217046][ T8921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.254391][ T8921] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 143.339888][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 143.407987][ T8938] loop2: detected capacity change from 0 to 1024 [ 143.424236][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.431129][ T8939] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.478083][ T8938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.496063][ T8938] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.532308][ T8943] netlink: 'syz.7.3702': attribute type 4 has an invalid length. [ 143.583637][ T304] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 143.608173][ T8945] syz.7.3704[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.608257][ T8945] syz.7.3704[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.627000][ T304] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 143.653588][ T8946] x_tables: duplicate underflow at hook 4 [ 143.683179][ T304] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.683179][ T304] [ 143.710858][ T304] EXT4-fs (loop2): Total free blocks count 0 [ 143.726311][ T304] EXT4-fs (loop2): Free/Dirty block details [ 143.745035][ T304] EXT4-fs (loop2): free_blocks=4293918720 [ 143.751032][ T304] EXT4-fs (loop2): dirty_blocks=16 [ 143.765564][ T304] EXT4-fs (loop2): Block reservation details [ 143.784282][ T304] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 143.785633][ T8952] loop7: detected capacity change from 0 to 512 [ 143.794323][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 143.828640][ T28] audit: type=1326 audit(2000000043.302:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 143.867718][ T8952] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 143.879334][ T28] audit: type=1326 audit(2000000043.334:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 143.889446][ T8952] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.904434][ T28] audit: type=1326 audit(2000000043.334:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 143.936679][ T28] audit: type=1326 audit(2000000043.334:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f431992ab19 code=0x7ffc0000 [ 143.970025][ T28] audit: type=1326 audit(2000000043.334:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f431992ab19 code=0x7ffc0000 [ 144.005461][ T28] audit: type=1326 audit(2000000043.334:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 144.035924][ T4398] EXT4-fs (loop7): unmounting filesystem. [ 144.071397][ T8965] loop2: detected capacity change from 0 to 256 [ 144.093673][ T8965] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 144.111963][ T8965] FAT-fs (loop2): Filesystem has been set read-only [ 144.118592][ T8965] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 144.149925][ T8969] loop7: detected capacity change from 0 to 8192 [ 144.175489][ T8969] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 144.192965][ T8969] FAT-fs (loop7): Filesystem has been set read-only [ 144.541732][ T9002] loop2: detected capacity change from 0 to 512 [ 144.548641][ T9002] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.571717][ T9002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.624775][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 144.632341][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3734'. [ 144.668302][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3738'. [ 144.737466][ T9036] netlink: 'syz.7.3742': attribute type 280 has an invalid length. [ 144.811968][ T9046] loop7: detected capacity change from 0 to 2048 [ 144.818659][ T9046] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.840093][ T9046] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 144.901631][ T9049] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3747: bg 0: block 234: padding at end of block bitmap is not set [ 144.915975][ T19] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 144.916629][ T9049] EXT4-fs (loop7): Remounting filesystem read-only [ 144.993593][ T4398] EXT4-fs (loop7): unmounting filesystem. [ 145.091744][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.102143][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.112760][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.122010][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.130108][ T19] usb 1-1: Product: syz [ 145.134338][ T19] usb 1-1: Manufacturer: syz [ 145.138948][ T19] usb 1-1: SerialNumber: syz [ 145.196809][ T9067] loop3: detected capacity change from 0 to 512 [ 145.203743][ T9067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.215326][ T9067] EXT4-fs error (device loop3): __ext4_iget:5078: inode #11: block 1816: comm syz.3.3755: invalid block [ 145.227008][ T9067] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3755: couldn't read orphan inode 11 (err -117) [ 145.304986][ T1512] Bluetooth: hci0: command 0x1003 tx timeout [ 145.314103][ T1406] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.332537][ T19] usb 1-1: 0:2 : does not exist [ 145.344360][ T19] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 145.381470][ T19] usb 1-1: USB disconnect, device number 21 [ 145.395170][ T9083] serio: Serial port ttyS3 [ 145.705647][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.857033][ T9106] loop0: detected capacity change from 0 to 128 [ 145.863653][ T9106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.871058][ T9106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.878003][ T9106] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.886184][ T9106] ext4 filesystem being mounted at /815/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.139252][ T9107] loop7: detected capacity change from 0 to 131072 [ 146.146385][ T9107] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 146.153064][ T9107] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 146.161387][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 146.166918][ T9107] F2FS-fs (loop7): invalid crc value [ 146.181409][ T9107] F2FS-fs (loop7): Found nat_bits in checkpoint [ 146.210660][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 146.220252][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.220252][ T9107] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 146.220278][ T24] usb 3-1: Product: syz [ 146.228314][ T9107] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 146.235389][ T24] usb 3-1: Manufacturer: syz [ 146.258220][ T24] usb 3-1: SerialNumber: syz [ 146.362779][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3782'. [ 146.373490][ T9131] netem: change failed [ 146.428342][ T9138] loop9: detected capacity change from 0 to 512 [ 146.434790][ T9137] loop3: detected capacity change from 0 to 256 [ 146.465320][ T9137] syz.3.3786: attempt to access beyond end of device [ 146.465320][ T9137] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 146.488245][ T9138] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.517857][ T9138] EXT4-fs error (device loop9): ext4_do_update_inode:5255: inode #2: comm syz.9.3785: corrupted inode contents [ 146.518470][ T9146] loop0: detected capacity change from 0 to 4096 [ 146.530125][ T9137] syz.3.3786: attempt to access beyond end of device [ 146.530125][ T9137] loop3: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 146.554023][ T9138] EXT4-fs error (device loop9): ext4_dirty_inode:6120: inode #2: comm syz.9.3785: mark_inode_dirty error [ 146.565770][ T9138] EXT4-fs error (device loop9): ext4_do_update_inode:5255: inode #2: comm syz.9.3785: corrupted inode contents [ 146.578512][ T9137] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 146.587297][ T9137] syz.3.3786: attempt to access beyond end of device [ 146.587297][ T9137] loop3: rw=2049, sector=264, nr_sectors = 56 limit=256 [ 146.605783][ T9148] syz.3.3786: attempt to access beyond end of device [ 146.605783][ T9148] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 146.619376][ T9138] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.3785: mark_inode_dirty error [ 146.624009][ T9148] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 146.673846][ T9157] loop9: detected capacity change from 0 to 1024 [ 146.687873][ T9159] loop7: detected capacity change from 0 to 128 [ 146.695329][ T9157] ext4: Unknown parameter 'audit' [ 146.719821][ T9159] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.760863][ T9159] EXT4-fs error (device loop7): make_indexed_dir:2333: inode #2: block 20: comm syz.7.3793: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 146.824011][ T9165] netem: change failed [ 146.851702][ T9172] loop0: detected capacity change from 0 to 2048 [ 146.858627][ T9172] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.970803][ T9180] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3798: bg 0: block 234: padding at end of block bitmap is not set [ 146.986085][ T9180] EXT4-fs (loop0): Remounting filesystem read-only [ 146.998978][ T9167] loop9: detected capacity change from 0 to 40427 [ 147.008199][ T9167] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 147.016384][ T9167] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 147.027517][ T24] snd-usb-audio: probe of 3-1:222.0 failed with error -2 [ 147.035168][ T9167] F2FS-fs (loop9): invalid crc value [ 147.044380][ T9167] F2FS-fs (loop9): Found nat_bits in checkpoint [ 147.067154][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.083958][ T9167] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 147.091459][ T9167] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 147.253318][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 147.254419][ T314] usb 3-1: USB disconnect, device number 6 [ 147.260410][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.276103][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.286308][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.296069][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.305753][ T19] usb 4-1: config 0 descriptor?? [ 147.310781][ T24] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 147.321018][ T19] hub 4-1:0.0: USB hub found [ 147.392754][ T9191] loop9: detected capacity change from 0 to 2048 [ 147.400299][ T9191] EXT4-fs (loop9): #clusters per group too big: 151011328 [ 147.477506][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 147.485602][ T24] usb 1-1: config 0 has no interface number 0 [ 147.492381][ T24] usb 1-1: config 0 interface 41 has no altsetting 0 [ 147.500750][ T24] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 147.509915][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.518783][ T24] usb 1-1: Product: syz [ 147.519037][ T19] hub 4-1:0.0: 4 ports detected [ 147.523040][ T24] usb 1-1: Manufacturer: syz [ 147.523056][ T24] usb 1-1: SerialNumber: syz [ 147.524268][ T24] usb 1-1: config 0 descriptor?? [ 147.680154][ T9193] loop9: detected capacity change from 0 to 256 [ 147.695837][ T9193] syz.9.3806: attempt to access beyond end of device [ 147.695837][ T9193] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 147.709716][ T19] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 147.716094][ T19] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 147.725808][ T9193] syz.9.3806: attempt to access beyond end of device [ 147.725808][ T9193] loop9: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 147.740008][ T9193] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 147.749790][ T9193] syz.9.3806: attempt to access beyond end of device [ 147.749790][ T9193] loop9: rw=2049, sector=264, nr_sectors = 56 limit=256 [ 147.765377][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 147.776630][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 147.784536][ T9202] syz.9.3806: attempt to access beyond end of device [ 147.784536][ T9202] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 147.813465][ T19] usb 4-1: USB disconnect, device number 3 [ 147.830607][ T9202] Buffer I/O error on dev loop9, logical block 64, lost async page write [ 147.893277][ T9197] loop7: detected capacity change from 0 to 40427 [ 147.910374][ T9197] F2FS-fs (loop7): invalid crc value [ 147.916861][ T9197] F2FS-fs (loop7): Found nat_bits in checkpoint [ 147.950514][ T9197] F2FS-fs (loop7): Start checkpoint disabled! [ 147.957957][ T9197] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 147.962704][ T9201] loop2: detected capacity change from 0 to 40427 [ 147.973081][ T9201] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 147.980015][ T9201] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 147.991034][ T9201] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.026377][ T9201] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.033459][ T9201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.062603][ T9213] loop7: detected capacity change from 0 to 512 [ 148.070622][ T9213] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 148.081013][ T7249] syz-executor: attempt to access beyond end of device [ 148.081013][ T7249] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.082499][ T9213] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1816: comm syz.7.3812: invalid block [ 148.106802][ T9213] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3812: couldn't read orphan inode 11 (err -117) [ 148.159201][ T9217] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3814'. [ 148.169493][ T9217] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3814'. [ 148.263485][ T9228] loop7: detected capacity change from 0 to 1024 [ 148.270549][ T9228] ext4: Unknown parameter 'audit' [ 148.280288][ T9230] loop3: detected capacity change from 0 to 2048 [ 148.301330][ T9230] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 148.316252][ T9230] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.328591][ T9230] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.328591][ T9230] [ 148.338783][ T9230] EXT4-fs (loop3): Total free blocks count 0 [ 148.345041][ T9230] EXT4-fs (loop3): Free/Dirty block details [ 148.350988][ T9230] EXT4-fs (loop3): free_blocks=66060288 [ 148.356939][ T9230] EXT4-fs (loop3): dirty_blocks=16 [ 148.362156][ T9230] EXT4-fs (loop3): Block reservation details [ 148.368268][ T9230] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 148.382780][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 148.395470][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.395470][ T8] [ 148.445486][ T9243] loop3: detected capacity change from 0 to 256 [ 148.458093][ T9243] FAT-fs (loop3): Directory bread(block 64) failed [ 148.465225][ T9243] FAT-fs (loop3): Directory bread(block 65) failed [ 148.471849][ T9243] FAT-fs (loop3): Directory bread(block 66) failed [ 148.478576][ T9243] FAT-fs (loop3): Directory bread(block 67) failed [ 148.485193][ T9243] FAT-fs (loop3): Directory bread(block 68) failed [ 148.491781][ T9243] FAT-fs (loop3): Directory bread(block 69) failed [ 148.493474][ T24] CoreChips: probe of 1-1:0.41 failed with error -71 [ 148.498589][ T9243] FAT-fs (loop3): Directory bread(block 70) failed [ 148.506800][ T24] usb 1-1: USB disconnect, device number 22 [ 148.511796][ T9243] FAT-fs (loop3): Directory bread(block 71) failed [ 148.524118][ T9243] FAT-fs (loop3): Directory bread(block 72) failed [ 148.530786][ T9243] FAT-fs (loop3): Directory bread(block 73) failed [ 148.855849][ T314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.952438][ T9261] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.961461][ T9261] overlayfs: missing 'lowerdir' [ 149.024669][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.038206][ T9258] loop2: detected capacity change from 0 to 40427 [ 149.044784][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.056744][ T9258] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 149.067708][ T9258] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.077265][ T314] usb 4-1: New USB device found, idVendor=89a7, idProduct=ab19, bcdDevice= 0.40 [ 149.087110][ T9258] F2FS-fs (loop2): invalid crc value [ 149.092578][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.101252][ T314] usb 4-1: Product: syz [ 149.105491][ T314] usb 4-1: Manufacturer: syz [ 149.110877][ T314] usb 4-1: SerialNumber: syz [ 149.116650][ T9265] loop0: detected capacity change from 0 to 40427 [ 149.119463][ T9258] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.124511][ T9265] F2FS-fs (loop0): invalid crc value [ 149.136208][ T9265] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.160784][ T9272] loop7: detected capacity change from 0 to 512 [ 149.174060][ T9265] F2FS-fs (loop0): Start checkpoint disabled! [ 149.180838][ T9258] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.181070][ T9265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 149.188688][ T9258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.204744][ T9272] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.255331][ T8] kworker/u4:0: attempt to access beyond end of device [ 149.255331][ T8] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 149.511892][ T9258] F2FS-fs (loop2): Start checkpoint disabled! [ 150.056036][ T314] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 150.077136][ T314] cdc_ncm 4-1:1.0: bind() failure [ 150.083202][ T314] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 150.090554][ T314] cdc_ncm 4-1:1.1: bind() failure [ 150.097024][ T314] usb 4-1: USB disconnect, device number 4 [ 150.209371][ T9291] loop7: detected capacity change from 0 to 262144 [ 150.222650][ T9291] F2FS-fs (loop7): Found nat_bits in checkpoint [ 150.260343][ T9291] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 150.274074][ T9291] F2FS-fs (loop7): Inconsistent error blkaddr:6149, sit bitmap:0 [ 150.281910][ T9291] CPU: 0 PID: 9291 Comm: syz.7.3843 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 150.291727][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.301795][ T9291] Call Trace: [ 150.305076][ T9291] [ 150.308002][ T9291] __dump_stack+0x21/0x24 [ 150.312348][ T9291] dump_stack_lvl+0xee/0x150 [ 150.316945][ T9291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 150.321963][ T9291] ? __this_cpu_preempt_check+0x13/0x20 [ 150.327600][ T9291] dump_stack+0x15/0x24 [ 150.331758][ T9291] __f2fs_is_valid_blkaddr+0xce6/0x1460 [ 150.337302][ T9291] f2fs_is_valid_blkaddr+0x23/0x30 [ 150.342403][ T9291] f2fs_get_node_info+0x7dd/0x1200 [ 150.347523][ T9291] ? __cfi_f2fs_get_node_info+0x10/0x10 [ 150.353077][ T9291] ? folio_add_lru+0x260/0x390 [ 150.357838][ T9291] read_node_page+0x2e4/0x4f0 [ 150.362510][ T9291] ? f2fs_ra_node_page+0x270/0x270 [ 150.367613][ T9291] ? __kasan_check_write+0x14/0x20 [ 150.372722][ T9291] ? _raw_spin_lock+0x8e/0xe0 [ 150.377393][ T9291] ? __kasan_check_read+0x11/0x20 [ 150.382419][ T9291] __get_node_page+0x14e/0xb00 [ 150.387184][ T9291] ? iget_locked+0x77b/0x8b0 [ 150.391778][ T9291] f2fs_get_node_page+0x21/0x30 [ 150.396621][ T9291] f2fs_iget+0x7e6/0x4cb0 [ 150.400954][ T9291] f2fs_lookup+0x366/0xab0 [ 150.405359][ T9291] ? __cfi_f2fs_lookup+0x10/0x10 [ 150.410377][ T9291] ? _raw_spin_lock+0x8e/0xe0 [ 150.415057][ T9291] ? __cfi__raw_spin_lock+0x10/0x10 [ 150.420254][ T9291] ? _raw_spin_unlock+0x4c/0x70 [ 150.425104][ T9291] ? d_alloc+0x199/0x1d0 [ 150.429351][ T9291] lookup_one_qstr_excl+0x125/0x270 [ 150.434637][ T9291] filename_create+0x219/0x450 [ 150.439412][ T9291] ? kasan_save_alloc_info+0x25/0x30 [ 150.444784][ T9291] ? kern_path_create+0x1b0/0x1b0 [ 150.449800][ T9291] do_mkdirat+0x5c/0x4c0 [ 150.454033][ T9291] ? getname_flags+0x206/0x500 [ 150.458791][ T9291] __x64_sys_mkdirat+0x89/0xa0 [ 150.463547][ T9291] x64_sys_call+0x73d/0x9a0 [ 150.468041][ T9291] do_syscall_64+0x4c/0xa0 [ 150.472447][ T9291] ? clear_bhb_loop+0x30/0x80 [ 150.477119][ T9291] ? clear_bhb_loop+0x30/0x80 [ 150.481788][ T9291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.487668][ T9291] RIP: 0033:0x7f8bc478d197 [ 150.492072][ T9291] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.511667][ T9291] RSP: 002b:00007f8bc55bae68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 150.520074][ T9291] RAX: ffffffffffffffda RBX: 00007f8bc55baef0 RCX: 00007f8bc478d197 [ 150.528041][ T9291] RDX: 00000000000001ff RSI: 0000200000001040 RDI: 00000000ffffff9c [ 150.536006][ T9291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.543964][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001040 [ 150.551924][ T9291] R13: 00007f8bc55baeb0 R14: 0000000000000000 R15: 0000000000000000 [ 150.559886][ T9291] [ 150.569120][ T9291] overlayfs: missing 'lowerdir' [ 150.701480][ T19] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 150.763519][ T28] kauditd_printk_skb: 1565 callbacks suppressed [ 150.763535][ T28] audit: type=1400 audit(2000000050.748:2883): avc: denied { read } for pid=9332 comm="syz.3.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.878439][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 150.884750][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.895820][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.905705][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.918628][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.927688][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.936416][ T19] usb 1-1: config 0 descriptor?? [ 150.990273][ T314] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 151.083431][ T6] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 151.131301][ T9348] loop3: detected capacity change from 0 to 16 [ 151.138032][ T9348] erofs: (device loop3): mounted with root inode @ nid 36. [ 151.146596][ T9348] bio_check_eod: 1 callbacks suppressed [ 151.146607][ T9348] syz.3.3865: attempt to access beyond end of device [ 151.146607][ T9348] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 151.167387][ T314] usb 10-1: Using ep0 maxpacket: 16 [ 151.174965][ T314] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 151.183710][ T314] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 151.192003][ T314] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 151.200406][ T314] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 151.208698][ T314] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.217770][ T314] usb 10-1: config 0 has no interface number 0 [ 151.223970][ T314] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 151.235169][ T314] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.245092][ T314] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.253448][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.255049][ T314] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.264418][ T6] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 151.275795][ T314] usb 10-1: config 0 interface 125 has no altsetting 0 [ 151.275819][ T314] usb 10-1: config 0 interface 125 has no altsetting 2 [ 151.277671][ T314] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 151.283865][ T6] usb 3-1: can't read configurations, error -71 [ 151.290750][ T314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.317477][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.320786][ T314] usb 10-1: Product: syz [ 151.328420][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.332230][ T314] usb 10-1: Manufacturer: syz [ 151.339882][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.344168][ T314] usb 10-1: SerialNumber: syz [ 151.351923][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.356688][ T314] usb 10-1: config 0 descriptor?? [ 151.363810][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.375568][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.382841][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.390119][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.397351][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.404878][ T19] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 151.413403][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001E/input/input24 [ 151.425549][ T19] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 151.543294][ T19] usb 1-1: USB disconnect, device number 23 [ 151.838054][ T9355] loop3: detected capacity change from 0 to 40427 [ 151.845052][ T9355] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 151.853428][ T9355] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 151.862589][ T9355] F2FS-fs (loop3): invalid crc value [ 151.869251][ T9355] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.902999][ T9355] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 151.910581][ T9355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.950393][ T9357] loop2: detected capacity change from 0 to 40427 [ 151.958256][ T9357] F2FS-fs (loop2): invalid crc value [ 151.964496][ T9357] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.995062][ T9357] F2FS-fs (loop2): Start checkpoint disabled! [ 152.001818][ T9357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 152.037637][ T9366] loop0: detected capacity change from 0 to 256 [ 152.047923][ T9366] exFAT-fs (loop0): failed to load upcase table (idx : 0x000102ea, chksum : 0x657c5c7e, utbl_chksum : 0xe619d30d) [ 152.079327][ T9366] incfs_lookup_dentry err:-1 [ 152.080933][ T1386] kworker/u4:5: attempt to access beyond end of device [ 152.080933][ T1386] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 152.097869][ T28] audit: type=1400 audit(2000000052.175:2884): avc: denied { rmdir } for pid=285 comm="syz-executor" name=".index" dev="loop0" ino=1048721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.101084][ T1386] kworker/u4:5: attempt to access beyond end of device [ 152.101084][ T1386] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 152.314341][ T314] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 152.442450][ T9390] syz.2.3880[9390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.442499][ T9390] syz.2.3880[9390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.454100][ T6700] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 152.483194][ T314] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.494420][ T314] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.504609][ T314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.511448][ T314] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 152.520818][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.529872][ T314] usb 4-1: config 0 descriptor?? [ 152.641269][ T6700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.652210][ T6700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.662000][ T6700] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 152.671088][ T6700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.679690][ T6700] usb 1-1: config 0 descriptor?? [ 152.771903][ T9398] incfs: Options parsing error. -22 [ 152.777227][ T9398] incfs: mount failed -22 [ 152.911399][ T314] holtek_mouse 0003:04D9:A067.001F: bogus close delimiter [ 152.918595][ T314] holtek_mouse 0003:04D9:A067.001F: item 0 2 2 10 parsing failed [ 152.926542][ T314] holtek_mouse 0003:04D9:A067.001F: hid parse failed: -22 [ 152.933738][ T314] holtek_mouse: probe of 0003:04D9:A067.001F failed with error -22 [ 153.059944][ T6700] sony 0003:054C:024B.0020: unexpected long global item [ 153.067094][ T6700] sony 0003:054C:024B.0020: parse failed [ 153.072784][ T6700] sony: probe of 0003:054C:024B.0020 failed with error -22 [ 153.103533][ T314] usb 4-1: USB disconnect, device number 5 [ 153.252036][ T6] usb 1-1: USB disconnect, device number 24 [ 153.534708][ T314] usb 10-1: USB disconnect, device number 6 [ 153.704980][ T9402] loop9: detected capacity change from 0 to 40427 [ 153.724447][ T9424] loop2: detected capacity change from 0 to 512 [ 153.730480][ T9402] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 153.732800][ T9424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.748502][ T9402] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 153.777796][ T9424] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3894: bg 0: block 16: invalid block bitmap [ 153.791086][ T9424] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 153.800509][ T9402] F2FS-fs (loop9): invalid crc value [ 153.809815][ T9424] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3894: invalid indirect mapped block 5 (level 0) [ 153.831133][ T9417] loop3: detected capacity change from 0 to 40427 [ 153.838053][ T9424] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3894: invalid indirect mapped block 4294967295 (level 1) [ 153.843405][ T9417] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 153.859132][ T9424] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3894: invalid indirect mapped block 4294967295 (level 2) [ 153.873664][ T9417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.873907][ T9402] F2FS-fs (loop9): Found nat_bits in checkpoint [ 153.885191][ T9424] EXT4-fs (loop2): 1 truncate cleaned up [ 153.911944][ T9424] EXT4-fs mount: 16 callbacks suppressed [ 153.911963][ T9424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.933394][ T9402] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 153.943140][ T9417] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.954549][ T9402] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 153.992159][ T7249] EXT4-fs (loop2): unmounting filesystem. [ 154.028532][ T9417] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.047667][ T9417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.053836][ T9455] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.066714][ T28] audit: type=1326 audit(2000000054.299:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 154.111608][ T28] audit: type=1326 audit(2000000054.299:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 154.142167][ T8780] syz-executor: attempt to access beyond end of device [ 154.142167][ T8780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.156424][ T28] audit: type=1326 audit(2000000054.320:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 154.181295][ T28] audit: type=1326 audit(2000000054.320:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 154.205308][ T28] audit: type=1326 audit(2000000054.320:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 154.229175][ T28] audit: type=1326 audit(2000000054.320:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f43199c11e5 code=0x7ffc0000 [ 154.253096][ T28] audit: type=1326 audit(2000000054.331:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f431998e929 