last executing test programs: 9.008292501s ago: executing program 1 (id=816): socket(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1, 0x0, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.692341057s ago: executing program 1 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x2a, 0x66, 0x40, 0x3da, 0x2820, 0x523c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0x4, 0x1, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x5}, [@mdlm={0x15}, @mdlm={0x15}]}]}}]}}]}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x3f, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r4}, 0x38) 8.315756799s ago: executing program 2 (id=820): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x0, 0x0, 0x0, 0x10}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f00000005c0)}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.415588034s ago: executing program 2 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.957722231s ago: executing program 1 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = epoll_create1(0x0) r5 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000040)={0x20000006}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 6.957448032s ago: executing program 2 (id=826): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000f1ee09040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, 'Cc'}, @main, @global=@item_012={0x2, 0x1, 0x2, "44b7"}]}}, 0x0}, 0x0) 5.273129552s ago: executing program 0 (id=832): socket$igmp6(0xa, 0x3, 0x2) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$eJzs3MtrXNUfAPDvvUnapo9f8qvPPrSjVQyKTZM+Fy6sKHQjCIrUZUzSUpu20kRoS7BRpIILpX+Bj53gX+BKN6LiQnGruBWhSDatLmTkztwbZzozeXWSaZPPB6Y9595z7znn3nuS85ibANatUvZPErE1In6JiL5qtD5Bqfrfzdnp0b9mp0eTKJdf/jOppLsxOz1aJC2O25JHBtKI9L0kdjXJd/LS5TMjExPjF/L44FSah86OnBo/NX5u+OjRgwd6jxwePtSWemZlurHz7fO7dxx/7dqLoyeuvf7dF1l5y/n+2npU9S8xh66GLaUo1V/LGo8v8ex3um014aQ7+zftXGFYtOypzW5XT6X995VzlX198cK7RboNnSwksCKyxr6xYevc77KZcq0kqR4ArBGJJg3rVPGL/sZsNlKdHm0cBzfR3dYuSEddPxaVCmX1vpl/qnu6KyPYUn91bNSzQvnfGxEnZv7+OPtE03kIAID2+upYxOa831F8qnvSuL8m3f/yWaH+iPh/RGyPiHvy/st9EZW0D0TEgzXHJPl60nxKt8Qb+z8/9eaB2u5q22T9v2fyta36/t/c+kV/Vx7bVql/T3Ly9MT4/vyaDETPxiw+1HjquWm1r5//+aNW+Zdq+n/ZJ8u/6Avm5fij+5YJurGRqZHbrXfh+juVC3ulsf5JdCdFKGJHROxcxvmza3b6yc93t9pfV/+sng31/7D1ydswDil/GvFE9f7PxC31j3zdI6msT559c3Dy0uWnT9euTw4dOTx8aHBTTIzvHyyeikbf/3j1pTzYMIxY+P6vrOz+b276/M+tXPYnteu1k0vP4+qv77cc0yz3+d+QvFIJF+tSF0empi4MRWxIZhq3D/937MWR3rr0Wf0H9jZv/9sj/vkkP25XRGQP8UMR8XBE7MnL/khEPBoRe+ep/7fPPfZGqyHknXD/x5Z0/1sFnv0hovmurjPffNmQ8QelRdY/u/8HK6GBfMvYyNSmheo1X0lrA7d9AQEAAOAusCcitkaS7svnOLdGmu7bF7FlbgZlcuqpk+ffOjdWfUegP3rSYqarr2Y+dCifG87i2VHDNfFs/4HKvHG5XC73ZvFs/D6xrbNVh3VvS4v2n/m98ZUWYK1Z0jpaqzfagLvS8tfR2/+FDGB1raHv8wNLpP3D+rXo9r9Sb8EBHdOs/V+JuNmBogCrrFn7f7UD5QBWn/E/rF/aP6xbC75MC6xJi3pJfhmB7cfnSZN0r0ymrQNp1G3JfuLV/RWA/ogicfEFx/lP+Fsa0Z4SdrW1pr119zRtmmZTtCOvSBdM072EP8SwuoH0zihGNbAxIhZ4eucetitF4PJKF6zSCD7r7E8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2/dvAAAA//+lFtmI") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x5a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @val, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x3, 0x9, 0x4c, 0x0, 0x0, 0x7f, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ssrr={0x89, 0x3, 0x46}, @lsrr={0x83, 0x1b, 0x0, [@rand_addr, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @private=0xa010102]}, @end, @end, @timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0xe, [{@remote, 0x6}]}]}}, {0x0, 0x4, 0x0, @local, "5ccfcea7"}}}}}, 0x0) 5.272850282s ago: executing program 1 (id=833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)="ed", 0x1}, {0x0}], 0x2}}], 0x1, 0x4048841) close(0x3) 5.272695182s ago: executing program 3 (id=835): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085200000d0b3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.272412812s ago: executing program 4 (id=836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) r3 = eventfd(0x0) dup3(r3, r2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f0000001f40)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) 5.259422173s ago: executing program 3 (id=837): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 5.239434475s ago: executing program 1 (id=838): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.223251446s ago: executing program 3 (id=839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002040)=ANY=[@ANYBLOB="010000000000c001900d"]) 5.109095266s ago: executing program 3 (id=840): syz_mount_image$exfat(&(0x7f00000013c0), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000000500)=ANY=[@ANYBLOB='discard,umask=00000000000000000000004,fmask=00000000000000000000267,namecase=1,discard,errors=continue,umask=00000000000000000200001,umask=00000000000000000000005,utf8,umask=00000000000000000000040,allow_utime=00000000000000000000002,umask=00000000000000000005454,dmask=00000000000000000000011,euid=', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=iocharset,dont_measure,uid>', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,mask=MAY_APPEND,obj_role=subj_user,fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c00ad690a9c3c0fd725a501b1e42f02b2a3606fcbe5518c06cd0600000059494e882f66010d856fbea9ae171d9f159ec20076e9226f3554652809b77617857a7456198ec185d264543b43f0"], 0x21, 0x14fb, &(0x7f0000003f40)="$eJzs3AvUjdXWOPA511oPL0k7yX3NNR92erFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5IkvUkSkluy/kOn8+mczvfvO993vmGM752/MZ5hzf3suZ659tzD8zz7HXt/12FQlXpVK9ZhZvgfwb/+0xUAUgCgLwBcAwARAJTMVjLbpf2ZNHb9nx1E/Hs9OPVKVyCuJOl/+ib9T9+k/+mb9D99k/6nb9L/9E36n75J/4VIz7ZOy32tbOl3k8//0zM5//8fklZ09Ffri17f8V9Ikf6nb9L/9E36n75J/9M36X/6Jv1P36T/6Zv0X4j07L//2bH87eD/wnal339CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIdKHs+EyAwB/G1/puoQQQgghhBBCCPHvEzJe6QqEEEIIIYQQQgjxvw9BgQYDEWSAjJACmSAzXAVZ4GrICtdAAq6FbHAdZIfrIQfkhFyQG/JAXsgHFggcMMSQHwpAEm6AgnAjpEIhKAxFwENRKAY3QXG4GUrALVASboVScBuUhjJQFsrB7VAe7oAKcCdUhLugElSGKlAV7oZqcA9Uh3uhBtwHNeF+qAUPQG34C9SBB6EuPAT14GGoD49AA2gIjaAxNPlv5b8IL8HL0Bm6QFfoBt2hB/SEXtAb+kBfeAX6Qcpvr81AGASvw2B4A4bAmzAUhsFweAtGwEgYBaNhDIyFcfA2jId3YAK8CxNhEkyGKTAVpsF0eA9mwEyYBe/DbPgA5sBcmAfzYQF8CAthESyGj2AJfAxLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlvhE9gG22EH7IRdsBv2wKewFz6DffA57Icv/sX8M/+Q3xEBARUqNGgwA2bAFEzBzJgZs2AWzIpZMYEJzIbZMDtmxxyY48ZcmAvzYB7Mh/mQkJCRMT/mxyQmsSAWxFRMxcJYGD16LIbFsDjejCWwBJbEklgKS2FpLINlsByWw/JYHitgBayIFbESVsIqWAXvxrvxHqyO1bEG1sCaWBNrYS1My1sb62AdrIt1sR7Ww/pYHxtgA2yEjbAJNsGm2BSbYTNsgS2wJbbEVtgKW2NrbINtsC22xXbYDttje+yAHbAjvoAv4Iv4Ir6ML2MXrKS6YXfsjj2xJ/bGPtgHX8F++Cq+iq/hAByIg/B1fB3fwCF4GofiMByOw7G8GomjcDSyGovjcByOx/E4ASfgRJyEk3AKTsVpOB2n4wyciTPxfZyNH+AHOBfn4nxcgAtwIS7CxbgYl+AZXIrLcDmuwJW4ClfiGlyLa3A9bsD1uAk34Rbcgp/gJ7gdt+NO3Im70QDgp/gZfoYDcD/uxwN4AA/iQTyEhzAN0/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexfN4Hi/gc3m+qbu70LoBoC4xyqgMKoNKUSkqs8qssqgsKqvKqhIqobKpbCq7yq5yqBwql8ql8qg8Kp86p0iRYhWr/Cq/SqqkKqgKqlSVqgqrwsorr4qpYqq4Kq5KqBKqpLpVlVK3qdKqjGruy6lyqrxq4SuoO1VFVVFVUpVVFVVVVVXVVDVVXVVXNVQNVVPVVLXUA6q26oa98UF1qTP11ECsrwZhA9VQNVKN1Rv4qGqqhmAz1Vy1UI+rYTgUW6mmvrV6SrVRo7CtekaNxmdVezUWO6jnVUf1guqkXlQvqWa+s+qiJmI31V1NwZ6ql+qt+qgZWFld6lgV9ZoaoAaqQep1NR/fUEPUm2qoGqaGq7fUCDVSjVKj1Rg1Vo1Tb6vx6h01Qb2rJqpJarKaoqaqaWq6ek/NUDPVLPW+mq0+UHPUXDVPzVcL1IdqoVqkFquP1BL1sVqqlqnlaoVaqVap1WqNWqvWqfVqg9qoNqnNaovaqj5R29R2tUPtVLvUbrVHfar2qs/UPvW52q++UAfUl+qg+kodUl+rNPWNOqy+VUfUd+qo+l4dUz+o4+qEOql+VKfUT+q0OqPOqnPqvPpZXVC/qIsqKNColdba6Ehn0Bl1is6kM+urdBZ9tc6qr9EJfa3Opq/T2fX1OofOqXPp3DqPzqvzaatJO8061vl1AZ3UN+iC+kadqgvpwrqI9rqoLqZv0sX1zbqEvkWX1LfqUvo2XVqX0WV1OX27Lq/v0BX0nbqivktX0pV1FV1V362r6Xt0dX2vrqHv0zX1/bqWfkDX1n/RdfSDuq5+SNfTD+v6+hHdQDfUjXRj3UQ/qpvqx3Qz3Vy30I/rlvoJ3Uo/qVvrp3Qb/bRuq5/R7fSzur1+TnfQz+uO+gXdSf+iL+qgO+suuqvuprvrHrqn7qV76z66r35F99Ov6v76NT1AD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYPU6/rcfrd/QE/a6eqCfpyXqKnqqn6d6/zTTrv5D/zj/J7//r0bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CGdptP0YX1YH9FH9FF9VB/Tx/RxfUKf0z/qU/onfVqf0Wf0OX1en9cXfnsNwKBRRhtjIpPBZDQpJpPJbK4yWczVJqu5xiTMtSabuc5kN9ebHCanyWVymzwmr8lnrCHjDJvY5DcFTNLcgL+dNE1hU8R4U9QUMzf9K/mmoLnRpJpCf5f/Z/U1MU1MU9PUNDPNTAvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJvGReMp1NZ9PVdDXdTQ/T0/QyvU0f09e8YvqZfqa/6W8GmAFmkBlkBpvBZogZYoaaoWa4GW5GmBFmlBllxpgxZpwZZ8ab8WaCmWAmmolmsplsppqpZrqZbmaYGWaWmWVmm9lmjplj5pl5ZoFZYBaahWaxWWyWmCVmqVlmlpkVZoVZZVaZNWaNWWfWmQ1mg9lkNpmlGbearWab2WZ2mB1ml9ll9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplDJs2kmcPmsDlijpij5qg5Zo6Z4+a4OWlOmlPmlDltTpuz5qw5b86bC+aCuWguXrrsi1SkIhOZKEOUIUqJUqLMUeYoS5QlyhpljRJRIsoWZYuyR9dHOaKcUa4od5Qnyhvli2xEkYs4iqP8UYEoGd0QFYxujFKjQlHhqEjko6JRseimqHh0c1QiuiUqGd0alYpui0pHZaKyUbno9qh8dEdUIbozqhjdFVWKKkdVoqrR3VG16J6oenRvVCO6L6oZ3R/Vih6Iakd/iepED0Z1o4eietHDUf3okahB1DBqFDWOmvxb5w/hdM7HfGfbxXa13Wx328P2tL1sb9vH9rWv2H72VdvfvmYH2IF2kH3dDrZv2CH2TTvUDrPD7Vt2hB1pR9nRdowda8fZt+14+46dYN+1E+0kO9lOsVPtNDvdvmdn2Jl2ln3fzrYf2Dl2rp1n59sF9kO70C6yi+1Hdon92C61y+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8VutZ/YbXa73WF32l12t91jP7V77Wd2n/3c7rdf2AP2S3vQfmUP2a9tmv3GHrbf2iP2O3vUfm+P2R/scXvCnrQ/2lP2J3vanrFn7Tl73v5sL9hf7EUbLl3cXzq9kyFDGSgDpVAKZabMlIWyUFbKSglKUDbKRtkpO+WgHJSLclEeykP5KB9dwsSUn/JTkpJUkApSKqVSYSpMnjwVo2JUnIpTCSpBJakklaJSVJpKU1kqS7fT7XQH3UF30p10F91FlakyVaWqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDagBNaJG1ISaUFNqSs2oGbWgFtSSWlIrakWtqTW1oTbUltpSO2pH7ak9daAO1JE6UifqRC/RS9SZOlNX6krdqTv1pJ7Um3pTX+pL/agf9af+NIAG0CAaRINpMA2hITSUhtFweotG0EgaRaNpDI2lcTSOxtN4mkATaCJNpMk0mabSVJpO02kGzaBZNItm02yaQ3NoHs2jBbSAFtJCWkyLaQktoaW0lJbTclpJK2k1raa1tJbW03raSBtpM22mrbSVttE22kE7aBftoj20h/bSXtpH+2g/7acDdIAO0kE6RIcojdLoMB2mI3SEjtJROkbH6Dgdp5N0kk7RKTpNp+ksnaXz9DNdoF/oIgVKcZlcZneVy+KudlndNe4f41wut8vj8rp8zrocLuffxeScS3WFXGFXxHlX1BVzN7nUS7dUv4tLuzKurCvnbnfl3R2uwh/iau4eV93d62q4+1xVd/ffxTXd/a6We9jVdo+4Oq6hq+sau3ruYVffPeIauIaukWvsWronXCv3pGvtnnJt3NN/iBe6RW6tW+fWuw1ur/vMnXXn3BH3nTvvfnadXRfX173i+rlXXX/3mhvgBv4hHu7eciPcSDfKjXZj3Ng/xJPdFDfVTXPT3Xtuhpv5h3iB+9DNdovdHDfXzXPzf40v1bTYfeSWuI/dUrfMLXcr3Eq3yq12a/6j1hVuk9vstrg97lO3zW13O9xOt8vt/jW+tI597nO3333hDrtv3UH3lTvkjro0982v8aX1HXXfu2PuB3fcnXAn3Y/ulPvJnXZnfl3/pbX/6H5xF11wwMiKNRuOOANn5BTOxJn5Ks7CV3NWvoYTfC1n4+s4O1/POTgn5+LcnIfzcj62TOyYOeb8XICTfAMX5Bs5lQtxYS7CnotyMb6Ji/PNXIJvufSu4FJ8G5fmMlyWy/HtXJ7v4Ap8J1fku7gSV+YqXJXv5mp8D1fne7kG38c1+X6uxQ9wbf4L1+EHuS4/xPX4Ya7Pj3ADbsiNuDE34Ue5KT/Gzbg5t+DHuSU/wa34SW7NT3Ebfprb8jPcjp/l9vwcd+DnuSO/wJ34RX6JX+bO3IW7cjfuzj24J/fi3tyH+/Ir3I9f5f78Gg/ggTyIX+fB/AYP4Td5KA/j4fwWj+CRPIpH8xgey+P4bR7P7/AEfpcn8iSezFN4Kk/j6fwez+CZPIvf59n8Ac/huTyP5/MC/pAX8iJezB/xEv6Yl/IyXs4reCWv4tW8htfyOl7PG3gjb+LNvIW38ie8jbfzDt7Ju3g37+FPeS9/xvv4c97PX/AB/pIP8ld8iL/mNP6GD/O3fIS/46P8PR/jH/g4n+CT/COf4p/4NJ/hs3yOz/PPfIF/4YscGGKMVaxjE0dxhjhjnBJnijPHV8VZ4qvjrPE1cSK+Ns4WXxdnj6+Pc8Q541xx7jhPnDfOF9uYYhdzHMf54wJxMr4hLhjfGKfGheLCcZHYx0XjYvFNcfH45rhEfEtcMr41LhXfFpeOy8QP31cuvj0uH98RV4jvjCvGd8WV4spxlbhqfHdcLb4nrh7fG9eI74tLxPfHteIHYvjt+yp144fievHDcf34kbhB3DBuFDeOm8SPxk3jx+JmcfO4Rfx43DJ+Im4VPxm3jp+K28RP/+n+rnG3uHvcI+4Rh3Cvnpecn1yQ/DC5MLkouTj5UXJJ8uPk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklmQIVTOCR6+89sZHPoPP6FN8Jp/ZX+Wz+Kt9Vn+NT/hrfTZ/nc/ur/c5fE6fy+f2eXxen89bT9559rHP7wv4pL/BF/Q3+lRfyBf2Rbz3RX0x39g38U18U/+Yb+ab+xb+cf+4f8I/4Z/0T/qnfBv/tG/rn/Ht/LO+vX/OP+ef9x39C76Tf9G/5F/2nX0X39V39d19d9/T9/S9fW/f1/f1/Xw/39/39wP8AD/ID/KD/WA/xA/xQ/1QP9wP9yP8CD/Kj/Jj/Bg/zo/z4/14P8FP8BP9RD/ZT/ZT/VQ/3U/3M/wMP8vP8rNTZ/s5fo6f5+f5BX6BX+gX+sV+sV/il/ilfqlf7pf7lX6lX+1X+7V+rV/v1/uNfqPf7Df7rX6r3+a3+R1+h9/ld/k9fo/f6/f6fX6f3+/3+wP+gD/oD/pD/muf5r/xh/23/oj/zh/13/tj/gd/3J/wJ/2P/pT/yZ/2Z/xZf86f9z/7C/4Xf9EHPy7xdmJ84p3EhMS7iYmJSYnJiSmJqYlpiemJ9xIzEjMTsxLvJ2YnPkjMScxNzEvMTyxIfJhYmFiUWJz4KLEk8XFiaWJZYnliRWJlYlUihLzb4pA/FAjJcEMoGG4MqaFQKByKBB+KhmLhplA83BxKhFtCyXBrKBVuC6VDmVA2PBIahIahUWgcmoRHQ9PwWGgWmocW4fHQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dDxb3dc4eXQOXQJXUO30D30CD1Dr9A79Al9wyuhX3g19A+vhQFhYBgUXg+DwxthSHgzDA3DwvDwVhgRRoZRYXQYE8aGceHtMD68EyaEd8PEMClMDlPC1DAtTA/vhRlhZpgV3g+zwwdhTpgb5oX5YUH4MCwMi8Li8FFYEj4OS8OysDysCCvDqrA6rAlrw7qwPmwIG8OmsDlsCVvDJ2Fb2B52hJ1hV9gd9oRPw97wWdgXPg/7wxfhQPgyHAxfhUPh65AWvgmHw7fhSPguHA3fh2Phh3A8nAgnw4/hVPgpnA5nwtlwLpwPP4cL4ZdwUb6zJoQQQgjxX9LjT/Z3+yePGQBQv427A8DV23On/X6/BoCNOf467qXytEwAwFNdOjz4t61Spa5du/723KUaogJzASDxDwf4LV4GLeAJaA3Nofg/ra+XeuE8/8n8yVsBMv8uJwUux5fn//I/mf/Rx4cvLBWfzfb/mX8uQGqByzmZ4HK8DFpcWg00hxL/yfw5m/5J/Zm+GgfQ7Hc5WeByfLn+YvAYPA2t/+6ZQgghhBBCCCHEX/VSZdv92f3zpfvzPOZyTka4HP/Z/bkQQgghhBBCCCGuvGdf6PTko61bN28nAxnIQAb/MbjS/zMJIYQQQggh/t0uX/RffizTlSxICCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIh373o1+ZAOB/5efErvQahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvt/wUAAP//NMsy+Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x101bf) 4.337969299s ago: executing program 4 (id=841): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000, 0x5}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 4.312861282s ago: executing program 0 (id=842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 4.225208209s ago: executing program 0 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') r6 = socket$inet6(0xa, 0x2, 0x3a) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7777d401", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x0) read$FUSE(r5, &(0x7f00000039c0)={0x2020}, 0x205d) 4.21035093s ago: executing program 3 (id=844): ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000900000005f7a312d9563"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.876531828s ago: executing program 2 (id=845): socket$inet6(0xa, 0x2, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000580)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000009000000000000000000000c00000000000000000000000e00000000000000000000000000000000007d35f2cdaf5c1f29284684416298a89c6cb33c666882584585b0ba28118dbc28e8b92c2007628a91fa864ee7820d0aa17e5ff5097e9d61bdcc109afc97abeb08383b1a1a11e3f433b6e4cc39b9b0636b7d11ff8dfcb06dc80a1b8b273f5b61c0aa9fd532fb44ff4601d0ea9dbf4df87e"], 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x6, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3.819308743s ago: executing program 4 (id=846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 3.73429012s ago: executing program 4 (id=847): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010280)='./mnt\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="70726a6a71756f74613d6469474fcc8aeef1a88273636172642c7265736769643d", @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x10212, &(0x7f0000020500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x5000f8) 3.402985457s ago: executing program 0 (id=848): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.331825633s ago: executing program 0 (id=849): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xffffffffffffff84, &(0x7f00000001c0)=""/94}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) io_uring_setup(0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r4, 0x3, &(0x7f0000000900)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r3, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0xb, r0, &(0x7f0000000300)='~', 0x1, 0x8923, 0x0, 0x1, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x0, 0x0, 0xb7669f7, 0x0, 0x0, r0}]) 3.330861604s ago: executing program 4 (id=850): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) chdir(&(0x7f0000000300)='./cgroup\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x90, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000380)='./cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x1059}, 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x0, 0x7, 0x3, 0x8}, {0x1, 0x2c, 0x9, 0xae000000}, {0x6, 0x60, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) 3.029595938s ago: executing program 2 (id=851): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007f00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) 5.36093ms ago: executing program 2 (id=852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) r3 = eventfd(0x0) dup3(r3, r2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f0000001f40)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) 5.2231ms ago: executing program 3 (id=853): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @loopback}, &(0x7f0000000380)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1970024, &(0x7f0000000840)=ANY=[@ANYBLOB=',mode=0']) unshare(0x40020000) 4.93949ms ago: executing program 4 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 763.82µs ago: executing program 0 (id=862): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000ecffffff0072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x55af, &(0x7f0000006a40)="$eJzs3M+PE+UbAPBnuiy/v3yJ8eCNSYjJbkI3dPkRPYkKUYkQ4o+DJ+1uS1PY7my2paycOHg0HvxPjCaePPo3eNCjHkyMB42JBxNM550lFBAE2l1ZPp9k+sw88/aZ9x3IJs9M0gCeWYfzP37L4lDsi4iZiDiYRbmfVVvEzYgzaewLEXEkImp3bFmVv53YHRH7I+LQqHiqmVWnPj82PHrq1/O/f/Pdnl0Hvvj6+21dOLCtXoyI3lrav95LseiU4dZMlW8Ou2XsnRxWcW2sRq9I+evtpbLC9ebmuGYZT3TS+GLtWn8UL680l0ex071c5tdW0wX7w85mndEX8ivN9fK41V4qY7dflLFzI11340b623ajP0h1WlW9j8vyMRhsxpRvb7TTetaulnF5dVDlU92i1d4YxWEVq8vFcrHSKuex9Lh3+b/v7e7qtY182F7vd4vV/NRC46WFxul6Y71otQftk/Vmr3X6ZD7XWRkNqw/azd6ZTlF0VtoLy0VvPp/rLC/XG4187mx7qdtczRuNhRMLx+un5qu9Y/kbF9/PV1r53Ci+1l29Nuiu1OJysZ6nb8zniwsnXp7Pjzbydy9cyi+9c+7chUvvfXj2g4uvXnjr9WrQPdPK5xaPLy7WG8fri435p279/fxR1h93rP+TatKPsP6siufH0z/+8GS3DZJsuycA8PS5p/+Pu/v/0P8DE/eA/j+uPKT/712tjqfT/8d9+//aeP8fk+z/Ry2V/v/h/W9tG/rf2Xi2+/8pP/+AJ/J4/f/uic8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAt99Psl2+WO4fT8YEq/78q9Vx1nEVELSJu3cdM7B6rOVPVmf2H8bN3zeHbLMoKo2vsqbb9EXGm2v76/7TvAgAAAOxcX9088lnq1tNH9Qjgrm6eHSr9M9cOfjShellEzB7+ZTLFauXn85Mplv5/74qNCVUrH2DtnVCx9Mht16Sq/SszY2HvHSFLobal0wEAALbEeCfwoC7k5pbMBwAAgGn59IFnX9myeTBFf/58by6LzVeZt1/570mheiG4b+wcAAAA8BTKtnsCAAAAwNSV/b/f/wMAAICdLf3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNzt3k5s4DAUA+CUQGOZHg0ZzoNnBMeYIs5wtXIUjcINKvQBnoFIXPUJbKhIXKS1ISDjQou+TYrADzzZk82zJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANClu2o5HZ0e5uZpc5occwEAAAD2W1fLaf1m3NS/pfYfqelXqhcRUUbEvty9F4NWzF6KUx34fPVmDLcRdYRt+zBdXyPiT7oef3b9KwAAAMD1Ws0XkyZbb4q0BHB/zHeHnY6MM2gWbcrvfzPFKyKiGj9kilZui9+ZgtXPdz/+Z4pWL2B9yRSsWXLr7783yNVJW6/18jqTWf0n1rWym34BAIBLamcCB7IQAAAArsC/Sw+Ac3if2he7YrfPmHb104bgqFUDAAAAPqHi0gMAAAAAOlfn/x/p/L/C+X8AAACQXXP+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aV8vpar6YHLo/OzLO8+Y0+WYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDC/ryjQAiEQRjsXd+ZzP0PKw0aGptUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3f/k/MTXOJHOvjaXnkWTt1Ng6NfbOjaM/jK9fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+/bRvkGAPyxL3aTfr+IEFAkAqhIHWChqVtauiJEFTHwJyBFqVMCLoU0A60iqgywocxdEIwIIYHC1v+hcyN1KVuHDEFiYgi68517TgKJCrlzyecjvX4fny/vL1tRnnvPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKW2/Hy808TtKHyX5cHLu/vbqQ1pu76tTd9QczaUnjRsXjfgq8Un5yarq+gQAAAHB8JEV+HxEPWxtzad2czPL/VnFOmvN/+0w/LvL53Xn/5vbqeP7STJH///LzoxcGHU0mWT9po4tLve7ZvUMZO6IpjrxnDzxjLFv57NpLkr0hzffWnt9qZevZ+PrevXfbWXiiitECAE/iTFHnQfH3UFp36hwYAMfGWCnxLvL/ZLLeMQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUYWst/lfEjYiYGXscpza3Vxf2qyfiwczd9X65eOfOernNtIlWRCwu9bpnK5zL6CpW89bH871ed/nGzaqDUxGxz0u3D/fjST78vzynHRFDR06/uE87Hxyir13t7Anyj2dUu4YT6fwOPLkxdKSxZ8Hf2emr4wPQ6y63q1i6Zt5JHRM86qD47P1LDV7+cvBeVPirCACAY6GVlzQTfdjamEuPNaYidr4bzv9fK8UxlPfv3O4f6T8vcv+0PPrw4v1yX+X8v1PR/J4GsyvXPp29cfPWG0vX5q92r3Y/efNc563O+UsXLlyaza6VzC5G0xUTAAAA/oF2Xsr5f3Nq7/7/yVIcf7P/X87/P/um80W5r+Tg/H/8aGY52h7v/tU9EgAAgOOoPYiee/X33xr7nNFot+Pz+ZWV5U7/cfD8XP+x0uE+oRN5Kef/yVTdowIAAACqsLXWGNr/v1KK45D7/////qUfy20m2f8HiOsR0T2zcL13pbrpjLQqvqicddSue6YAAADUZSIv5f3/Vnb/f3Nwy0MzIl4/HfFH/h3+OGT+n1z+6odyX+X7/89XOsvR05zur0dWT0eMTdc9IgAAAP7LxvOSJvu/tjbmPvrp5Ptt9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVO3PAAAA//9GWy0y") 