last executing test programs: 26.015988786s ago: executing program 2 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486"], 0x66) 25.857857599s ago: executing program 2 (id=442): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 25.808143263s ago: executing program 2 (id=444): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 25.641431937s ago: executing program 2 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 25.604927831s ago: executing program 2 (id=446): openat$vcs(0xffffffffffffff9c, 0x0, 0x8280, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@init_itable}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa4fe385000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000027f0588f850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 25.460818672s ago: executing program 2 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.696718619s ago: executing program 4 (id=570): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000ff0f0000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 16.67424852s ago: executing program 4 (id=571): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x7}, 0x0) 16.663907301s ago: executing program 4 (id=572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 13.85943559s ago: executing program 4 (id=606): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 13.149059421s ago: executing program 4 (id=609): creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) 12.328102561s ago: executing program 4 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000003c0)) 10.368076968s ago: executing program 3 (id=618): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/4351], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 9.245275103s ago: executing program 3 (id=620): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid}, {@discard}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x11, 0x4d1, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 7.98850846s ago: executing program 0 (id=623): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) 7.98811786s ago: executing program 1 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000840)={0x18, 0x0, &(0x7f0000000700)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 7.98685613s ago: executing program 3 (id=625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00C'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.671849692s ago: executing program 0 (id=626): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r2, 0x181}, {r1, 0x8024}, {r2, 0x80c0}], 0x3, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 6.671472902s ago: executing program 1 (id=627): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_btf_id_by_name$bpf_lsm(0x0) 5.237020244s ago: executing program 0 (id=628): syz_read_part_table(0x5d2, &(0x7f0000000000)="$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") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0) 5.236492884s ago: executing program 1 (id=629): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.210317137s ago: executing program 3 (id=637): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x2, 0x1000) 3.678374807s ago: executing program 0 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) 3.678040137s ago: executing program 1 (id=631): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f0000000100), 0x30, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 2.065712984s ago: executing program 1 (id=632): r0 = io_uring_setup(0x1951, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x2, 0x2b2}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0) read$usbmon(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$MON_IOCH_MFLUSH(r1, 0x80089203, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.065116054s ago: executing program 3 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 2.016267048s ago: executing program 0 (id=642): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 17.410868ms ago: executing program 1 (id=635): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 17.071818ms ago: executing program 3 (id=636): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x8) 0s ago: executing program 0 (id=638): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 281 [ 36.937940][ T906] EXT4-fs (loop1): dirty_blocks=2 [ 36.943561][ T906] EXT4-fs (loop1): Block reservation details [ 36.964631][ T916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 36.973474][ T906] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 36.981602][ T900] loop0: detected capacity change from 0 to 131072 [ 37.087625][ T900] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (6747996280161764837, 6747996279205463525) [ 37.128127][ T900] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.189301][ T936] loop4: detected capacity change from 0 to 16 [ 37.201239][ T936] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.219228][ T936] attempt to access beyond end of device [ 37.219228][ T936] loop4: rw=0, want=14552337264, limit=16 [ 37.327206][ T940] loop0: detected capacity change from 0 to 2048 [ 37.358927][ T940] loop0: p1 < > p4 [ 37.363293][ T940] loop0: p4 size 8388608 extends beyond EOD, truncated [ 37.430016][ T101] loop0: p1 < > p4 [ 37.434232][ T101] loop0: p4 size 8388608 extends beyond EOD, truncated [ 37.506998][ T425] udevd[425]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.518255][ T312] udevd[312]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 37.688085][ T360] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 37.972982][ T957] loop0: detected capacity change from 0 to 512 [ 37.988471][ T319] Bluetooth: hci0: command 0x1009 tx timeout [ 38.039081][ T961] loop1: detected capacity change from 0 to 512 [ 38.079685][ T961] FAT-fs (loop1): bogus sectors per cluster 69 [ 38.087167][ T961] FAT-fs (loop1): Can't find a valid FAT filesystem [ 38.090479][ T957] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.240: corrupted inode contents [ 38.105528][ T957] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.240: mark_inode_dirty error [ 38.117113][ T957] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.240: corrupted inode contents [ 38.128725][ T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.137102][ T957] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.240: mark_inode_dirty error [ 38.139938][ T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.151184][ T957] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.240: Failed to acquire dquot type 0 [ 38.160309][ T360] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 38.171966][ T957] EXT4-fs (loop0): 1 orphan inode deleted [ 38.179891][ T360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.193198][ T957] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.204614][ T957] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 38.210117][ T360] usb 5-1: config 0 descriptor?? [ 38.277314][ T971] syz.1.245[971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.277378][ T971] syz.1.245[971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.290252][ T971] syz.1.245[971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.295973][ T968] ------------[ cut here ]------------ [ 38.301596][ T971] syz.1.245[971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.312830][ T968] WARNING: CPU: 1 PID: 968 at arch/x86/kvm/vmx/vmx.c:1709 vmx_queue_exception+0x2d1/0x470 [ 38.338230][ T968] Modules linked in: [ 38.341903][ T968] CPU: 1 PID: 968 Comm: syz.0.244 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 38.351545][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.361438][ T968] RIP: 0010:vmx_queue_exception+0x2d1/0x470 [ 38.367224][ T968] Code: 2e 0f 86 9b 01 00 00 e8 dd ec 4d 00 e9 32 ff ff ff e8 d3 ec 4d 00 e9 28 ff ff ff e8 c9 ec 4d 00 e9 1e ff ff ff e8 bf ec 4d 00 <0f> 0b e9 a5 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 5a fd ff ff e8 26 [ 38.386836][ T968] RSP: 0018:ffffc90000a274b0 EFLAGS: 00010287 [ 38.393109][ T968] RAX: ffffffff81226ac1 RBX: 0000000000000001 RCX: 0000000000040000 [ 38.401263][ T968] RDX: ffffc90001b71000 RSI: 0000000000000081 RDI: 0000000000000082 [ 38.409348][ T968] RBP: ffffc90000a274f0 R08: ffffffff81226960 R09: ffffed10219c4008 [ 38.417204][ T968] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810ce20000 [ 38.425319][ T968] R13: dffffc0000000000 R14: 0000000000000008 R15: 0000000080000808 [ 38.433389][ T968] FS: 00007feeee2986c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.444452][ T968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.451229][ T968] CR2: 0000001b33412ff8 CR3: 0000000124d7f000 CR4: 00000000003526a0 [ 38.451550][ T973] loop1: detected capacity change from 0 to 2048 [ 38.459316][ T968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.473693][ T968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.481639][ T968] Call Trace: [ 38.484817][ T968] [ 38.487579][ T968] ? show_regs+0x58/0x60 [ 38.491856][ T968] ? __warn+0x160/0x2f0 [ 38.495825][ T968] ? vmx_queue_exception+0x2d1/0x470 [ 38.501177][ T968] ? report_bug+0x3d9/0x5b0 [ 38.505538][ T968] ? vmx_queue_exception+0x2d1/0x470 [ 38.511143][ T968] ? handle_bug+0x41/0x70 [ 38.515352][ T968] ? exc_invalid_op+0x1b/0x50 [ 38.519943][ T968] ? asm_exc_invalid_op+0x1b/0x20 [ 38.524806][ T968] ? vmx_queue_exception+0x170/0x470 [ 38.530388][ T968] ? vmx_queue_exception+0x2d1/0x470 [ 38.531692][ T973] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.535590][ T968] ? vmx_queue_exception+0x2d1/0x470 [ 38.551393][ T968] kvm_inject_exception+0x11b/0x2a0 [ 38.556439][ T968] vcpu_enter_guest+0x87a/0x8ed0 [ 38.561534][ T968] ? preempt_schedule_thunk+0x16/0x18 [ 38.565337][ T973] EXT4-fs (loop1): shut down requested (0) [ 38.566769][ T968] ? tracing_record_taskinfo+0x50/0x230 [ 38.577763][ T968] ? try_to_wake_up+0x6ee/0x1160 [ 38.582592][ T968] ? try_invoke_on_locked_down_task+0x2a0/0x2a0 [ 38.588672][ T968] ? get_futex_key+0x7ce/0xce0 [ 38.593202][ T968] ? local_bh_enable+0x30/0x30 [ 38.597798][ T968] ? __kasan_check_write+0x14/0x20 [ 38.602813][ T968] ? wake_up_q+0x11c/0x1d0 [ 38.607036][ T968] ? futex_wake+0x844/0xc80 [ 38.611365][ T968] ? futex_wait+0x9a0/0x9a0 [ 38.615674][ T968] ? __kernel_text_address+0x9b/0x110 [ 38.620933][ T968] ? arch_stack_walk+0xf3/0x140 [ 38.625567][ T968] ? do_futex+0x1310/0x37f0 [ 38.630248][ T968] ? kfree+0xc8/0x220 [ 38.634193][ T968] ? vmx_vcpu_load_vmcs+0x4ad/0x7a0 [ 38.639332][ T968] ? ____kasan_slab_free+0x126/0x160 [ 38.644485][ T968] ? __kasan_check_read+0x11/0x20 [ 38.649717][ T968] ? __vmx_interrupt_blocked+0x167/0x1e0 [ 38.655239][ T968] ? vmx_interrupt_blocked+0xc1/0x130 [ 38.660666][ T968] ? vmx_check_nested_events+0x16d2/0x24b0 [ 38.666372][ T968] ? handle_vmfunc+0xcf0/0xcf0 [ 38.671192][ T968] ? local_bh_enable+0x1f/0x30 [ 38.675813][ T968] kvm_arch_vcpu_ioctl_run+0xc4d/0x2270 [ 38.681431][ T968] ? kasan_quarantine_put+0x34/0x1a0 [ 38.686566][ T968] ? ioctl_has_perm+0x1f8/0x560 [ 38.693446][ T968] ? __kvm_request_immediate_exit+0x70/0x70 [ 38.698714][ T360] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 38.699483][ T968] ? kvm_vcpu_ioctl+0x6fb/0xcf0 [ 38.712865][ T968] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 38.717406][ T968] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 38.723333][ T968] ? selinux_file_ioctl+0x3cc/0x540 [ 38.725728][ T360] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input7 [ 38.728632][ T968] ? selinux_file_alloc_security+0x120/0x120 [ 38.745534][ T968] ? __fget_files+0x31e/0x380 [ 38.750220][ T968] ? security_file_ioctl+0x84/0xb0 [ 38.755277][ T968] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 38.761135][ T968] __se_sys_ioctl+0x114/0x190 [ 38.765720][ T968] __x64_sys_ioctl+0x7b/0x90 [ 38.770566][ T968] x64_sys_call+0x98/0x9a0 [ 38.775097][ T968] do_syscall_64+0x3b/0xb0 [ 38.779741][ T968] ? clear_bhb_loop+0x35/0x90 [ 38.784286][ T968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.790604][ T968] RIP: 0033:0x7feeef61eff9 [ 38.794881][ T968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.814690][ T968] RSP: 002b:00007feeee298038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.823186][ T968] RAX: ffffffffffffffda RBX: 00007feeef7d6f80 RCX: 00007feeef61eff9 [ 38.833066][ T968] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 38.841509][ T968] RBP: 00007feeef691296 R08: 0000000000000000 R09: 0000000000000000 [ 38.849828][ T360] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 38.853070][ T968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.872479][ T977] loop1: detected capacity change from 0 to 40427 [ 38.874798][ T968] R13: 0000000000000000 R14: 00007feeef7d6f80 R15: 00007ffe7f8417c8 [ 38.887107][ T968] [ 38.890266][ T968] ---[ end trace 90314a3883df7dbe ]--- [ 38.896414][ T977] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 38.913394][ T26] usb 5-1: USB disconnect, device number 6 [ 38.914261][ T977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 38.939101][ T977] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.972649][ T977] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 38.979653][ T977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.013287][ T977] attempt to access beyond end of device [ 39.013287][ T977] loop1: rw=2049, want=53256, limit=40427 [ 39.025095][ T977] attempt to access beyond end of device [ 39.025095][ T977] loop1: rw=2049, want=53264, limit=40427 [ 39.037917][ T977] attempt to access beyond end of device [ 39.037917][ T977] loop1: rw=2049, want=53328, limit=40427 [ 39.054233][ T699] attempt to access beyond end of device [ 39.054233][ T699] loop1: rw=2049, want=45104, limit=40427 [ 39.167107][ T986] input: syz0 as /devices/virtual/input/input8 [ 39.490109][ T983] loop0: detected capacity change from 0 to 131072 [ 39.499734][ T983] ======================================================= [ 39.499734][ T983] WARNING: The mand mount option has been deprecated and [ 39.499734][ T983] and is ignored by this kernel. Remove the mand [ 39.499734][ T983] option from the mount to silence this warning. [ 39.499734][ T983] ======================================================= [ 39.540889][ T983] F2FS-fs (loop0): invalid crc value [ 39.564014][ T983] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 39.593098][ T983] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 39.629454][ T983] syz.0.248 (pid 983) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 39.651937][ T983] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 39.842962][ T1001] loop4: detected capacity change from 0 to 40427 [ 39.859063][ T1001] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 39.866626][ T1001] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.877389][ T1001] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.913971][ T1001] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.920956][ T1001] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.952056][ T1001] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 39.972165][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 39.972184][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 39.979710][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 39.990014][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 40.000943][ T1010] loop0: detected capacity change from 0 to 512 [ 40.014812][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 40.014830][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 40.022597][ T876] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 40.080723][ T1010] EXT4-fs (loop0): 1 orphan inode deleted [ 40.093681][ T1010] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 40.117867][ T1010] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 40.174209][ T1017] loop4: detected capacity change from 0 to 512 [ 40.232796][ T1017] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.255: corrupted inode contents [ 40.244609][ T1017] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #3: comm syz.4.255: mark_inode_dirty error [ 40.256115][ T1017] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.255: corrupted inode contents [ 40.268384][ T1017] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.255: mark_inode_dirty error [ 40.279748][ T1017] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.255: Failed to acquire dquot type 0 [ 40.292049][ T1017] EXT4-fs (loop4): 1 orphan inode deleted [ 40.297602][ T1017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.311228][ T1017] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 40.330314][ T1017] syz.4.255 (1017) used greatest stack depth: 20200 bytes left [ 40.398180][ T1030] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 40.418404][ T1030] syz.0.260 (1030) used greatest stack depth: 19984 bytes left [ 40.519555][ T1038] overlayfs: statfs failed on './file0' [ 40.599669][ T1037] loop0: detected capacity change from 0 to 40427 [ 40.678359][ T1037] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 40.686069][ T1037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.694943][ T1037] F2FS-fs (loop0): invalid crc value [ 40.701544][ T1037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.724477][ T1037] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.731430][ T1037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.772777][ T45] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 40.781977][ T45] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 41.089116][ T1057] loop1: detected capacity change from 0 to 8192 [ 41.208090][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.377772][ T1068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 41.387210][ T1068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 41.448199][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 41.568155][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 41.578845][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.588631][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.748168][ T319] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.758160][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.767007][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.775031][ T26] usb 1-1: Product: syz [ 41.779032][ T26] usb 1-1: Manufacturer: syz [ 41.783561][ T26] usb 1-1: SerialNumber: syz [ 41.923711][ T1077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 41.932949][ T1077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 41.943884][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 41.943897][ T30] audit: type=1400 audit(1728986614.912:360): avc: denied { read } for pid=1078 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.981938][ T30] audit: type=1400 audit(1728986614.912:361): avc: denied { open } for pid=1078 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.005792][ T30] audit: type=1326 audit(1728986614.972:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.030244][ T30] audit: type=1326 audit(1728986614.972:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.053679][ T30] audit: type=1326 audit(1728986614.972:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.077325][ T30] audit: type=1326 audit(1728986614.972:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.077601][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.107620][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.108587][ T30] audit: type=1326 audit(1728986614.972:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.114967][ T1078] device bridge_slave_0 entered promiscuous mode [ 42.144463][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.151498][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.158820][ T1078] device bridge_slave_1 entered promiscuous mode [ 42.167886][ T30] audit: type=1326 audit(1728986614.972:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.191308][ T30] audit: type=1326 audit(1728986614.972:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.218184][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 42.224679][ T30] audit: type=1326 audit(1728986614.972:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1080 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 42.238046][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 42.278229][ T26] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 42.285940][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.313368][ T319] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.322578][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.348585][ T319] usb 2-1: config 0 descriptor?? [ 42.357736][ T1081] loop4: detected capacity change from 0 to 40427 [ 42.371298][ T1073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.398897][ T1081] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 42.405059][ T1081] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 42.416484][ T1081] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.420332][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.434214][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.441314][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.448095][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.456954][ T1081] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 42.464005][ T1081] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.489883][ T1081] attempt to access beyond end of device [ 42.489883][ T1081] loop4: rw=2049, want=53256, limit=40427 [ 42.501819][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.509014][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.516998][ T1086] device bridge_slave_0 entered promiscuous mode [ 42.517745][ T876] attempt to access beyond end of device [ 42.517745][ T876] loop4: rw=2049, want=45104, limit=40427 [ 42.546848][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.554267][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.567210][ T1086] device bridge_slave_1 entered promiscuous mode [ 42.577756][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.585459][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.597427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.606210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.623664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.632259][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.639145][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.670546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.678739][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.685587][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.693330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.713345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.752102][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.767895][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.775912][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.783210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.803586][ T1078] device veth0_vlan entered promiscuous mode [ 42.812844][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.823886][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.833713][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.838976][ T319] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 42.843890][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.849074][ T319] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 42.855603][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.862844][ T319] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 42.871197][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.884433][ T319] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 42.889671][ T1078] device veth1_macvtap entered promiscuous mode [ 42.897661][ T319] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 42.904897][ T319] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 42.912292][ T319] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 42.922666][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.923904][ T319] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 42.933582][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.949492][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.970677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.979193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.988845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.996654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.017658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.031187][ T1104] loop4: detected capacity change from 0 to 256 [ 43.031611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.052719][ T1086] device veth0_vlan entered promiscuous mode [ 43.065774][ T1086] device veth1_macvtap entered promiscuous mode [ 43.082780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.091764][ T1104] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 43.108361][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.126778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.148479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.169057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.184720][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.193298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.206064][ T488] device vlan0 left promiscuous mode [ 43.211526][ T488] bridge0: port 3(vlan0) entered disabled state [ 43.228333][ T488] device bridge_slave_1 left promiscuous mode [ 43.234282][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.239393][ T319] usb 2-1: USB disconnect, device number 5 [ 43.263129][ T488] device bridge_slave_0 left promiscuous mode [ 43.278124][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.296183][ T488] device veth1_macvtap left promiscuous mode [ 43.308638][ T488] device veth0_vlan left promiscuous mode [ 43.384491][ T26] usb 1-1: USB disconnect, device number 6 [ 43.469924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.488732][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.510258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.528691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.637019][ T1111] tipc: Failed to remove unknown binding: 66,1,1/0:2144245627/2144245629 [ 43.754745][ T1113] loop2: detected capacity change from 0 to 512 [ 43.833347][ T1113] EXT4-fs (loop2): Ignoring removed oldalloc option [ 43.858806][ T1113] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.288: inode #11614: comm syz.2.288: iget: illegal inode # [ 43.886033][ T1113] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.288: error while reading EA inode 11614 err=-117 [ 43.908416][ T1113] EXT4-fs (loop2): 1 truncate cleaned up [ 43.913889][ T1113] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,stripe=0x0000000000000e49,jqfmt=vfsv0,oldalloc,,errors=continue. Quota mode: none. [ 43.972970][ T1122] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 44.011605][ T1107] loop3: detected capacity change from 0 to 131072 [ 44.030020][ T1113] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.288: inode #11614: comm syz.2.288: iget: illegal inode # [ 44.053390][ T1113] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.288: error while reading EA inode 11614 err=-117 [ 44.091914][ T1130] loop1: detected capacity change from 0 to 512 [ 44.102937][ T1107] F2FS-fs (loop3): invalid crc value [ 44.128849][ T1130] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 44.143932][ T1130] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.152539][ T1107] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 44.178723][ T1130] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.296: corrupted in-inode xattr [ 44.190669][ T1130] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.296: couldn't read orphan inode 15 (err -117) [ 44.259259][ T1107] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 44.271164][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 44.297118][ T1130] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,mblk_io_submit,data_err=abort,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 44.325486][ T1107] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 44.335515][ T1147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 44.410971][ T1150] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 44.448085][ T1150] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 44.778072][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.038064][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 45.158118][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.183571][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.210200][ T26] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 45.234302][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.271459][ T26] usb 1-1: config 0 descriptor?? [ 45.535474][ T1155] loop1: detected capacity change from 0 to 131072 [ 45.574765][ T1155] F2FS-fs (loop1): invalid crc value [ 45.596235][ T1155] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 45.636458][ T1155] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 45.671612][ T1155] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 45.748369][ T26] hid (null): report_id 17819 is invalid [ 45.754907][ T26] kye 0003:0458:5015.0005: report_id 17819 is invalid [ 45.761623][ T26] kye 0003:0458:5015.0005: item 0 2 1 8 parsing failed [ 45.771106][ T26] kye 0003:0458:5015.0005: parse failed [ 45.778386][ T26] kye: probe of 0003:0458:5015.0005 failed with error -22 [ 45.825962][ T1184] netlink: 'syz.2.312': attribute type 12 has an invalid length. [ 45.928078][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 45.959154][ T26] usb 1-1: USB disconnect, device number 7 [ 46.015158][ T1201] loop2: detected capacity change from 0 to 256 [ 46.022951][ T1199] loop4: detected capacity change from 0 to 2048 [ 46.056316][ T1201] FAT-fs (loop2): Directory bread(block 64) failed [ 46.062855][ T1201] FAT-fs (loop2): Directory bread(block 65) failed [ 46.064259][ T1199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.069608][ T1201] FAT-fs (loop2): Directory bread(block 66) failed [ 46.086199][ T1201] FAT-fs (loop2): Directory bread(block 67) failed [ 46.092894][ T1201] FAT-fs (loop2): Directory bread(block 68) failed [ 46.099624][ T1201] FAT-fs (loop2): Directory bread(block 69) failed [ 46.106070][ T1201] FAT-fs (loop2): Directory bread(block 70) failed [ 46.112805][ T1201] FAT-fs (loop2): Directory bread(block 71) failed [ 46.119484][ T1201] FAT-fs (loop2): Directory bread(block 72) failed [ 46.125807][ T1201] FAT-fs (loop2): Directory bread(block 73) failed [ 46.132649][ T1199] +}[@ (1199) used greatest stack depth: 19248 bytes left [ 46.195945][ T1086] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 46.203507][ T1086] FAT-fs (loop2): Filesystem has been set read-only [ 46.258070][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.288123][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.301073][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.321947][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.334933][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.344169][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.355546][ T39] usb 4-1: config 0 descriptor?? [ 46.355650][ T1207] loop4: detected capacity change from 0 to 512 [ 46.485972][ T1210] loop0: detected capacity change from 0 to 512 [ 46.528060][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 46.545647][ T1210] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2765: inode #11: comm syz.0.325: corrupted xattr block 95 [ 46.562062][ T1210] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.325: bg 0: block 7: invalid block bitmap [ 46.576198][ T1210] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 46.586781][ T1210] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2931: inode #11: comm syz.0.325: corrupted xattr block 95 [ 46.608117][ T1210] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -117) [ 46.608335][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.623941][ T1210] EXT4-fs (loop0): 1 orphan inode deleted [ 46.630174][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.637485][ T1211] device bridge_slave_0 entered promiscuous mode [ 46.643924][ T1210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.655492][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.665400][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.672686][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.683667][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.708537][ T1211] device bridge_slave_1 entered promiscuous mode [ 46.718231][ T20] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 46.727097][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.765892][ T20] usb 2-1: config 0 descriptor?? [ 46.839124][ T39] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 46.852060][ T39] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.872698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.880245][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.928914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.938694][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.950384][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.957265][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.964877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.973343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.983156][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.990059][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.997594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.005840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.013794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.024813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.032853][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.052201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.069685][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.084789][ T1211] device veth0_vlan entered promiscuous mode [ 47.098881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.111208][ T39] usb 4-1: USB disconnect, device number 3 [ 47.127798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.147340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.159895][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.174550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.182792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.196905][ T1211] device veth1_macvtap entered promiscuous mode [ 47.219349][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 47.219365][ T30] audit: type=1326 audit(1728986620.182:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 47.222504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.256396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.258741][ T30] audit: type=1326 audit(1728986620.182:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 47.287784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.297779][ T30] audit: type=1326 audit(1728986620.182:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 47.321779][ T20] apple 0003:05AC:0247.0007: unknown main item tag 0x0 [ 47.329576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.338071][ T30] audit: type=1326 audit(1728986620.182:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 47.347906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.367485][ T20] apple 0003:05AC:0247.0007: unknown main item tag 0x0 [ 47.376882][ T20] apple 0003:05AC:0247.0007: item fetching failed at offset 2/160 [ 47.385083][ T20] apple 0003:05AC:0247.0007: parse failed [ 47.391226][ T30] audit: type=1326 audit(1728986620.252:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 47.414526][ T20] apple: probe of 0003:05AC:0247.0007 failed with error -22 [ 47.436815][ T30] audit: type=1326 audit(1728986620.252:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937191ff9 code=0x7ffc0000 [ 47.526671][ T39] usb 2-1: USB disconnect, device number 6 [ 47.561713][ T1237] loop4: detected capacity change from 0 to 128 [ 47.604970][ T1239] loop0: detected capacity change from 0 to 2048 [ 47.627005][ T1241] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 47.638705][ T1237] attempt to access beyond end of device [ 47.638705][ T1237] loop4: rw=0, want=240, limit=128 [ 47.670936][ T1239] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.718142][ T319] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 47.779580][ T30] audit: type=1400 audit(1728986620.742:417): avc: denied { read } for pid=1246 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.847024][ T1258] loop4: detected capacity change from 0 to 512 [ 47.865971][ T30] audit: type=1326 audit(1728986620.822:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.0.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeef61eff9 code=0x0 [ 47.891135][ T1258] EXT4-fs (loop4): 1 orphan inode deleted [ 47.896670][ T1258] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.907992][ T1258] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 47.927834][ T1258] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz.4.341: Invalid inode table block 1901916959 in block_group 0 [ 47.928127][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.952948][ T876] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 47.969422][ T876] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 1901916959 in block_group 0 [ 47.983073][ T876] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 47.993176][ T876] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 48.005544][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 1901916959 in block_group 0 [ 48.019367][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 1901916959 in block_group 0 [ 48.033026][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 1901916959 in block_group 0 [ 48.046780][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 1901916959 in block_group 0 [ 48.061895][ T876] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 1901916959 in block_group 0 [ 48.078123][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.088862][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.098904][ T319] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 48.109008][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.118434][ T319] usb 3-1: config 0 descriptor?? [ 48.188136][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 48.204284][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.211215][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.218682][ T1267] device bridge_slave_0 entered promiscuous mode [ 48.225487][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.232679][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.240196][ T1267] device bridge_slave_1 entered promiscuous mode [ 48.284927][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.291828][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.299016][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.305769][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.326230][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.333764][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.341334][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.348624][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.360010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.368377][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.375350][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.384534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.393231][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.400111][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.414113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.423792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.437872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.451616][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.459548][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.466808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.475790][ T1267] device veth0_vlan entered promiscuous mode [ 48.488358][ T26] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 48.491289][ T1267] device veth1_macvtap entered promiscuous mode [ 48.498508][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.511443][ T26] usb 4-1: Product: syz [ 48.512000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.516130][ T26] usb 4-1: Manufacturer: syz [ 48.525000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.527950][ T26] usb 4-1: SerialNumber: syz [ 48.537073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.544077][ T26] usb 4-1: config 0 descriptor?? [ 48.574751][ T1272] loop4: detected capacity change from 0 to 2048 [ 48.589024][ T319] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 48.596881][ T319] hid-rmi 0003:06CB:81A7.0008: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 48.620326][ T1272] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.631205][ T1272] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 48.642195][ T488] device bridge_slave_1 left promiscuous mode [ 48.648471][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.656046][ T488] device bridge_slave_0 left promiscuous mode [ 48.662350][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.666301][ T30] audit: type=1400 audit(1728986621.622:419): avc: denied { rename } for pid=1271 comm="syz.4.355" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.669632][ T1272] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz.4.355: Invalid inode table block 7016996765293437281 in block_group 0 [ 48.706192][ T488] device veth1_macvtap left promiscuous mode [ 48.714716][ T488] device veth0_vlan left promiscuous mode [ 48.716089][ T1272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 48.730662][ T1272] EXT4-fs error (device loop4): add_dirent_to_buf:2214: inode #12: comm syz.4.355: mark_inode_dirty error [ 48.748203][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.768797][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.769697][ T1267] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 48.783025][ T20] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 48.809523][ T1079] usb 3-1: USB disconnect, device number 4 [ 48.811079][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.815305][ T1267] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 7016996765293437281 in block_group 0 [ 48.839250][ T1267] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 7016996765293437281 in block_group 0 [ 48.840829][ T20] usb 2-1: config 0 descriptor?? [ 49.008640][ T10] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:1: Invalid inode table block 7016996765293437281 in block_group 0 [ 49.022888][ T319] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 49.108510][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.115404][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.122985][ T1280] device bridge_slave_0 entered promiscuous mode [ 49.129963][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.136791][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.144277][ T1280] device bridge_slave_1 entered promiscuous mode [ 49.191858][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.198722][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.205798][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.212605][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.232663][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.240259][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.247348][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.257422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.265523][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.272376][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.280320][ T26] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:34:ee:ee:5e:d8 [ 49.290016][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 49.298886][ T26] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 49.303668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.309731][ T30] audit: type=1400 audit(1728986622.272:420): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.313521][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.340120][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.354070][ T20] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 49.365868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.373711][ T20] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 49.374099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.380732][ T20] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 49.393844][ T1285] tipc: Started in network mode [ 49.399460][ T1285] tipc: Node identity 626b838136ad, cluster identity 4711 [ 49.406738][ T1285] tipc: Enabled bearer , priority 0 [ 49.412162][ T20] sony 0003:1345:3008.0009: hiddev96,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 49.413538][ T319] usb 1-1: New USB device found, idVendor=09d8, idProduct=0320, bcdDevice=8c.41 [ 49.425346][ T20] sony 0003:1345:3008.0009: failed to claim input [ 49.439539][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.460195][ T319] usb 1-1: config 0 descriptor?? [ 49.469499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.488837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.496570][ T60] usb 4-1: USB disconnect, device number 4 [ 49.502881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.511496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.522294][ T1280] device veth0_vlan entered promiscuous mode [ 49.529021][ T1284] tipc: Resetting bearer [ 49.544198][ T1284] tipc: Disabling bearer [ 49.574945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.589678][ T319] usb 2-1: USB disconnect, device number 7 [ 49.590391][ T1280] device veth1_macvtap entered promiscuous mode [ 49.611174][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.626698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.680232][ T1306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=1306 comm=syz.2.353 [ 49.694472][ T1306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 49.730162][ T1313] loop2: detected capacity change from 0 to 512 [ 49.779778][ T1313] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.354: inline data xattr refers to an external xattr inode [ 49.794499][ T1313] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.354: couldn't read orphan inode 12 (err -117) [ 49.794556][ T1098] usb 1-1: USB disconnect, device number 8 [ 49.807000][ T1313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.814851][ T1328] overlayfs: statfs failed on './file0' [ 49.832038][ T1313] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.354: Directory hole found for htree leaf block 0 [ 49.879651][ T488] device bridge_slave_1 left promiscuous mode [ 49.886021][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.893840][ T488] device bridge_slave_0 left promiscuous mode [ 49.899948][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.910038][ T488] device veth1_macvtap left promiscuous mode [ 49.915876][ T488] device veth0_vlan left promiscuous mode [ 50.128111][ T319] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.143144][ T1338] loop1: detected capacity change from 0 to 256 [ 50.272048][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 50.281690][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.299111][ T1341] device bridge_slave_0 left promiscuous mode [ 50.305119][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.316325][ T1343] netlink: 'syz.0.362': attribute type 4 has an invalid length. [ 50.328271][ T1343] netlink: 'syz.0.362': attribute type 4 has an invalid length. [ 50.364152][ T1346] syz.0.364[1346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.364217][ T1346] syz.0.364[1346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.408209][ T1079] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 50.488139][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.499069][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.508939][ T319] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 50.517958][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.526679][ T319] usb 5-1: config 0 descriptor?? [ 50.658102][ T1079] usb 4-1: Using ep0 maxpacket: 16 [ 50.718099][ T1098] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.778103][ T1079] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 50.785974][ T1079] usb 4-1: config 0 has no interface number 0 [ 50.791971][ T1079] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 50.918178][ T1079] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 50.927130][ T1079] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 50.935012][ T1079] usb 4-1: Product: syz [ 50.938985][ T1079] usb 4-1: SerialNumber: syz [ 50.943832][ T1079] usb 4-1: config 0 descriptor?? [ 51.009129][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.016821][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.024489][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.032204][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.039890][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.047475][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.055238][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.062913][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.070633][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.078246][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.085865][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.093588][ T1098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.104205][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.112007][ T1098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.121613][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.129427][ T1098] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.138300][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.145880][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.153597][ T1098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.161512][ T319] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 51.169425][ T319] hid-thrustmaster 0003:044F:B65D.000A: unbalanced collection at end of report description [ 51.179488][ T1098] usb 2-1: config 0 descriptor?? [ 51.184551][ T319] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22 [ 51.192542][ T319] hid-thrustmaster: probe of 0003:044F:B65D.000A failed with error -22 [ 51.209938][ T20] usb 5-1: USB disconnect, device number 7 [ 51.224597][ T1355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=1355 comm=syz.0.366 [ 51.237925][ T1355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 51.269536][ T1079] usb 4-1: invalid MIDI in EP 0 [ 51.274597][ T1079] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 51.290789][ T1079] usb 4-1: USB disconnect, device number 5 [ 51.309559][ T1364] incfs: ino conflict with backing FS 1 [ 51.316988][ T1364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 51.327012][ T1364] incfs: ino conflict with backing FS 3 [ 51.332688][ T1364] incfs: ino conflict with backing FS 2 [ 51.361337][ T1370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 51.371209][ T1370] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.380457][ T1370] device bridge_slave_0 left promiscuous mode [ 51.386343][ T1370] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.658255][ T1098] hid (null): bogus close delimiter [ 51.727973][ T1378] device pim6reg1 entered promiscuous mode [ 51.754618][ T1380] device pim6reg1 entered promiscuous mode [ 51.878107][ T1098] usb 2-1: language id specifier not provided by device, defaulting to English [ 51.887508][ T1393] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 51.895494][ T1393] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 52.038089][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.175776][ T1400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 52.181147][ T1399] loop3: detected capacity change from 0 to 2048 [ 52.191589][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.201478][ T1400] device bridge_slave_0 left promiscuous mode [ 52.207412][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.251904][ T1399] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.283088][ T1399] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #12: comm syz.3.388: corrupted inode contents [ 52.299420][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 52.305715][ T1399] EXT4-fs error (device loop3): ext4_try_add_inline_entry:1367: inode #12: comm syz.3.388: mark_inode_dirty error [ 52.318386][ T1399] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #12: comm syz.3.388: corrupted inode contents [ 52.330334][ T1399] EXT4-fs error (device loop3): ext4_delete_inline_entry:1778: inode #12: comm syz.3.388: mark_inode_dirty error [ 52.342556][ T1399] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1781: Corrupt filesystem [ 52.352059][ T1399] EXT4-fs warning (device loop3): ext4_rename_delete:3790: inode #12: comm syz.3.388: Deleting old file: nlink 2, error=-117 [ 52.365091][ T1399] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #12: comm syz.3.388: corrupted inode contents [ 52.377015][ T1399] EXT4-fs error (device loop3): ext4_rename:4042: inode #12: comm syz.3.388: mark_inode_dirty error [ 52.393059][ T1078] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /14/file0: bad entry in directory: inode out of bounds - offset=92, inode=32784, rec_len=16, size=2048 fake=0 [ 52.414295][ T1078] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 7: padding at end of block bitmap is not set [ 52.428692][ T1078] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 52.437372][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 52.437386][ T30] audit: type=1400 audit(1728986625.392:445): avc: denied { write } for pid=1409 comm="syz.0.392" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.469027][ T60] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 52.478649][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.493381][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.527193][ T1410] loop0: detected capacity change from 0 to 8192 [ 52.551494][ T1415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 52.578721][ T1410] loop0: p1 < > p4 < > [ 52.587739][ T30] audit: type=1400 audit(1728986625.542:446): avc: denied { mounton } for pid=1417 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.609254][ T1098] uclogic 0003:256C:006D.000B: v1 buttonpad probing failed: -71 [ 52.616737][ T1098] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 52.633793][ T1098] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 52.652162][ T1419] syz.2.397[1419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.652226][ T1419] syz.2.397[1419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.664276][ T1098] usb 2-1: USB disconnect, device number 8 [ 52.681029][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.681525][ T1420] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.707868][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.720982][ T60] usb 5-1: Product: syz [ 52.725075][ T60] usb 5-1: Manufacturer: syz [ 52.734166][ T60] usb 5-1: SerialNumber: syz [ 52.746190][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.753200][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.760654][ T1417] device bridge_slave_0 entered promiscuous mode [ 52.767302][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.774366][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.784539][ T1417] device bridge_slave_1 entered promiscuous mode [ 52.795660][ T312] udevd[312]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.806503][ T425] udevd[425]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.872252][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.879114][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.886189][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.893005][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.912254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.919627][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.926702][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.935958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.944199][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.951053][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.961281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.969320][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.976144][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.988569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.999350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.012760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.023785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.031962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.039606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.049709][ T1417] device veth0_vlan entered promiscuous mode [ 53.059808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.070904][ T1417] device veth1_macvtap entered promiscuous mode [ 53.080901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.096980][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.105376][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.131200][ T30] audit: type=1400 audit(1728986626.092:447): avc: denied { map } for pid=1429 comm="syz.3.396" path="socket:[22710]" dev="sockfs" ino=22710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 53.154187][ T1433] loop0: detected capacity change from 0 to 512 [ 53.169031][ T10] device bridge_slave_1 left promiscuous mode [ 53.175426][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.184222][ T10] device bridge_slave_0 left promiscuous mode [ 53.190197][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.197692][ T10] device veth1_macvtap left promiscuous mode [ 53.203561][ T10] device veth0_vlan left promiscuous mode [ 53.208197][ T60] usb 5-1: 0:2 : does not exist [ 53.216809][ T1433] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.410: inode #1: comm syz.0.410: iget: illegal inode # [ 53.236440][ T1433] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.410: error while reading EA inode 1 err=-117 [ 53.248880][ T1433] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.410: inode #1: comm syz.0.410: iget: illegal inode # [ 53.261968][ T1433] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.410: error while reading EA inode 1 err=-117 [ 53.275671][ T1433] EXT4-fs (loop0): 1 orphan inode deleted [ 53.281468][ T1433] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 53.315626][ T1433] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=13 [ 53.324569][ T1433] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=13 [ 53.333545][ T1433] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=13 [ 53.342413][ T1433] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=13 [ 53.351475][ T1433] EXT4-fs error (device loop0): ext4_free_branches:1043: inode #13: block 234881024: comm syz.0.410: Read failure [ 53.367193][ T503] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 53.387752][ T503] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.387775][ T30] audit: type=1400 audit(1728986626.342:448): avc: denied { unlink } for pid=503 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 53.403321][ T503] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.441242][ T1079] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 53.441329][ T503] EXT4-fs warning (device loop0): __ext4_unlink:3333: inode #15: comm syz-executor: Deleting file 'bus' with no links [ 53.461514][ T503] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=13 [ 53.470507][ T503] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=13 [ 53.479432][ T503] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -12) [ 53.488503][ T503] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 53.503964][ T503] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2931: inode #12: comm syz-executor: corrupted xattr block 255 [ 53.516517][ T503] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -74) [ 53.688113][ T1079] usb 2-1: Using ep0 maxpacket: 8 [ 53.808157][ T1079] usb 2-1: config 0 has no interfaces? [ 53.813499][ T1079] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 53.822488][ T1079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.833781][ T1079] usb 2-1: config 0 descriptor?? [ 54.081352][ T1079] usb 2-1: USB disconnect, device number 9 [ 54.939741][ T60] usb 5-1: USB disconnect, device number 8 [ 55.273073][ T1443] loop2: detected capacity change from 0 to 256 [ 55.281137][ T30] audit: type=1400 audit(1728986628.242:449): avc: denied { write } for pid=1445 comm="syz.3.403" name="usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.309106][ T1449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 55.318994][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.329991][ T1449] device bridge_slave_0 left promiscuous mode [ 55.337619][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.359167][ T1458] loop3: detected capacity change from 0 to 512 [ 55.373893][ T1443] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 55.437315][ T1458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.556398][ T1469] tipc: Enabled bearer , priority 0 [ 55.574215][ T30] audit: type=1326 audit(1728986628.532:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1470 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e7e33ff9 code=0x7ffc0000 [ 55.584888][ T1456] loop0: detected capacity change from 0 to 40427 [ 55.628566][ T30] audit: type=1326 audit(1728986628.572:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1470 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e7e33ff9 code=0x7ffc0000 [ 55.672191][ T1456] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 55.688169][ T30] audit: type=1326 audit(1728986628.572:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1470 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e7e33ff9 code=0x7ffc0000 [ 55.711538][ T1468] tipc: Resetting bearer [ 55.731496][ T1456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 55.742225][ T1468] tipc: Disabling bearer [ 55.755364][ T30] audit: type=1326 audit(1728986628.572:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1470 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e7e33ff9 code=0x7ffc0000 [ 55.772048][ T1456] F2FS-fs (loop0): invalid crc value [ 55.808877][ T30] audit: type=1326 audit(1728986628.572:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1470 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e7e33ff9 code=0x7ffc0000 [ 55.849401][ T1456] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.956394][ T1456] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 55.963447][ T1456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.038269][ T1478] loop4: detected capacity change from 0 to 40427 [ 56.046631][ T504] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 56.053749][ T1480] loop1: detected capacity change from 0 to 40427 [ 56.056004][ T504] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 56.088508][ T1480] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 56.095901][ T1497] loop2: detected capacity change from 0 to 256 [ 56.097342][ T1480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 56.115335][ T1480] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.150501][ T1497] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 56.168389][ T1478] F2FS-fs (loop4): invalid crc value [ 56.183857][ T1478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.186781][ T1480] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 56.197143][ T1480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.256437][ T1478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.302270][ T1280] attempt to access beyond end of device [ 56.302270][ T1280] loop4: rw=524288, want=45072, limit=40427 [ 56.314386][ T1280] attempt to access beyond end of device [ 56.314386][ T1280] loop4: rw=0, want=45072, limit=40427 [ 56.346864][ T8] attempt to access beyond end of device [ 56.346864][ T8] loop4: rw=2049, want=40992, limit=40427 [ 56.409879][ T1514] loop1: detected capacity change from 0 to 512 [ 56.441880][ T1513] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.449047][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.456532][ T1513] device bridge_slave_0 entered promiscuous mode [ 56.463768][ T1513] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.470872][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.481611][ T1513] device bridge_slave_1 entered promiscuous mode [ 56.491793][ T1514] EXT4-fs (loop1): 1 orphan inode deleted [ 56.497462][ T1514] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 56.521435][ T1514] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038 (0x7fffffff) [ 56.544119][ T1514] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.429: path /61/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 56.558048][ T1079] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 56.586588][ T699] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /61/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 56.617067][ T699] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 56.632657][ T699] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 56.642622][ T699] EXT4-fs error (device loop1): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 56.654450][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 56.667338][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 56.681904][ T699] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 56.694889][ T699] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 56.704437][ T699] EXT4-fs error (device loop1): ext4_quota_off:6476: inode #3: comm syz-executor: mark_inode_dirty error [ 56.751960][ T1513] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.758835][ T1513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.765924][ T1513] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.772720][ T1513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.822187][ T504] device bridge_slave_1 left promiscuous mode [ 56.828185][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.835483][ T504] device bridge_slave_0 left promiscuous mode [ 56.841557][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.849652][ T504] device veth1_macvtap left promiscuous mode [ 56.855477][ T504] device veth0_vlan left promiscuous mode [ 56.922903][ T1521] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.929856][ T1521] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.937054][ T1521] device bridge_slave_0 entered promiscuous mode [ 56.944076][ T1521] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.951551][ T1079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.952226][ T1521] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.968052][ T1079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.970072][ T1521] device bridge_slave_1 entered promiscuous mode [ 57.001600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.009210][ T1079] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.018102][ T1079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.018349][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.034334][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.041443][ T1079] usb 1-1: config 0 descriptor?? [ 57.072834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.082703][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.089575][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.096765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.104916][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.111775][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.167393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.175414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.194586][ T1532] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.201692][ T1532] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.209287][ T1532] device bridge_slave_0 entered promiscuous mode [ 57.225012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.244067][ T1532] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.251274][ T1532] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.259861][ T1532] device bridge_slave_1 entered promiscuous mode [ 57.274541][ T1513] device veth0_vlan entered promiscuous mode [ 57.280901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.288950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.296373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.348127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.359424][ T1513] device veth1_macvtap entered promiscuous mode [ 57.383312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.395953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.404803][ T504] tipc: Left network mode [ 57.484907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.492668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.509995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.518300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.518501][ T1079] hid (null): bogus close delimiter [ 57.526375][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.538018][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.545446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.553717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.561731][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.568749][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.575936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.592786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.600954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.618092][ T1098] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 57.625721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.634227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.655405][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.662783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.670750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.679129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.687143][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.693990][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.701303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.709646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.717657][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.724506][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.731799][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.739348][ T1079] usb 1-1: language id specifier not provided by device, defaulting to English [ 57.746681][ T1521] device veth0_vlan entered promiscuous mode [ 57.761622][ T1555] tipc: Started in network mode [ 57.766381][ T1555] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 57.775609][ T1555] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 57.783817][ T1555] tipc: Enabled bearer , priority 10 [ 57.789920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.798486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.806730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.814817][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.835413][ T1557] syz.2.445 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.847148][ T1532] device veth0_vlan entered promiscuous mode [ 57.860772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.869221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.872361][ T1559] loop2: detected capacity change from 0 to 1024 [ 57.877087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.883114][ T1098] usb 4-1: Using ep0 maxpacket: 16 [ 57.890687][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.902948][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.910502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.917812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.925861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.926780][ T1559] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,init_itable,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 57.975456][ T1521] device veth1_macvtap entered promiscuous mode [ 57.991536][ T1532] device veth1_macvtap entered promiscuous mode [ 57.998668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.006946][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.015179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.023499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.036371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.044813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.053539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.058357][ T1098] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 58.061946][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.078653][ T1098] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 58.089108][ T1098] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.105300][ T1098] usb 4-1: config 1 interface 0 has no altsetting 0 [ 58.114967][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.123432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.132398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.138989][ T1565] syz.4.432[1565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.140283][ T1565] syz.4.432[1565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.140697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.179703][ T1079] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000C/input/input9 [ 58.207368][ T1079] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000C/input/input10 [ 58.219336][ T1098] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.228983][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.236842][ T1098] usb 4-1: SerialNumber: syz [ 58.260041][ T1079] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 58.298288][ T1549] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 58.305098][ T1549] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 58.313380][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 58.313392][ T30] audit: type=1400 audit(1728986631.272:467): avc: denied { create } for pid=1566 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.406621][ T315] usb 1-1: USB disconnect, device number 9 [ 58.439470][ T1572] loop1: detected capacity change from 0 to 40427 [ 58.459255][ T504] device bridge_slave_1 left promiscuous mode [ 58.465253][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.474653][ T1572] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 58.480978][ T1572] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 58.482313][ T504] device bridge_slave_1 left promiscuous mode [ 58.491655][ T1572] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 58.496747][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.519988][ T1549] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 58.525675][ T1572] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 58.526880][ T1549] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 58.533793][ T1572] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.548240][ T504] device bridge_slave_1 left promiscuous mode [ 58.554591][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.569747][ T504] device veth1_macvtap left promiscuous mode [ 58.574124][ T1572] attempt to access beyond end of device [ 58.574124][ T1572] loop1: rw=2049, want=53256, limit=40427 [ 58.575702][ T504] device veth0_vlan left promiscuous mode [ 58.589003][ T1572] attempt to access beyond end of device [ 58.589003][ T1572] loop1: rw=2049, want=53264, limit=40427 [ 58.603528][ T504] device veth1_macvtap left promiscuous mode [ 58.607221][ T1572] attempt to access beyond end of device [ 58.607221][ T1572] loop1: rw=2049, want=53328, limit=40427 [ 58.609671][ T504] device veth0_vlan left promiscuous mode [ 58.626524][ T504] device veth1_macvtap left promiscuous mode [ 58.632838][ T1532] attempt to access beyond end of device [ 58.632838][ T1532] loop1: rw=2049, want=45104, limit=40427 [ 58.633038][ T504] device veth0_vlan left promiscuous mode [ 58.742524][ T1582] syz.1.450[1582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.742615][ T1582] syz.1.450[1582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.895501][ T30] audit: type=1400 audit(1728986631.852:468): avc: denied { create } for pid=1584 comm="syz.1.452" dev="anon_inodefs" ino=22393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.928773][ T60] tipc: Node number set to 1 [ 58.928911][ T30] audit: type=1400 audit(1728986631.862:469): avc: denied { ioctl } for pid=1584 comm="syz.1.452" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22393 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.959617][ T30] audit: type=1400 audit(1728986631.922:470): avc: denied { read } for pid=1584 comm="syz.1.452" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.038914][ T1098] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 59.148192][ T1592] loop1: detected capacity change from 0 to 40427 [ 59.208371][ T1592] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 59.216007][ T1592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.224852][ T1592] F2FS-fs (loop1): invalid crc value [ 59.231804][ T1592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.254376][ T1098] usb 4-1: USB disconnect, device number 6 [ 59.266380][ T1592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 59.273867][ T1592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.296507][ T1592] attempt to access beyond end of device [ 59.296507][ T1592] loop1: rw=2049, want=45104, limit=40427 [ 59.313739][ T1532] attempt to access beyond end of device [ 59.313739][ T1532] loop1: rw=2049, want=40976, limit=40427 [ 59.327303][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.330294][ T1602] loop0: detected capacity change from 0 to 256 [ 59.336848][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 59.354804][ T1602] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 59.386400][ T30] audit: type=1400 audit(1728986632.342:471): avc: denied { remove_name } for pid=1601 comm="syz.0.468" name="file1" dev="loop0" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.410767][ T30] audit: type=1400 audit(1728986632.342:472): avc: denied { rename } for pid=1601 comm="syz.0.468" name="file1" dev="loop0" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.618346][ T1628] loop1: detected capacity change from 0 to 512 [ 59.634011][ T30] audit: type=1400 audit(1728986632.592:473): avc: denied { read } for pid=1629 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.660806][ T1628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.470: bg 0: block 393: padding at end of block bitmap is not set [ 59.675169][ T1628] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 59.684431][ T1628] EXT4-fs (loop1): 2 truncates cleaned up [ 59.690339][ T1628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.764563][ T30] audit: type=1326 audit(1728986632.722:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeef61eff9 code=0x7ffc0000 [ 59.795352][ T1637] loop1: detected capacity change from 0 to 2048 [ 59.805069][ T30] audit: type=1326 audit(1728986632.722:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeef61eff9 code=0x7ffc0000 [ 59.829705][ T30] audit: type=1326 audit(1728986632.722:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeef61eff9 code=0x7ffc0000 [ 59.869277][ T1647] loop0: detected capacity change from 0 to 512 [ 59.877173][ T1637] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.892694][ T1637] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.907522][ T1637] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 59.921507][ T1637] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.921507][ T1637] [ 59.931027][ T1637] EXT4-fs (loop1): Total free blocks count 0 [ 59.936832][ T1637] EXT4-fs (loop1): Free/Dirty block details [ 59.942818][ T1637] EXT4-fs (loop1): free_blocks=2415919104 [ 59.955850][ T1637] EXT4-fs (loop1): dirty_blocks=16 [ 59.960944][ T1637] EXT4-fs (loop1): Block reservation details [ 59.966785][ T1637] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 59.975419][ T1647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.989674][ T1647] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 60.134157][ T1674] loop0: detected capacity change from 0 to 1024 [ 60.148543][ T60] Bluetooth: hci0: command 0x1003 tx timeout [ 60.151932][ T1674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.154492][ T792] Bluetooth: hci0: sending frame failed (-49) [ 60.222559][ T1681] EXT4-fs (loop0): shut down requested (0) [ 60.268110][ T315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 60.295252][ T1684] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 60.317959][ T1684] netlink: 236 bytes leftover after parsing attributes in process `syz.1.491'. [ 60.335916][ T10] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.350712][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 60.363263][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.363263][ T10] [ 60.372735][ T10] EXT4-fs (loop0): Total free blocks count 0 [ 60.378540][ T10] EXT4-fs (loop0): Free/Dirty block details [ 60.384241][ T10] EXT4-fs (loop0): free_blocks=68451041280 [ 60.390254][ T10] EXT4-fs (loop0): dirty_blocks=16384 [ 60.395522][ T10] EXT4-fs (loop0): Block reservation details [ 60.401309][ T10] EXT4-fs (loop0): i_reserved_data_blocks=1024 [ 60.413238][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 60.481917][ T1686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 60.491156][ T1686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 60.508199][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 60.515586][ T1688] loop4: detected capacity change from 0 to 512 [ 60.599468][ T1688] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.610449][ T1688] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 60.838185][ T315] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 60.847173][ T60] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.854696][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.863010][ T315] usb 4-1: Product: syz [ 60.868841][ T315] usb 4-1: Manufacturer: syz [ 60.873394][ T315] usb 4-1: SerialNumber: syz [ 60.878685][ T315] usb 4-1: config 0 descriptor?? [ 61.198239][ T360] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 61.228270][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.239320][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.249043][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.257900][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.266589][ T60] usb 1-1: config 0 descriptor?? [ 61.558182][ T315] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:cb:a6:8f:ed:50 [ 61.569402][ T315] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 61.578107][ T360] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.593219][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.604345][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.614126][ T360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 61.627180][ T360] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 61.636275][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.647871][ T360] usb 2-1: config 0 descriptor?? [ 61.748484][ T60] hid (null): bogus close delimiter [ 61.759325][ T1079] usb 4-1: USB disconnect, device number 7 [ 61.778164][ T139] net eth1: rx_urb submit failed: -19 [ 61.958136][ T60] usb 1-1: string descriptor 0 read error: -22 [ 62.141226][ T360] thrustmaster 0003:044F:B324.000E: unknown main item tag 0x1 [ 62.148799][ T360] thrustmaster 0003:044F:B324.000E: item fetching failed at offset 5/7 [ 62.157757][ T360] thrustmaster 0003:044F:B324.000E: parse failed [ 62.165157][ T360] thrustmaster: probe of 0003:044F:B324.000E failed with error -22 [ 62.228101][ T360] Bluetooth: hci0: command 0x1001 tx timeout [ 62.233945][ T792] Bluetooth: hci0: sending frame failed (-49) [ 62.348861][ T26] usb 2-1: USB disconnect, device number 10 [ 62.389655][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input11 [ 62.406285][ T60] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 62.589886][ T360] usb 1-1: USB disconnect, device number 10 [ 63.229587][ T1800] binder: 1799:1800 ioctl c0306201 20000280 returned -14 [ 63.518080][ T6] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 63.876964][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 63.876978][ T30] audit: type=1326 audit(1728986636.832:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 63.906325][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.916268][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.925655][ T30] audit: type=1326 audit(1728986636.832:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 63.948977][ T30] audit: type=1326 audit(1728986636.842:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 63.957418][ T1815] capability: warning: `syz.4.532' uses 32-bit capabilities (legacy support in use) [ 63.972415][ T30] audit: type=1326 audit(1728986636.842:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.005168][ T30] audit: type=1326 audit(1728986636.842:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.028446][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.030922][ T30] audit: type=1326 audit(1728986636.842:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.038952][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.060710][ T30] audit: type=1326 audit(1728986636.842:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.091686][ T6] usb 1-1: SerialNumber: syz [ 64.091952][ T30] audit: type=1326 audit(1728986636.842:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.121141][ T30] audit: type=1326 audit(1728986636.842:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.144677][ T30] audit: type=1326 audit(1728986636.842:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9237dff9 code=0x7ffc0000 [ 64.235571][ T1822] loop4: detected capacity change from 0 to 256 [ 64.244607][ T1823] overlayfs: statfs failed on './file0' [ 64.308090][ T360] Bluetooth: hci0: command 0x1009 tx timeout [ 64.349446][ T1803] loop0: detected capacity change from 0 to 128 [ 64.444045][ T1830] loop4: detected capacity change from 0 to 128 [ 64.498698][ T6] usb 1-1: 0:2 : does not exist [ 64.506560][ T1828] loop3: detected capacity change from 0 to 40427 [ 64.547239][ T1828] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.554997][ T1828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.566116][ T1828] F2FS-fs (loop3): invalid crc value [ 64.573392][ T1828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.582815][ T6] usb 1-1: USB disconnect, device number 11 [ 64.602360][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.625084][ T1828] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.632343][ T1828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.698972][ T1845] loop1: detected capacity change from 0 to 512 [ 64.769774][ T1845] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 64.795745][ T1845] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.544: Unimplemented hash flags: 0x0001 [ 64.807420][ T1845] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.544: Corrupt directory, running e2fsck is recommended [ 64.820941][ T1845] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.544: Unimplemented hash flags: 0x0001 [ 64.833753][ T1845] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.544: Corrupt directory, running e2fsck is recommended [ 64.847054][ T1845] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.544: Unimplemented hash flags: 0x0001 [ 64.858856][ T1845] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.544: Corrupt directory, running e2fsck is recommended [ 64.872463][ T1845] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.544: Unimplemented hash flags: 0x0001 [ 64.883841][ T1845] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.544: Corrupt directory, running e2fsck is recommended [ 64.897415][ T1845] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.544: Unimplemented hash flags: 0x0001 [ 64.908818][ T1845] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.544: Corrupt directory, running e2fsck is recommended [ 64.931075][ T1853] serio: Serial port ptm1 [ 64.950701][ T1858] loop1: detected capacity change from 0 to 2048 [ 64.978811][ T1858] loop1: p1 < > p2 p3 < p5 > p4 [ 64.983570][ T1858] loop1: partition table partially beyond EOD, truncated [ 64.991263][ T1858] loop1: p1 start 4278190080 is beyond EOD, truncated [ 64.997872][ T1858] loop1: p2 start 16908800 is beyond EOD, truncated [ 65.007378][ T1858] loop1: p4 start 11326 is beyond EOD, truncated [ 65.010295][ T1861] syz.0.549[1861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.013672][ T1861] syz.0.549[1861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.013898][ T1858] loop1: p5 start 16908800 is beyond EOD, truncated [ 65.039610][ T1861] input: syz1 as /devices/virtual/input/input12 [ 65.072265][ T1863] loop4: detected capacity change from 0 to 512 [ 65.139676][ T425] udevd[425]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.158481][ T1863] EXT4-fs (loop4): 1 truncate cleaned up [ 65.164264][ T1863] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 65.191433][ T1863] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.550: invalid indirect mapped block 234881024 (level 0) [ 65.208370][ T1521] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 65.228709][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 65.230061][ T1521] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 65.253238][ T1521] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 65.405343][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.412217][ T1876] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.419440][ T1876] device bridge_slave_0 entered promiscuous mode [ 65.426136][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.433034][ T1876] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.440135][ T1876] device bridge_slave_1 entered promiscuous mode [ 65.448059][ T319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 65.489445][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.496295][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.503433][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.510209][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.517395][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 65.529090][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.536180][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.551054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.558729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.567462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.575859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.584114][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.591196][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.599767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.607925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.615999][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.622846][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.636012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.643803][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.644053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.654844][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.670572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.675199][ T6] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.683494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.691723][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.699125][ T319] usb 2-1: Using ep0 maxpacket: 8 [ 65.715549][ T6] usb 4-1: config 0 descriptor?? [ 65.719213][ T1876] device veth0_vlan entered promiscuous mode [ 65.728570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.736675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.745049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.753136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.761260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.768775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.783137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.791254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.800824][ T1876] device veth1_macvtap entered promiscuous mode [ 65.811019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.818630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.826780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.835270][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.846023][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.855610][ T319] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 65.864804][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.873342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.873450][ T319] usb 2-1: config 0 descriptor?? [ 65.883689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.919203][ T488] device bridge_slave_1 left promiscuous mode [ 65.925175][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.933161][ T488] device bridge_slave_0 left promiscuous mode [ 65.952754][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.961213][ T488] device veth1_macvtap left promiscuous mode [ 65.977458][ T488] device veth0_vlan left promiscuous mode [ 66.205119][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input13 [ 66.299209][ T6] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 66.359004][ T319] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 66.386460][ T319] hid-picolcd 0003:04D8:F002.0010: item fetching failed at offset 5/7 [ 66.408223][ T319] hid-picolcd 0003:04D8:F002.0010: device report parse failed [ 66.435775][ T319] hid-picolcd: probe of 0003:04D8:F002.0010 failed with error -22 [ 66.564861][ T6] usb 2-1: USB disconnect, device number 11 [ 66.663654][ T360] usb 4-1: USB disconnect, device number 8 [ 66.966981][ T1937] loop0: detected capacity change from 0 to 16 [ 67.028560][ T1937] erofs: (device loop0): mounted with root inode @ nid 36. [ 67.078092][ T6] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 67.109159][ T1945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 67.176747][ T1952] loop3: detected capacity change from 0 to 512 [ 67.458153][ T319] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 67.478157][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.488968][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.499127][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 67.508463][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.520113][ T6] usb 5-1: config 0 descriptor?? [ 67.698226][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 67.818278][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.829082][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.838836][ T319] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 67.847652][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.856256][ T319] usb 1-1: config 0 descriptor?? [ 67.918131][ T1098] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 68.008295][ T6] hid (null): bogus close delimiter [ 68.081891][ T1986] kvm: emulating exchange as write [ 68.228152][ T6] usb 5-1: language id specifier not provided by device, defaulting to English [ 68.278278][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.289070][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.298567][ T1098] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 68.307387][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.315755][ T1098] usb 4-1: config 0 descriptor?? [ 68.339091][ T319] lua 0003:1E7D:2C2E.0012: unexpected long global item [ 68.345889][ T319] lua 0003:1E7D:2C2E.0012: parse failed [ 68.351228][ T319] lua: probe of 0003:1E7D:2C2E.0012 failed with error -22 [ 68.473083][ T488] tipc: Disabling bearer [ 68.478211][ T488] tipc: Left network mode [ 68.539440][ T319] usb 1-1: USB disconnect, device number 12 [ 68.728119][ T6] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 68.758076][ T360] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 68.799026][ T1098] holtek 0003:1241:5015.0013: collection stack underflow [ 68.805920][ T1098] holtek 0003:1241:5015.0013: item 0 1 0 12 parsing failed [ 68.813283][ T1098] holtek 0003:1241:5015.0013: parse failed [ 68.819133][ T1098] holtek: probe of 0003:1241:5015.0013 failed with error -22 [ 68.918755][ T488] device bridge_slave_1 left promiscuous mode [ 68.924772][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.931910][ T1098] usb 5-1: USB disconnect, device number 9 [ 68.937855][ T488] device bridge_slave_0 left promiscuous mode [ 68.943936][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.951971][ T488] device veth1_macvtap left promiscuous mode [ 68.957842][ T488] device veth0_vlan left promiscuous mode [ 69.001310][ T6] usb 4-1: USB disconnect, device number 9 [ 69.148188][ T360] usb 2-1: config index 0 descriptor too short (expected 65233, got 154) [ 69.156460][ T360] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 69.165273][ T360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 69.176065][ T360] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 69.338184][ T360] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.347151][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.355174][ T360] usb 2-1: Product: syz [ 69.359160][ T360] usb 2-1: Manufacturer: syz [ 69.363567][ T360] usb 2-1: SerialNumber: syz [ 69.607805][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 69.607820][ T30] audit: type=1326 audit(1728986642.562:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2000 comm="syz.3.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c88bff9 code=0x0 [ 69.639173][ T1999] tipc: Started in network mode [ 69.643864][ T1999] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 69.652694][ T1999] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 69.660922][ T1999] tipc: Enabled bearer , priority 10 [ 69.748390][ T360] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 69.756684][ T360] usb 2-1: found format II with max.bitrate = 0, frame size=2 [ 69.764155][ T360] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 69.772406][ T360] usb 2-1: found format II with max.bitrate = 0, frame size=2 [ 69.858188][ T360] usb 2-1: failed to enable PITCH for EP 0x82 [ 69.895149][ T360] usb 2-1: USB disconnect, device number 12 [ 70.426400][ T2008] loop0: detected capacity change from 0 to 40427 [ 70.520941][ T2008] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.544852][ T2008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 70.564151][ T503] attempt to access beyond end of device [ 70.564151][ T503] loop0: rw=2049, want=45104, limit=40427 [ 70.658092][ T60] tipc: Node number set to 1 [ 71.159767][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.318061][ T319] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 72.664006][ T2031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4376 (17504 ns) > initial count (96 ns). Using initial count to start timer. [ 72.778080][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.848122][ T319] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 72.855514][ T319] usb 2-1: can't read configurations, error -71 [ 73.114270][ T2040] loop3: detected capacity change from 0 to 2048 [ 73.169646][ T2040] loop3: p1 < > p4 [ 73.174091][ T2040] loop3: p4 size 8388608 extends beyond EOD, truncated [ 73.188071][ T39] Bluetooth: hci0: command 0x1003 tx timeout [ 73.193940][ T792] Bluetooth: hci0: sending frame failed (-49) [ 73.331578][ T101] loop3: p1 < > p4 [ 73.335722][ T101] loop3: p4 size 8388608 extends beyond EOD, truncated [ 73.420159][ T312] udevd[312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 73.432273][ T425] udevd[425]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 73.519546][ T425] udevd[425]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 73.529445][ T312] udevd[312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 74.220742][ T2046] loop3: detected capacity change from 0 to 512 [ 74.356690][ T2046] EXT4-fs (loop3): 1 orphan inode deleted [ 74.368048][ T2046] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 74.398136][ T2046] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 75.268053][ T319] Bluetooth: hci0: command 0x1001 tx timeout [ 75.273920][ T792] Bluetooth: hci0: sending frame failed (-49) [ 75.738048][ T60] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 75.978052][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 76.098149][ T60] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 76.258387][ T60] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 76.267262][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.318060][ T60] usb 4-1: Product: syz [ 76.322067][ T60] usb 4-1: Manufacturer: syz [ 76.326493][ T60] usb 4-1: SerialNumber: syz [ 76.358765][ T60] usb 4-1: config 0 descriptor?? [ 76.398709][ T60] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 76.406384][ T60] usb 4-1: Detected FT232RL [ 76.608131][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 76.869172][ T60] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.072088][ T39] usb 4-1: USB disconnect, device number 10 [ 77.088658][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.097963][ T39] ftdi_sio 4-1:0.0: device disconnected [ 77.348031][ T1098] Bluetooth: hci0: command 0x1009 tx timeout [ 78.269660][ T2077] loop0: detected capacity change from 0 to 2048 [ 78.339585][ T2077] loop0: p1 < > p2 p3 < p5 > p4 [ 78.346550][ T2077] loop0: partition table partially beyond EOD, truncated [ 78.382698][ T2077] loop0: p1 start 4278190080 is beyond EOD, truncated [ 78.429293][ T2077] loop0: p2 start 16908800 is beyond EOD, truncated [ 78.468429][ T2077] loop0: p4 start 11326 is beyond EOD, truncated [ 78.474590][ T2077] loop0: p5 start 16908800 is beyond EOD, truncated [ 78.558604][ T101] loop0: p1 < > p2 p3 < p5 > p4 [ 78.563374][ T101] loop0: partition table partially beyond EOD, truncated [ 78.595911][ T101] loop0: p1 start 4278190080 is beyond EOD, truncated [ 78.628230][ T101] loop0: p2 start 16908800 is beyond EOD, truncated [ 78.661236][ T101] loop0: p4 start 11326 is beyond EOD, truncated [ 78.667399][ T101] loop0: p5 start 16908800 is beyond EOD, truncated [ 78.819313][ T425] udevd[425]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.647661][ T2089] loop1: detected capacity change from 0 to 40427 [ 80.778354][ T2089] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 80.785929][ T2089] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.868920][ T2089] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.998275][ T2089] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.005138][ T2089] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.158924][ T2089] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 81.288819][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.288843][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.296317][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.303852][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.311314][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.318621][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.325956][ T1532] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 81.688112][ T360] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 81.938116][ T360] usb 1-1: Using ep0 maxpacket: 16 [ 82.058168][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.068870][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.078622][ T360] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 82.087470][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.096252][ T360] usb 1-1: config 0 descriptor?? [ 82.579817][ T360] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 82.586621][ T360] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 82.593373][ T360] apple 0003:05AC:0247.0014: item fetching failed at offset 2/160 [ 82.601046][ T360] apple 0003:05AC:0247.0014: parse failed [ 82.606570][ T360] apple: probe of 0003:05AC:0247.0014 failed with error -22 [ 82.781540][ T1098] usb 1-1: USB disconnect, device number 13 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=602 state=1 status=67 (errno 9: Bad file descriptor) [ 83.462420][ T2121] loop0: detected capacity change from 0 to 256 [ 83.634149][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.641128][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.648488][ T2123] device bridge_slave_0 entered promiscuous mode [ 83.658446][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.665274][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.672521][ T2123] device bridge_slave_1 entered promiscuous mode [ 83.709341][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.716188][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.723322][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.730086][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.754984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.762659][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.769967][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.780332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.788344][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.795167][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.802456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.810606][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.817513][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.830971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.840608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.854026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.866531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.874581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.882042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.892127][ T2123] device veth0_vlan entered promiscuous mode [ 83.899054][ T30] audit: type=1400 audit(1728986656.862:589): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.904399][ T2123] device veth1_macvtap entered promiscuous mode [ 83.928452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.939608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.951250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.189370][ T504] device bridge_slave_1 left promiscuous mode [ 84.195320][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.203532][ T504] device veth1_macvtap left promiscuous mode [ 85.909158][ T504] device bridge_slave_1 left promiscuous mode [ 85.915093][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.922398][ T504] device bridge_slave_0 left promiscuous mode [ 85.928388][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.935875][ T504] device bridge_slave_1 left promiscuous mode [ 85.941889][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.949122][ T504] device bridge_slave_0 left promiscuous mode [ 85.955013][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.962717][ T504] device bridge_slave_1 left promiscuous mode [ 85.968710][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.975762][ T504] device bridge_slave_0 left promiscuous mode [ 85.981883][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.989711][ T504] device veth1_macvtap left promiscuous mode [ 85.995498][ T504] device veth0_vlan left promiscuous mode [ 86.001294][ T504] device veth1_macvtap left promiscuous mode [ 86.007094][ T504] device veth0_vlan left promiscuous mode [ 86.013086][ T504] device veth1_macvtap left promiscuous mode [ 86.018913][ T504] device veth0_vlan left promiscuous mode