code=0x7ffc0000 [ 154.276765][ T28] audit: type=1326 audit(2000000054.331:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.0.3905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f431998e929 code=0x0 [ 154.326985][ T314] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.334991][ T9402] F2FS-fs (loop9): Start checkpoint disabled! [ 154.505347][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.516295][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.526060][ T314] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 154.535151][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.543659][ T314] usb 3-1: config 0 descriptor?? [ 154.588046][ T6700] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.653188][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 154.755749][ T6700] usb 4-1: Using ep0 maxpacket: 16 [ 154.762478][ T6700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.773749][ T6700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.783856][ T6700] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.796699][ T6700] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.805782][ T6700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.814417][ T6700] usb 4-1: config 0 descriptor?? [ 154.821927][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.833255][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.843737][ T24] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 154.853257][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.862001][ T24] usb 10-1: config 0 descriptor?? [ 154.925126][ T314] sony 0003:054C:024B.0021: unexpected long global item [ 154.932265][ T314] sony 0003:054C:024B.0021: parse failed [ 154.937984][ T314] sony: probe of 0003:054C:024B.0021 failed with error -22 [ 155.117365][ T314] usb 3-1: USB disconnect, device number 9 [ 155.195117][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.202456][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.209937][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.217276][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.224543][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.231801][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.239015][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.246300][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.253561][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.260810][ T6700] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 155.269887][ T6700] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0022/input/input25 [ 155.282158][ T6700] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 155.395313][ T6700] usb 4-1: USB disconnect, device number 6 [ 155.435665][ T24] hid-led 0003:1D34:000A.0023: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.9-1/input0 [ 155.447517][ T24] hid-led 0003:1D34:000A.0023: Dream Cheeky Webmail Notifier initialized [ 155.628913][ T6700] usb 10-1: USB disconnect, device number 7 [ 155.968023][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 155.968107][ T1406] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.980273][ T9457] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 156.122705][ T9484] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3917'. [ 156.132089][ T9484] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3917'. [ 156.142072][ T9484] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3917'. [ 156.277840][ T9510] loop0: detected capacity change from 0 to 256 [ 156.287206][ T9510] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.312477][ T9510] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 156.321836][ T9510] FAT-fs (loop0): Filesystem has been set read-only [ 156.331917][ T9514] loop7: detected capacity change from 0 to 256 [ 156.341845][ T9514] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 156.638877][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.782276][ T8] tipc: Subscription rejected, illegal request [ 156.807361][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.817642][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 156.828963][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.844012][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.853223][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.861267][ T24] usb 4-1: Product: syz [ 156.866135][ T24] usb 4-1: Manufacturer: syz [ 156.870784][ T24] usb 4-1: SerialNumber: syz [ 156.922028][ T9550] loop9: detected capacity change from 0 to 1024 [ 156.928974][ T9550] EXT4-fs: Ignoring removed oldalloc option [ 156.934971][ T9550] EXT4-fs: Ignoring removed orlov option [ 156.942506][ T2925] ================================================================== [ 156.950580][ T2925] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 156.957592][ T2925] Write of size 8 at addr ffff8881360b4a00 by task kworker/1:4/2925 [ 156.965546][ T2925] [ 156.967850][ T2925] CPU: 1 PID: 2925 Comm: kworker/1:4 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 156.977710][ T2925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.987746][ T2925] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 156.993803][ T2925] Call Trace: [ 156.997067][ T2925] [ 156.999985][ T2925] __dump_stack+0x21/0x24 [ 157.004300][ T2925] dump_stack_lvl+0xee/0x150 [ 157.008871][ T2925] ? __cfi_dump_stack_lvl+0x8/0x8 [ 157.013884][ T2925] ? enqueue_timer+0xae/0x480 [ 157.018550][ T2925] print_address_description+0x71/0x210 [ 157.024167][ T2925] print_report+0x4a/0x60 [ 157.028478][ T2925] kasan_report+0x122/0x150 [ 157.032960][ T2925] ? enqueue_timer+0xae/0x480 [ 157.037615][ T2925] __asan_report_store8_noabort+0x17/0x20 [ 157.043317][ T2925] enqueue_timer+0xae/0x480 [ 157.047800][ T2925] __mod_timer+0x79f/0xb30 [ 157.052188][ T2925] ? __bpf_prog_free+0x84/0xe0 [ 157.056927][ T2925] mod_timer+0x1f/0x30 [ 157.061060][ T2925] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 157.068412][ T2925] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 157.075714][ T2925] wg_packet_tx_worker+0x15e/0x4e0 [ 