0s ago: executing program 1 (id=855): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000004280)="77884dc7f999a59e5912c652cff4c7dc6a1b53b3154be35435b1d905e45841c6882fd75faebb374bdfd94d3a5cadb7cc0faf4b0a8bfc9c463432312c6289b2c7043e4f547757b47f95b3509e236f4c17e5b6846e5bab597ed9f815fdf2405d8fa1b2742094b8f01f03938f388558bd4974fbbf69bf1aed2723b830238c44911dfddc477d2361d4e686711d88b035de08ee6a767222eead82be9c6946a7b65bf2dd908088e606ec46b36f7ada1bd13c0b319433af9d35c60d643f3faa7c13032efe6d9d0bc113d9fb3a715cc8499fb480a506ea32e99bc66272f6d90b3a278f2c324a799c6fd122f8dd4ed93ec386bebae62b5a643581138afc531879e7c89158a467e548d89cf10f71938d410700b2d44e6fee923e4e7324108b37122cc082c8e45a75aa20250bdefe444b4f2ddb470fa49d6ee8e8eea6464352549f693f3e983f445c6db4f953b14f0699a4a9f91fe77927709ea9c84f6a37785874bc63f3a54b9374bc3039e0eab31ede46b44ce77a88753ce0976d9799bf09913434145eb073ed533dfcfcaf465f3a67efdf06d895ce17b71704024e21ebf427a7c37e916be3e08a71effdfebfd08bf6c9a6e871e53d7e7c8b912827794106010a64f20af92afe2a3e2f0e94a29f0c65090b1bd79336ab0b9a2866e7e79d68e7a2bd11bcdbffcb018aeda6a1e037c9b9663aba49a0c8d08cd01647152fce0eb55e4d62898fa83c224e657cff35bbae97bd16286a0c93be01d0b08bbc6d23bdd16ae87b2ae0aa94ac3e66ef3bca192bc197fb2d3b7c1568390ed8aa17a8928c7f07b0062f5a1c28d5a6c5e836dd501bbe19e9ace77bf0b50c352c03ffc213faef5e8b805a966fc7ee69384f66a87dfecb2768833f5dc19f478907138d169c8c23c39ff5136faa5fd5eb9cceb976720d43eee2ebe06d60bef8de3a9843e4789066ca7892cedcd31e6b2e6eb881e3d53b934b160f967722674fe61d497bd7b7e688e90a04771398b29e114382482b0dd03f8762223c7ff5ea67ea591d36b85ad02ff24d9d39d4707e292efbfd4c6d58bbf197d79b19aa46763d23799a28607ca10f611d95ad2630485873d7038dc89e48e8d02f896eba24dbecc0842c8a6375fb5914d11956687a31c9c2e48986f6de80861a099cfccfe794c696da2c51aec0f237fcbf8a596dc68f04a9e0fba3f5f76ccb438e6fc11686768d0a27d87333306994a5e27a058be3d5fee5d21e137155a03cf75e3d54a9065d592db8ac747734b410f8e7ea4b23b8374967af13f28b5ae7dc509ee605b70c1847bed94314fcc9c6adac2e20841fb2bc2cacd78d4a92eb113410c49879480343bc15f6bd23b95c2db04fae09b4e20b96237f1ffe342ff6962c3c35f17eff89d493367eda1b08349f04739bc1d2af6d492763e7086395f2c2c00ef8263208ec27952d314a1e37627f62b4166907fd8bd0e82d21785af9eb736bb6498f7beba5add4ea9bfe7dcecfa0524dc33a8399b94f1a1cce19ce2970da056430a8ad8d1485cbf129cb71235fc623432cc578fc9be81fb43c7c0d88787a5971b7082b223d53601bf0f52a7203acca18a617ff6953a8c4f287260d2fe1c827abce4c869949e4a5ae708e8b362f270b2472881eff3eb39cc01cf3768da2f54c0b252366618cf2452212c7bb8518d9ef8c57ce4021e0e1bf0ca61020651787e09659159c74d5bef158b0d6505d8cda70bf901e2fe90ff2adf5645d66a0b7275418d3ed67768152202b93ad14d0bc1a59cb324861285e5ebf2f0437518d16778de65e7c2e326d662762fc2aecdc25598c39a1c6020527575504e6b22df473f5ca78c4ace02964dab606769d5011df745c75bac1a2139d44be176ce4298b9f0e27b56fffba7883213a743904d129fa9fcc5301697c1d0b3db4c7ef7539c9df505efbdf4670be72d80c984f65dc892a88dc7707642e5c6a96c6371f7ebec9baec7df9a214d124453f68481e118a822a3bdcf8c424b500ca13a78a38f7856ab7b54114c06f580593054976ec6da23680d9f20b967f902df1919b261eb6bcb2f1e31d7dfc19e4c6976dece6e51a4350cfac2dc2105ea18049d4a4c376c348a5fdc8d1cffde5c73547691f65a1d8d59a55c8203c031f1120adcbbacf3e85396fb8986bf7b137006d41a61c997319331a54c324bc07e29be0ee9912fff047bdd7ee5a6950d11b0e0649e46d4cc1096c892123457882798febc0885ad604aacc46a80bb0926639c02be8317a3cf287ec5d2aa381c27642af27c2ab85217d9d9ac3ebbbaec57934726844a16be5110ead9c4941057464e643fb8e5b052d10a95ec8fc953f2606824fd4093f8061369d4d8d690d39413325ae8a735f5c3761ed3bfa5d30a00ca071b2ca859604d056a91be430daf96dda386bf3edb2b986f3faf61bb1d94aa914c1a1cd8051ad8c1c4828c05fbbfcc394fb82376f5c5f740cf3492518f657fb0e97f7eb64ef82145201fa77cc08ed44581ce405e9e4293c5917657890a1d3455f69819d12f3eecd96fa0b5149a725c3c5f259e04f01b3c3a9937f4ba234597dd2a457719fe0f2c3d640a44ab25f1afa6f01041ef9f6d9d1aa28aa23b1753c1866e9ef103ee0b3ed83197b886001d7e2dbc7621f8aa7617f74441502d5b889e03fa5741c8de90e814c697ac01c77f44f8b7c3a99c09aa551983f02219114b9ca214410a7d645617cca61bb3e3c590af9e7a896ed18c756ec465f28ec9b91c2a940ee9e31abaed3953b3216369a2a83a2761d8ebe073a5df4458f73fa358ed5d8b34bf6deccf94b08eccf8320a38d51520d431e0c644688cc0ada12e3acddb59ed7661fc777d7a47e8697757360f4ee1c20c397c1fe0b79bb0cd76bb12c0e1dadb3b121780b325b16a9fb4ee55283ad6ac5f097722eae190c8353adfc35662421dcaab9f04d3ce798ddece34ef8d0f66adb7324a04544a468871ee6a213842e18e037364c87185b7aa97fc3ffebd1b13f38770a9ddcf8b0f173bc883320ccf9891adb35a4c5a740d498a75e6ac6fa7491c3db8663b6a0e8fec90941681a86c8c66a9a82837d2ee7675b04c82345d78c3b43b030d030301b652796a76349edeb7033a8d47e1e9204497433bd528f1d5439ebf01560dd30cf5133d6f601f148effcd6e886d35f731f6f02f32bbc3b3a023abff7478539d2275cb14a9880b6e2b357d45d17274be4a8bf6958687cf0e61ee9c385f19327d30e066bc291d3a301018f8dd38d1d5803dccf6427bb9c8c257cf8e61ea50f2ac4b94e10a017ffbf9c2cc22c66be18c3db3a3555ac130cb73129b91c5ee2284dadb0f48b2611fc4450cc0401d35f8990c858f66a8195b2ab00c88734c53d2030b054b4910ff854a1bf1711a9b9151c90cac547eb7e0dd1da468fbf7b73bc84a5786aea6817f3019e207746351a4c2544a863bf3e6d53f4c7358137c76fb97b7956ff919005277a9981f0f32533c16eb1e31e9e7fa31f086521d0c63895c75e268011788d8a36920b19fd93de600da349ebb21bbaad961379e5987b781081476d05c5b7ae0415bdd0f504247ecf9f1dca9a4ff1bd6d88d5d9c0dc9b006b4a2fefa2d1ef1e9244040db3905fd762b79d41fb694a3981f82bfd27a377ac1c919557b5f7225fd721f02a62fe3043ddfc710976cda51e93c1ba8c10ee3a054a73225e4ca84510678fc0e96cd0011f3c265afff12b378b019a72f1336cecc899945e950a8365cdd633c2c1c9ae7c38553d48528bc6feb0dff54ad74e2add01402b44caaad6499a987a4338ff676b6a34640ac18d1148d64c65ecd2958a53ba5abb9269e811eadd240f6778f64d616efebb4094d5d0a9115304134c4ac1286b2fd09d6761d5915a07d640d55faaeba26d398d066754aa20ecf4fc8d80abc16e64c3c34332ea7b25fc16b09942ac0216fb93fe75546c21bb77275a955d3048d4af9fcf4ee600768865d0d2c3c4300f43d4e969c2f3ec4622dce5d42162ec7b4fecc295ce114c9c203083e974ed24795f32eff1097725fa158b945d2b2d9cbd278b63364430d27ff0b613779d3f67c3971c71bf06070b129d78e380a70755938711cf4e2d0ef896f91dd43e73f3c2fabf56b6ed6171dae88c8972c0e73ec1959bdd65680c0cdad69fc7deb4e704115644bf58ee2005df2bf5aea5327562b884ca4c5cb1b772819c6fe848aa3c9e9a8c2619e34b5bc2de7c6c72d7ba67417d8127ac1eecf0e98962b909a8a5d3645c6ae1804c60672ca8c10f68d9b186641e255e5ef2df067151bdc114ee931c04c6e0dbbb8a076ca7f129e979f1dee61a797371cf770d5574e6fd26e3f1c0dc8550567c951d51b26c847f1aa86e35f3938b69a50b330fe9d36c79d0586ff0ee1ff5cbdb5c8f0c81812c074ab643fccf0c689c8ae1795cf6ce2ed3fe2a49645230511b8dc6a92ed0932290ec798cec377adb682ee24b6161d8f72aa4e27cf03437662cf53fae114997583218f148d266166a6e1651ec0ea259933abfae7a9d22e66e0573984f6ededab1f86a61826bc5d63e16a1b7e1b73bc84af093846e8f9f4563d8c0f0a65ca3e3a90d9e0a5a3adea98a6325bb777956de27ac52a035998316bdb6d764f47178b7e83941ae537ff4fd415dab0cc4170b3e75435a8aab12b1edcf885ac368b36c17b927092700c028a758813a964df4f07d92cf4ef9e06ad4337ce8722d0f0be2261ef7502bf73e0b9dadbb864c3384b287fddf87f1e843949d7e2dd6de9839773e7e8d66c554fc7099e0642f9f1fd33f6bfd51046067dc3e7b0e7e981ee0eeb163efea4a2685dec2837826ca2d95f714d00aabf5bc4b4fb168891e3c184b0e554d1e190689b69e5321b3b619b8d47c22963479629bdabdbf8a90caa00542f585c853a9c5530ca5cabea49590d6ce939eb159a1af7dd81fab2d99d6331376e8bf46dae76876051697f5d9eae9903ed46a9b79a22a7349cd2da0a34ab9dca8d9ea30c6b436c5601dd745ab58943ccd017d528d870120623a830654851d04fbe41deb6a6bf1ffbd207469729ad5b6741f25edb3290f51d23d5ec2337f9a1ee2a9b6cff9ff4226b448ab52b5a494911900f56c88d701f9d1caa267088f3cd2ad9ab15b480d4760a26ea7b3c3dd8bc9bd9faac8fb3fa154597101377abc1fb9a78b7a3094e6cbf53e4df7b8ee804d0f2b3563976016cd3ce7616412d9f4bbe87e4863994f245364f23fe23cd12f2a702835e1c1c7ef71767aa4bd48ec8f12a9c455fe4e9d7e2fa598aac928271aab1a6238c4b49b52d40fb85ed51cd9315c39059e26c141451a3b6a109a8695c8b97f74d8c0b6717fcae567394dfe22cf2997a1886cc3cd92947345afe4970fb99ba6ea4b327e6a8662b0638203454a1ff0e3abacdb2f4bf7e8838b2810c21cf53dfebc37ad67dbfdf0608e5c65d742328a7c131703cffa51336a8cb0e7e925593b12973887de7b4c9f77bf375e69088d09880292b7dda6c9865478c6c7e3c5b49c00eab8d9279ea298f373545c773c1da0f47c2ab664ef0467a21481195ab9b4526dad98090c00e3dfab5f138174a161ae5d1b0e5b828fb141c47af2ff12ce5f41ee6d30cf6178d6153ba787dd616aa80ec3aa9f74604f2db4c672eb3e9ead1b2f327c03c0fba0a1df9781d725d8a6bf388b08149bb39ee67859ee7ae14e42a35ef230196f306c3702668b1c7924a4d2e0048dc925ded078098083ba5a01b43b87fe14c31ea03c2f2d6f3005397462b0bfdd9c7014862730da6e552e41a7dbdbf5bf774a5d34d0fa75c1a33655aa984f08b3e67b7d884f4374f57626513fc22bc2c9507db37d7125c47c37b9508a33df35e4eb81694e92b1120094967d0ac29dcad68a80e44564a7eae98ffbcc1b69e2b898e507a343928fa25613e7bece1111d41514a2176a8dff563ae072444dd953d334166467020c420993f30b65371835f2c85d117be45990aa138f1c5a08a20a32ef891e8b186fc037b8aa4f3aa13ff671cb6255676f9ff0810d387322b85acdd5d6bef73455e16c971de579901459f4cf64c16cacfcc96c225fbb528dbb43fe8cdd3a94b3bf54c09bf4a66e594b53cf43093a6f8bedcd41ee832540034690c6e54c531212bc1e6cd5c619fa2e608f0dca22166024afd8fb3f92cd2b4a1ad83814fa5d9d0b9f7aeb36e0d23dbceb7351ce7c8ba732ef071929db2fc424740eecc36452bc41810f05990a2c1b516044cf8620301e00d4d4f562758297dcc829b380758365af2f3c4d2b7511a0bee810a6e174cf926f7e4182ef31b279bf00009c8de72c177212bbc069e2eac75b6aa615666a6d9e42e24fabb9c8cb52746ec422bef45a14ee21aee0e522d9560020bc3e0b1ca7624529bb08b3aa0c06c676bedfeaeef618ba57740793968f52cddb6dad3b826fc7043438c117f73166ee31750751eb731dee3bad0b309c51bb655c1a85edf90d0af62b9669fc427c83cfc3f46192eda8aecfda1a8208606e64dfb062bff9624f140db35efe03579d3ed2d420c799d336b214c29550542e0daf7a8dbe372a4514cdce78d77c51c1fc4c6161bd54565b46b1850267119aac9689c5d8b095ead827715d7db13d74c9106590b31004ad239044a52705ae64b7a3c43fb8a31f72f8c0e1997f2ab20fceac664a5638195ac8f04d1abec2b577655704b8812cc366de65e094e338803da19c3b528f4adcfa52ecd7ecd59461ab4d5f495d360c8ef848753e5953c998c9741ea6726a0275d7f0244ba6d8b95d5ec792cad4d88893f4fe910d824757ca417408d49fa72f40e151e7d6ca107641550b03979d076767cfaefcee0148cc581fbfb9acc307674d747618992266eccd22a692b6240eb9662df443101e6ecb9c9041d4911c397e3796b759846aef1ff61be8d02d522bc9ef2c5a3fe2aede2fb8af10809b6abe8b4a1465dac78c23387271f72f5697b430005d91cad19e53445694bfed99d0559f95e13eeb392d7be986038ec43ec61fc1da26c383b5f47d22454131e3eedf18f0b81ad096cb80146a6092e10c6851bea80795e56f223c22d8ec91a6297b79c76def27b89ba661a3e9d18b69bdee9b975fd0fc2a70ecacc1cbf6d62ee43b1187e98d037bae246e96a1f40eda15dc8f8310e4eaa68293cae75aa98f114151cbd574167a211603203e08c0ad2c3b643e46bd96ab4ff02ab919bc2f0a215e77056229255c29c3ea10af28b27bf816b9cc804572691cd95dc3de6e9f782eac582de3eea354230dfd6792765f321f93a26d89e6b9ba057e5eb9a2b136ed4d4fbf5fc7331ada9f782e1e5cea5f5401cbe5f885437844226fd1f3228d34b5ed7bff198c16c3ee063f99acb9d64cb60323cc4a321499f73152f9ed8b7aeddda1cc9613e6e75aad5d7698788ace77734fe15d7b9d4f1afe2e9d64445891bc228f2d6dca0f12ff62db97f525a43372982730ef54295c58c84f29f82413e15e9b9ccf4da2ab9b0cf38d6f1614b1702fae7af224f3b4a65c85c35c47a49849b0c3ba416033c79c6bacdaf49d518d9dd10fe615fad2f799daf4e001aae758bf46624a678ef48823b7e89827ddff4d7b677d696abbae11f0216ed1681d3dda47f126999f8923cff51c638d677f367d3ccc670af88130b676e2a2e6308f45bf5db8d33bf3334a9dcac80ba1db496f2fe40742f0e4edc6c62f02c9d68e7976ebb4091f0dae8eed60d2b8ef5cbc9237dff0afdb47a4a00ed3f243b731165d087755668e8b954006c86aab5051b6bce80c8196d6aecf1ec2dcd613b5ed402576a7427e88f4eb4b1c06e86480d8f629877dcb02b451e5c522fb106f912dad354869fac83285c10144f4be3e96b38957740d99e4ec5fda956c6386c1d07742639336f6b2619268d13ce36cc02c1b8fdd5c0ff8dc91cf23931edcce32501bfd31bf2a792e7839628ec140e7c1938f87634ed1294bb01f380225535920e25985d39ecb44529562a47b42979ff49d1cf5d6b3dfcf55cc3c762e0c34b4dfc3e62032679026cbdda85cc457a5ccf004b8ea51ce4d7f0ae40f9f327908337618fbcb94632b5fee28a068ea50efec8b2c8cc19f299f9d2f0236c77b0f32d33cd4c8ba8070a57f68dd88a0d283fc774766c42f7ef07fd78786212e02caed8124b0cfb06f5f9a436fe3266d2ee6f5f7b0b32e1b5f816107968053dae4d15f7e2c87efa9e94c14b280f02f51ff5238befe76d1c759ee1fb6b1cb56520b33598db670e8ac76e2eefb7786b9f5ed7c53be341f460fbaed62ae6a0142f0e36f8cfe6befc97fd435edcb1b6cbf3deda230dc310ee81122d5f39c1255a928b7b81e99af10bd88ab762f30c4e77f6ddbaec05f4cad526f99850efaf3cc88869830e9f324b8fa649a6efd8f92100d9caaf5a99f60bab78372bf046235b2f3a22ebbf07fc0d10662d1aa8e94e2554b9d93ba9cbf1b0e40d8cbe2de92dc57935c16fc40115a5c94a9ff797090c4c9a1bfeb4b054f36c93c48f0fdac72e673d609d188f9df192d9754743d4d37aac37a5478a095b68dc68c181f9e43a18560c71333f515f8c08742a7924a366a26a42ee2c744a4186e884381e0c93cc48dc895cf5fd2447b76308d2ed0d14485443d619659d49e04dd0827a595826484d12556d7b8ca526774215f6b86612fe0365eed8e0ce958f07e43e5f3075200f07f6d518560e8b3a06d5fbb1e598bd0bbcf9717aa6cab765d2f629914fcb910131d23c115d93f34822fc4f0b603d07cc05c85355ac27c9daa203f48d8c0a967d9216233a0ba87c4dcf07cb7e9439c3933db6e1482636fa2b113505869b1a3d3d944018e4ec2e614bca275941377962731283efc0f9fae9b34ae77526b5dde48c65c0040cfcc1fffe5131dea6eb0802378508fcf9a617654eae3d217e823c2bd581bba62acce80d30bcf8891217c4afe32ca26c8b16323e1a0244c49e1d131e7666c5d6baaf1fa17e0ec3642c3f28649a5a1166967525c498be23b600b1f4fa8cc0c666b64614756c3b5adb896042fc5d467f79384beaec1031aa23dbeede768c6608a38d1606c6884776eedcf3f1c0481e0afbe51d798a7b1163e27150d7841818725ea22dec6392dce180f0ff7ebb4879ad619af912dfd68a176d4aaa4657fe6c29e7518ca4e7b0899eabf1c0eae748245e1a02043eb64f6ead88dd9be37394b898496cc3b810852c2d0d803e0e0d398c0c36e69fd8346616af4e42d9986911afeb1c5943f88a2bfeda9dcecd95a6ddad66a9debc576bf609fcba15d2eb5e2592a4431fe5651f615bbea35e992b1569fad6757f6676b40ef1a0f615d045bdcdb8a5d82deada4343cfdb9f6485a41c2ac300d1d56f5f7494eaa297f32c19ff82f19781f3af04c3c63b9798fd4496c87538f86bbe404f6fde38942c6d73548d14b342f0bc779d3a6818a5c4acf0823528f6a8f6c00160484d60dbbf0ce997ce0924a767e1e241c141de2a46df7e751fe86bee8bc43f77ccb1735f5bda4925c6f85adf0aed279e495728a01e15b0cd346b545b02d8102223ffa4c7fddc76f0e9ef4f097660009f78cd256a6f7e7658ef208e3a02e0377b2df38b55be5d5bdf0f4f1bc82d848a8320676255aabe8fd1547eda0330b8710dd32c2ff35819d9641348e3d090b57738a52afdc57b4e4fa68e8bdc73fc7956ef80309661453e68c668a9aa13cb61add7b28e365ae23d9f42b8c051a866c228d48d9e3b350245426a2081ead70dde976f5dc5c6b94982fb3e51749bfe91380b145361f35d162b39707c5a30ef1338965d802cd6c1b644222337a9b71fce06fea5b74cbced43e1b01f089beecd63a5efa2ee4700d507fe254e22182a8b4ded17a6da7f65842af8d47901d0aec2a4d1e8a4e3f80c4ee8bc2d45730d77c40756c803be7b015c7bfce43759aa6407d818ded6ba6b768394e1de374907fa3aee83e98b1a8a3107dbc0460a7107a2ecdc30cc9b1dfad50c46bddc071788ec7d6316a76a69aa7ecfa054f4d7dfb098c154bd6d68be5cbacbe528f4b0bc47970dd2a4f43d7803d886a31721b33b371425e0b0217774bc5da3e1734c660ff4b5e10a5b39e23dc93d849dcbc5f85468ab6df1aacaa2f08c68c8f3dfeaf947cdf894a5ca26035557c270cf2c6e4963e428df0e769d2a75bf20a6bbaf564eea7730a65e89af5a5c81dddcd78689dff0f05f9f4db8e131e977285c51c985dc39db9cc0a2c3055437c8e9a8d8240814d113afac8eece1db7d1616fe817f9f9cee4ac91a70e51148831c9c38bc6c00aa5a364068808ef4027bd720d6097c8f295050536ad7e98917242b4725807e79ac406dbf522cd0c5aadce8b477e74a3555e2dcf63eb11ba8994c815a20d68fd392ff7257e75a8ab4e0b1925a9cd551223933340b9ba974ef81585314b8a85c19ee9ffb411d6dd3446cfa9d7e37f5196010e3c9711706183b4f6af0021c014d424ba51bccd37594ee5a49902ed8331dad1a673e6bdc2672b89ddf207fb0e2dd33fe323bae994a1cf2cb2e532d3dbf1ec2fcd54058154865662d6b0c1065d51475cef8848afc180c5161d892dcc00a66c942a04298b661668d7ec024bc3aa19433a66e24a2aa9f4a32532a0e82332bc36259996d0230d499f1454d70632d29bae00bf72f29ec431732a17559ee427cde8f485411560e7f7f24ab4f38c464b7c99b97b54f2db710b78c676e35004f13b5cc9bc46af8fd3f3487a02a327cdf70bbb3373691af9b0099b08c8158d042dcf3d556a077466f4e229e735bb2eed699c9887bd3a73be3b4785ba9fcced6b99a869352f68a363fa1576e5ef72ba549f84b23d12896b64d47d2a3493a3ffc48d9dd4469c491992ffa2d0f5804c85fcf3d27f57cdb0fffc09983db66fa99fc54e9e78de045d939713e3e5a6adef6e9c044e0d20e23e96638d569dcdad9c8b001e9118a85b3ae75955741ee9f3b06177a8bd06f2dab5bb09a613c198dfb38edb00a8c8d7b7456b94864c54d87baec8f515f9a1cc63dc23c10b761c476f47e171ecc7009ca7327c57875e2619f234336b5d906be8038a3b093b750b11e127785162e3da5c563520fc08a161bc43047ddd8732bcaadbf741787ea111ff4b63130fe5f0058a1720fac108021e243a92d818caeedae2f8ce0dfc6ee32250a4a8c88f84318e2d8dc271203cd4d9f7fc533e467381422d3c0a5ec530077023b47ab938c843d9106be1ec56758f06befda9460d2d8ad7043dc2c78e3babf0db0ea5f5535205f5138a0d6aba935890523ba1f4294b0f3d62deb86e6a754829b44f84d3edee9b501c5d795006c4110b947cadbe4b14f3b6d2f917081eb3a45ac283f69ee5a9838fac65c1737e70d19d9e8ae6af9d08d4e8acfb712e0036557807beae82a4e702286f21695e784762d9f3f8304e3ec33423f025f0e13ed84c7544a31f003312ca2496ec2d16a120a44cf8132dea226ba51d403fa060caf0abc6945d2c28af9abd575640ac1a4ec11eb665d65296e6ab94f1c4fc09bebef27c2c357ad87600e5b3e260240e2ff4f3612dd64430ee130b1deb0a827f9de22cb59a4fda4c573081cf4bfe73ec9a31b9788173c7db48b04484764c7a85db9c601198cfd48aad73dd6ae0410bb129bb71659326973c925ef0ea8db34dfdcca60218122f1f290c8dd1b4456c", 0x2000, &(0x7f0000001000)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x26}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x90}, 0x0, 0x0, 0x0, 0x0}) renameat2(r2, &(0x7f0000000500)='./file1\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg1\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)='6', 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(r1, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000003c0)={0xa0, 0x0, r6, {{0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2000000000}}}}, 0xa0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): entered