last executing test programs: 16.275505455s ago: executing program 2 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 16.244083635s ago: executing program 2 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) 16.169516306s ago: executing program 2 (id=416): r0 = socket(0x1e, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$tipc(r0, &(0x7f0000004200)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x7}], 0x1, 0x40000001, 0x0) 16.126901377s ago: executing program 2 (id=417): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 16.023097778s ago: executing program 2 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x5, 0x0) 15.91090216s ago: executing program 2 (id=424): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) poll(&(0x7f00000014c0)=[{0xffffffffffffffff, 0x101}], 0x1, 0xcd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbd5, &(0x7f0000002380)="$eJzs3N9rXFkdAPDvvZlM0jZ2UhGxvhgRaUGcJpUUWwRbqfjig6CvQkM6KSHTHySRmjQPE/0HRH0WfBHUovhgn/ui6Ou+7Lavu+zDQlmyzS67LLuz3PmRzDYzSdrO9GaTzwfO3HPuuTPn+53LzD0H5k4AR9ZE9pBGnI6Ia0lEqbU/jYhiozYaUWset7mxNvvBxtpsEvX6z99NIomIpxtrs+3XSlrbE63GaES89qMkvvzbneMurawuzFSrlcVW+9zyzTvnllZWvzt/c+ZG5Ubl1tSF70+fn74weXG6b7l+9OblB+9/8ydv1z7+2yf33/vDX5K4HGOtvs48+mUiJrbek06FiJjp92A5GWrl05lnUtjjSemAgwIAoKe0Yw731SjFUGxP3krxn9dzDQ4AAADoi/pQRB0AAAA45BLrfwAAADjk2r8DeLqxNtsu+f4i4dV6ciUixpv5b7ZKs6cQtcZ2NIYj4vjTJDpva02aT3tpExHx1uOL/8xKDOg+5N3U1iPia93Of9LIf7xxF/fO/NOImOzD+BPPtL9I+V/uw/h55w/A0fTwSvNCtvP6l27Nf6LL9a/Q5dr1IvK+/rXnf5s75n/b+Q/1mP/9bJ9j3Pvrn+726svy/8GDH/+jXbLxs+1LJfUcnqxHfL3QLf9kK/+kR/7X9jlG6dO7lV59+8j/5Asltk/1P0ecie75tyW7/z/Rubn5amWy+dh1jPX/T/+9sz3SUT8I5/94j/zb///U6/zf2ecYv7x69V87dj7eru6ef/pOMflFo1Zs7fn1zPLy4lREMfnpzv3nd4+lfUz7NbL8z35r989/t/yz74Ra633I1gLrrW3W/s0zY/7w/r1/94qnvf7rmv/w7rn0Q5b/9R7nvzP//xV2nv/f7XOMb//392d79XWuf7OSjd9eCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAWxoRY5Gk5a16mpbLESci4itxPK3eXlr+ztztX926nvVFjMdwOjdfrUxGRKnZTrL2VKO+3T7/TPt7EXEqIv5YOtZol2dvV6/nnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbTkTEWCRpOSLSiNgspWm5nHdUAAAAQN+N5x0AAAAAMHDW/wAAAHD4Wf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYKe+8fBREhG1S8caJVNs9Q3nGhkwaGneAQC5Gco7ACA3hbwDAHLznGt80wU4hJI9+kd79oz0PRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq4zpx8+SiKidulYo2SKrb7hXCMDBi31KYcja2i3zsKriwN49XzE4egy+weSPfpHt4+pfb5nZGAxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDwjDVKkpYjotjaVy5HfCkixmM4mZuvViYj4mREvFEaHsnaUznHDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP8trawuzFSrlcWskkarsrVHZbuSNN+x2p4Hf1iv1198rNHIPdMjUinGgQjjgFby/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPSyurCzPVamVxKe9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtrawuzFSrlcUBVvLOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwWAAD//xw2C/w=") 15.809204941s ago: executing program 32 (id=424): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) poll(&(0x7f00000014c0)=[{0xffffffffffffffff, 0x101}], 0x1, 0xcd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbd5, &(0x7f0000002380)="$eJzs3N9rXFkdAPDvvZlM0jZ2UhGxvhgRaUGcJpUUWwRbqfjig6CvQkM6KSHTHySRmjQPE/0HRH0WfBHUovhgn/ui6Ou+7Lavu+zDQlmyzS67LLuz3PmRzDYzSdrO9GaTzwfO3HPuuTPn+53LzD0H5k4AR9ZE9pBGnI6Ia0lEqbU/jYhiozYaUWset7mxNvvBxtpsEvX6z99NIomIpxtrs+3XSlrbE63GaES89qMkvvzbneMurawuzFSrlcVW+9zyzTvnllZWvzt/c+ZG5Ubl1tSF70+fn74weXG6b7l+9OblB+9/8ydv1z7+2yf33/vDX5K4HGOtvs48+mUiJrbek06FiJjp92A5GWrl05lnUtjjSemAgwIAoKe0Yw731SjFUGxP3krxn9dzDQ4AAADoi/pQRB0AAAA45BLrfwAAADjk2r8DeLqxNtsu+f4i4dV6ciUixpv5b7ZKs6cQtcZ2NIYj4vjTJDpva02aT3tpExHx1uOL/8xKDOg+5N3U1iPia93Of9LIf7xxF/fO/NOImOzD+BPPtL9I+V/uw/h55w/A0fTwSvNCtvP6l27Nf6LL9a/Q5dr1IvK+/rXnf5s75n/b+Q/1mP/9bJ9j3Pvrn+726svy/8GDH/+jXbLxs+1LJfUcnqxHfL3QLf9kK/+kR/7X9jlG6dO7lV59+8j/5Asltk/1P0ecie75tyW7/z/Rubn5amWy+dh1jPX/T/+9sz3SUT8I5/94j/zb///U6/zf2ecYv7x69V87dj7eru6ef/pOMflFo1Zs7fn1zPLy4lREMfnpzv3nd4+lfUz7NbL8z35r989/t/yz74Ra633I1gLrrW3W/s0zY/7w/r1/94qnvf7rmv/w7rn0Q5b/9R7nvzP//xV2nv/f7XOMb//392d79XWuf7OSjd9eCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAWxoRY5Gk5a16mpbLESci4itxPK3eXlr+ztztX926nvVFjMdwOjdfrUxGRKnZTrL2VKO+3T7/TPt7EXEqIv5YOtZol2dvV6/nnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbTkTEWCRpOSLSiNgspWm5nHdUAAAAQN+N5x0AAAAAMHDW/wAAAHD4Wf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYKe+8fBREhG1S8caJVNs9Q3nGhkwaGneAQC5Gco7ACA3hbwDAHLznGt80wU4hJI9+kd79oz0PRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq4zpx8+SiKidulYo2SKrb7hXCMDBi31KYcja2i3zsKriwN49XzE4egy+weSPfpHt4+pfb5nZGAxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDwjDVKkpYjotjaVy5HfCkixmM4mZuvViYj4mREvFEaHsnaUznHDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP8trawuzFSrlcWskkarsrVHZbuSNN+x2p4Hf1iv1198rNHIPdMjUinGgQjjgFby/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPSyurCzPVamVxKe9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtrawuzFSrlcUBVvLOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwWAAD//xw2C/w=") 2.87593639s ago: executing program 4 (id=775): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 1.45305915s ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 1.42353543s ago: executing program 1 (id=802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000600)='ext4_allocate_blocks\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") creat(&(0x7f0000000100)='./file1\x00', 0x7e) 1.287651882s ago: executing program 1 (id=814): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0x71}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 947.496967ms ago: executing program 5 (id=817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 929.069157ms ago: executing program 5 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 909.635427ms ago: executing program 5 (id=822): syz_mount_image$vfat(&(0x7f0000002480), &(0x7f0000002300)='./file0\x00', 0x800800, &(0x7f0000002340)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt\x00\b\x00\x00\x00\x00\x00\x00uni_xlate=1,showexec,flush,shortname=win95,nonumtail=0,rodir,utf8=0,shortname=mixed,umask=00000000006,\x00'/153, @ANYRES32], 0x1, 0x27b, &(0x7f0000000000)="$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") sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000004001b0000000c00228059fe008004000080"], 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108"], 0x1d8}}, 0x0) 839.442128ms ago: executing program 5 (id=824): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x1050065, 0x0) 782.680179ms ago: executing program 0 (id=826): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB="726f6f74636f6e922c00"]) 722.07878ms ago: executing program 0 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160003000000080004"], 0x44}}, 0x0) 634.195211ms ago: executing program 5 (id=829): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 633.983191ms ago: executing program 4 (id=830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x10000, 0x8) 618.176322ms ago: executing program 4 (id=831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 528.137283ms ago: executing program 0 (id=832): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 526.485313ms ago: executing program 4 (id=842): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) read$FUSE(r0, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, 0xffffffffffffffff, r2) 516.698843ms ago: executing program 0 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000010c0)={0x2, {0x2, 0x228, 0x6, 0x7, 0x6}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x4, 0x301, &(0x7f0000000080)="$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") 513.196363ms ago: executing program 3 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 483.773943ms ago: executing program 3 (id=835): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) poll(&(0x7f0000000180)=[{r0}, {r0, 0x500}], 0x2, 0x2) 451.709494ms ago: executing program 3 (id=836): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000440), &(0x7f0000002d40)=""/4115, 0x1013}) 434.547784ms ago: executing program 3 (id=837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x6, 0x7) 415.874494ms ago: executing program 0 (id=838): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) keyctl$join(0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x400) 402.438044ms ago: executing program 1 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 402.096174ms ago: executing program 3 (id=840): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 350.208025ms ago: executing program 4 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') open$dir(&(0x7f00000004c0)='./file0/../file0\x00', 0x103000, 0x4) 249.593136ms ago: executing program 5 (id=843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @loopback, [0xffffff00, 0x0, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xff, 0xff], 'veth1_to_bond\x00', 'gre0\x00', {0xff}, {}, 0x33, 0x0, 0x3, 0x40}, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@ipv6header={{0x20}, {0xc0, 0xa6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00"]) 249.449506ms ago: executing program 1 (id=844): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r1, 0xdcc2c000) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa", 0x4, 0xc001, 0x0, 0x0) 249.326246ms ago: executing program 4 (id=845): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) copy_file_range(r0, 0x0, r0, 0x0, 0xca74, 0x0) 180.824987ms ago: executing program 3 (id=846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 63.706029ms ago: executing program 0 (id=847): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 0s ago: executing program 1 (id=848): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nodiscard}, {@lazytime}, {@acl}, {@background_gc_off}, {@inline_xattr}, {@disable_roll_forward}, {@data_flush}, {@flush_merge}, {@noflush_merge}, {@lazytime}, {@fsync_mode_strict}, {@noheap}, {@jqfmt_vfsold}, {@nobarrier}, {@nolazytime}, {@four_active_logs}, {@barrier}]}, 0x1, 0x5509, &(0x7f0000002480)="$eJzs3EtvG1UUAODjpOmbEiEW7DpShZRItVWnD8GuQCseolVUYMEKHNux3NqeKHackBULlogF/wSBxIolv4EFa3aIBYgdEshzJ9DwkEBxYtJ8nzQ+c6+vz5xrVZXOTOQATqzF7OcfK3EpzkXEfERcjCjOK+VRuJ3CcxFxOSLmHjsq5dzvE6cj4nxEXJokTzkr5VufXh1fufnDGz999c2ZUxc++/Lb2e0amLXnI6K/kc63+ynmnRQflvONcbeI/RvjMqY3+o/KcZ7idnutyLDd2FvXKOL1Tlqfb2wNJ3G912hOYqe7XsxvDNIFh+POXp7iAw8bm8W41V4rYneYF7Gzm+ra2U3/t+0ORylPq8z3QZE+RqO9mObbO+20n41HRWwORuV8ypu32juTOC5jeblo5r1WUcfaQb7p/7c3u4OtnWzc3hx280F2s1Z/oVa/Va1v5q32qH2j2ui3bt3Iljq9ybLqqN3o3+7keafXrjXz/nK21Gk2q/V6tnSnvdZtDLJ6vXa9dq16c7k8u5q9ev+drNfKlibx5e5ga9TtDbP1fDNLn1jOVmrXX1zOrtSzt+6tZqsP7t69t/r2e3fevf/SvddfKRf9paxsaeXaykq1fq26Ul8+Qfv/qCx6ivuHA6nMugCA42ca/f9kXv8P/BeH1/9vPog4/P4/9P9Tcaz635Pe/x/C/uFA9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfWdwufv1acLKbxhXL+qXLqmXJciYi5iPj1b8zH6X0558s8C/+wfuFPNXxdiSLD5BpnyuN8RNwuj1+ePuxvAQAAAJ5cX3x4+ZPUraeXxVkXxFFKN23mLr4/pXyViFhY/H5K2eYmL89OKVnx7/tU7EwpW3ED6+yUkqVbbqemle1fmd8Xzj4WKinMHWk5AADAkdjfCRxtFwIAAMBR+njWBTAbldh7lLn3LLj4y/s/Hgie2zcCAAAAjqHKrAsAAAAADl3R//v9PwAAAHiypd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+I2d+7lNHIjiAPxs8ML+06LV3reVvUEZW8Ie9xhRQJqggBxIC2mAGsgtJUQQ4XEIRBwieWwr0fdJzmQs8+MNgsPMSAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECX7qv14vbq93XbnN2+nTyjAQAAAC7ZVutF/c8s9b829783t342/SIiyoi4NHcfxaezzFGTU708f3P6fPWqhruIOuHwHpPm+hIRf5rr8UfXnwIAAAB8XJvlap5m6+nPbOiC6FNatCm//c2UV0RENXvIlFYe8n5lCqu/3+P4nymtXsCaZgpLS27jXGlvUv/cj6t205OmSE158WXHIrONHQAA6NHorOl3FgIAAECf/g1dAMMo4nkr87gVOElNs733+awHAAAAvEPF0AUAAAAAnavn/z2d/7d3/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCJ/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527uc1jioOAPibmZ2trYprlD1ERMGDXux2W1t7Ew9K8OCfIIR0W2O3/mhzsKWIuXiTnHsRPYoISrz1f8g5gVziLYc9RPCszOxMdvIDXH/NbJLPB9687w7DvO+bhZDvvJcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApdHbkzjJDp1xHBfnNvceLmX91qE+83htez5rWRzVmfTJ8GL1Q9RtLhEAAADOjqSs70MIO+n6QtbHnbz+T8trspr/26fHcVnPH677y76s/bP2y8+7z+8P1BmPk9305vJwcOloKq3/b5az7Zm/vKKVP/n83UuSfyHxe6vPjdL8eUZfb2y8087Dc3VkCwD8ExfLvgjK34eyvt9kYgCcGa1K4V3W/0mn2ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jBaDU+WcRRCmG9N4szW3sOl4/rHa9vzZbv26NFa+HJyz+wWaQjh5vJwcKnW2cy2e/cf3F4cDgd36w9eCiE0NfpbxfRvfzDFxSE08nwE/1EQF1/2rORzMoIGfygBAHAqpUXL6vqddH0hOxfNhfDHdwfr/1crcZiy/t/98Npmdaxq/d+vbYazr7dy59PevfsPXl++s3hrcGvw8RuX+2/2r1y/evV6L39X0vPGBAAAgH+nXbRq/R/PHV3/v1CJw5T1/2ff9L+ojpWo/481WfRrOhMAAICz7dmXf/8tOuZ81G6HzxdXVu72x8f9z5fHxwZS/dvOFa1a/ydzTWcFAAAA1GG0Gh1Y/79RicOU6/9Pff/Cj9V7JiGE88X6/8WlT4Y36pvOTKvjz4mbniMAAADNOl+06vp/mu//j/e3PMQhhNdeGcfFvwGcqv5P3v3qh+pY1f3/V+qb4kyKu+PnkffdEFrdpjMCAADgNHuiaFmx/2u6vvDRTxfeb9v/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFC3PwMAAP//xhI+mQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="d9", 0x1}], 0x1, 0x0, 0x1, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 25.287087][ T28] audit: type=1400 audit(1746801807.330:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.288422][ T275] cgroup: Unknown subsys name 'net' [ 25.309787][ T28] audit: type=1400 audit(1746801807.330:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.337122][ T28] audit: type=1400 audit(1746801807.360:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.337329][ T275] cgroup: Unknown subsys name 'devices' [ 25.485299][ T275] cgroup: Unknown subsys name 'hugetlb' [ 25.491190][ T275] cgroup: Unknown subsys name 'rlimit' [ 25.626285][ T28] audit: type=1400 audit(1746801807.670:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.649497][ T28] audit: type=1400 audit(1746801807.670:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.659646][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.674495][ T28] audit: type=1400 