157.080804][ T2925] process_one_work+0x71f/0xc40 [ 157.085638][ T2925] worker_thread+0xa29/0x11f0 [ 157.090308][ T2925] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 157.095748][ T2925] kthread+0x281/0x320 [ 157.099797][ T2925] ? __cfi_worker_thread+0x10/0x10 [ 157.104883][ T2925] ? __cfi_kthread+0x10/0x10 [ 157.109448][ T2925] ret_from_fork+0x1f/0x30 [ 157.113845][ T2925] [ 157.116844][ T2925] [ 157.119143][ T2925] Allocated by task 9457: [ 157.123453][ T2925] kasan_set_track+0x4b/0x70 [ 157.128023][ T2925] kasan_save_alloc_info+0x25/0x30 [ 157.133114][ T2925] __kasan_kmalloc+0x95/0xb0 [ 157.137680][ T2925] __kmalloc+0xb1/0x1e0 [ 157.141813][ T2925] hci_alloc_dev_priv+0x27/0x1bd0 [ 157.146815][ T2925] hci_uart_tty_ioctl+0x3d6/0xa20 [ 157.151815][ T2925] tty_ioctl+0x8ef/0xc60 [ 157.156037][ T2925] __se_sys_ioctl+0x12f/0x1b0 [ 157.160695][ T2925] __x64_sys_ioctl+0x7b/0x90 [ 157.165267][ T2925] x64_sys_call+0x58b/0x9a0 [ 157.169747][ T2925] do_syscall_64+0x4c/0xa0 [ 157.174144][ T2925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.180473][ T2925] [ 157.182784][ T2925] Freed by task 9457: [ 157.186737][ T2925] kasan_set_track+0x4b/0x70 [ 157.191324][ T2925] kasan_save_free_info+0x31/0x50 [ 157.196334][ T2925] ____kasan_slab_free+0x132/0x180 [ 157.201441][ T2925] __kasan_slab_free+0x11/0x20 [ 157.206236][ T2925] slab_free_freelist_hook+0xc2/0x190 [ 157.211590][ T2925] __kmem_cache_free+0xb7/0x1b0 [ 157.216417][ T2925] kfree+0x6f/0xf0 [ 157.220117][ T2925] hci_release_dev+0x13ad/0x1500 [ 157.225033][ T2925] bt_host_release+0x82/0x90 [ 157.229598][ T2925] device_release+0xa4/0x1d0 [ 157.234162][ T2925] kobject_put+0x19d/0x280 [ 157.238554][ T2925] put_device+0x1f/0x30 [ 157.242686][ T2925] hci_dev_cmd+0x265/0x720 [ 157.247085][ T2925] hci_sock_ioctl+0x41e/0x7f0 [ 157.251838][ T2925] sock_do_ioctl+0x101/0x310 [ 157.256428][ T2925] sock_ioctl+0x4d8/0x6e0 [ 157.260760][ T2925] __se_sys_ioctl+0x12f/0x1b0 [ 157.265459][ T2925] __x64_sys_ioctl+0x7b/0x90 [ 157.270035][ T2925] x64_sys_call+0x58b/0x9a0 [ 157.274518][ T2925] do_syscall_64+0x4c/0xa0 [ 157.278909][ T2925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.284788][ T2925] [ 157.287089][ T2925] Last potentially related work creation: [ 157.292780][ T2925] kasan_save_stack+0x3a/0x60 [ 157.297435][ T2925] __kasan_record_aux_stack+0xb6/0xc0 [ 157.302824][ T2925] kasan_record_aux_stack_noalloc+0xb/0x10 [ 157.308610][ T2925] insert_work+0x51/0x300 [ 157.313007][ T2925] __queue_work+0x9b1/0xd30 [ 157.317490][ T2925] queue_work_on+0xd2/0x140 [ 157.321994][ T2925] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 157.326908][ T2925] hci_cmd_sync_status+0x53/0x120 [ 157.331904][ T2925] hci_dev_cmd+0x628/0x720 [ 157.336299][ T2925] hci_sock_ioctl+0x41e/0x7f0 [ 157.340953][ T2925] sock_do_ioctl+0x101/0x310 [ 157.345523][ T2925] sock_ioctl+0x4d8/0x6e0 [ 157.349828][ T2925] __se_sys_ioctl+0x12f/0x1b0 [ 157.354485][ T2925] __x64_sys_ioctl+0x7b/0x90 [ 157.359053][ T2925] x64_sys_call+0x58b/0x9a0 [ 157.363536][ T2925] do_syscall_64+0x4c/0xa0 [ 157.367929][ T2925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.373798][ T2925] [ 157.376100][ T2925] Second to last potentially related work creation: [ 157.382656][ T2925] kasan_save_stack+0x3a/0x60 [ 157.387308][ T2925] __kasan_record_aux_stack+0xb6/0xc0 [ 157.392656][ T2925] kasan_record_aux_stack_noalloc+0xb/0x10 [ 157.398442][ T2925] insert_work+0x51/0x300 [ 157.402753][ T2925] __queue_work+0x9b1/0xd30 [ 157.407238][ T2925] queue_work_on+0xd2/0x140 [ 157.411722][ T2925] hci_cmd_timeout+0x191/0x200 [ 157.416480][ T2925] process_one_work+0x71f/0xc40 [ 157.421309][ T2925] worker_thread+0xa29/0x11f0 [ 157.425968][ T2925] kthread+0x281/0x320 [ 157.430011][ T2925] ret_from_fork+0x1f/0x30 [ 157.434405][ T2925] [ 157.436707][ T2925] The buggy address belongs to the object at ffff8881360b4000 [ 157.436707][ T2925] which belongs to the cache kmalloc-8k of size 8192 [ 157.450957][ T2925] The buggy address is located 2560 bytes inside of [ 157.450957][ T2925] 8192-byte region [ffff8881360b4000, ffff8881360b6000) [ 157.464391][ T2925] [ 157.466698][ T2925] The buggy address belongs to the physical page: [ 157.473084][ T2925] page:ffffea0004d82c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1360b0 [ 157.483295][ T2925] head:ffffea0004d82c00 order:3 compound_mapcount:0 compound_pincount:0 [ 157.491594][ T2925] flags: 0x4000000000010200(slab|head|zone=1) [ 157.497652][ T2925] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 157.506211][ T2925] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 157.514767][ T2925] page dumped because: kasan: bad access detected [ 157.521156][ T2925] page_owner tracks the page as allocated [ 157.526846][ T2925] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9417, tgid 9416 (syz.3.3890), ts 153843245138, free_ts 151062524344 [ 157.549668][ T2925] post_alloc_hook+0x1f5/0x210 [ 157.554420][ T2925] prep_new_page+0x1c/0x110 [ 157.558901][ T2925] get_page_from_freelist+0x2c7b/0x2cf0 [ 157.564423][ T2925] __alloc_pages+0x19e/0x3a0 [ 157.568989][ T2925] alloc_slab_page+0x6e/0xf0 [ 157.573564][ T2925] new_slab+0x98/0x3d0 [ 157.577612][ T2925] ___slab_alloc+0x6f6/0xb50 [ 157.582177][ T2925] __slab_alloc+0x5e/0xa0 [ 157.586491][ T2925] __kmem_cache_alloc_node+0x203/0x2c0 [ 157.591925][ T2925] kmalloc_trace+0x29/0xb0 [ 157.596320][ T2925] f2fs_fill_super+0xc5/0x6c70 [ 157.601060][ T2925] mount_bdev+0x2bc/0x3f0 [ 157.605367][ T2925] f2fs_mount+0x34/0x40 [ 157.609498][ T2925] legacy_get_tree+0xfe/0x1a0 [ 157.614154][ T2925] vfs_get_tree+0x9a/0x270 [ 157.618547][ T2925] do_new_mount+0x25a/0xa20 [ 157.623028][ T2925] page last free stack trace: [ 157.627676][ T2925] free_unref_page_prepare+0x742/0x750 [ 157.633197][ T2925] free_unref_page+0x8f/0x530 [ 157.637870][ T2925] __free_pages+0x67/0x100 [ 157.642263][ T2925] free_pages+0x82/0x90 [ 157.646396][ T2925] kasan_depopulate_vmalloc_pte+0x6b/0x90 [ 157.652095][ T2925] __apply_to_page_range+0x8c1/0xc00 [ 157.657358][ T2925] apply_to_existing_page_range+0x38/0x50 [ 157.663066][ T2925] kasan_release_vmalloc+0x97/0xb0 [ 157.668158][ T2925] __purge_vmap_area_lazy+0xd47/0x1850 [ 157.673593][ T2925] drain_vmap_area_work+0x3e/0xd0 [ 157.678591][ T2925] process_one_work+0x71f/0xc40 [ 157.683418][ T2925] worker_thread+0xa29/0x11f0 [ 157.688080][ T2925] kthread+0x281/0x320 [ 157.692125][ T2925] ret_from_fork+0x1f/0x30 [ 157.696517][ T2925] [ 157.698818][ T2925] Memory state around the buggy address: [ 157.704418][ T2925] ffff8881360b4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.712454][ T2925] ffff8881360b4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.720490][ T2925] >ffff8881360b4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.728523][ T2925] ^ [ 157.732591][ T2925] ffff8881360b4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.740657][ T2925] ffff8881360b4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.748693][ T2925] ================================================================== [ 157.756729][ T2925] Disabling lock debugging due to kernel taint [ 157.787442][ T9550] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 157.800541][ T9550] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3841: comm syz.9.3951: Allocating blocks 385-513 which overlap fs metadata [ 157.816228][ T9550] EXT4-fs (loop9): pa ffff888132e65738: logic 16, phys. 129, len 24 [ 157.824422][ T9550] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 157.844869][ T7168] EXT4-fs (loop9): unmounting filesystem. [ 157.906092][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 157.917831][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 157.926228][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 157.937139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.947175][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 157.952445][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 d2 28 00 4c 89 ff e8 f0 1f a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2c 6d 00 49 8b 7d 00 e8 d3 1b [ 157.972034][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 157.978088][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003b0000 [ 157.986046][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 157.994089][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 158.002137][ C1] R10: ffffed1026c16939 R11: 1ffff11026c16939 R12: dffffc0000000000 [ 158.010096][ C1] R13: 0000000000000000 R14: ffff8881360b49c8 R15: 0000000000000008 [ 158.018090][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 158.027005][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.033576][ C1] CR2: 00007f14c1382178 CR3: 00000001125ad000 CR4: 00000000003506a0 [ 158.041534][ C1] DR0: 0000000000000000 DR1: 0000000000000003 DR2: 0000000000000000 [ 158.049490][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 158.057461][ C1] Call Trace: [ 158.060727][ C1] [ 158.063559][ C1] delayed_work_timer_fn+0x61/0x80 [ 158.068660][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 158.074447][ C1] call_timer_fn+0x46/0x2a0 [ 158.078933][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 158.084725][ C1] __run_timers+0x667/0x9a0 [ 158.089219][ C1] ? calc_index+0x200/0x200 [ 158.093719][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 158.098902][ C1] run_timer_softirq+0x6a/0xf0 [ 158.103649][ C1] handle_softirqs+0x1d7/0x600 [ 158.108392][ C1] ? irqtime_account_irq+0xc4/0x240 [ 158.113590][ C1] __irq_exit_rcu+0x52/0xf0 [ 158.118100][ C1] irq_exit_rcu+0x9/0x10 [ 158.122328][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 158.127950][ C1] [ 158.130874][ C1] [ 158.133884][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 158.139850][ C1] RIP: 0010:default_idle+0xf/0x20 [ 158.144866][ C1] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 03 19 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 158.164461][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 158.170520][ C1] RAX: ffff8881f7100000 RBX: ffff8881003b0000 RCX: e3f62f0332af6b00 [ 158.178478][ C1] RDX: 0000000000000001 RSI: ffffffff85a9fd80 RDI: ffffffff85a9fd40 [ 158.186433][ C1] RBP: ffffc90000147dd8 R08: dffffc0000000000 R09: ffffed103ee26917 [ 158.194389][ C1] R10: 0000000000000000 R11: ffffffff84f01a70 R12: 0000000000000000 [ 158.202369][ C1] R13: 0000000000000000 R14: ffff8881003b0000 R15: dffffc0000000000 [ 158.210412][ C1] ? __cfi_default_idle+0x10/0x10 [ 158.215426][ C1] arch_cpu_idle+0x1c/0x20 [ 158.219820][ C1] default_idle_call+0x71/0x1d0 [ 158.224660][ C1] do_idle+0x1a7/0x520 [ 158.228741][ C1] ? ct_irq_exit+0x9/0x10 [ 158.233055][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 158.238253][ C1] cpu_startup_entry+0x43/0x60 [ 158.243004][ C1] start_secondary+0x119/0x120 [ 158.247754][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 158.253632][ C1] [ 158.256642][ C1] Modules linked in: [ 158.260529][ C1] ---[ end trace 0000000000000000 ]--- [ 158.265964][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 158.271245][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 d2 28 00 4c 89 ff e8 f0 1f a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2c 6d 00 49 8b 7d 00 e8 d3 1b [ 158.290840][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 158.296918][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003b0000 [ 158.304968][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 158.312945][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 158.320905][ C1] R10: ffffed1026c16939 R11: 1ffff11026c16939 R12: dffffc0000000000 [ 158.328867][ C1] R13: 0000000000000000 R14: ffff8881360b49c8 R15: 0000000000000008 [ 158.336829][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 158.345742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.352316][ C1] CR2: 00007f14c1382178 CR3: 00000001125ad000 CR4: 00000000003506a0 [ 158.360295][ C1] DR0: 0000000000000000 DR1: 0000000000000003 DR2: 0000000000000000 [ 158.368264][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 158.376309][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 158.383724][ C1] Kernel Offset: disabled [ 158.388031][ C1] Rebooting in 86400 seconds..