forwarding state [ 119.701823][ T854] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.168: Invalid inode table block 3606049782 in block_group 0 [ 119.716575][ T864] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.168: Invalid inode table block 5 in block_group 0 [ 119.733477][ T854] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 119.746465][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.754295][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.757313][ T864] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 119.762411][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.772796][ T854] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #20: comm syz.3.168: mark_inode_dirty error [ 119.778800][ T28] audit: type=1400 audit(1723559529.687:374): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.790644][ T864] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #21: comm syz.3.168: mark_inode_dirty error [ 119.812650][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.836253][ T854] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.168: Invalid block bitmap block 3472768942 in block_group 0 [ 119.853535][ T2112] device veth0_vlan entered promiscuous mode [ 119.861064][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.868151][ T864] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.168: Invalid inode table block 3606049782 in block_group 0 [ 119.869680][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.890847][ T28] audit: type=1400 audit(1723559529.807:375): avc: denied { unmount } for pid=986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.916880][ T854] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.168: Invalid inode table block 3606049782 in block_group 0 [ 119.932049][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.939826][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.948194][ T864] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 119.961994][ T2112] device veth1_macvtap entered promiscuous mode [ 119.965517][ T864] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 119.970083][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.985583][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.993258][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.001395][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.009463][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.027606][ T854] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 120.045346][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.054311][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.054408][ T854] EXT4-fs (loop3): unmounting filesystem. [ 120.062622][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.076130][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.207335][ T2132] device ip6tnl1 entered promiscuous mode [ 120.379472][ T39] usb 2-1: USB disconnect, device number 13 [ 120.396214][ T2139] loop2: detected capacity change from 0 to 256 [ 120.405105][ T2141] loop0: detected capacity change from 0 to 128 [ 120.488504][ T338] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.522033][ T2130] loop3: detected capacity change from 0 to 40427 [ 121.640613][ T2130] F2FS-fs (loop3): invalid crc value [ 121.754551][ T2130] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.789331][ T2164] loop1: detected capacity change from 0 to 128 [ 121.822872][ T2130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.891086][ T28] audit: type=1400 audit(1723559531.807:376): avc: denied { unmount } for pid=2154 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.093603][ T327] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.137002][ T986] syz-executor: attempt to access beyond end of device [ 123.137002][ T986] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 123.144833][ T2186] loop1: detected capacity change from 0 to 256 [ 123.157756][ T986] syz-executor: attempt to access beyond end of device [ 123.157756][ T986] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 123.187334][ T986] syz-executor: attempt to access beyond end of device [ 123.187334][ T986] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.203146][ T2186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1768846636 (3537693272 ns) > initial count (1927074542 ns). Using initial count to start timer. [ 123.387929][ T2192] loop1: detected capacity change from 0 to 2048 [ 123.397309][ T327] usb 3-1: Using ep0 maxpacket: 8 [ 123.406559][ T733] device bridge_slave_1 left promiscuous mode [ 123.413502][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.421411][ T733] device bridge_slave_0 left promiscuous mode [ 123.427393][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.435227][ T733] device veth1_macvtap left promiscuous mode [ 123.441264][ T733] device veth0_vlan left promiscuous mode [ 123.441571][ T2192] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.559: bad orphan inode 8192 [ 123.463955][ T2192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.556080][ T327] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 123.566593][ T327] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 123.575538][ T327] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 123.584454][ T327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.650402][ T2197] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.694818][ T2197] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.702064][ T440] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 123.776168][ T2197] device bridge_slave_0 entered promiscuous mode [ 123.804746][ T2205] loop0: detected capacity change from 0 to 512 [ 123.814940][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.821151][ T2205] EXT4-fs: Ignoring removed bh option [ 123.829923][ T2205] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 123.838211][ T2197] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.845486][ T2197] device bridge_slave_1 entered promiscuous mode [ 123.883873][ T2205] EXT4-fs (loop0): 1 truncate cleaned up [ 123.889466][ T2205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.916454][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.923307][ T2197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.930404][ T2197] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.937195][ T2197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.966259][ T2205] loop0: detected capacity change from 512 to 11 [ 123.972646][ T2208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Out of memory [ 124.002361][ T440] usb 5-1: Using ep0 maxpacket: 8 [ 124.013164][ T2208] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #18: comm syz.0.552: mark_inode_dirty error [ 124.043098][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.053777][ T2147] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.075203][ T2208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Out of memory [ 124.085097][ T39] usb 3-1: USB disconnect, device number 9 [ 124.094810][ T2147] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.126208][ T2208] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #18: comm syz.0.552: mark_inode_dirty error [ 124.145424][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.145773][ T2208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Out of memory [ 124.172634][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.179496][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.196363][ T2208] EXT4-fs error (device loop0): ext4_splice_branch:479: inode #18: comm syz.0.552: mark_inode_dirty error [ 124.206037][ T440] usb 5-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 124.230182][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.240186][ T440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.249926][ T1691] EXT4-fs (loop1): unmounting filesystem. [ 124.265179][ T2208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Out of memory [ 124.286140][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.293011][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.300551][ T2208] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #18: comm syz.0.552: mark_inode_dirty error [ 124.306395][ T440] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 124.336256][ T2208] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 18: block 36:freeing already freed block (bit 35); block bitmap corrupt. [ 124.364498][ T440] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 124.377384][ T2208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Out of memory [ 124.388750][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.410687][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.424602][ T2215] loop1: detected capacity change from 0 to 1024 [ 124.454073][ T2197] device veth0_vlan entered promiscuous mode [ 124.471196][ T2215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.484439][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.486866][ T2215] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038 (0x7fffffff) [ 124.494235][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.502354][ T1904] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 124.511430][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.538329][ T1904] EXT4-fs (loop0): unmounting filesystem. [ 124.589216][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.597432][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.604653][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.620307][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.628181][ T440] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.637523][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.645522][ T440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.653589][ T440] usb 5-1: Product: syz [ 124.657608][ T440] usb 5-1: Manufacturer: syz [ 124.662083][ T440] usb 5-1: SerialNumber: syz [ 124.662972][ T2197] device veth1_macvtap entered promiscuous mode [ 124.683813][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.720851][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.746464][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.766436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.767803][ T28] audit: type=1400 audit(1857777262.685:377): avc: denied { ioctl } for pid=2214 comm="syz.1.555" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.774465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.906033][ T1332] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.062953][ T2227] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.069877][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.077412][ T2227] device bridge_slave_0 entered promiscuous mode [ 125.084220][ T2227] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.091422][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.099089][ T2227] device bridge_slave_1 entered promiscuous mode [ 125.105887][ T733] device bridge_slave_1 left promiscuous mode [ 125.112046][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.119172][ T440] usb 5-1: cannot find UAC_HEADER [ 125.124703][ T733] device bridge_slave_0 left promiscuous mode [ 125.125503][ T440] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 125.135480][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.138567][ T440] usb 5-1: USB disconnect, device number 14 [ 125.149319][ T577] udevd[577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.166210][ T733] device veth1_macvtap left promiscuous mode [ 125.172013][ T733] device veth0_vlan left promiscuous mode [ 125.177607][ T60] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.285562][ T1691] EXT4-fs (loop1): unmounting filesystem. [ 125.286110][ T1332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.306106][ T1332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.310375][ T2227] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.315662][ T1332] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 125.322512][ T2227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.322594][ T2227] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.331927][ T1332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.338486][ T2227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.354061][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.368476][ T1332] usb 3-1: config 0 descriptor?? [ 125.377466][ T1983] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.384496][ T1983] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.393381][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.401494][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.410521][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.417395][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.425479][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.433802][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 125.439228][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.447270][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.454092][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.465369][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.473176][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.484995][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.492849][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.507128][ T2227] device veth0_vlan entered promiscuous mode [ 125.516153][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.524263][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.532694][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.540344][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.548588][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.557327][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.565627][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.573236][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.581300][ T2227] device veth1_macvtap entered promiscuous mode [ 125.592188][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.599632][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.607745][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.617680][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.626172][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.649461][ T2238] kvm: apic: phys broadcast and lowest prio [ 125.736083][ T60] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 125.752346][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.775577][ T60] usb 4-1: Product: syz [ 125.780523][ T60] usb 4-1: Manufacturer: syz [ 125.791399][ T60] usb 4-1: SerialNumber: syz [ 125.846896][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.853525][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.873549][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.891064][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.905524][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.923011][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.943188][ T1332] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 125.956193][ T1332] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 126.056063][ T60] snd-usb-audio: probe of 4-1:248.0 failed with error -71 [ 126.056120][ T1332] arvo 0003:1E7D:30D4.0013: couldn't init struct arvo_device [ 126.077679][ T60] usb 4-1: USB disconnect, device number 8 [ 126.082265][ T1332] arvo 0003:1E7D:30D4.0013: couldn't install keyboard [ 126.099934][ T1332] arvo: probe of 0003:1E7D:30D4.0013 failed with error -5 [ 126.155211][ T2246] loop1: detected capacity change from 0 to 2048 [ 126.188389][ T733] device bridge_slave_1 left promiscuous mode [ 126.194635][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.205666][ T733] device bridge_slave_0 left promiscuous mode [ 126.222081][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.237976][ T733] device veth1_macvtap left promiscuous mode [ 126.253024][ T733] device veth0_vlan left promiscuous mode [ 126.276572][ T1983] usb 3-1: USB disconnect, device number 10 [ 126.574655][ T2258] loop3: detected capacity change from 0 to 512 [ 126.591955][ T2258] EXT4-fs: Ignoring removed bh option [ 126.606403][ T2258] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 126.635848][ T2258] EXT4-fs (loop3): 1 truncate cleaned up [ 126.641371][ T2258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.696380][ T2258] loop3: detected capacity change from 512 to 11 [ 126.705015][ T2258] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Out of memory [ 126.723533][ T2261] loop0: detected capacity change from 0 to 128 [ 126.776807][ T2258] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #18: comm syz.3.568: mark_inode_dirty error [ 126.858871][ T2258] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Out of memory [ 126.878624][ T28] audit: type=1400 audit(1857777264.785:378): avc: denied { ioctl } for pid=2269 comm="syz.4.571" path="socket:[28451]" dev="sockfs" ino=28451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.924427][ T2258] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #18: comm syz.3.568: mark_inode_dirty error [ 127.113428][ T2272] sch_tbf: burst 4 is lower than device lo mtu (11337746) ! [ 127.174921][ T2276] loop4: detected capacity change from 0 to 1024 [ 127.181439][ T2276] EXT4-fs: Ignoring removed bh option [ 127.196916][ T2258] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Out of memory [ 127.216160][ T2258] EXT4-fs error (device loop3): ext4_splice_branch:479: inode #18: comm syz.3.568: mark_inode_dirty error [ 127.227519][ T28] audit: type=1326 audit(1857777264.795:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2262 comm="syz.1.