audit(1746801807.670:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.705991][ T28] audit: type=1400 audit(1746801807.730:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.717539][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.731449][ T28] audit: type=1400 audit(1746801807.730:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.765668][ T28] audit: type=1400 audit(1746801807.760:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.791271][ T28] audit: type=1400 audit(1746801807.760:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.506243][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.513512][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.520975][ T283] device bridge_slave_0 entered promiscuous mode [ 26.529559][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.536890][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.544423][ T283] device bridge_slave_1 entered promiscuous mode [ 26.587914][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.594986][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.602449][ T284] device bridge_slave_0 entered promiscuous mode [ 26.610780][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.618084][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.625578][ T284] device bridge_slave_1 entered promiscuous mode [ 26.734922][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.741970][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.749455][ T285] device bridge_slave_0 entered promiscuous mode [ 26.767241][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.774366][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.781808][ T285] device bridge_slave_1 entered promiscuous mode [ 26.801685][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.808881][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.816380][ T290] device bridge_slave_0 entered promiscuous mode [ 26.823380][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.830413][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.838016][ T290] device bridge_slave_1 entered promiscuous mode [ 26.911615][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.918722][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.926313][ T289] device bridge_slave_0 entered promiscuous mode [ 26.933338][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.940368][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.948248][ T289] device bridge_slave_1 entered promiscuous mode [ 26.969156][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.976217][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.983597][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.990629][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.104804][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.111969][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.119284][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.126321][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.162121][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.169188][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.176502][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.183680][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.195090][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.202141][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.209434][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.216485][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.230585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.238479][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.246042][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.253405][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.260545][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.268217][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.275944][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.283971][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.291247][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.327247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.335608][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.342726][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.350416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.358982][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.366052][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.400182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.417378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.425454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.458801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.467269][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.474316][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.481720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.489402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.497786][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.505289][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.512733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.521152][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.528285][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.535844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.544288][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.551307][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.558735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.566749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.574990][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.582016][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.589625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.597896][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.604943][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.612319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.619838][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.627365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.635598][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.642612][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.650104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.658483][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.665539][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.673121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.681324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.690051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.723561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.731754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.740420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.748865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.757048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.765178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.773262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.781309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.789433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.797669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.805729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.813860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.821801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.830239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.851077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.859512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.875509][ T284] device veth0_vlan entered promiscuous mode [ 27.884886][ T285] device veth0_vlan entered promiscuous mode [ 27.895061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.903932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.912268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.920891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.929286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.937319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.945526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.953596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.961610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.970301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.978929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.987585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.998659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.006389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.014027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.021459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.029346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.037137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.045053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.052904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.068107][ T285] device veth1_macvtap entered promiscuous mode [ 28.075485][ T283] device veth0_vlan entered promiscuous mode [ 28.082903][ T289] device veth0_vlan entered promiscuous mode [ 28.089506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.097093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.104832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.113010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.121521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.129339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.137844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.147455][ T284] device veth1_macvtap entered promiscuous mode [ 28.162143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.169936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.178430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.188887][ T290] device veth0_vlan entered promiscuous mode [ 28.199639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.207795][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.215983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.224743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.233481][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.241772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.250327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.258907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.267485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.275189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.288045][ T283] device veth1_macvtap entered promiscuous mode [ 28.298154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.306742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.315018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.327968][ T290] device veth1_macvtap entered promiscuous mode [ 28.339702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.348763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.357258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.365182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.373960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.389124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.397850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.406646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.406954][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 28.415686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.433853][ T289] device veth1_macvtap entered promiscuous mode [ 28.450802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.465308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.482936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.492252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.501477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.528077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.538783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.565214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.574001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.632895][ T324] input: syz1 as /devices/virtual/input/input4 [ 28.645342][ T327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.719523][ T334] loop4: detected capacity change from 0 to 8192 [ 28.764311][ T334] loop4: p2 p3 p4[EZD] [ 28.769671][ T334] loop4: p3 start 458783 is beyond EOD, truncated [ 28.776617][ T334] loop4: p4 size 65536 extends beyond EOD, truncated [ 28.833148][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.009452][ T369] loop3: detected capacity change from 0 to 128 [ 29.018628][ T369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.031351][ T369] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.064823][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 29.071094][ T39] usb 3-1: config index 0 descriptor too short (expected 21028, got 36) [ 29.084459][ T369] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 1803188595 (only 1 groups) [ 29.096244][ T39] usb 3-1: config 15 has too many interfaces: 74, using maximum allowed: 32 [ 29.105383][ T39] usb 3-1: config 15 has an invalid interface number: 251 but max is 73 [ 29.120507][ T39] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 29.131379][ T39] usb 3-1: config 15 has 1 interface, different from the descriptor's value: 74 [ 29.131893][ T289] EXT4-fs (loop3): unmounting filesystem. [ 29.141750][ T39] usb 3-1: config 15 has no interface number 0 [ 29.152775][ T39] usb 3-1: config 15 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.163192][ T39] usb 3-1: config 15 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.169458][ T381] loop4: detected capacity change from 0 to 256 [ 29.187254][ T39] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 29.199603][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.208456][ T39] usb 3-1: Product: syz [ 29.212759][ T39] usb 3-1: Manufacturer: syz [ 29.217858][ T39] usb 3-1: SerialNumber: syz [ 29.231604][ T310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 29.254412][ T389] loop3: detected capacity change from 0 to 256 [ 29.260911][ T389] ======================================================= [ 29.260911][ T389] WARNING: The mand mount option has been deprecated and [ 29.260911][ T389] and is ignored by this kernel. Remove the mand [ 29.260911][ T389] option from the mount to silence this warning. [ 29.260911][ T389] ======================================================= [ 29.300809][ T389] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 29.442065][ T39] asix: probe of 3-1:15.251 failed with error -22 [ 29.451935][ T39] usb 3-1: USB disconnect, device number 2 [ 29.571482][ T403] loop3: detected capacity change from 0 to 40427 [ 29.578570][ T403] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 29.590629][ T403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.613157][ T403] F2FS-fs (loop3): fault_injection options not supported [ 29.620247][ T403] F2FS-fs (loop3): fault_type options not supported [ 29.637054][ T403] F2FS-fs (loop3): heap/no_heap options were deprecated [ 29.654021][ T403] F2FS-fs (loop3): invalid crc value [ 29.661724][ T429] loop0: detected capacity change from 0 to 256 [ 29.673412][ T429] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 29.689127][ T403] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.755949][ T403] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.769670][ T403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.853375][ T289] syz-executor: attempt to access beyond end of device [ 29.853375][ T289] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.981381][ T450] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 30.031250][ T454] loop2: detected capacity change from 0 to 512 [ 30.044219][ T454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.071999][ T454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.092065][ T454] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.63: invalid block [ 30.113631][ T454] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.63: invalid indirect mapped block 4294967295 (level 1) [ 30.133501][ T454] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.63: invalid indirect mapped block 4294967295 (level 1) [ 30.162812][ T448] loop4: detected capacity change from 0 to 40427 [ 30.163198][ T454] EXT4-fs (loop2): 2 truncates cleaned up [ 30.170032][ T448] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 30.182672][ T448] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 30.183414][ T454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.191844][ T448] F2FS-fs (loop4): invalid crc value [ 30.214943][ T448] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.233875][ T454] EXT4-fs (loop2): shut down requested (2) [ 30.250592][ T284] EXT4-fs (loop2): unmounting filesystem. [ 30.259127][ T448] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 30.266309][ T448] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.303875][ T448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'. [ 30.382816][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 30.382835][ T28] audit: type=1400 audit(1746801812.420:173): avc: denied { mounton } for pid=479 comm="syz.4.72" path="/26/bus" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.411246][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.419724][ T305] kernel write not supported for file [eventfd] (pid: 305 comm: kworker/0:3) [ 30.475354][ T488] loop2: detected capacity change from 0 to 1024 [ 30.484919][ T488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.509858][ T284] EXT4-fs (loop2): unmounting filesystem. [ 30.515813][ T221] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.532258][ T498] overlayfs: missing 'workdir' [ 30.542332][ T28] audit: type=1400 audit(1746801812.580:174): avc: denied { read } for pid=499 comm="syz.4.83" dev="nsfs" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.552081][ T502] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 30.570967][ T502] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 30.586269][ T28] audit: type=1400 audit(1746801812.610:175): avc: denied { open } for pid=499 comm="syz.4.83" path="net:[4026532578]" dev="nsfs" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.591158][ T502] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 30.610470][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.617014][ T502] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 30.630934][ T19] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.646775][ T28] audit: type=1400 audit(1746801812.610:176): avc: denied { setopt } for pid=499 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.666486][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.675344][ T19] usb 4-1: config 0 descriptor?? [ 30.679604][ T28] audit: type=1400 audit(1746801812.620:177): avc: denied { bind } for pid=499 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.704238][ T221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.715273][ T221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.725435][ T221] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.738286][ T221] usb 1-1: New USB device found, idVendor=794f, idProduct=0000, bcdDevice= 0.00 [ 30.747413][ T221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.756276][ T221] usb 1-1: config 0 descriptor?? [ 30.813704][ T510] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 30.850452][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 30.871094][ T516] syz.4.90[516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.871150][ T516] syz.4.90[516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.896382][ T28] audit: type=1400 audit(1746801812.940:178): avc: denied { create } for pid=517 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.927004][ T28] audit: type=1400 audit(1746801812.940:179): avc: denied { setopt } for pid=517 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.946525][ T28] audit: type=1400 audit(1746801812.940:180): avc: denied { ioctl } for pid=517 comm="syz.4.91" path="socket:[17092]" dev="sockfs" ino=17092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.971258][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.978810][ T28] audit: type=1400 audit(1746801812.940:181): avc: denied { write } for pid=517 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.023297][ T365] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 31.085153][ T19] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 31.094953][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 31.175355][ T221] hid (null): bogus close delimiter [ 31.181415][ T221] hid-generic 0003:794F:0000.0002: bogus close delimiter [ 31.189539][ T221] hid-generic 0003:794F:0000.0002: item 0 0 2 10 parsing failed [ 31.190237][ T28] audit: type=1400 audit(1746801813.240:182): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=581 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.198168][ T221] hid-generic: probe of 0003:794F:0000.0002 failed with error -22 [ 31.221482][ T39] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.228070][ T19] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 31.236310][ T39] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.258799][ T39] usb 3-1: config 220 has no interface number 2 [ 31.265305][ T39] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.278486][ T39] usb 3-1: config 220 interface 0 has no altsetting 0 [ 31.285435][ T39] usb 3-1: config 220 interface 76 has no altsetting 0 [ 31.299964][ T39] usb 3-1: config 220 interface 1 has no altsetting 0 [ 31.308374][ T39] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.317586][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.323135][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.325820][ T313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.340815][ T39] usb 3-1: Product: syz [ 31.345342][ T39] usb 3-1: Manufacturer: syz [ 31.350296][ T39] usb 3-1: SerialNumber: syz [ 31.404408][ T221] usb 1-1: USB disconnect, device number 2 [ 31.514290][ T6] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.528810][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 31.537960][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.544287][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.546275][ T6] usb 5-1: Product: syz [ 31.557983][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.560500][ T6] usb 5-1: Manufacturer: syz [ 31.571134][ T39] usb 3-1: selecting invalid altsetting 0 [ 31.573824][ T6] usb 5-1: SerialNumber: syz [ 31.579885][ T39] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 31.590877][ T313] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.600003][ T39] usb 3-1: No valid video chain found. [ 31.607632][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.616035][ T313] usb 2-1: SerialNumber: syz [ 31.622828][ T39] usb 3-1: USB disconnect, device number 3 [ 31.670517][ T303] usb 4-1: USB disconnect, device number 2 [ 31.789545][ T6] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 31.832234][ T313] usb 2-1: 0:2 : does not exist [ 31.838766][ T313] usb 2-1: USB disconnect, device number 2 [ 31.920573][ T527] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 32.010751][ T6] usb 5-1: USB disconnect, device number 2 [ 32.011944][ T531] loop0: detected capacity change from 0 to 512 [ 32.017659][ T6] usblp0: removed [ 32.026711][ T531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.045331][ T531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.054400][ T531] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.068939][ T531] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.97: corrupted xattr block 19 [ 32.080820][ T531] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 32.089880][ T531] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.97: corrupted xattr block 19 [ 32.101805][ T531] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 32.111100][ T531] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.97: corrupted xattr block 19 [ 32.123573][ T538] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.97: corrupted xattr block 19 [ 32.135715][ T538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 32.145506][ T538] EXT4-fs error (device loop0): ext4_xattr_block_find:1828: inode #15: comm syz.0.97: corrupted xattr block 19 [ 32.170889][ T285] EXT4-fs (loop0): unmounting filesystem. [ 32.196471][ T541] loop0: detected capacity change from 0 to 1024 [ 32.203242][ T544] loop3: detected capacity change from 0 to 256 [ 32.203384][ T541] EXT4-fs: dax option not supported [ 32.218611][ T545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 32.256975][ T551] loop3: detected capacity change from 0 to 1024 [ 32.267191][ T541] loop0: detected capacity change from 0 to 512 [ 32.274638][ T541] EXT4-fs: Ignoring removed orlov option [ 32.281022][ T541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.290723][ T551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.311686][ T541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.323550][ T289] EXT4-fs (loop3): unmounting filesystem. [ 32.324325][ T541] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.100: bg 0: block 248: padding at end of block bitmap is not set [ 32.344065][ T541] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.100: Failed to acquire dquot type 1 [ 32.356493][ T541] EXT4-fs (loop0): 1 truncate cleaned up [ 32.373368][ T541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.402971][ T541] EXT4-fs error (device loop0): __ext4_remount:6598: comm syz.0.100: Abort forced by user [ 32.417506][ T541] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 32.509816][ T568] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.557217][ T568] EXT4-fs error (device loop0): __ext4_remount:6598: comm syz.0.100: Abort forced by user [ 32.577791][ T568] EXT4-fs (loop0): Remounting filesystem read-only [ 32.586407][ T577] loop1: detected capacity change from 0 to 512 [ 32.591797][ T568] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 32.597857][ T577] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.601946][ T568] ext4 filesystem being remounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.613731][ T577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.638869][ T577] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.646536][ T541] EXT4-fs: Ignoring removed orlov option [ 32.652153][ T577] EXT4-fs (loop1): 1 truncate cleaned up [ 32.663337][ T577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.702638][ T541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.712757][ T283] EXT4-fs (loop1): unmounting filesystem. [ 32.723498][ T541] EXT4-fs error (device loop0): __ext4_remount:6598: comm syz.0.100: Abort forced by user [ 32.753375][ T541] EXT4-fs (loop0): Remounting filesystem read-only [ 32.766200][ T541] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 32.801202][ T601] netlink: 136 bytes leftover after parsing attributes in process `syz.1.126'. [ 32.812054][ T603] loop2: detected capacity change from 0 to 256 [ 32.813452][ T597] syz.4.125 (597) used greatest stack depth: 22144 bytes left [ 32.825944][ T541] syz.0.100 (541) used greatest stack depth: 20976 bytes left [ 32.835659][ T601] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 32.852202][ T285] EXT4-fs (loop0): unmounting filesystem. [ 32.877673][ T609] loop0: detected capacity change from 0 to 128 [ 32.886435][ T609] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 32.980145][ T627] loop0: detected capacity change from 0 to 1024 [ 33.005778][ T627] EXT4-fs: Ignoring removed orlov option [ 33.036077][ T627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.097390][ T285] EXT4-fs (loop0): unmounting filesystem. [ 33.125977][ T655] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 33.201456][ T665] syz.1.155[665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.201551][ T665] syz.1.155[665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.217705][ T666] incfs: Options parsing error. -22 [ 33.269321][ T666] incfs: mount failed -22 [ 33.273882][ T670] loop2: detected capacity change from 0 to 1024 [ 33.287307][ T653] loop3: detected capacity change from 0 to 40427 [ 33.294657][ T653] F2FS-fs (loop3): fault_injection options not supported [ 33.300989][ T670] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.308977][ T653] F2FS-fs (loop3): invalid crc value [ 33.321086][ T670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.331472][ T653] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.370572][ T653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.381292][ T284] EXT4-fs (loop2): unmounting filesystem. [ 33.423998][ T691] syz.0.164 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.450046][ T695] loop0: detected capacity change from 0 to 256 [ 33.526623][ T708] loop3: detected capacity change from 0 to 1024 [ 33.533536][ T708] EXT4-fs: Ignoring removed nobh option [ 33.539247][ T708] EXT4-fs: Ignoring removed bh option [ 33.545126][ T708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.583487][ T313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.596496][ T708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.620554][ T708] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.172: Allocating blocks 385-513 which overlap fs metadata [ 33.645200][ T707] EXT4-fs (loop3): pa ffff888114590930: logic 16, phys. 129, len 24 [ 33.653285][ T707] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 33.671476][ T289] EXT4-fs (loop3): unmounting filesystem. [ 33.707285][ T725] device batadv_slave_1 entered promiscuous mode [ 33.714922][ T724] device batadv_slave_1 left promiscuous mode [ 33.784432][ T313] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 33.795823][ T313] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 33.804968][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.812976][ T313] usb 2-1: Product: syz [ 33.817162][ T313] usb 2-1: Manufacturer: syz [ 33.821757][ T313] usb 2-1: SerialNumber: syz [ 33.827455][ T678] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.913227][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.003305][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.023247][ T303] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.037024][ T313] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 34.094268][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.104518][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.113418][ T6] usb 1-1: config 1 has no interface number 0 [ 34.119556][ T6] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.130434][ T6] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 34.140957][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.150310][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.158414][ T6] usb 1-1: Product: syz [ 34.162639][ T6] usb 1-1: Manufacturer: syz [ 34.167242][ T6] usb 1-1: SerialNumber: syz [ 34.184139][ T19] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 34.194422][ T19] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 34.205425][ T19] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 34.214256][ T303] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.215257][ T19] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.225528][ T303] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.238307][ T19] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 34.247175][ T303] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 34.266700][ T303] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 34.267370][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.280401][ T303] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.288927][ T221] usb 2-1: USB disconnect, device number 3 [ 34.296775][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.303857][ T19] usb 4-1: invalid MIDI out EP 0 [ 34.310620][ T303] usb 5-1: SerialNumber: syz [ 34.316524][ T221] usblp0: removed [ 34.326833][ T19] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 34.523698][ T303] usb 5-1: 0:2 : does not exist [ 34.528710][ T303] usb 5-1: unit 5 not found! [ 34.545624][ T303] usb 5-1: USB disconnect, device number 3 [ 34.550234][ T221] usb 4-1: USB disconnect, device number 3 [ 34.823603][ T731] loop2: detected capacity change from 0 to 131072 [ 34.830762][ T731] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 34.839200][ T731] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.848076][ T731] F2FS-fs (loop2): invalid crc value [ 34.855174][ T731] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.888804][ T731] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.896315][ T731] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 34.976343][ T6] cdc_ncm 1-1:1.1: bind() failure [ 35.075531][ T739] syz.3.185[739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.075632][ T739] syz.3.185[739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.127188][ T747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 35.147498][ T747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 35.194794][ T503] usb 1-1: USB disconnect, device number 3 [ 35.247442][ T760] Non-string source [ 35.266583][ T765] xt_hashlimit: size too large, truncated to 1048576 [ 35.453130][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.467269][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 35.467283][ T28] audit: type=1400 audit(1746801817.510:231): avc: denied { append } for pid=772 comm="syz.4.199" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.470612][ T775] xt_hashlimit: size too large, truncated to 1048576 [ 35.644166][ T6] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 35.658857][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.673944][ T6] usb 4-1: config 0 descriptor?? [ 35.751171][ T793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.208'. [ 35.780468][ T793] netlink: 43 bytes leftover after parsing attributes in process `syz.0.208'. [ 35.789913][ T793] netlink: 'syz.0.208': attribute type 6 has an invalid length. [ 35.797739][ T793] netlink: 'syz.0.208': attribute type 5 has an invalid length. [ 35.805506][ T793] netlink: 43 bytes leftover after parsing attributes in process `syz.0.208'. [ 35.891391][ T503] usb 4-1: USB disconnect, device number 4 [ 35.996561][ T802] netlink: 'syz.1.212': attribute type 34 has an invalid length. [ 36.035667][ T804] device batadv_slave_1 entered promiscuous mode [ 36.054516][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 36.182102][ T814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.218'. [ 36.195577][ T814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.218'. [ 36.205734][ T814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.218'. [ 36.214917][ T816] syz.2.219[816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.215034][ T816] syz.2.219[816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.348129][ T28] audit: type=1400 audit(1746801818.390:232): avc: denied { read } for pid=827 comm="syz.1.224" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.414601][ T28] audit: type=1400 audit(1746801818.390:233): avc: denied { open } for pid=827 comm="syz.1.224" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.470110][ T837] loop3: detected capacity change from 0 to 512 [ 36.479864][ T796] loop4: detected capacity change from 0 to 131072 [ 36.481617][ T837] EXT4-fs: Ignoring removed nobh option [ 36.493758][ T28] audit: type=1400 audit(1746801818.440:234): avc: denied { ioctl } for pid=827 comm="syz.1.224" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.496127][ T796] F2FS-fs (loop4): invalid crc value [ 36.521115][ T28] audit: type=1400 audit(1746801818.460:235): avc: denied { bind } for pid=832 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.544169][ T837] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.558054][ T837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.229: invalid indirect mapped block 256 (level 2) [ 36.572351][ T837] EXT4-fs (loop3): 2 truncates cleaned up [ 36.578280][ T796] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 36.578288][ T837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.610923][ T28] audit: type=1400 audit(1746801818.650:236): avc: denied { ioctl } for pid=845 comm="syz.1.232" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.637572][ T289] EXT4-fs (loop3): unmounting filesystem. [ 36.650712][ T796] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 36.668159][ T28] audit: type=1400 audit(1746801818.710:237): avc: denied { map } for pid=852 comm="syz.2.235" path="socket:[17807]" dev="sockfs" ino=17807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.694496][ T855] loop3: detected capacity change from 0 to 1024 [ 36.697744][ T28] audit: type=1400 audit(1746801818.710:238): avc: denied { read accept } for pid=852 comm="syz.2.235" path="socket:[17807]" dev="sockfs" ino=17807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.748493][ T855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.800739][ T28] audit: type=1400 audit(1746801818.840:239): avc: denied { setattr } for pid=851 comm="syz.3.233" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.836899][ T28] audit: type=1400 audit(1746801818.870:240): avc: denied { write open } for pid=851 comm="syz.3.233" path=2F202864656C6574656429 dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.883686][ T289] EXT4-fs (loop3): unmounting filesystem. [ 36.975384][ T875] loop3: detected capacity change from 0 to 8192 [ 37.022089][ T884] loop1: detected capacity change from 0 to 256 [ 37.107260][ T895] loop4: detected capacity change from 0 to 8192 [ 37.137082][ T897] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 37.146788][ T897] SELinux: failed to load policy [ 37.175789][ T901] tipc: Started in network mode [ 37.180755][ T901] tipc: Node identity 2007, cluster identity 4711 [ 37.187390][ T901] tipc: Node number set to 8199 [ 37.323401][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.500052][ T932] loop4: detected capacity change from 0 to 1024 [ 37.506561][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 37.507088][ T932] EXT4-fs: Ignoring removed oldalloc option [ 37.513162][ T313] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.528811][ T313] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.538629][ T313] usb 2-1: config 0 interface 0 has no altsetting 0 [ 37.545460][ T313] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.547988][ T932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.556312][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.572227][ T313] usb 2-1: config 0 descriptor?? [ 37.583130][ T290] EXT4-fs (loop4): unmounting filesystem. [ 37.639902][ T943] loop0: detected capacity change from 0 to 1024 [ 37.647489][ T943] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.659032][ T943] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.669722][ T943] JBD2: no valid journal superblock found [ 37.675546][ T943] EXT4-fs (loop0): error loading journal [ 37.732651][ T946] Zero length message leads to an empty skb [ 37.750912][ T948] loop0: detected capacity change from 0 to 512 [ 37.758061][ T948] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 37.769568][ T948] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.776280][ T948] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.275: Block bitmap for bg 0 marked uninitialized [ 37.790947][ T948] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 37.800000][ T948] EXT4-fs (loop0): 1 orphan inode deleted [ 37.806010][ T948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.827485][ T948] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.837388][ T948] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 37.845094][ T948] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.275: Block bitmap for bg 0 marked uninitialized [ 37.866728][ T285] EXT4-fs (loop0): unmounting filesystem. [ 37.992717][ T313] hid (null): invalid report_size 24934 [ 38.005887][ T313] hid (null): unknown global tag 0x9e [ 38.021857][ T313] hid (null): unknown global tag 0xc [ 38.035129][ T313] hid (null): unknown global tag 0xd [ 38.042167][ T313] hid (null): bogus close delimiter [ 38.218080][ T313] usb 2-1: USB disconnect, device number 4 [ 38.982699][ T1083] loop1: detected capacity change from 0 to 40427 [ 38.994224][ T1083] F2FS-fs (loop1): fault_injection options not supported [ 39.000050][ T1094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 39.002175][ T1083] F2FS-fs (loop1): invalid crc value [ 39.019309][ T1083] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.054188][ T313] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 39.063650][ T1083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.094519][ T1101] loop2: detected capacity change from 0 to 256 [ 39.113212][ T283] syz-executor: attempt to access beyond end of device [ 39.113212][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.131178][ T1101] FAT-fs (loop2): Directory bread(block 64) failed [ 39.137848][ T1101] FAT-fs (loop2): Directory bread(block 65) failed [ 39.144603][ T1101] FAT-fs (loop2): Directory bread(block 66) failed [ 39.151195][ T1101] FAT-fs (loop2): Directory bread(block 67) failed [ 39.157864][ T1101] FAT-fs (loop2): Directory bread(block 68) failed [ 39.165624][ T1101] FAT-fs (loop2): Directory bread(block 69) failed [ 39.190412][ T1101] FAT-fs (loop2): Directory bread(block 70) failed [ 39.207241][ T1101] FAT-fs (loop2): Directory bread(block 71) failed [ 39.223157][ T1101] FAT-fs (loop2): Directory bread(block 72) failed [ 39.233447][ T1101] FAT-fs (loop2): Directory bread(block 73) failed [ 39.264615][ T313] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 39.274135][ T313] usb 1-1: can't read configurations, error -71 [ 39.303805][ T1103] loop4: detected capacity change from 0 to 40427 [ 39.310999][ T1103] F2FS-fs (loop4): Unrecognized mount option "!ctive_logs=4" or missing value [ 39.336018][ T977] kworker/u4:21: attempt to access beyond end of device [ 39.336018][ T977] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 39.384584][ T1119] device batadv_slave_0 entered promiscuous mode [ 39.392052][ T1118] device batadv_slave_0 left promiscuous mode [ 39.440814][ T1128] loop1: detected capacity change from 0 to 256 [ 39.447505][ T1128] exfat: Deprecated parameter 'namecase' [ 39.456095][ T1128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd73f1698, utbl_chksum : 0xe619d30d) [ 39.477874][ T1128] incfs_lookup_dentry err:-1 [ 39.715545][ T1184] loop1: detected capacity change from 0 to 128 [ 39.743736][ T1184] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 39.763101][ T1184] SELinux: failed to load policy [ 39.954336][ T1209] loop0: detected capacity change from 0 to 256 [ 39.963970][ T1209] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 40.063078][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.121507][ T1218] veth1_to_batadv: vlans aren't supported yet for dev_uc|mc_add() [ 40.147309][ T1220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 40.243609][ T1226] Invalid ELF header magic: != ELF [ 40.249422][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.260488][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.286056][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.312575][ T1230] netlink: 'syz.2.357': attribute type 11 has an invalid length. [ 40.320646][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.336585][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.351193][ T39] usb 2-1: config 0 descriptor?? [ 40.665245][ T1261] loop4: detected capacity change from 0 to 128 [ 40.694105][ T1261] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 40.714632][ T1267] input: syz0 as /devices/virtual/input/input6 [ 40.759653][ T39] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 40.783589][ T39] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 40.811826][ T1281] bridge0: port 3(syz_tun) entered blocking state [ 40.819133][ T1281] bridge0: port 3(syz_tun) entered disabled state [ 40.826865][ T1281] device syz_tun entered promiscuous mode [ 40.841683][ T1281] bridge0: port 3(syz_tun) entered blocking state [ 40.848195][ T1281] bridge0: port 3(syz_tun) entered forwarding state [ 40.862057][ T1282] loop0: detected capacity change from 0 to 4096 [ 40.886292][ T1282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.987087][ T285] EXT4-fs (loop0): unmounting filesystem. [ 41.025191][ T313] usb 2-1: USB disconnect, device number 5 [ 41.027132][ T1236] loop3: detected capacity change from 0 to 131072 [ 41.038031][ T1236] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 41.046437][ T1236] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.056033][ T1236] F2FS-fs (loop3): invalid crc value [ 41.063001][ T1236] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.091926][ T1236] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.099103][ T1236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 41.163096][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.283122][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.354864][ T39] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 41.366749][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 41.376033][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.384098][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 41.384116][ T28] audit: type=1400 audit(1746801823.420:267): avc: denied { read } for pid=1294 comm="syz.3.385" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.410762][ T39] usb 5-1: Product: syz [ 41.415071][ T39] usb 5-1: Manufacturer: syz [ 41.419784][ T39] usb 5-1: SerialNumber: syz [ 41.425419][ T1287] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 41.473078][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 41.478314][ T28] audit: type=1400 audit(1746801823.520:268): avc: denied { create } for pid=1301 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.497958][ T28] audit: type=1400 audit(1746801823.520:269): avc: denied { connect } for pid=1301 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.521332][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.535959][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.544282][ T24] usb 1-1: Product: syz [ 41.548680][ T24] usb 1-1: Manufacturer: syz [ 41.553333][ T24] usb 1-1: SerialNumber: syz [ 41.558695][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 41.572284][ T1309] netlink: 'syz.1.391': attribute type 4 has an invalid length. [ 41.597263][ T1311] syz.3.392[1311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.597341][ T1311] syz.3.392[1311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.613772][ T1311] loop3: detected capacity change from 0 to 256 [ 41.631920][ T1311] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.647049][ T39] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 41.647434][ T1311] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.751180][ T1331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 41.771213][ T1333] loop1: detected capacity change from 0 to 256 [ 41.794762][ T28] audit: type=1400 audit(1746801823.840:270): avc: denied { setopt } for pid=1334 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.854280][ T39] usb 5-1: USB disconnect, device number 4 [ 41.861450][ T39] usblp0: removed [ 41.863163][ T28] audit: type=1400 audit(1746801823.900:271): avc: denied { create } for pid=1338 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.884621][ T28] audit: type=1400 audit(1746801823.910:272): avc: denied { connect } for pid=1338 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.908373][ T1342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.406'. [ 41.966532][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 41.974240][ T24] r8152-cfgselector 1-1: bad CDC descriptors [ 41.983882][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 41.995537][ T24] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 42.032121][ T1357] loop3: detected capacity change from 0 to 256 [ 42.050604][ T1357] FAT-fs (loop3): Directory bread(block 64) failed [ 42.057912][ T1357] FAT-fs (loop3): Directory bread(block 65) failed [ 42.067373][ T1357] FAT-fs (loop3): Directory bread(block 66) failed [ 42.074322][ T1357] FAT-fs (loop3): Directory bread(block 67) failed [ 42.081078][ T1357] FAT-fs (loop3): Directory bread(block 68) failed [ 42.087705][ T1357] FAT-fs (loop3): Directory bread(block 69) failed [ 42.096458][ T1357] FAT-fs (loop3): Directory bread(block 70) failed [ 42.103633][ T1357] FAT-fs (loop3): Directory bread(block 71) failed [ 42.110254][ T1357] FAT-fs (loop3): Directory bread(block 72) failed [ 42.121542][ T1357] FAT-fs (loop3): Directory bread(block 73) failed [ 42.130615][ T28] audit: type=1400 audit(1746801824.180:273): avc: denied { connect } for pid=1362 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.136417][ T971] tipc: Subscription rejected, illegal request [ 42.177463][ T1365] loop2: detected capacity change from 0 to 2048 [ 42.193897][ T1367] bridge0: port 3(syz_tun) entered blocking state [ 42.195091][ T1365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.200511][ T1367] bridge0: port 3(syz_tun) entered disabled state [ 42.216205][ T1367] device syz_tun entered promiscuous mode [ 42.222112][ T1367] bridge0: port 3(syz_tun) entered blocking state [ 42.224595][ T28] audit: type=1400 audit(1746801824.270:274): avc: denied { mount } for pid=1364 comm="syz.2.417" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.228616][ T1367] bridge0: port 3(syz_tun) entered forwarding state [ 42.285248][ T28] audit: type=1400 audit(1746801824.320:275): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.371096][ T284] EXT4-fs (loop2): unmounting filesystem. [ 42.402923][ T1380] loop4: detected capacity change from 0 to 2048 [ 42.434243][ T1380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.447443][ T28] audit: type=1400 audit(1746801824.490:276): avc: denied { link } for pid=1379 comm="syz.4.423" name="00000000000000000000000000000000" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.511134][ T290] EXT4-fs (loop4): unmounting filesystem. [ 42.544491][ T971] tipc: Subscription rejected, illegal request [ 42.564832][ T1390] loop3: detected capacity change from 0 to 256 [ 42.616443][ T1396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.431'. [ 42.632117][ T1400] bridge0: port 3(syz_tun) entered blocking state [ 42.632138][ T1400] bridge0: port 3(syz_tun) entered disabled state [ 42.632640][ T1400] device syz_tun entered promiscuous mode [ 42.632733][ T1400] bridge0: port 3(syz_tun) entered blocking state [ 42.632748][ T1400] bridge0: port 3(syz_tun) entered forwarding state [ 42.642614][ T1398] loop3: detected capacity change from 0 to 1024 [ 42.683787][ T1398] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 42.683998][ T1398] EXT4-fs error (device loop3): ext4_get_journal_inode:5710: inode #32: comm syz.3.433: iget: special inode unallocated [ 42.684122][ T1398] EXT4-fs (loop3): no journal found [ 42.684135][ T1398] EXT4-fs (loop3): can't get journal size [ 42.724585][ T1398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 42.739889][ T1398] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.433: iget: special inode unallocated [ 42.741703][ T1409] input: syz0 as /devices/virtual/input/input8 [ 42.753267][ T1398] EXT4-fs (loop3): failed to initialize system zone (-117) [ 42.770286][ T1398] EXT4-fs (loop3): mount failed [ 42.802795][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.802812][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.803383][ T1401] device bridge_slave_0 entered promiscuous mode [ 42.804313][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.804329][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.804782][ T1401] device bridge_slave_1 entered promiscuous mode [ 42.983800][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.984106][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.986189][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.986498][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.986687][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.986702][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.986869][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.038622][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.038912][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.039091][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.039106][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.057672][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.058002][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.058231][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.058474][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.078235][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.079049][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.090340][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.090769][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.091077][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.092129][ T1401] device veth0_vlan entered promiscuous mode [ 43.107243][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.108157][ T1401] device veth1_macvtap entered promiscuous mode [ 43.115084][ T1046] device bridge_slave_1 left promiscuous mode [ 43.115150][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.115791][ T1046] device bridge_slave_0 left promiscuous mode [ 43.115852][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.116971][ T1046] device veth0_vlan left promiscuous mode [ 43.281626][ T1434] loop3: detected capacity change from 0 to 512 [ 43.284625][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.319390][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.319634][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.319842][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.322850][ T1434] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.445: casefold flag without casefold feature [ 43.328562][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.343306][ T1434] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.445: couldn't read orphan inode 15 (err -117) [ 43.344544][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.358352][ T1434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.366007][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.403078][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.405598][ T289] EXT4-fs (loop3): unmounting filesystem. [ 43.411093][ T24] usb 5-1: SerialNumber: syz [ 43.436296][ T1439] loop5: detected capacity change from 0 to 128 [ 43.449111][ T1439] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 43.588323][ T1471] netlink: 80 bytes leftover after parsing attributes in process `syz.5.456'. [ 43.617064][ T24] usb 5-1: 0:2 : does not exist [ 43.624425][ T24] usb 5-1: USB disconnect, device number 5 [ 43.703411][ T1493] loop1: detected capacity change from 0 to 256 [ 43.712206][ T1493] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 43.724011][ T1496] loop0: detected capacity change from 0 to 512 [ 43.730926][ T1496] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.741194][ T1496] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.473: invalid block [ 43.753687][ T1496] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.473: invalid indirect mapped block 10 (level 1) [ 43.767243][ T1496] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.473: invalid indirect mapped block 8 (level 1) [ 43.783478][ T1496] EXT4-fs (loop0): 1 truncate cleaned up [ 43.789152][ T1496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.811094][ T285] EXT4-fs (loop0): unmounting filesystem. [ 44.115282][ T1512] loop1: detected capacity change from 0 to 40427 [ 44.122168][ T1512] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 44.130257][ T1512] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.140898][ T1512] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.192524][ T1529] loop4: detected capacity change from 0 to 256 [ 44.194531][ T1512] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.206234][ T1512] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.210958][ T1529] FAT-fs (loop4): Directory bread(block 64) failed [ 44.220581][ T1529] FAT-fs (loop4): Directory bread(block 65) failed [ 44.227241][ T1529] FAT-fs (loop4): Directory bread(block 66) failed [ 44.234099][ T1529] FAT-fs (loop4): Directory bread(block 67) failed [ 44.240863][ T1529] FAT-fs (loop4): Directory bread(block 68) failed [ 44.247134][ T283] syz-executor: attempt to access beyond end of device [ 44.247134][ T283] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 44.247658][ T1529] FAT-fs (loop4): Directory bread(block 69) failed [ 44.268366][ T1529] FAT-fs (loop4): Directory bread(block 70) failed [ 44.275080][ T1529] FAT-fs (loop4): Directory bread(block 71) failed [ 44.281955][ T1529] FAT-fs (loop4): Directory bread(block 72) failed [ 44.288700][ T1529] FAT-fs (loop4): Directory bread(block 73) failed [ 44.349613][ T1046] kworker/u4:86: attempt to access beyond end of device [ 44.349613][ T1046] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 44.376249][ T1533] loop4: detected capacity change from 0 to 256 [ 44.382788][ T1533] exfat: Deprecated parameter 'namecase' [ 44.391127][ T1533] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd73f1698, utbl_chksum : 0xe619d30d) [ 44.411402][ T1533] incfs_lookup_dentry err:-1 [ 44.487669][ T1541] loop4: detected capacity change from 0 to 512 [ 44.541455][ T1541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.583310][ T1541] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.624515][ T1555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.496'. [ 44.644970][ T290] EXT4-fs (loop4): unmounting filesystem. [ 44.654898][ T1559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 44.672091][ T1559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 44.719884][ T1565] loop1: detected capacity change from 0 to 2048 [ 44.721281][ T1568] loop3: detected capacity change from 0 to 256 [ 44.752818][ T1568] exfat: Deprecated parameter 'namecase' [ 44.761410][ T1568] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd73f1698, utbl_chksum : 0xe619d30d) [ 44.775276][ T1565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.783956][ T1568] incfs_lookup_dentry err:-1 [ 44.860743][ T283] EXT4-fs (loop1): unmounting filesystem. [ 45.253123][ T313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.269283][ T1609] device batadv_slave_1 entered promiscuous mode [ 45.276694][ T1607] device batadv_slave_1 left promiscuous mode [ 45.297649][ T1614] netlink: 'syz.3.520': attribute type 34 has an invalid length. [ 45.324515][ T1620] loop0: detected capacity change from 0 to 256 [ 45.331122][ T1620] exfat: Deprecated parameter 'namecase' [ 45.339484][ T1620] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd73f1698, utbl_chksum : 0xe619d30d) [ 45.360681][ T1620] incfs_lookup_dentry err:-1 [ 45.385924][ T1622] incfs: Options parsing error. -22 [ 45.391246][ T1622] incfs: mount failed -22 [ 45.449109][ T1629] netlink: 80 bytes leftover after parsing attributes in process `syz.0.528'. [ 45.458222][ T1629] netlink: 80 bytes leftover after parsing attributes in process `syz.0.528'. [ 45.464190][ T313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.467745][ T1629] netlink: 80 bytes leftover after parsing attributes in process `syz.0.528'. [ 45.484802][ T313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 45.504951][ T313] usb 5-1: config 1 has no interface number 0 [ 45.516589][ T313] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.527674][ T313] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 45.548032][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.557433][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.565816][ T313] usb 5-1: Product: syz [ 45.570270][ T313] usb 5-1: Manufacturer: syz [ 45.575167][ T313] usb 5-1: SerialNumber: syz [ 45.605774][ T1640] loop0: detected capacity change from 0 to 1024 [ 45.636764][ T1640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.696111][ T285] EXT4-fs (loop0): unmounting filesystem. [ 46.369166][ T1682] loop1: detected capacity change from 0 to 128 [ 46.382606][ T1682] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.395637][ T313] cdc_ncm 5-1:1.1: bind() failure [ 46.413354][ T1682] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.449142][ T971] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.519540][ T1674] loop0: detected capacity change from 0 to 40427 [ 46.530885][ T1674] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 46.539693][ T1674] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 46.549426][ T1674] F2FS-fs (loop0): invalid crc value [ 46.565019][ T1674] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 46.573817][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 46.573833][ T28] audit: type=1400 audit(1746801828.620:288): avc: denied { write } for pid=1696 comm="syz.1.559" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.613561][ T1674] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 46.618050][ T6] usb 5-1: USB disconnect, device number 6 [ 46.620755][ T1674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.653982][ T1674] syz.0.548: attempt to access beyond end of device [ 46.653982][ T1674] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 46.689882][ T1706] loop3: detected capacity change from 0 to 1024 [ 46.696808][ T285] syz-executor: attempt to access beyond end of device [ 46.696808][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.699664][ T1684] loop5: detected capacity change from 0 to 40427 [ 46.720148][ T1706] EXT4-fs: Ignoring removed orlov option [ 46.727717][ T1684] F2FS-fs (loop5): invalid crc value [ 46.742061][ T1684] F2FS-fs (loop5): Found nat_bits in checkpoint [ 46.782213][ T1706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.835915][ T1684] F2FS-fs (loop5): Start checkpoint disabled! [ 46.853200][ T289] EXT4-fs (loop3): unmounting filesystem. [ 46.864046][ T1717] capability: warning: `syz.0.566' uses 32-bit capabilities (legacy support in use) [ 46.873595][ T1684] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 46.948264][ T971] kworker/u4:15: attempt to access beyond end of device [ 46.948264][ T971] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 46.991020][ T1046] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.009301][ T1724] loop0: detected capacity change from 0 to 8192 [ 47.032457][ T1730] loop1: detected capacity change from 0 to 512 [ 47.045528][ T1730] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.572: casefold flag without casefold feature [ 47.058428][ T1730] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.572: couldn't read orphan inode 15 (err -117) [ 47.073646][ T1730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.110475][ T283] EXT4-fs (loop1): unmounting filesystem. [ 47.154839][ T1741] loop4: detected capacity change from 0 to 256 [ 47.168023][ T1744] loop0: detected capacity change from 0 to 256 [ 47.181754][ T1744] FAT-fs (loop0): Directory bread(block 64) failed [ 47.188550][ T1744] FAT-fs (loop0): Directory bread(block 65) failed [ 47.195309][ T1744] FAT-fs (loop0): Directory bread(block 66) failed [ 47.202180][ T1744] FAT-fs (loop0): Directory bread(block 67) failed [ 47.208943][ T1744] FAT-fs (loop0): Directory bread(block 68) failed [ 47.215658][ T1744] FAT-fs (loop0): Directory bread(block 69) failed [ 47.222246][ T1744] FAT-fs (loop0): Directory bread(block 70) failed [ 47.228908][ T1744] FAT-fs (loop0): Directory bread(block 71) failed [ 47.235506][ T1744] FAT-fs (loop0): Directory bread(block 72) failed [ 47.242114][ T1744] FAT-fs (loop0): Directory bread(block 73) failed [ 47.463094][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.653091][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 47.654341][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.669332][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.669361][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 47.669395][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 47.669418][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.670234][ T24] usb 5-1: config 0 descriptor?? [ 48.090220][ T24] hid (null): invalid report_size 24934 [ 48.091027][ T24] hid (null): unknown global tag 0x9e [ 48.091042][ T24] hid (null): unknown global tag 0xc [ 48.091061][ T24] hid (null): unknown global tag 0xd [ 48.091179][ T24] hid (null): bogus close delimiter [ 48.296347][ T313] usb 5-1: USB disconnect, device number 7 [ 48.830602][ T1760] loop5: detected capacity change from 0 to 512 [ 48.840696][ T1760] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.585: casefold flag without casefold feature [ 48.854049][ T1760] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.585: couldn't read orphan inode 15 (err -117) [ 48.868162][ T1760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 48.887318][ T1401] EXT4-fs (loop5): unmounting filesystem. [ 48.897031][ T1770] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 48.913576][ T1770] SELinux: failed to load policy [ 49.011819][ T1776] tipc: Enabling of bearer rejected, failed to enable media [ 49.023095][ T367] Bluetooth: hci0: command 0x1003 tx timeout [ 49.029172][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.084389][ T1775] loop0: detected capacity change from 0 to 40427 [ 49.096838][ T1775] F2FS-fs (loop0): fault_injection options not supported [ 49.104927][ T1775] F2FS-fs (loop0): invalid crc value [ 49.137455][ T1775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.176443][ T1775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.198669][ T285] syz-executor: attempt to access beyond end of device [ 49.198669][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.240115][ T28] audit: type=1400 audit(1746801831.280:289): avc: denied { ioctl } for pid=1792 comm="syz.4.597" path="socket:[21490]" dev="sockfs" ino=21490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.271325][ T1795] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.313144][ T1795] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.370874][ T1782] loop5: detected capacity change from 0 to 40427 [ 49.379126][ T1782] F2FS-fs (loop5): Wrong segment_count / block_count (64 > 16384) [ 49.397881][ T1782] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 49.413107][ T503] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 49.444002][ T1782] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.508885][ T1782] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 49.521383][ T1782] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 49.580265][ T1401] syz-executor: attempt to access beyond end of device [ 49.580265][ T1401] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 49.629239][ T503] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.651419][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.668690][ T503] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.680246][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.693856][ T503] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 49.698070][ T1811] device bridge_slave_0 entered promiscuous mode [ 49.704903][ T503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.709948][ T313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.722616][ T1819] process 'syz.4.607' launched './file0' with NULL argv: empty string added [ 49.726175][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.740745][ T503] usb 4-1: SerialNumber: syz [ 49.741147][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.745835][ T28] audit: type=1400 audit(1746801831.800:290): avc: denied { execute_no_trans } for pid=1818 comm="syz.4.607" path="/129/file0" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.753444][ T1811] device bridge_slave_1 entered promiscuous mode [ 49.861094][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.868185][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.875494][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.882538][ T1811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.909572][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.917280][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.924695][ T313] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 49.934146][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.934626][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.950635][ T313] usb 1-1: config 0 descriptor?? [ 49.956349][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.964619][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.971648][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.979122][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.989452][ T503] usb 4-1: 0:2 : does not exist [ 49.997890][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.005027][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.013724][ T503] usb 4-1: USB disconnect, device number 5 [ 50.040102][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.056386][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.077802][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.087006][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.103846][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.113421][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.121894][ T1811] device veth0_vlan entered promiscuous mode [ 50.135193][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.145078][ T1811] device veth1_macvtap entered promiscuous mode [ 50.160050][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.181729][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.192308][ T313] usb 1-1: USB disconnect, device number 7 [ 50.318036][ T28] audit: type=1400 audit(1746801832.360:291): avc: denied { remount } for pid=1856 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.503895][ T1057] device bridge_slave_1 left promiscuous mode [ 50.513482][ T1885] No source specified [ 50.520310][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.536082][ T1057] device bridge_slave_0 left promiscuous mode [ 50.548378][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.556861][ T1057] device veth1_macvtap left promiscuous mode [ 50.563337][ T1057] device veth0_vlan left promiscuous mode [ 50.645610][ T28] audit: type=1400 audit(1746801832.690:292): avc: denied { bind } for pid=1898 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.747508][ T1907] loop3: detected capacity change from 0 to 128 [ 50.777608][ T1907] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.848653][ T1897] loop1: detected capacity change from 0 to 40427 [ 50.863541][ T525] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.877417][ T1907] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.878995][ T1897] F2FS-fs (loop1): invalid crc value [ 50.903351][ T1897] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.946356][ T1024] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.978325][ T1933] loop3: detected capacity change from 0 to 256 [ 51.007063][ T1897] F2FS-fs (loop1): Start checkpoint disabled! [ 51.029243][ T1897] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 51.053106][ T525] usb 6-1: Using ep0 maxpacket: 8 [ 51.059303][ T525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.083229][ T525] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 51.092606][ T525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.115979][ T525] usb 6-1: config 0 descriptor?? [ 51.122012][ T525] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 51.142111][ T2000] kworker/u4:193: attempt to access beyond end of device [ 51.142111][ T2000] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 51.313092][ T503] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 51.506602][ T503] usb 4-1: Using ep0 maxpacket: 16 [ 51.525003][ T503] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.542450][ T503] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.562328][ T503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.573705][ T503] usb 4-1: Product: syz [ 51.579557][ T503] usb 4-1: Manufacturer: syz [ 51.586745][ T503] usb 4-1: SerialNumber: syz [ 51.604801][ T2207] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 51.616469][ T2207] IPv6: addrconf: prefix option has invalid lifetime [ 51.623830][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 51.631022][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 51.641368][ T2207] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 51.652994][ T2207] IPv6: addrconf: prefix option has invalid lifetime [ 51.660134][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 51.667201][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 51.699719][ T28] audit: type=1326 audit(1746801833.740:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6c3585927 code=0x7ffc0000 [ 51.723197][ T28] audit: type=1326 audit(1746801833.740:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6c352ab39 code=0x7ffc0000 [ 51.778881][ T28] audit: type=1326 audit(1746801833.740:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6c3585927 code=0x7ffc0000 [ 51.824484][ T28] audit: type=1326 audit(1746801833.740:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6c352ab39 code=0x7ffc0000 [ 51.870446][ T28] audit: type=1326 audit(1746801833.740:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c358e969 code=0x7ffc0000 [ 51.930763][ T28] audit: type=1326 audit(1746801833.740:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c358e969 code=0x7ffc0000 [ 51.981108][ T28] audit: type=1326 audit(1746801833.740:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa6c358e969 code=0x7ffc0000 [ 52.004782][ T503] usb 4-1: 0:2 : does not exist [ 52.028230][ T28] audit: type=1326 audit(1746801833.740:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c358e969 code=0x7ffc0000 [ 52.076386][ T28] audit: type=1326 audit(1746801833.740:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c358e969 code=0x7ffc0000 [ 52.130065][ T28] audit: type=1326 audit(1746801833.740:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa6c358e969 code=0x7ffc0000 [ 52.242539][ T2228] loop1: detected capacity change from 0 to 512 [ 52.273107][ T2228] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 52.281188][ T2228] System zones: 0-2, 18-18, 34-35 [ 52.304008][ T2228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.323192][ T2228] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.407653][ T503] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 52.424466][ T1811] EXT4-fs (loop1): unmounting filesystem. [ 52.427272][ T503] usb 4-1: USB disconnect, device number 6 [ 52.457646][ T2237] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 52.682969][ T2272] loop4: detected capacity change from 0 to 128 [ 53.238215][ T2310] loop3: detected capacity change from 0 to 2048 [ 53.254979][ T2310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.276957][ T289] EXT4-fs (loop3): unmounting filesystem. [ 53.294390][ T2314] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 53.593642][ T2343] overlayfs: missing 'lowerdir' [ 53.605190][ T503] usb 6-1: USB disconnect, device number 2 [ 53.880566][ T2369] netlink: 140 bytes leftover after parsing attributes in process `syz.0.722'. [ 54.059549][ T2393] loop0: detected capacity change from 0 to 512 [ 54.082769][ T2393] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.092203][ T2393] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.733: bad orphan inode 13 [ 54.108256][ T2393] ext4_test_bit(bit=12, block=18) = 1 [ 54.113829][ T2393] is_bad_inode(inode)=0 [ 54.117997][ T2393] NEXT_ORPHAN(inode)=2130706432 [ 54.122906][ T2393] max_ino=32 [ 54.126246][ T2393] i_nlink=1 [ 54.131157][ T2393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.141445][ T2393] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 54.165797][ T2393] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 54.191074][ T285] EXT4-fs (loop0): unmounting filesystem. [ 54.214366][ T2406] loop0: detected capacity change from 0 to 2048 [ 54.221637][ T2406] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 54.426002][ T2424] loop4: detected capacity change from 0 to 2048 [ 54.445190][ T2424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.467070][ T290] EXT4-fs (loop4): unmounting filesystem. [ 54.492797][ T2434] loop4: detected capacity change from 0 to 1024 [ 54.499495][ T2434] EXT4-fs: Ignoring removed orlov option [ 54.505725][ T2434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.535067][ T2434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.603853][ T290] EXT4-fs (loop4): unmounting filesystem. [ 54.649582][ T2440] loop4: detected capacity change from 0 to 128 [ 54.656286][ T2436] loop0: detected capacity change from 0 to 40427 [ 54.673471][ T2436] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 54.681266][ T2436] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 54.695081][ T2442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.750'. [ 54.719725][ T2436] F2FS-fs (loop0): invalid crc value [ 54.761524][ T2436] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 54.784989][ T2436] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 54.797321][ T2457] loop4: detected capacity change from 0 to 256 [ 54.816696][ T2457] exfat: Deprecated parameter 'namecase' [ 54.829740][ T2457] exfat: Deprecated parameter 'namecase' [ 54.846225][ T2457] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 54.858350][ T2459] loop5: detected capacity change from 0 to 4096 [ 54.868628][ T2436] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 54.875006][ T2459] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 54.883589][ T2436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.892067][ T2457] exFAT-fs (loop4): hint_cluster is invalid (4278190089) [ 54.901259][ T1401] EXT4-fs (loop5): unmounting filesystem. [ 54.907720][ T2457] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881146e80d0 iblock : 8, err : -5) [ 54.929965][ T2457] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 54.955657][ T2457] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 54.983288][ T2457] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881146e80d0 iblock : 8, err : -5) [ 54.994773][ T2457] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 55.013768][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.013768][ T2175] loop4: rw=1, sector=34225520825, nr_sectors = 1 limit=256 [ 55.029748][ T2175] Buffer I/O error on dev loop4, logical block 34225520825, lost async page write [ 55.052269][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.052269][ T2175] loop4: rw=1, sector=34225520826, nr_sectors = 1 limit=256 [ 55.068661][ T2175] Buffer I/O error on dev loop4, logical block 34225520826, lost async page write [ 55.077949][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.077949][ T2175] loop4: rw=1, sector=34225520827, nr_sectors = 1 limit=256 [ 55.092418][ T2175] Buffer I/O error on dev loop4, logical block 34225520827, lost async page write [ 55.101807][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.101807][ T2175] loop4: rw=1, sector=34225520828, nr_sectors = 1 limit=256 [ 55.120861][ T2175] Buffer I/O error on dev loop4, logical block 34225520828, lost async page write [ 55.131615][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.131615][ T2175] loop4: rw=1, sector=34225520829, nr_sectors = 1 limit=256 [ 55.145839][ T2175] Buffer I/O error on dev loop4, logical block 34225520829, lost async page write [ 55.155334][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.155334][ T2175] loop4: rw=1, sector=34225520830, nr_sectors = 1 limit=256 [ 55.193078][ T2175] Buffer I/O error on dev loop4, logical block 34225520830, lost async page write [ 55.202352][ T2175] kworker/u4:360: attempt to access beyond end of device [ 55.202352][ T2175] loop4: rw=1, sector=34225520831, nr_sectors = 1 limit=256 [ 55.219479][ T2175] Buffer I/O error on dev loop4, logical block 34225520831, lost async page write [ 55.423830][ T2175] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.463134][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.665540][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.676518][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.686478][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.699900][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.709270][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.727870][ T24] usb 6-1: config 0 descriptor?? [ 55.867396][ T2525] loop1: detected capacity change from 0 to 16 [ 55.881473][ T2525] erofs: (device loop1): mounted with root inode @ nid 36. [ 55.926454][ T2533] loop0: detected capacity change from 0 to 512 [ 55.942215][ T2533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.966387][ T2533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.975651][ T2533] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.990810][ T2533] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 56.023445][ T2533] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 