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe5799f9 code=0x0 [ 127.266048][ T1332] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.273729][ T2258] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Out of memory [ 127.287385][ T2276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.345031][ T1864] EXT4-fs (loop4): unmounting filesystem. [ 127.363160][ T2273] loop1: detected capacity change from 0 to 2048 [ 127.416339][ T2273] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.424247][ T2258] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #18: comm syz.3.568: mark_inode_dirty error [ 127.443865][ T2258] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 18: block 36:freeing already freed block (bit 35); block bitmap corrupt. [ 127.461092][ T2258] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Out of memory [ 127.471015][ T2273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.492757][ T28] audit: type=1400 audit(1857777265.405:380): avc: denied { mounton } for pid=2262 comm="syz.1.570" path="/33/file0/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 127.526069][ T2273] cgroup: noprefix used incorrectly [ 127.526766][ T2197] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 127.549745][ T2197] EXT4-fs (loop3): unmounting filesystem. [ 127.583889][ T2292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.570: bg 0: block 234: padding at end of block bitmap is not set [ 127.598237][ T2292] EXT4-fs (loop1): Remounting filesystem read-only [ 127.676113][ T1332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.695833][ T1332] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 127.708012][ T1332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.726022][ T39] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 127.733515][ T1332] usb 3-1: config 0 descriptor?? [ 127.758429][ T1691] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /33/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 127.779428][ T1691] EXT4-fs error (device loop1): ext4_lookup:1855: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 127.792823][ T1691] EXT4-fs error (device loop1): ext4_lookup:1855: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 127.811524][ T2295] loop0: detected capacity change from 0 to 40427 [ 127.822416][ T2295] F2FS-fs (loop0): invalid crc value [ 127.829009][ T2295] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.835792][ T2296] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.842985][ T2296] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.850807][ T2296] device bridge_slave_0 entered promiscuous mode [ 127.859837][ T2296] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.866815][ T2296] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.867086][ T2295] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.873964][ T2296] device bridge_slave_1 entered promiscuous mode [ 127.932004][ T1691] EXT4-fs (loop1): unmounting filesystem. [ 127.995028][ T2296] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.001892][ T2296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.009066][ T2296] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.015860][ T2296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.166149][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.194522][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.258710][ T1332] lenovo 0003:17EF:6047.0014: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 128.262243][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.278962][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.286587][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.297785][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.305712][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.312560][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.319922][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.327902][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.334732][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.354378][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.356113][ T39] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.362575][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.378615][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.386561][ T39] usb 5-1: SerialNumber: syz [ 128.391291][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.398524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.405684][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.413792][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.423100][ T2296] device veth0_vlan entered promiscuous mode [ 128.433400][ T2296] device veth1_macvtap entered promiscuous mode [ 128.440148][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.452278][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.460394][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.469853][ T8] device bridge_slave_1 left promiscuous mode [ 128.475818][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.483115][ T8] device bridge_slave_0 left promiscuous mode [ 128.489705][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.497926][ T8] device veth1_macvtap left promiscuous mode [ 128.503816][ T8] device veth0_vlan left promiscuous mode [ 128.536874][ T2227] syz-executor: attempt to access beyond end of device [ 128.536874][ T2227] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 128.551408][ T2227] syz-executor: attempt to access beyond end of device [ 128.551408][ T2227] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 128.570831][ T2227] syz-executor: attempt to access beyond end of device [ 128.570831][ T2227] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.632405][ T2285] loop4: detected capacity change from 0 to 512 [ 128.642747][ T2285] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.574: corrupted in-inode xattr [ 128.654742][ T2285] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.574: couldn't read orphan inode 15 (err -117) [ 128.668182][ T2285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.679131][ T2285] EXT4-fs (loop4): unmounting filesystem. [ 128.720132][ T2309] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.727210][ T2309] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.734479][ T2309] device bridge_slave_0 entered promiscuous mode [ 128.741707][ T2309] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.748711][ T2309] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.756119][ T2309] device bridge_slave_1 entered promiscuous mode [ 128.776624][ T39] usb 5-1: 0:2 : does not exist [ 128.781497][ T39] usb 5-1: unit 5 not found! [ 128.815154][ T39] usb 5-1: USB disconnect, device number 15 [ 128.851127][ T2309] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.858004][ T2309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.865101][ T2309] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.871889][ T2309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.890314][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.898039][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.904994][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.914903][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.923005][ T2147] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.929853][ T2147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.969191][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.977910][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.985889][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.992747][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.001361][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.009161][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.020678][ T2309] device veth0_vlan entered promiscuous mode [ 129.035606][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.043545][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.050853][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.064303][ T2309] device veth1_macvtap entered promiscuous mode [ 129.071808][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.090882][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.100761][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.224574][ T2323] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.231533][ T2323] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.238740][ T2323] device bridge_slave_0 entered promiscuous mode [ 129.245332][ T2323] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.252183][ T2323] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.259659][ T2323] device bridge_slave_1 entered promiscuous mode [ 129.301128][ T296] usb 3-1: USB disconnect, device number 11 [ 129.317148][ T2323] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.323993][ T2323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.331072][ T2323] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.337878][ T2323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.357346][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.364638][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.372279][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.383072][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.391260][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.398098][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.406103][ T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.414210][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.422249][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.429108][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.447010][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.454775][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.465951][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.479694][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.487454][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.494584][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.502539][ T2323] device veth0_vlan entered promiscuous mode [ 129.516750][ T8] device bridge_slave_1 left promiscuous mode [ 129.522762][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.530273][ T8] device bridge_slave_0 left promiscuous mode [ 129.536653][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.547916][ T8] device bridge_slave_1 left promiscuous mode [ 129.552152][ T2330] loop3: detected capacity change from 0 to 128 [ 129.553936][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.567416][ T8] device bridge_slave_0 left promiscuous mode [ 129.573361][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.597643][ T8] device veth1_macvtap left promiscuous mode [ 129.603485][ T8] device veth0_vlan left promiscuous mode [ 129.610026][ T8] device veth1_macvtap left promiscuous mode [ 129.615856][ T8] device veth0_vlan left promiscuous mode [ 129.666237][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 129.952956][ T2339] loop4: detected capacity change from 0 to 1024 [ 129.966936][ T2339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.990698][ T28] audit: type=1326 audit(1857777267.905:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.4.596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a111799f9 code=0x0 [ 129.991798][ T2323] device veth1_macvtap entered promiscuous mode [ 130.016069][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.029993][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.039594][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.048059][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.055999][ T6] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 130.064833][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.072904][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.080281][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.088569][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.096925][ T6] usb 2-1: config 0 descriptor?? [ 130.101806][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.109934][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.242617][ T28] audit: type=1400 audit(1857777268.155:382): avc: denied { read } for pid=2346 comm="syz.0.592" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.350621][ T2322] loop1: detected capacity change from 0 to 1024 [ 130.367410][ T2322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.406081][ T1983] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 130.465432][ T2352] loop3: detected capacity change from 0 to 2048 [ 130.488085][ T2352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.552572][ T2296] EXT4-fs (loop3): unmounting filesystem. [ 131.558591][ T1864] EXT4-fs (loop4): unmounting filesystem. [ 131.663672][ T2370] loop0: detected capacity change from 0 to 256 [ 131.670249][ T2370] exfat: Deprecated parameter 'namecase' [ 131.678150][ T2370] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 131.748385][ T1983] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 131.846062][ T1332] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.006144][ T1983] usb 3-1: string descriptor 0 read error: -22 [ 132.012374][ T1983] usb 3-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.40 [ 132.022340][ T1983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.066324][ T2341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.086076][ T1332] usb 4-1: Using ep0 maxpacket: 16 [ 132.102805][ T1983] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 132.206204][ T1332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.217072][ T1332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.227260][ T1332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.240507][ T1332] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 132.249844][ T1332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.260075][ T1332] usb 4-1: config 0 descriptor?? [ 132.487210][ T2379] syz.4.593[2379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.487348][ T2379] syz.4.593[2379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.644948][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.666554][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.677278][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.687893][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.706228][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.726099][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 132.731922][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.752128][ T6] usb 2-1: USB disconnect, device number 14 [ 132.784327][ T2386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 132.794711][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.805678][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.816405][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.826992][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 132.837598][ T2309] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 133.050603][ T1332] koneplus 0003:1E7D:2E22.0015: item fetching failed at offset 0/2 [ 133.097452][ T1332] koneplus 0003:1E7D:2E22.0015: parse failed [ 133.148546][ T1332] koneplus: probe of 0003:1E7D:2E22.0015 failed with error -22 [ 133.269661][ T2309] EXT4-fs (loop1): unmounting filesystem. [ 133.269755][ T6] usb 4-1: USB disconnect, device number 9 [ 133.345896][ T2147] usb 3-1: USB disconnect, device number 12 [ 133.500752][ T2394] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.507821][ T2394] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.514970][ T2394] device bridge_slave_0 entered promiscuous mode [ 133.522936][ T2394] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.529963][ T2394] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.539248][ T2394] device bridge_slave_1 entered promiscuous mode [ 133.547730][ T2401] loop2: detected capacity change from 0 to 2048 [ 133.605434][ T2401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.632710][ T2394] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.639609][ T2394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.646695][ T2394] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.653467][ T2394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.684104][ T28] audit: type=1400 audit(1857777271.595:383): avc: denied { ioctl } for pid=2398 comm="syz.4.602" path="socket:[30094]" dev="sockfs" ino=30094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.693927][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.716307][ T2406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 133.725426][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.732879][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.016476][ T2415] tmpfs: Unknown parameter 'nolaytime' [ 134.026189][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.038218][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.045084][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.055614][ T28] audit: type=1326 audit(1857777271.965:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a111799f9 code=0x7ffc0000 [ 134.060382][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.078785][ T28] audit: type=1326 audit(1857777271.965:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a111799f9 code=0x7ffc0000 [ 134.113163][ T28] audit: type=1326 audit(1857777271.965:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a111799f9 code=0x7ffc0000 [ 134.142089][ T28] audit: type=1326 audit(1857777271.965:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a111799f9 code=0x7ffc0000 [ 134.204306][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.211171][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.247947][ T2423] netlink: 'syz.3.603': attribute type 4 has an invalid length. [ 134.267491][ T2419] loop0: detected capacity change from 0 to 128 [ 134.273732][ T2420] netlink: 'syz.3.603': attribute type 4 has an invalid length. [ 134.283853][ T28] audit: type=1326 audit(1857777272.185:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a111799f9 code=0x7ffc0000 [ 134.307820][ T28] audit: type=1326 audit(1857777272.185:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a111799f9 code=0x7ffc0000 [ 134.308038][ T2419] EXT4-fs (loop0): Test dummy encryption mode enabled [ 134.339235][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.340063][ T2419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.346227][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.354731][ T2419] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 134.380196][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.414788][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.415517][ T2112] EXT4-fs (loop2): unmounting filesystem. [ 134.422777][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.476245][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.493949][ T2394] device veth0_vlan entered promiscuous mode [ 134.499990][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.508097][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.516724][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.524297][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.532320][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.539536][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.736559][ T1457] device bridge_slave_1 left promiscuous mode [ 134.742567][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.749853][ T1457] device bridge_slave_0 left promiscuous mode [ 134.755787][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.763395][ T1457] device veth1_macvtap left promiscuous mode [ 134.769304][ T1457] device veth0_vlan left promiscuous mode [ 134.840848][ T2394] device veth1_macvtap entered promiscuous mode [ 134.857888][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.878225][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.904806][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.912717][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.936565][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.945336][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.947318][ T2323] EXT4-fs (loop0): unmounting filesystem. [ 134.955487][ T2433] loop4: detected capacity change from 0 to 512 [ 134.968181][ T2433] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 134.972778][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.980707][ T2433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 134.993624][ T2433] System zones: 1-12 [ 135.001566][ T2433] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.008409][ T2433] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.608: Inode bitmap for bg 0 marked uninitialized [ 135.022489][ T2433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.171733][ T28] audit: type=1400 audit(1857777273.045:390): avc: denied { create } for pid=2428 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 135.261283][ T28] audit: type=1400 audit(1857777273.175:391): avc: denied { remount } for pid=2431 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 135.281393][ T2433] EXT4-fs error (device loop4): __ext4_remount:6412: comm syz.4.608: Abort forced by user [ 135.291853][ T2433] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 135.436183][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.701515][ T2447] loop1: detected capacity change from 0 to 1024 [ 135.712555][ T2447] EXT4-fs: Ignoring removed bh option [ 136.456176][ T2446] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 136.463199][ T2448] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 136.503769][ T1864] EXT4-fs (loop4): unmounting filesystem. [ 136.503967][ T2447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.558302][ T2457] loop4: detected capacity change from 0 to 512 [ 136.567681][ T2457] EXT4-fs: Ignoring removed nobh option [ 136.632301][ T2457] EXT4-fs (loop4): 1 truncate cleaned up [ 136.641642][ T2457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.705840][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 136.734090][ T2461] bridge0: port 3(erspan0) entered blocking state [ 136.740391][ T2461] bridge0: port 3(erspan0) entered disabled state [ 136.749157][ T2461] device erspan0 entered promiscuous mode [ 136.755145][ T2461] bridge0: port 3(erspan0) entered blocking state [ 136.761384][ T2461] bridge0: port 3(erspan0) entered forwarding state [ 136.858628][ T2457] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz.4.610: corrupt xattr in inline inode [ 136.871973][ T28] audit: type=1400 audit(1857777274.725:392): avc: denied { map } for pid=2456 comm="syz.4.610" path="/36/file0/file0/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.910271][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 136.917202][ T2457] EXT4-fs (loop4): Remounting filesystem read-only [ 136.930428][ T2457] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz.4.610: corrupted in-inode xattr [ 136.954373][ T1864] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 136.976510][ T1864] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 136.994333][ T1864] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 137.048181][ T1864] EXT4-fs (loop4): unmounting filesystem. [ 137.056451][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.068120][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.080438][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 137.089962][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.105995][ T19] usb 4-1: config 0 descriptor?? [ 137.226380][ T2472] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.233272][ T2472] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.240428][ T2472] device bridge_slave_0 entered promiscuous mode [ 137.248447][ T2472] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.255286][ T2472] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.262550][ T2472] device bridge_slave_1 entered promiscuous mode [ 137.302398][ T2472] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.309244][ T2472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.316341][ T2472] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.323121][ T2472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.354885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.362575][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.369865][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.381984][ T2432] loop3: detected capacity change from 0 to 1024 [ 137.385558][ T2477] loop2: detected capacity change from 0 to 1024 [ 137.394648][ T2477] ext4: Unknown parameter 'dont_hash' [ 137.400060][ T6] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 137.407991][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.415934][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.422787][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.429995][ T1332] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.431240][ T2432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.438017][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.454194][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.461053][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.551290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.559463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.567239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.574365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.581778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.590626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.693354][ T2483] netlink: 'syz.2.618': attribute type 4 has an invalid length. [ 138.272559][ T2484] netlink: 'syz.2.618': attribute type 4 has an invalid length. [ 138.284962][ T2472] device veth0_vlan entered promiscuous mode [ 138.296664][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.304908][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.315304][ T2472] device veth1_macvtap entered promiscuous mode [ 138.321653][ T1332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.332550][ T1332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.342421][ T1332] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.351310][ T1332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.363628][ T1332] usb 1-1: config 0 descriptor?? [ 138.368497][ T2360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.376169][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 138.389076][ T2360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.397386][ T2360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.409458][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.417507][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.456524][ T10] device bridge_slave_1 left promiscuous mode [ 138.462521][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.469937][ T10] device bridge_slave_0 left promiscuous mode [ 138.475865][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.483600][ T10] device veth1_macvtap left promiscuous mode [ 138.489572][ T10] device veth0_vlan left promiscuous mode [ 138.636060][ T6] usb 2-1: string descriptor 0 read error: -22 [ 138.642104][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.40 [ 138.646099][ T2147] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.658836][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.686085][ T2464] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.706660][ T6] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 138.726030][ T824] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 138.846210][ T1332] hid (null): bogus close delimiter [ 138.896030][ T2147] usb 3-1: Using ep0 maxpacket: 8 [ 138.976169][ T824] usb 5-1: Using ep0 maxpacket: 32 [ 139.016095][ T2147] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.026153][ T2147] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 139.034905][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.043451][ T2147] usb 3-1: config 0 descriptor?? [ 139.146050][ T824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.236059][ T824] usb 5-1: config 0 has no interfaces? [ 139.293415][ T1983] usb 3-1: USB disconnect, device number 13 [ 139.315060][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.325702][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.336120][ T1332] usb 1-1: string descriptor 0 read error: -71 [ 139.336573][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.352988][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.356475][ T1332] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 139.364233][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.371879][ T1332] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 139.382333][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 139.390258][ T1332] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 139.395849][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 139.403659][ T1332] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 139.410480][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.417222][ T1332] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 139.431172][ T19] usb 4-1: USB disconnect, device number 10 [ 139.440465][ T1332] usb 1-1: USB disconnect, device number 13 [ 139.440679][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.456820][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.467371][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.477962][ T2296] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 139.496102][ T824] usb 5-1: language id specifier not provided by device, defaulting to English [ 139.548318][ T2296] EXT4-fs (loop3): unmounting filesystem. [ 139.638480][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.645323][ T2497] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.652347][ T824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.652790][ T2497] device bridge_slave_0 entered promiscuous mode [ 139.661413][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.668680][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.675157][ T824] usb 5-1: Product: syz [ 139.675173][ T824] usb 5-1: Manufacturer: syz [ 139.682510][ T2497] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.691819][ T824] usb 5-1: SerialNumber: syz [ 139.698190][ T2497] device bridge_slave_1 entered promiscuous mode [ 139.709292][ T824] usb 5-1: config 0 descriptor?? [ 139.748181][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.755040][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.762140][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.768921][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.790915][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.798240][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.805232][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.830060][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.838408][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.845248][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.875953][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.876284][ T2508] loop0: detected capacity change from 0 to 16 [ 139.884097][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.894098][ T2508] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.896741][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.916970][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.924785][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.927573][ T19] usb 2-1: USB disconnect, device number 15 [ 139.944459][ T2497] device veth0_vlan entered promiscuous mode [ 139.966729][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.977836][ T2513] loop1: detected capacity change from 0 to 1024 [ 139.984187][ T2513] EXT4-fs: Ignoring removed orlov option [ 139.996084][ T2513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.999184][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.021234][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.029492][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.048005][ T1983] usb 5-1: USB disconnect, device number 16 [ 140.067449][ T2513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c118, mo2=0002] [ 140.092846][ T2513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.102321][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.117628][ T2497] device veth1_macvtap entered promiscuous mode [ 140.128173][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.519375][ T2520] 9pnet_fd: Insufficient options for proto=fd [ 140.554786][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 140.555019][ T28] audit: type=1400 audit(1857777278.355:395): avc: denied { setattr } for pid=2514 comm="syz.0.631" name="vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 140.908876][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.909044][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 140.987145][ T462] device bridge_slave_1 left promiscuous mode [ 140.997095][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.010445][ T462] device bridge_slave_0 left promiscuous mode [ 141.019269][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.036916][ T462] device veth1_macvtap left promiscuous mode [ 141.042779][ T462] device veth0_vlan left promiscuous mode [ 141.196027][ T440] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.216083][ T2147] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.319865][ T2539] loop2: detected capacity change from 0 to 512 [ 141.347608][ T2539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.356473][ T2539] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 141.489078][ T28] audit: type=1400 audit(1857777279.405:396): avc: denied { read write } for pid=2538 comm="syz.2.638" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.542621][ T28] audit: type=1400 audit(1857777279.405:397): avc: denied { open } for pid=2538 comm="syz.2.638" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.586120][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.604569][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.614296][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.632713][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.649954][ T440] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 141.666065][ T2147] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.685319][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.709745][ T440] usb 1-1: config 0 descriptor?? [ 141.714640][ T2147] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.737624][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.763221][ T2147] usb 4-1: config 0 descriptor?? [ 142.005277][ T2554] loop4: detected capacity change from 0 to 1024 [ 142.007377][ T2552] loop1: detected capacity change from 0 to 2048 [ 142.028018][ T2552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.040889][ T10] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.055549][ T28] audit: type=1400 audit(1857777279.955:398): avc: denied { execute } for pid=2553 comm="syz.4.642" path="/2/file0/bus" dev="ramfs" ino=30800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 142.065414][ T10] EXT4-fs (loop1): Remounting filesystem read-only [ 142.167735][ T2112] EXT4-fs (loop2): unmounting filesystem. [ 142.187089][ T2563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'. [ 142.198828][ T440] wacom 0003:056A:0336.0017: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.0-1/input0 [ 142.210815][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 142.256829][ T2147] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 142.270436][ T2147] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 142.294891][ T2147] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.343007][ T2576] netem: change failed [ 142.375999][ T361] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.387741][ T2570] loop1: detected capacity change from 0 to 40427 [ 142.398186][ T1983] usb 1-1: USB disconnect, device number 14 [ 142.404225][ T2570] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.413063][ T2570] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.424110][ T2570] F2FS-fs (loop1): invalid crc value [ 142.430583][ T2570] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.473941][ T2570] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.480902][ T2570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.490786][ T2578] loop2: detected capacity change from 0 to 40427 [ 142.497493][ T2578] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 142.504249][ T2578] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.513497][ T2578] F2FS-fs (loop2): invalid crc value [ 142.519978][ T2578] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.559442][ T2578] F2FS-fs (loop2): Start checkpoint disabled! [ 142.566201][ T2578] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.573449][ T2578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 142.586630][ T28] audit: type=1400 audit(1857777280.505:399): avc: denied { setattr } for pid=2577 comm="syz.2.652" path="/24/file2" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.627699][ T1457] kworker/u4:8: attempt to access beyond end of device [ 142.627699][ T1457] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 142.645087][ T778] usb 4-1: USB disconnect, device number 11 [ 142.656305][ T2529] usb 4-1: string descriptor 0 read error: -19 [ 142.756078][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.774416][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.799837][ T361] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 142.819412][ T2570] syz.1.648: attempt to access beyond end of device [ 142.819412][ T2570] loop1: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 142.832940][ T361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.842601][ T361] usb 5-1: config 0 descriptor?? [ 142.909633][ T2597] loop2: detected capacity change from 0 to 40427 [ 142.918298][ T28] audit: type=1326 audit(1857777280.835:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2598 comm="syz.0.