56.083291][ T285] EXT4-fs (loop0): unmounting filesystem. [ 56.141269][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 56.160411][ T24] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 56.173562][ T24] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 56.424022][ T313] usb 6-1: USB disconnect, device number 3 [ 56.886280][ T2564] loop1: detected capacity change from 0 to 512 [ 56.905209][ T2564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.914245][ T2564] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.926415][ T28] kauditd_printk_skb: 775 callbacks suppressed [ 56.926438][ T28] audit: type=1400 audit(1746801838.970:1078): avc: denied { read } for pid=2563 comm="syz.1.802" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 56.971719][ T1811] EXT4-fs (loop1): unmounting filesystem. [ 57.061726][ T2576] input: syz0 as /devices/virtual/input/input10 [ 57.103761][ T2582] xt_hashlimit: size too large, truncated to 1048576 [ 57.163146][ T2588] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 57.391076][ T2609] loop5: detected capacity change from 0 to 256 [ 57.397685][ T2607] capability: warning: `syz.0.821' uses deprecated v2 capabilities in a way that may be insecure [ 57.397848][ T2609] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.437647][ T2614] input: syz0 as /devices/virtual/input/input11 [ 57.465450][ T2616] loop5: detected capacity change from 0 to 512 [ 57.473857][ T2616] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 57.482046][ T28] audit: type=1400 audit(1746801839.520:1079): avc: denied { create } for pid=2620 comm="syz.0.826" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.482548][ T2616] EXT4-fs (loop5): 1 truncate cleaned up [ 57.509854][ T2616] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 57.511101][ T2621] tmpfs: Unknown parameter 'rootcon’' [ 57.519130][ T28] audit: type=1400 audit(1746801839.560:1080): avc: denied { mounton } for pid=2620 comm="syz.0.826" path="/174/file0" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.533083][ T367] Bluetooth: hci0: command 0x1003 tx timeout [ 57.563110][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.570218][ T28] audit: type=1400 audit(1746801839.610:1081): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.573347][ T2616] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 57.617197][ T2616] EXT4-fs (loop5): Remounting filesystem read-only [ 57.627487][ T2626] EXT4-fs (loop5): shut down requested (1) [ 57.667416][ T1401] EXT4-fs (loop5): unmounting filesystem. [ 57.794701][ T2639] loop0: detected capacity change from 0 to 128 [ 57.796308][ T2637] loop4: detected capacity change from 0 to 4096 [ 57.813664][ T28] audit: type=1400 audit(1746801839.860:1082): avc: denied { shutdown } for pid=2643 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.847528][ T2637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.927501][ T2655] loop3: detected capacity change from 0 to 128 [ 57.947024][ T290] EXT4-fs (loop4): unmounting filesystem. [ 57.977611][ T2655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.007930][ T2655] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.040460][ T290] ------------[ cut here ]------------ [ 58.044874][ T28] audit: type=1400 audit(1746801840.090:1083): avc: denied { create } for pid=2654 comm="syz.3.840" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.046148][ T290] WARNING: CPU: 0 PID: 290 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 58.096156][ T290] Modules linked in: [ 58.100069][ T290] CPU: 0 PID: 290 Comm: syz-executor Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 58.110025][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.120235][ T290] RIP: 0010:drop_nlink+0xc5/0x110 [ 58.125334][ T290] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 73 ee f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 99 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 58.145146][ T290] RSP: 0018:ffffc9000da9fc38 EFLAGS: 00010293 [ 58.151253][ T290] RAX: ffffffff81c34d55 RBX: ffff888121395ec0 RCX: ffff88810ba6bcc0 [ 58.159321][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.167351][ T290] RBP: ffffc9000da9fc60 R08: 0000000000000004 R09: 0000000000000003 [ 58.175382][ T290] R10: fffff52001b53f78 R11: 1ffff92001b53f78 R12: dffffc0000000000 [ 58.183500][ T290] R13: 1ffff11024272be1 R14: ffff888121395f08 R15: 0000000000000000 [ 58.191500][ T290] FS: 0000555574c8c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 58.200499][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.207148][ T290] CR2: 0000001b32a1fffc CR3: 00000001313aa000 CR4: 00000000003526b0 [ 58.215257][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.223971][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.231983][ T290] Call Trace: [ 58.235374][ T290] [ 58.238331][ T290] shmem_rmdir+0x5b/0x90 [ 58.242605][ T290] vfs_rmdir+0x393/0x500 [ 58.246904][ T290] incfs_kill_sb+0x105/0x220 [ 58.251533][ T290] deactivate_locked_super+0xb5/0x120 [ 58.256968][ T290] deactivate_super+0xaf/0xe0 [ 58.261680][ T290] cleanup_mnt+0x45f/0x4e0 [ 58.266170][ T290] __cleanup_mnt+0x19/0x20 [ 58.270617][ T290] task_work_run+0x1db/0x240 [ 58.275256][ T290] ? __cfi_task_work_run+0x10/0x10 [ 58.280427][ T290] ? __x64_sys_umount+0x125/0x160 [ 58.285513][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 58.290914][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 58.296161][ T290] exit_to_user_mode_prepare+0x5a/0xa0 [ 58.301648][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 58.307150][ T290] do_syscall_64+0x58/0xa0 [ 58.311594][ T290] ? clear_bhb_loop+0x15/0x70 [ 58.316307][ T290] ? clear_bhb_loop+0x15/0x70 [ 58.321027][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.327031][ T290] RIP: 0033:0x7fa6c358fc97 [ 58.331457][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 58.351111][ T290] RSP: 002b:00007ffde1e26bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 58.359579][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa6c358fc97 [ 58.367594][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1e26c90 [ 58.375608][ T290] RBP: 00007ffde1e26c90 R08: 0000000000000000 R09: 0000000000000000 [ 58.383647][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde1e27d20 [ 58.391636][ T290] R13: 00007fa6c361089d R14: 000000000000e286 R15: 00007ffde1e27d60 [ 58.399634][ T290] [ 58.402655][ T290] ---[ end trace 0000000000000000 ]--- [ 58.408823][ T290] ================================================================== [ 58.409638][ T289] EXT4-fs (loop3): unmounting filesystem. [ 58.416900][ T290] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 58.416936][ T290] Write of size 4 at addr 0000000000000170 by task syz-executor/290 [ 58.416952][ T290] [ 58.416958][ T290] CPU: 0 PID: 290 Comm: syz-executor Tainted: G W 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 58.416981][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.416992][ T290] Call Trace: [ 58.416999][ T290] [ 58.417006][ T290] __dump_stack+0x21/0x24 [ 58.471213][ T290] dump_stack_lvl+0xee/0x150 [ 58.475840][ T290] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.480889][ T290] ? ihold+0x20/0x60 [ 58.484827][ T290] ? ihold+0x20/0x60 [ 58.488732][ T290] print_report+0x3d/0x60 [ 58.493069][ T290] kasan_report+0x122/0x150 [ 58.497569][ T290] ? ihold+0x20/0x60 [ 58.501467][ T290] kasan_check_range+0x280/0x290 [ 58.506402][ T290] __kasan_check_write+0x14/0x20 [ 58.511341][ T290] ihold+0x20/0x60 [ 58.515088][ T290] vfs_rmdir+0x25f/0x500 [ 58.519334][ T290] incfs_kill_sb+0x105/0x220 [ 58.523942][ T290] deactivate_locked_super+0xb5/0x120 [ 58.529311][ T290] deactivate_super+0xaf/0xe0 [ 58.533986][ T290] cleanup_mnt+0x45f/0x4e0 [ 58.538405][ T290] __cleanup_mnt+0x19/0x20 [ 58.542824][ T290] task_work_run+0x1db/0x240 [ 58.547500][ T290] ? __cfi_task_work_run+0x10/0x10 [ 58.552613][ T290] ? __x64_sys_umount+0x125/0x160 [ 58.557636][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 58.563007][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 58.568291][ T290] exit_to_user_mode_prepare+0x5a/0xa0 [ 58.573748][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 58.579203][ T290] do_syscall_64+0x58/0xa0 [ 58.583617][ T290] ? clear_bhb_loop+0x15/0x70 [ 58.588288][ T290] ? clear_bhb_loop+0x15/0x70 [ 58.593049][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.598948][ T290] RIP: 0033:0x7fa6c358fc97 [ 58.603360][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 58.622960][ T290] RSP: 002b:00007ffde1e26bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 58.631373][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa6c358fc97 [ 58.639425][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1e26c90 [ 58.647411][ T290] RBP: 00007ffde1e26c90 R08: 0000000000000000 R09: 0000000000000000 [ 58.655377][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde1e27d20 [ 58.663361][ T290] R13: 00007fa6c361089d R14: 000000000000e286 R15: 00007ffde1e27d60 [ 58.671360][ T290] [ 58.674412][ T290] ================================================================== [ 58.682617][ T290] Disabling lock debugging due to kernel taint [ 58.695045][ T290] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 58.702876][ T290] #PF: supervisor write access in kernel mode [ 58.708976][ T290] #PF: error_code(0x0002) - not-present page [ 58.714973][ T290] PGD 13387d067 P4D 13387d067 PUD 0 [ 58.720282][ T290] Oops: 0002 [#1] PREEMPT SMP KASAN [ 58.725501][ T290] CPU: 1 PID: 290 Comm: syz-executor Tainted: G B W 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 58.737044][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.747113][ T290] RIP: 0010:ihold+0x26/0x60 [ 58.751667][ T290] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 90 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1 [ 58.771277][ T290] RSP: 0018:ffffc9000da9fc78 EFLAGS: 00010246 [ 58.777341][ T290] RAX: ffff88810ba6bc00 RBX: 0000000000000000 RCX: ffff88810ba6bcc0 [ 58.785305][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.793294][ T290] RBP: ffffc9000da9fc88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 58.801261][ T290] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff888121395ecc [ 58.809228][ T290] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 58.817199][ T290] FS: 0000555574c8c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 58.826122][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.832711][ T290] CR2: 0000000000000170 CR3: 00000001313aa000 CR4: 00000000003526a0 [ 58.840678][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.848641][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.856779][ T290] Call Trace: [ 58.860062][ T290] [ 58.862986][ T290] vfs_rmdir+0x25f/0x500 [ 58.867231][ T290] incfs_kill_sb+0x105/0x220 [ 58.871817][ T290] deactivate_locked_super+0xb5/0x120 [ 58.877184][ T290] deactivate_super+0xaf/0xe0 [ 58.881867][ T290] cleanup_mnt+0x45f/0x4e0 [ 58.886320][ T290] __cleanup_mnt+0x19/0x20 [ 58.890753][ T290] task_work_run+0x1db/0x240 [ 58.895379][ T290] ? __cfi_task_work_run+0x10/0x10 [ 58.900494][ T290] ? __x64_sys_umount+0x125/0x160 [ 58.905522][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 58.910902][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 58.916095][ T290] exit_to_user_mode_prepare+0x5a/0xa0 [ 58.921638][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 58.927092][ T290] do_syscall_64+0x58/0xa0 [ 58.931529][ T290] ? clear_bhb_loop+0x15/0x70 [ 58.936197][ T290] ? clear_bhb_loop+0x15/0x70 [ 58.940987][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.946885][ T290] RIP: 0033:0x7fa6c358fc97 [ 58.951406][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 58.971017][ T290] RSP: 002b:00007ffde1e26bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 58.979426][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa6c358fc97 [ 58.987477][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1e26c90 [ 58.995446][ T290] RBP: 00007ffde1e26c90 R08: 0000000000000000 R09: 0000000000000000 [ 59.003411][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde1e27d20 [ 59.011376][ T290] R13: 00007fa6c361089d R14: 000000000000e286 R15: 00007ffde1e27d60 [ 59.019365][ T290] [ 59.022392][ T290] Modules linked in: [ 59.026294][ T290] CR2: 0000000000000170 [ 59.030437][ T290] ---[ end trace 0000000000000000 ]--- [ 59.035898][ T290] RIP: 0010:ihold+0x26/0x60 [ 59.040409][ T290] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 90 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1 [ 59.060011][ T290] RSP: 0018:ffffc9000da9fc78 EFLAGS: 00010246 [ 59.066077][ T290] RAX: ffff88810ba6bc00 RBX: 0000000000000000 RCX: ffff88810ba6bcc0 [ 59.074219][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.082183][ T290] RBP: ffffc9000da9fc88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 59.090348][ T290] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff888121395ecc [ 59.098313][ T290] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 59.106274][ T290] FS: 0000555574c8c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 59.115200][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.121788][ T290] CR2: 0000000000000170 CR3: 00000001313aa000 CR4: 00000000003526a0 [ 59.129844][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.137919][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.145903][ T290] Kernel panic - not syncing: Fatal exception [ 59.152212][ T290] Kernel Offset: disabled [ 59.156524][ T290] Rebooting in 86400 seconds..