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac821799f9 code=0x0 [ 142.947472][ T2597] F2FS-fs (loop2): invalid crc value [ 142.959101][ T2597] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.999028][ T2597] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.282907][ T28] audit: type=1400 audit(1857777281.195:401): avc: denied { mount } for pid=2596 comm="syz.2.656" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.317258][ T361] hid (null): unknown global tag 0xe [ 143.344323][ T361] logitech-hidpp-device 0003:046D:C086.0019: unknown global tag 0xe [ 143.365194][ T2612] devtmpfs: Bad value for 'nr_blocks' [ 143.365611][ T28] audit: type=1400 audit(1857777281.275:402): avc: denied { remount } for pid=2596 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.371632][ T2614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.660'. [ 143.401296][ T361] logitech-hidpp-device 0003:046D:C086.0019: item 0 1 1 14 parsing failed [ 143.461003][ T361] logitech-hidpp-device 0003:046D:C086.0019: hidpp_probe:parse failed [ 143.479198][ T10] kworker/u4:1: attempt to access beyond end of device [ 143.479198][ T10] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.493361][ T361] logitech-hidpp-device: probe of 0003:046D:C086.0019 failed with error -22 [ 143.519490][ T2617] netlink: 'syz.0.658': attribute type 3 has an invalid length. [ 143.527855][ T361] usb 5-1: USB disconnect, device number 17 [ 143.653465][ T2112] syz-executor: attempt to access beyond end of device [ 143.653465][ T2112] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 143.667546][ T2112] syz-executor: attempt to access beyond end of device [ 143.667546][ T2112] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 143.746027][ T778] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.813866][ T2623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 143.886727][ T2626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'. [ 143.920395][ T2624] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.927519][ T2624] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.934808][ T2624] device bridge_slave_0 entered promiscuous mode [ 143.953685][ T2624] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.966861][ T2624] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.974460][ T2624] device bridge_slave_1 entered promiscuous mode [ 144.018434][ T2624] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.025287][ T2624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.032465][ T2624] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.039260][ T2624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.143455][ T733] bridge0: port 3(erspan0) entered disabled state [ 144.159581][ T733] device erspan0 left promiscuous mode [ 144.172828][ T733] bridge0: port 3(erspan0) entered disabled state [ 144.256524][ T440] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 144.313103][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.320422][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.328881][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.338328][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.352074][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.368067][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.380309][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.388276][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.395539][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.403526][ T2624] device veth0_vlan entered promiscuous mode [ 144.416693][ T1983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.425760][ T2624] device veth1_macvtap entered promiscuous mode [ 144.436527][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.448072][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.468392][ T733] device bridge_slave_1 left promiscuous mode [ 144.474337][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.551030][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 144.575342][ T733] device bridge_slave_0 left promiscuous mode [ 144.581966][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.603515][ T733] device veth1_macvtap left promiscuous mode [ 144.618371][ T733] device veth0_vlan left promiscuous mode [ 144.646459][ T440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.665094][ T778] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 144.673851][ T440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.685222][ T778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.694085][ T28] audit: type=1400 audit(1857777282.605:403): avc: denied { setopt } for pid=2644 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.709579][ T440] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 144.751627][ T778] usb 4-1: Product: syz [ 144.755638][ T778] usb 4-1: Manufacturer: syz [ 144.762521][ T778] usb 4-1: SerialNumber: syz [ 144.767005][ T28] audit: type=1400 audit(1857777282.605:404): avc: denied { write } for pid=2644 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.787144][ T440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.796865][ T440] usb 2-1: config 0 descriptor?? [ 144.806274][ T778] usb 4-1: config 0 descriptor?? [ 144.933776][ T2647] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 145.109561][ T361] usb 4-1: USB disconnect, device number 12 [ 145.342037][ T2663] loop2: detected capacity change from 0 to 16 [ 145.356416][ T2663] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.401537][ T440] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 145.460284][ T440] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 145.470316][ T440] lg-g15 0003:046D:C222.001A: item fetching failed at offset 2/11 [ 145.489177][ T440] lg-g15: probe of 0003:046D:C222.001A failed with error -22 [ 145.620499][ T440] usb 2-1: USB disconnect, device number 16 [ 145.791140][ T2672] loop2: detected capacity change from 0 to 128 [ 145.875342][ T2677] loop0: detected capacity change from 0 to 512 [ 146.259386][ T2677] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.537628][ T2677] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.680: bg 0: block 64: padding at end of block bitmap is not set [ 146.594657][ T2677] __quota_error: 2 callbacks suppressed [ 146.594694][ T2677] Quota error (device loop0): write_blk: dquota write failed [ 146.676265][ T2677] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 146.705030][ T2677] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.680: Failed to acquire dquot type 0 [ 146.736233][ T2677] EXT4-fs (loop0): 1 truncate cleaned up [ 146.746056][ T2677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.804824][ T2677] syz.0.680 (2677) used greatest stack depth: 18536 bytes left [ 146.825620][ T2323] EXT4-fs (loop0): unmounting filesystem. [ 146.850816][ T2688] device bridge1 entered promiscuous mode [ 146.914138][ T28] audit: type=1400 audit(1857777284.825:407): avc: denied { mounton } for pid=2685 comm="syz.2.681" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 147.044614][ T2705] tc_dump_action: action bad kind [ 147.135920][ T28] audit: type=1400 audit(1857777285.045:408): avc: denied { setopt } for pid=2701 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.155591][ T361] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.313896][ T2667] loop4: detected capacity change from 0 to 131072 [ 147.323378][ T2667] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.350911][ T2667] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 147.406034][ T361] usb 2-1: Using ep0 maxpacket: 16 [ 147.526086][ T361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 147.537081][ T361] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 147.545889][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.569269][ T361] usb 2-1: config 0 descriptor?? [ 147.572587][ T2714] loop4: detected capacity change from 0 to 40427 [ 147.580761][ T2714] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 147.588557][ T2714] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 147.597390][ T2714] F2FS-fs (loop4): invalid crc value [ 147.603691][ T2714] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.657717][ T2714] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 147.665737][ T2714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.765772][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 147.788779][ T2719] loop3: detected capacity change from 0 to 40427 [ 147.795374][ T2719] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 147.803116][ T2719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.817544][ T2719] F2FS-fs (loop3): invalid crc value [ 147.872158][ T2727] overlayfs: missing 'workdir' [ 147.936202][ T2147] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.070361][ T2719] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.128324][ T2699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.172026][ T2699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.188184][ T2719] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 148.205246][ T2719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.215069][ T361] hid (null): unknown global tag 0x83 [ 148.224550][ T361] hid (null): unknown global tag 0xc [ 148.289975][ T361] hid-sensor-hub 0003:0158:0100.001B: unknown main item tag 0x1 [ 148.301941][ T2737] loop0: detected capacity change from 0 to 128 [ 148.316149][ T361] hid-sensor-hub 0003:0158:0100.001B: unexpected long global item [ 148.334125][ T361] hid-sensor-hub 0003:0158:0100.001B: parse failed [ 148.343059][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 148.362234][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 148.396787][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.504953][ T361] hid-sensor-hub: probe of 0003:0158:0100.001B failed with error -22 [ 148.513127][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.524305][ T361] usb 2-1: USB disconnect, device number 17 [ 148.530417][ T2147] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 148.540522][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.830877][ T2147] usb 3-1: config 0 descriptor?? [ 148.897468][ T2744] loop4: detected capacity change from 0 to 512 [ 148.903812][ T2744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.911167][ T2744] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.919315][ T2744] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.696: iget: bogus i_mode (0) [ 148.930599][ T2744] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.696: couldn't read orphan inode 17 (err -117) [ 148.942437][ T2744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.028412][ T462] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 149.037520][ T462] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 149.114184][ T2748] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.696: bg 0: block 7: invalid block bitmap [ 149.229118][ T2748] incfs: Can't find or create .index dir in ./file0 [ 149.235740][ T2748] incfs: mount failed -28 [ 149.349099][ T2147] arvo 0003:1E7D:30D4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 149.375376][ T2756] loop3: detected capacity change from 0 to 512 [ 149.386609][ T2756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.394412][ T2756] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 149.403530][ T2756] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 149.409812][ T2759] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 149.418316][ T2756] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 149.431629][ T2759] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 149.444465][ T2756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.699: bg 0: block 64: padding at end of block bitmap is not set [ 149.459385][ T2756] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 149.473075][ T2756] EXT4-fs (loop3): 1 orphan inode deleted [ 149.563918][ T2756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.723241][ T2497] EXT4-fs (loop3): unmounting filesystem. [ 149.758870][ T2472] EXT4-fs (loop4): unmounting filesystem. [ 149.772457][ T2147] usb 3-1: USB disconnect, device number 14 [ 150.405794][ T2782] : renamed from vlan0 [ 150.562643][ T2784] futex_wake_op: syz.2.706 tries to shift op by 32; fix this program [ 150.620743][ T2790] loop1: detected capacity change from 0 to 128 [ 151.174417][ T2801] syz.0.711[2801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.174487][ T2801] syz.0.711[2801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.221121][ T2808] loop3: detected capacity change from 0 to 512 [ 151.240438][ T2808] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.713: inline data xattr refers to an external xattr inode [ 151.255435][ T2808] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.713: couldn't read orphan inode 12 (err -117) [ 151.267341][ T2808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.389735][ T2815] loop4: detected capacity change from 0 to 16 [ 151.401114][ T2815] erofs: (device loop4): mounted with root inode @ nid 36. [ 151.986443][ T2824] loop4: detected capacity change from 0 to 1024 [ 152.005795][ T2836] loop1: detected capacity change from 0 to 512 [ 152.016754][ T2824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.026745][ T2836] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.720: casefold flag without casefold feature [ 152.039583][ T2836] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.720: missing EA_INODE flag [ 152.050951][ T28] audit: type=1400 audit(1857777289.955:409): avc: denied { rename } for pid=2823 comm="syz.4.716" name="#1f" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 152.052364][ T2472] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 152.073076][ T28] audit: type=1400 audit(1857777289.955:410): avc: denied { reparent } for pid=2823 comm="syz.4.716" name="#1f" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 152.084397][ T2836] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.720: error while reading EA inode 12 err=-117 [ 152.107511][ T2472] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 152.117788][ T2836] EXT4-fs (loop1): 1 orphan inode deleted [ 152.138129][ T2836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.180238][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 152.189839][ T2472] EXT4-fs (loop4): unmounting filesystem. [ 152.190539][ T2854] syz.0.724[2854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.195464][ T2854] syz.0.724[2854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.214433][ T2854] loop0: detected capacity change from 0 to 512 [ 152.247917][ T2854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.258146][ T2854] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.266979][ T2854] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 152.275639][ T2854] EXT4-fs (loop0): 1 truncate cleaned up [ 152.281322][ T2854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.292843][ T2854] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 152.307789][ T2323] EXT4-fs (loop0): unmounting filesystem. [ 152.318368][ T2497] EXT4-fs (loop3): unmounting filesystem. [ 152.374170][ T2866] loop0: detected capacity change from 0 to 128 [ 152.419004][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.425950][ T2864] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.433830][ T2864] device bridge_slave_0 entered promiscuous mode [ 152.440832][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.447762][ T2864] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.470509][ T2864] device bridge_slave_1 entered promiscuous mode [ 152.518261][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.525121][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.532216][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.539001][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.798385][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.808120][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.821595][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.842399][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.856610][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.863479][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.879116][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.887953][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.894792][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.912563][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.925135][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.951476][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.965825][ T2864] device veth0_vlan entered promiscuous mode [ 152.973102][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.981142][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.991600][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.009905][ T2864] device veth1_macvtap entered promiscuous mode [ 153.017369][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.032088][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.044914][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.054637][ T1457] device bridge_slave_1 left promiscuous mode [ 153.061393][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.069007][ T1457] device bridge_slave_0 left promiscuous mode [ 153.074974][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.085876][ T1457] device veth1_macvtap left promiscuous mode [ 153.094843][ T1457] device veth0_vlan left promiscuous mode [ 153.205618][ T2878] tap0: tun_chr_ioctl cmd 1074025677 [ 153.248696][ T2878] tap0: linktype set to 768 [ 153.258636][ T2878] loop4: detected capacity change from 0 to 1024 [ 153.267956][ T2878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.304733][ T2878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.516059][ T361] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.609592][ T2895] loop0: detected capacity change from 0 to 16 [ 153.623212][ T2895] erofs: (device loop0): mounted with root inode @ nid 36. [ 153.706176][ T1332] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 153.856044][ T361] usb 4-1: Using ep0 maxpacket: 32 [ 153.976078][ T1332] usb 5-1: Using ep0 maxpacket: 32 [ 154.136095][ T361] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 154.186027][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.203015][ T361] usb 4-1: Product: syz [ 154.207071][ T361] usb 4-1: Manufacturer: syz [ 154.211429][ T361] usb 4-1: SerialNumber: syz [ 154.216266][ T1332] usb 5-1: config 3 has an invalid interface number: 172 but max is 0 [ 154.224281][ T1332] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 154.234226][ T361] usb 4-1: config 0 descriptor?? [ 154.239520][ T1332] usb 5-1: config 3 has no interface number 0 [ 154.245525][ T28] audit: type=1400 audit(1857777292.155:411): avc: denied { connect } for pid=2901 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.652686][ T28] audit: type=1400 audit(1857777292.565:412): avc: denied { accept } for pid=2901 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.660391][ T1332] usb 5-1: config 3 interface 172 altsetting 31 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 154.682615][ T1332] usb 5-1: config 3 interface 172 altsetting 31 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 154.703373][ T1332] usb 5-1: config 3 interface 172 altsetting 31 has an invalid endpoint with address 0xB3, skipping [ 154.731108][ T1332] usb 5-1: config 3 interface 172 altsetting 31 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 154.753041][ T2907] loop1: detected capacity change from 0 to 256 [ 154.827552][ T1332] usb 5-1: config 3 interface 172 altsetting 31 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 154.839865][ T1332] usb 5-1: config 3 interface 172 altsetting 31 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 154.854018][ T1332] usb 5-1: config 3 interface 172 has no altsetting 0 [ 154.877126][ T2908] loop0: detected capacity change from 0 to 256 [ 154.883243][ T28] audit: type=1400 audit(1857777292.785:413): avc: denied { mount } for pid=2906 comm="syz.0.736" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.906459][ T28] audit: type=1400 audit(1857777292.785:414): avc: denied { remount } for pid=2906 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.931510][ T28] audit: type=1400 audit(1857777292.845:415): avc: denied { unmount } for pid=2323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.066074][ T1332] usb 5-1: New USB device found, idVendor=12d1, idProduct=89ed, bcdDevice=6e.4f [ 155.074943][ T1332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.095834][ T1332] usb 5-1: Product: 滽ꛟ摸쩑췞ꟛṧ찚﮵䕛箳뿈ᩀ獔暢顀㘰閆⩟e뀀ꕸ䫊膓ꀊ㺢ⳡ﯌ﯨ漺獍逍쿀魛귐榲䩅玭ꨯ之굛概ﷻ滶㻺씴뺮쵿䴟助䓁ᑋ챖덜섃櫾媚嬍㸡皭⟆퇊流禠嬧粠봋滽쮶ퟨ䠧衕䭴쇝䁡ज񡮛琞涄썻뜒嫵㷠㲲窟Ꭶ﫟婦詊욠ꯥ쉗땄쐵᳙쳼鮬챍㜟 [ 155.190877][ T28] audit: type=1400 audit(1857777293.105:416): avc: denied { getopt } for pid=2917 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.268999][ T1332] usb 5-1: Manufacturer: ఒ [ 155.318766][ T1332] usb 5-1: SerialNumber: ᯲㳞ᄐ⭗쫆䊃堼諾ꬥ뤜픹㨂ꆕŵ୵ﱱ宐녗ኖ裡扐ꡤꅀ斕衪뺉쨛靮拏ҷた [ 155.366270][ T361] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:04:46:e3:2b:d0 [ 155.385349][ T361] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 155.399542][ T361] usb 4-1: USB disconnect, device number 13 [ 155.405300][ T28] audit: type=1400 audit(1857777293.315:417): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.436442][ T28] audit: type=1400 audit(1857777293.345:418): avc: denied { read } for pid=2929 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.730174][ T1332] usb 5-1: USB disconnect, device number 18 [ 155.889098][ T2960] loop2: detected capacity change from 0 to 512 [ 155.891137][ T2961] loop3: detected capacity change from 0 to 512 [ 155.902251][ T2961] EXT4-fs: dax option not supported [ 155.907555][ T2960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.914494][ T2960] EXT4-fs (loop2): Test dummy encryption mode enabled [ 155.922317][ T2960] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.745: iget: bogus i_mode (0) [ 155.941797][ T2960] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.745: couldn't read orphan inode 17 (err -117) [ 155.953783][ T2960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.324794][ T2970] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.745: bg 0: block 7: invalid block bitmap [ 156.498841][ T2864] EXT4-fs (loop4): unmounting filesystem. [ 156.520029][ T2970] incfs: Can't find or create .index dir in ./file0 [ 156.526503][ T2970] incfs: mount failed -28 [ 156.646048][ T296] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 157.229004][ T2624] EXT4-fs (loop2): unmounting filesystem. [ 157.234762][ T2981] loop3: detected capacity change from 0 to 512 [ 157.241224][ T2981] EXT4-fs: Ignoring removed bh option [ 157.252573][ T2981] EXT4-fs (loop3): orphan cleanup on readonly fs [ 157.259172][ T2981] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 157.267305][ T2981] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.750: invalid indirect mapped block 8 (level 2) [ 157.280525][ T2981] EXT4-fs (loop3): Remounting filesystem read-only [ 157.287152][ T2981] EXT4-fs (loop3): 1 truncate cleaned up [ 157.292674][ T2981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.365381][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 157.365396][ T28] audit: type=1400 audit(1857777295.275:424): avc: denied { write } for pid=2980 comm="syz.3.750" path="socket:[32975]" dev="sockfs" ino=32975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.394890][ T28] audit: type=1400 audit(1857777295.275:425): avc: denied { read } for pid=2980 comm="syz.3.750" path="socket:[32976]" dev="sockfs" ino=32976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.441233][ T2497] EXT4-fs (loop3): unmounting filesystem. [ 157.452222][ T2995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2995 comm=syz.4.757 [ 157.464839][ T28] audit: type=1400 audit(1857777295.385:426): avc: denied { nlmsg_write } for pid=2993 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 157.486512][ T296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 157.497379][ T296] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.529093][ T3002] loop1: detected capacity change from 0 to 512 [ 157.568254][ T3002] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 157.597070][ T3002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 157.615034][ T3002] System zones: 1-12 [ 157.619535][ T3002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.636340][ T3002] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.758: Inode bitmap for bg 0 marked uninitialized [ 157.736775][ T296] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.765675][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.780218][ T3002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.837353][ T296] usb 1-1: Product: syz [ 157.851168][ T296] usb 1-1: Manufacturer: syz [ 157.855758][ T296] usb 1-1: SerialNumber: syz [ 157.866309][ T3002] EXT4-fs error (device loop1): __ext4_remount:6412: comm syz.1.758: Abort forced by user [ 157.879380][ T3002] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 157.906172][ T2959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.073664][ T3018] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 158.266154][ T2959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.279606][ T2959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.336081][ T296] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 158.343238][ T296] usb 1-1: USB disconnect, device number 15 [ 158.406139][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 158.436243][ T3027] loop1: detected capacity change from 0 to 512 [ 158.442564][ T3027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.461247][ T3027] EXT4-fs (loop1): Test dummy encryption mode enabled [ 158.487632][ T28] audit: type=1326 audit(1857777296.405:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.489998][ T3033] loop4: detected capacity change from 0 to 512 [ 158.517295][ T3027] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz.1.763: iget: bogus i_mode (0) [ 158.531935][ T28] audit: type=1326 audit(1857777296.435:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.555903][ T28] audit: type=1326 audit(1857777296.435:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.579152][ T28] audit: type=1326 audit(1857777296.435:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.602559][ T28] audit: type=1326 audit(1857777296.435:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.602699][ T3027] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.763: couldn't read orphan inode 17 (err -117) [ 158.628663][ T28] audit: type=1326 audit(1857777296.435:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.660557][ T28] audit: type=1326 audit(1857777296.435:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3030 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5811799f9 code=0x7ffc0000 [ 158.684879][ T3033] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.766: casefold flag without casefold feature [ 158.697392][ T3027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 158.705782][ T3033] EXT4-fs error (device loop4): __ext4_iget:5046: inode #12: block 2: comm syz.4.766: invalid block [ 158.718162][ T3033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.766: error while reading EA inode 12 err=-117 [ 158.731836][ T3033] EXT4-fs (loop4): 1 orphan inode deleted [ 158.843996][ T3033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.062942][ T2864] EXT4-fs (loop4): unmounting filesystem. [ 159.541842][ T3049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.763: bg 0: block 7: invalid block bitmap [ 159.575688][ T3049] incfs: Can't find or create .index dir in ./file0 [ 159.582496][ T3049] incfs: mount failed -28 [ 159.789122][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 159.789223][ T3055] loop4: detected capacity change from 0 to 1024 [ 159.802722][ T3055] EXT4-fs: Ignoring removed orlov option [ 159.816845][ T3055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.837430][ T3055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c118, mo2=0002] [ 159.845950][ T3055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.913591][ T3064] loop2: detected capacity change from 0 to 512 [ 159.976159][ T3064] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 159.996330][ T3064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 160.557500][ T3064] System zones: 1-12 [ 160.580552][ T3064] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.628695][ T3064] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.775: Inode bitmap for bg 0 marked uninitialized [ 160.842056][ T3064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.853460][ T2864] EXT4-fs (loop4): unmounting filesystem. [ 160.883637][ T3064] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.775: Abort forced by user [ 160.899407][ T3064] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 160.915326][ T3084] loop3: detected capacity change from 0 to 128 [ 160.945027][ T3084] syz.3.789: attempt to access beyond end of device [ 160.945027][ T3084] loop3: rw=2049, sector=153, nr_sectors = 88 limit=128 [ 160.962556][ T3084] syz.3.789: attempt to access beyond end of device [ 160.962556][ T3084] loop3: rw=524288, sector=153, nr_sectors = 40 limit=128 [ 161.019221][ T3084] syz.3.789: attempt to access beyond end of device [ 161.019221][ T3084] loop3: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 161.756831][ T3088] netlink: 'syz.2.775': attribute type 4 has an invalid length. [ 162.133297][ T2624] EXT4-fs (loop2): unmounting filesystem. [ 162.192370][ T3097] loop4: detected capacity change from 0 to 512 [ 162.198100][ T3099] loop3: detected capacity change from 0 to 512 [ 162.216559][ T3099] EXT4-fs (loop3): Test dummy encryption mode enabled [ 162.223508][ T3067] loop0: detected capacity change from 0 to 40427 [ 162.234323][ T3097] EXT4-fs (loop4): can't read group descriptor 0 [ 162.240612][ T3067] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 162.255789][ T3099] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.781: inline data xattr refers to an external xattr inode [ 162.272577][ T3067] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.281780][ T3099] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.781: couldn't read orphan inode 12 (err -117) [ 162.293613][ T3099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.308318][ T3067] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.346710][ T3067] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 162.359576][ T3067] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.379296][ T3067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.395344][ T2323] syz-executor: attempt to access beyond end of device [ 162.395344][ T2323] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 162.485588][ T3107] loop1: detected capacity change from 0 to 512 [ 162.588728][ T3107] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.595723][ T3107] __quota_error: 1 callbacks suppressed [ 162.595746][ T3107] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 162.611302][ T3107] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 162.628399][ T3107] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 162.635183][ T3107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.794: bg 0: block 64: padding at end of block bitmap is not set [ 162.649807][ T296] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 162.661742][ T3107] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 162.670812][ T3107] EXT4-fs (loop1): 1 orphan inode deleted [ 162.676557][ T3107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.692076][ T3111] loop0: detected capacity change from 0 to 1024 [ 162.698669][ T3111] ext4: Unknown parameter 'dont_hash' [ 162.774043][ T2394] EXT4-fs (loop1): unmounting filesystem. [ 162.779887][ T824] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 162.897351][ T3114] netlink: 'syz.0.783': attribute type 4 has an invalid length. [ 162.946740][ T3114] netlink: 'syz.0.783': attribute type 4 has an invalid length. [ 163.051342][ T2497] EXT4-fs (loop3): unmounting filesystem. [ 163.069128][ T3118] loop3: detected capacity change from 0 to 512 [ 163.085702][ T3118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.105288][ T3118] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.113768][ T3118] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.784: iget: bogus i_mode (0) [ 163.125060][ T3118] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.784: couldn't read orphan inode 17 (err -117) [ 163.137309][ T3118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.186550][ T296] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 163.197713][ T296] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.218603][ T824] usb 5-1: Using ep0 maxpacket: 16 [ 163.438756][ T3124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.784: bg 0: block 7: invalid block bitmap [ 163.455217][ T3121] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.463936][ T3121] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.746226][ T296] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.773892][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.801184][ T296] usb 3-1: Product: syz [ 163.815591][ T296] usb 3-1: Manufacturer: syz [ 163.833319][ T3124] incfs: Can't find or create .index dir in ./file0 [ 163.833717][ T296] usb 3-1: SerialNumber: syz [ 163.839973][ T3124] incfs: mount failed -28 [ 163.876147][ T3095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.896057][ T824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.947726][ T824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.954121][ T2497] EXT4-fs (loop3): unmounting filesystem. [ 163.962519][ T824] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.975381][ T3132] loop1: detected capacity change from 0 to 128 [ 163.975395][ T824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.990519][ T824] usb 5-1: config 0 descriptor?? [ 164.104743][ T3095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.113158][ T3095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.453775][ T3143] loop3: detected capacity change from 0 to 256 [ 165.541755][ T28] audit: type=1400 audit(1857777303.435:435): avc: denied { mounton } for pid=3133 comm="syz.3.786" path="/26/file0/file0" dev="loop3" ino=1048803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 165.636351][ T296] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 165.724476][ T296] usb 3-1: USB disconnect, device number 15 [ 165.766076][ T3154] loop3: detected capacity change from 0 to 512 [ 165.772721][ T3154] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 165.796046][ T824] usbhid 5-1:0.0: can't add hid device: -71 [ 165.829532][ T3154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 165.844515][ T824] usbhid: probe of 5-1:0.0 failed with error -71 [ 165.859610][ T824] usb 5-1: USB disconnect, device number 19 [ 165.865613][ T3159] binder: 3145:3159 ioctl 4018620d 0 returned -22 [ 165.865663][ T3154] System zones: 1-12 [ 166.103540][ T3154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.118736][ T3154] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.792: Inode bitmap for bg 0 marked uninitialized [ 166.134736][ T3146] loop0: detected capacity change from 0 to 512 [ 166.146201][ T3154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.150083][ T3146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.183043][ T3155] device bridge1 entered promiscuous mode [ 166.185022][ T3146] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.790: casefold flag without casefold feature [ 166.194949][ T3154] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.792: Abort forced by user [ 166.205090][ T3146] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.790: missing EA_INODE flag [ 166.211950][ T3154] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 166.224694][ T3146] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.790: error while reading EA inode 12 err=-117 [ 166.241940][ T3146] EXT4-fs (loop0): 1 orphan inode deleted [ 166.247603][ T3146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.582625][ T3166] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 166.642286][ T3170] loop2: detected capacity change from 0 to 512 [ 166.657699][ T3170] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.665203][ T3170] EXT4-fs (loop2): 1 orphan inode deleted [ 166.671153][ T3170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.685899][ T2624] EXT4-fs (loop2): unmounting filesystem. [ 166.809177][ T2497] EXT4-fs (loop3): unmounting filesystem. [ 167.332690][ T3184] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 167.340445][ T3184] netlink: 148 bytes leftover after parsing attributes in process `syz.3.801'. [ 167.344981][ T2323] EXT4-fs (loop0): unmounting filesystem. [ 167.369030][ T3188] loop0: detected capacity change from 0 to 512 [ 167.375735][ T3188] EXT4-fs (loop0): Test dummy encryption mode enabled [ 167.387218][ T3188] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.802: inline data xattr refers to an external xattr inode [ 167.401917][ T3188] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.802: couldn't read orphan inode 12 (err -117) [ 167.413824][ T3188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.440869][ T3193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.805'. [ 167.519375][ T3196] syz.4.806[3196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.519452][ T3196] syz.4.806[3196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.076033][ T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 168.076033][ T296] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.241712][ T2323] EXT4-fs (loop0): unmounting filesystem. [ 168.262336][ T3211] loop0: detected capacity change from 0 to 2048 [ 168.322586][ T3213] loop1: detected capacity change from 0 to 256 [ 168.345636][ T296] usb 3-1: Using ep0 maxpacket: 8 [ 168.436942][ T3211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 168.516291][ T296] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.556028][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 168.697649][ T3220] loop3: detected capacity change from 0 to 256 [ 168.726312][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 168.808520][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.818527][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 168.829374][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 168.829401][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 168.870281][ T2323] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.885285][ T2323] EXT4-fs (loop0): Remounting filesystem read-only [ 168.938034][ T3222] EXT4-fs (loop0): unmounting filesystem. [ 168.986095][ T296] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 168.995101][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.003197][ T296] usb 3-1: Product: syz [ 169.007266][ T296] usb 3-1: Manufacturer: syz [ 169.011630][ T296] usb 3-1: SerialNumber: syz [ 169.019456][ T296] usb 3-1: config 0 descriptor?? [ 169.036071][ T6] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 169.045050][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.052941][ T6] usb 5-1: Product: syz [ 169.056917][ T6] usb 5-1: Manufacturer: syz [ 169.061886][ T6] usb 5-1: SerialNumber: syz [ 169.072257][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.088689][ T6] usb 5-1: config 0 descriptor?? [ 169.113121][ T3225] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.119995][ T3225] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.127827][ T3225] device bridge_slave_0 entered promiscuous mode [ 169.135768][ T3225] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.142661][ T3225] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.149903][ T3225] device bridge_slave_1 entered promiscuous mode [ 169.216372][ T3225] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.223241][ T3225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.230347][ T3225] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.237138][ T3225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.261815][ T440] usb 3-1: USB disconnect, device number 16 [ 169.280543][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.288246][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.297959][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.317681][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.326837][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.334606][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.345563][ T3225] device veth0_vlan entered promiscuous mode [ 169.358266][ T3225] device veth1_macvtap entered promiscuous mode [ 169.389299][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.397762][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.406229][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.414388][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.461065][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.468652][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.587108][ T1457] device bridge_slave_1 left promiscuous mode [ 169.602017][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.618574][ T1457] device bridge_slave_0 left promiscuous mode [ 169.625315][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.705315][ T3244] loop0: detected capacity change from 0 to 2048 [ 169.712255][ T1457] device veth1_macvtap left promiscuous mode [ 169.737991][ T3244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.776081][ T314] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 169.936072][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:fb:a8:e3:f9:01 [ 170.234132][ T6] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 170.243167][ T6] usb 5-1: USB disconnect, device number 20 [ 170.269527][ T3225] EXT4-fs (loop0): unmounting filesystem. [ 170.295832][ T28] audit: type=1400 audit(1857777308.205:436): avc: denied { ioctl } for pid=3256 comm="syz.0.822" path="uts:[4026532433]" dev="nsfs" ino=4026532433 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 170.321326][ T28] audit: type=1400 audit(1857777308.235:437): avc: denied { execmod } for pid=3256 comm="syz.0.822" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.345557][ T28] audit: type=1400 audit(1857777308.235:438): avc: denied { execute } for pid=3256 comm="syz.0.822" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.386284][ T314] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 170.395302][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.403906][ T314] usb 2-1: config 0 descriptor?? [ 170.446430][ T314] usb 2-1: bad CDC descriptors [ 170.649837][ T6] usb 2-1: USB disconnect, device number 18 [ 170.751209][ T3264] loop4: detected capacity change from 0 to 512 [ 170.782066][ T3264] EXT4-fs (loop4): Test dummy encryption mode enabled [ 170.792695][ T3264] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.823: inline data xattr refers to an external xattr inode [ 170.807568][ T3264] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.823: couldn't read orphan inode 12 (err -117) [ 170.819516][ T3264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.236567][ T3276] binder: 3273:3276 ioctl c0306201 200002c0 returned -14 [ 171.255468][ T28] audit: type=1400 audit(1857777309.155:439): avc: denied { transfer } for pid=3273 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.318189][ T28] audit: type=1400 audit(1857777309.235:440): avc: denied { setattr } for pid=3282 comm="syz.3.830" name="stat" dev="proc" ino=4026532321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 171.770597][ T28] audit: type=1400 audit(1857777309.445:441): avc: denied { map } for pid=3284 comm="syz.3.831" path="socket:[34332]" dev="sockfs" ino=34332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 171.805357][ T2864] EXT4-fs (loop4): unmounting filesystem. [ 171.946052][ T314] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.326079][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.336809][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.346422][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 172.355247][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.363832][ T314] usb 3-1: config 0 descriptor?? [ 172.847217][ T314] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 172.854196][ T314] logitech 0003:046D:C294.001D: unbalanced collection at end of report description [ 172.863464][ T314] logitech 0003:046D:C294.001D: parse failed [ 172.869326][ T314] logitech: probe of 0003:046D:C294.001D failed with error -22 [ 172.894681][ T3296] loop0: detected capacity change from 0 to 512 [ 172.903927][ T3296] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 172.921638][ T3296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 172.929666][ T3296] System zones: 1-12 [ 172.934111][ T3296] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.940583][ T3296] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.832: Inode bitmap for bg 0 marked uninitialized [ 172.955368][ T3296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.977097][ T3296] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.832: Abort forced by user [ 172.987116][ T3296] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 173.031801][ T3309] loop3: detected capacity change from 0 to 256 [ 173.038171][ T3309] exfat: Deprecated parameter 'namecase' [ 173.043831][ T3309] exfat: Deprecated parameter 'utf8' [ 173.051703][ T3309] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 173.053630][ T314] usb 3-1: USB disconnect, device number 17 [ 173.541870][ T3310] netlink: 'syz.0.832': attribute type 4 has an invalid length. [ 173.838477][ T3225] EXT4-fs (loop0): unmounting filesystem. [ 173.891587][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.988945][ T3316] loop4: detected capacity change from 0 to 40427 [ 174.052222][ T3324] loop0: detected capacity change from 0 to 256 [ 174.167962][ T3316] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 174.199183][ T3316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.218309][ T3316] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.246040][ T39] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 174.252334][ T3316] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.260323][ T3316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.290807][ T28] audit: type=1400 audit(1857777312.205:442): avc: denied { setattr } for pid=3329 comm="syz.2.845" path="socket:[34906]" dev="sockfs" ino=34906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.314126][ T28] audit: type=1400 audit(1857777312.205:443): avc: denied { create } for pid=3329 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.333572][ T28] audit: type=1400 audit(1857777312.205:444): avc: denied { read } for pid=3329 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.404461][ T3334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 174.486003][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 174.496160][ T6] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 174.505190][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.513799][ T6] usb 2-1: config 0 descriptor?? [ 174.606042][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.616757][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.626547][ T39] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 174.635389][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.656228][ T39] usb 4-1: config 0 descriptor?? [ 174.714387][ T3336] loop4: detected capacity change from 0 to 131072 [ 174.725409][ T3336] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 174.743071][ T3336] F2FS-fs (loop4): invalid crc value [ 174.754411][ T3336] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 174.776090][ T3336] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 175.136952][ T39] hid-picolcd 0003:04D8:F002.001E: item fetching failed at offset 5/7 [ 175.155676][ T39] hid-picolcd 0003:04D8:F002.001E: device report parse failed [ 175.163228][ T39] hid-picolcd: probe of 0003:04D8:F002.001E failed with error -22 [ 175.196177][ T28] audit: type=1326 audit(1857777313.105:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.4.850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf507799f9 code=0x0 [ 175.363843][ T6] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 175.374177][ T314] usb 4-1: USB disconnect, device number 14 [ 175.374229][ T6] asix: probe of 2-1:0.0 failed with error -71 [ 175.391880][ T6] usb 2-1: USB disconnect, device number 19 [ 175.506021][ T440] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 175.746141][ T440] usb 3-1: Using ep0 maxpacket: 8 [ 175.867457][ T440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.878164][ T440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.887883][ T440] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 175.897063][ T440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.905277][ T440] usb 3-1: config 0 descriptor?? [ 178.256062][ T440] usbhid 3-1:0.0: can't add hid device: -71 [ 178.261962][ T440] usbhid: probe of 3-1:0.0 failed with error -71 [ 178.283245][ T440] usb 3-1: USB disconnect, device number 18 [ 178.533236][ T3375] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 178.544881][ T3375] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 178.547107][ T3370] loop0: detected capacity change from 0 to 40427 [ 178.553114][ T3375] CPU: 1 PID: 3375 Comm: syz.1.855 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 178.568826][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 178.569830][ T3370] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 178.578727][ T3375] RIP: 0010:do_renameat2+0x79a/0x1480 [ 178.578760][ T3375] Code: 24 ac 00 00 00 00 48 89 44 24 30 75 16 e8 1e f6 ab ff 83 7c 24 58 00 75 5d e8 12 f6 ab ff e9 74 01 00 00 48 89 c1 48 c1 e9 03 <42> 0f b6 14 21 84 d2 0f 85 0a 07 00 00 8b 18 be 00 00 70 00 21 de [ 178.578777][ T3375] RSP: 0018:ffffc90006ec7c00 EFLAGS: 00010202 [ 178.592109][ T3370] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.610916][ T3375] [ 178.610923][ T3375] RAX: 0000000000000010 RBX: ffff88811c804220 RCX: 0000000000000002 [ 178.610937][ T3375] RDX: ffffc9000c4b2000 RSI: 0000000000001b54 RDI: 0000000000001b55 [ 178.610949][ T3375] RBP: ffffc90006ec7ed0 R08: ffffffff81cbde98 R09: fffff52000dd8f59 [ 178.610962][ T3375] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 178.610973][ T3375] R13: ffffc90006ec7de8 R14: 1ffff1103ee339e6 R15: ffff88811c804250 [ 178.610986][ T3375] FS: 00007f472cd526c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 178.611001][ T3375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.611014][ T3375] CR2: 0000001b31814ff8 CR3: 000000012cf73000 CR4: 00000000003506a0 [ 178.618807][ T3370] F2FS-fs (loop0): invalid crc value [ 178.624806][ T3375] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 178.628143][ T3370] F2FS-fs (loop0): SIT is corrupted node# 5 vs 7 [ 178.634784][ T3375] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 178.634800][ T3375] Call Trace: [ 178.634806][ T3375] [ 178.643232][ T3370] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 178.650421][ T3375] ? __die_body+0x62/0xb0 [ 178.650446][ T3375] ? die_addr+0x9f/0xd0 [ 178.738034][ T3375] ? exc_general_protection+0x317/0x4c0 [ 178.743395][ T3375] ? asm_exc_general_protection+0x27/0x30 [ 178.748947][ T3375] ? fast_dput+0x78/0x2a0 [ 178.753108][ T3375] ? do_renameat2+0x79a/0x1480 [ 178.757707][ T3375] ? release_firmware_map_entry+0x191/0x191 [ 178.763442][ T3375] ? fsnotify_move+0x4e0/0x4e0 [ 178.768036][ T3375] ? sysvec_reschedule_ipi+0x80/0x160 [ 178.773246][ T3375] ? strncpy_from_user+0x108/0x2b0 [ 178.778195][ T3375] __x64_sys_renameat2+0xdd/0xf0 [ 178.782963][ T3375] x64_sys_call+0x85c/0x9a0 [ 178.787304][ T3375] do_syscall_64+0x3b/0xb0 [ 178.791562][ T3375] ? clear_bhb_loop+0x55/0xb0 [ 178.796068][ T3375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.801799][ T3375] RIP: 0033:0x7f472bf799f9 [ 178.806050][ T3375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.825492][ T3375] RSP: 002b:00007f472cd52038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 178.833736][ T3375] RAX: ffffffffffffffda RBX: 00007f472c116130 RCX: 00007f472bf799f9 [ 178.841547][ T3375] RDX: 0000000000000004 RSI: 0000000020000500 RDI: 0000000000000004 [ 178.849358][ T3375] RBP: 00007f472bfe78ee R08: 0000000000000005 R09: 0000000000000000 [ 178.857170][ T3375] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 178.864981][ T3375] R13: 0000000000000000 R14: 00007f472c116130 R15: 00007ffce3a1ea68 [ 178.872799][ T3375] [ 178.875656][ T3375] Modules linked in: [ 178.883055][ T28] audit: type=1400 audit(1857777316.795:446): avc: denied { mount } for pid=3362 comm="syz.3.853" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 178.895658][ T3375] ---[ end trace 0000000000000000 ]--- [ 178.905868][ T28] audit: type=1400 audit(1857777316.825:447): avc: denied { remount } for pid=3362 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 178.910536][ T3375] RIP: 0010:do_renameat2+0x79a/0x1480 [ 178.935205][ T3375] Code: 24 ac 00 00 00 00 48 89 44 24 30 75 16 e8 1e f6 ab ff 83 7c 24 58 00 75 5d e8 12 f6 ab ff e9 74 01 00 00 48 89 c1 48 c1 e9 03 <42> 0f b6 14 21 84 d2 0f 85 0a 07 00 00 8b 18 be 00 00 70 00 21 de [ 178.955195][ T3375] RSP: 0018:ffffc90006ec7c00 EFLAGS: 00010202 [ 178.966619][ T3375] RAX: 0000000000000010 RBX: ffff88811c804220 RCX: 0000000000000002 [ 178.974468][ T3375] RDX: ffffc9000c4b2000 RSI: 0000000000001b54 RDI: 0000000000001b55 [ 178.982529][ T3375] RBP: ffffc90006ec7ed0 R08: ffffffff81cbde98 R09: fffff52000dd8f59 [ 179.009231][ T3375] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 179.017309][ T3375] R13: ffffc90006ec7de8 R14: 1ffff1103ee339e6 R15: ffff88811c804250 [ 179.025866][ T3375] FS: 00007f472cd526c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 179.055075][ T3375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.065516][ T3375] CR2: 0000008200000085 CR3: 000000012cf73000 CR4: 00000000003506b0 [ 179.073487][ T3375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.082500][ T3375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.090453][ T3375] Kernel panic - not syncing: Fatal exception [ 179.096531][ T3375] Kernel Offset: disabled [ 179.100655][ T3375] Rebooting in 86400 seconds..